last executing test programs: 2m31.860782155s ago: executing program 32 (id=28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffef) ioctl$TUNGETVNETLE(r0, 0x4004743b, &(0x7f0000000100)) 2m22.868945841s ago: executing program 33 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000001850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) unlink(0x0) 2m20.65648922s ago: executing program 34 (id=337): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x9, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 2m17.955299977s ago: executing program 35 (id=411): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m16.460752408s ago: executing program 36 (id=449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 2m2.31233586s ago: executing program 37 (id=924): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m15.913058613s ago: executing program 9 (id=2685): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mremap(&(0x7f0000728000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f00001c8000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1m15.856712448s ago: executing program 9 (id=2689): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000600)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x4) close(r2) 1m15.848762139s ago: executing program 9 (id=2691): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 1m15.773008845s ago: executing program 9 (id=2695): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sRr5nam9GNuPy7tncr8fsmlM3PucJ7p7dNz7uk5cwOorMH0n1rE/oiYTiL6k/nFss7ICgcXnvfgz4/Opo8k6vXXfk8iyY7lz0+yr33ZyT0R8eMPSezrWF3vzNy1i+NTU5NXs/3h2UvTwzNz1w5fuDR+fvL85OXRF0ZPHD92/MTIkZau63rBsdM3332//5OxN7/56q9k5NtfxpI4GS9nT1x6HVtlMAYb35NkdVHfia2urCQd2c/J0pc46Sx44q42BsWG5a9fV0Q8Ef3REQ9fvP74+JVSgwO2VT2JqAMVlch/qKi8H5C/t1/5PrhWSq8EaIf7pxYGAFbnf+fC2GD0NMYGdj9IYumwThIRrY3MLbcnIu7eGbt57s7YzdjMOFzRGBOwKfM3IuLJovxPGvk/ED0x0Mj/2rKUS/sFZ7Kv6fFXW6x/ZRpvxzg8UGwh/3vWzP9okv9vLcn/t1usf/Dh5ju9y/K/t9VLAgAAAAAAgMq6fSoini/6+39tcf5PFMz/6YuIk1tQ/+CK/dV//6/d24JqgAL3T0W8VDj/t5bP/h3oyLb+05gP0JWcuzA1eSQi/hsRh6JrV7o/skYdhz/d92WzssFs/l/+SOu/m80FzOK417li7ejE+Oz4o143EHH/RsRThfN/k8X2Pylo/9PfB9MbrGPfs7fONCtbP/+B7VL/OuJgYfv/8K4Vydr35xhu9AeG817Bak9/+Nl3zepvNf9N/4dHl7b/u9fO/4Fk6f16ZjZfx9G5znqzslb7/93J641bznRnxz4Yn529OhLRnZzuSI8uOz66+ZjhcZTnQ54vaf4fembt8b+i/n9vRMyv+L+TP5avKc79/+++X5vFo/8P5Unzf2JT7f/mN0ZvDXzfrP6Ntf/HGm39oeyI8T9Y8EWept3LjxekY2dRUbvjBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHQS0i9kRSG1rcrtWGhiL6IuJ/sbs2dWVm9rlzV967PJGWNT7/v5Z/0m//wn6Sf/7/wJL90RX7RyNib0R83tHb2B86e2VqouyLBwAAAAAAAAAAAAAAAAAAgB2ir8n6/9RvHWVHB2y7zrIDAEpTkP8/lREH0H6ttf+7tjwOoP30/6G65D9Ul/yH6pL/UF3yH6pL/kN1yX8AAAAAAHis7D1w++ckIuZf7G08Ut1ZWVepkQHbrVZ2AEBp3OIHqsvUH6gu7/GBZJ3ynqYnrXfmWqbPPsLJAAAAAAAAAAAAAFA5B/db/w9VZf0/VJf1/1Bd+fr/AyXHAbSf9/hArLOSv3D9/7pnAQAAAAAAAAAAAABbaWbu2sXxqanJqzbe2BlhtHOjXq9fT38Kdko8//KNfCr8TolnxUa+1m9jZ5X3OwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjunwAAAP//OKok1w==") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 1m15.750735067s ago: executing program 9 (id=2698): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) ioctl$TIOCVHANGUP(r1, 0x5437, 0x300) 1m14.812873403s ago: executing program 9 (id=2734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 1m14.793377604s ago: executing program 38 (id=2734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 1m0.448990372s ago: executing program 8 (id=3304): r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='wchan\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 1m0.413941974s ago: executing program 8 (id=3307): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu~=-||!') 1m0.352128619s ago: executing program 8 (id=3311): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x80}}, 0x8000) 1m0.35188162s ago: executing program 8 (id=3312): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m0.287347865s ago: executing program 8 (id=3315): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m0.106785999s ago: executing program 8 (id=3328): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x28}, {0x0, 0x4b}], 0x2}, 0x20000884) 1m0.029489845s ago: executing program 39 (id=3328): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x28}, {0x0, 0x4b}], 0x2}, 0x20000884) 47.400487144s ago: executing program 5 (id=3845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 47.320888161s ago: executing program 5 (id=3849): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 47.270810695s ago: executing program 5 (id=3851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mq_open(0x0, 0x40, 0x9, 0x0) 47.255249526s ago: executing program 5 (id=3853): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 47.173231943s ago: executing program 5 (id=3857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) 46.859202468s ago: executing program 5 (id=3868): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 46.858952609s ago: executing program 40 (id=3868): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 40.455665975s ago: executing program 4 (id=3997): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x7ff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 40.370802282s ago: executing program 4 (id=3990): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 40.296643118s ago: executing program 4 (id=3991): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x800}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x400000, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {0x401, 0x0, 0xde0}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 40.260584711s ago: executing program 4 (id=3993): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 39.944640186s ago: executing program 4 (id=4010): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x0, 0x40, 0x9, 0x0, 0x0, 0xc9295, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x2, @perf_bp={0x0, 0x4}, 0x102882, 0x7, 0x800, 0x3, 0xb, 0x2, 0x3fa, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = eventfd(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000240), 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}], 0x1) 39.381998521s ago: executing program 4 (id=4007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) 39.325872096s ago: executing program 41 (id=4007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) 39.321274877s ago: executing program 3 (id=4012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 37.889603162s ago: executing program 3 (id=4026): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=@newtaction={0x1f44, 0x30, 0x25, 0x0, 0x0, {}, [{0x2bc, 0x1, [@m_tunnel_key={0xfc, 0xb, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0xb5, 0x6, "b112e31ea7115bb179bf4ab9cf87edb37efd44ff3f26ee84a4102b8202ac6d67eb11d9186fcdb453331f5af6c95f0a87af958186d6667a9d48dfded63c0dc180d0127c0f006c577dd480fcc5bee7afe06eb18f32484657428f22df4e6cdbf364955549190527420c678205e8790880859ee81e831c6bb175770c8f83dd2f414412f2af45a872a44561f6ee38f0366e55748d6ac36118911311eb4d293e6eadd8a41c469dc8eee766db3a6f80a881f46d87"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_csum={0x16c, 0x10, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x0, 0x10000000, 0x5, 0x80000000}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x0, 0x7, 0x6, 0x5}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x81, 0x0, 0x4, 0x2}, 0x14}}]}, {0xec, 0x6, "c35094f445d0221d6c30a96b1b7d7b324f24015c85ac4b5c8935402f1f93f5d5db1f0f5c379476348562b8367de28f18ee93771e32c0e486d1a848d1f55f2deb46fb013bc459f930fe480a5b3637a4bae2e0c3297eb1f825410e28fb948951a09add7613034cf78c59b84f21ded38b40877a1966d7dfac7d3341a4d3132e5b3fb3a355bbfd7cf7903fb4a5981a6e541b6bfe613e438bed31776f32e3353055de5063dcc8146df50a5cfcb496a0c8466f1662a67bf7fc93f5811aa2e0c7a7dcc427a444f4b230db7430a7497ce692d162cdcbf7c6c05c6d9e7e46b16b7729ea5e49cd89a99f221fc8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_ctinfo={0x50, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0x23, 0x6, "fb7d547711f7a16da4fa3f3cb6ff86a9e9b50eedc245335418bca1ff851499"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x1c74, 0x1, [@m_pedit={0x1c70, 0x0, 0x0, 0x0, {{0xa}, {0x1c44, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x6, 0xffff, 0xffffffffcffffffe, 0x4, 0x81}, 0x9, 0x90}, [{0x9, 0xf9, 0x3c27, 0x3, 0x1, 0x4}, {0x0, 0x101, 0xaad, 0x6, 0x4fc0, 0x5}, {0x9e7, 0xffffffff, 0x4, 0x9, 0x8001, 0x8}, {0x3, 0x8, 0x3b7, 0x2668, 0x7, 0x1}, {0x5, 0xfffffff8, 0x5, 0xfffffffc, 0x0, 0x9}, {0x80, 0x8, 0xe, 0x8, 0x7, 0x4}, {0x65, 0x4, 0x9, 0x3, 0x3, 0x9}, {0xfffffffd, 0xfffffffa, 0xffff, 0x7fffffff, 0x0, 0x8}, {0x5, 0x1, 0x1, 0x6, 0x1ff, 0x8000}, {0x7, 0x6, 0x0, 0x0, 0x8, 0x8}, {0x0, 0x4, 0x5, 0x7fff, 0xb9c, 0x1}, {0x3, 0xe0b, 0x5, 0x4, 0x3, 0x9b1}, {0x8, 0xffffffff, 0x6, 0xfff, 0x5, 0x80}, {0x6, 0x100, 0x7, 0x8001, 0x8, 0x7}, {0x7, 0x2, 0x4, 0x80000001, 0x5, 0xb9}, {0xe, 0x1, 0x3, 0xb1f, 0x1, 0x4}, {0x3, 0x8, 0x8, 0x7, 0x7, 0x235}, {0xffffffff, 0xfffffff6, 0x4, 0x9, 0x1}, {0x33fb, 0x1821, 0x5a81, 0x7, 0x800, 0x8000}, {0x9, 0x5, 0x1, 0x2f51e8d0, 0x81, 0x9}, {0x8, 0x1, 0x180000, 0x80c5, 0x7, 0xffffffff}, {0x9, 0xfffffffb, 0x0, 0x7, 0x10, 0x7}, {0x5, 0x1, 0x0, 0x8, 0x3, 0x5}, {0x1, 0x0, 0xf, 0x3, 0x8001, 0x9}, {0x445c, 0x9, 0x509, 0x8c2, 0x1, 0x10001}, {0x2, 0x610a, 0x1, 0x7, 0xd, 0x5}, {0x786f0220, 0x0, 0x3ff, 0x40, 0x8, 0x6}, {0x2, 0x3, 0xd, 0x9b81, 0xc792, 0x4}, {0x80000000, 0xe, 0x4, 0x0, 0x8000, 0xcd0}, {0x6, 0xff, 0x8b0b, 0x8, 0x8, 0x2}, {0xf, 0x0, 0x243, 0x237a, 0x5, 0x2}, {0x7, 0xffff, 0x8000, 0x0, 0x41, 0xffffffff}, {0x8, 0x51a5, 0x6, 0x6, 0x8699, 0xfffeffff}, {0x800, 0x1, 0x0, 0xf, 0x3fffc000, 0xa}, {0x2, 0x8, 0x10, 0x8, 0x0, 0x2}, {0x5, 0x7, 0x4, 0x8, 0xf48b, 0xc}, {0x100, 0xe, 0x6, 0x3ff, 0x101, 0x1c6}, {0xb9, 0x7fffffff, 0x4, 0x2, 0x1, 0xffffb5e9}, {0x48, 0x1, 0x401, 0x9, 0x8}, {0x8, 0x80000001, 0x8, 0x4, 0x5a14, 0x1ff}, {0x0, 0x6, 0x3, 0x0, 0x7, 0x9}, {0x2, 0xfffffff8, 0x2, 0x662, 0x7, 0xf1}, {0x10, 0x2, 0x4, 0xce, 0x7f3, 0x7}, {0x1, 0x3, 0xfffff5c9, 0x4, 0x6, 0xab7}, {0x4, 0x2, 0x4c000000, 0xfffffffe, 0x4, 0xfffffffd}, {0x1b71, 0x96a, 0x373, 0x6, 0x7ffffffd, 0xffffffff}, {0x7fff, 0x8, 0xea, 0x8001, 0x5, 0x1}, {0xfffffffd, 0xffffffff, 0x4a9f0ca9, 0xfff, 0x6, 0x6}, {0x2, 0x8, 0x1f, 0xa2, 0x8, 0x101}, {0x5, 0x4, 0xa54f, 0x5f, 0x10000, 0xc3}, {0xfffffff9, 0x2, 0xa9aa, 0x3, 0x1ac7, 0x2}, {0xf8, 0x0, 0x3ff, 0x876, 0x8, 0x9}, {0x13, 0x4, 0xa3d7, 0x5, 0xffff00, 0x1}, {0x82, 0xe99, 0xfc4, 0x0, 0x7, 0x8}, {0x5, 0x68c5, 0x8, 0x1, 0x2}, {0x40, 0x5, 0x6, 0x1d55, 0x7fffffff, 0x8}, {0x1, 0x0, 0x1, 0xc2de, 0xb3a9, 0xd}, {0x3ff, 0x2d558e22, 0x8, 0x2, 0xe, 0x6}, {0x3, 0xfffffff8, 0x308, 0x31e1, 0x4, 0x2}, {0x9, 0xdf4, 0x0, 0x800, 0xffff, 0x1ff}, {0x4, 0x0, 0x9, 0x1ff, 0x8, 0x6}, {0x1, 0xf, 0x9, 0x5, 0x80000000, 0x8}, {0x4, 0x1c0, 0x2, 0x9, 0x6, 0x2}, {0x5, 0xf, 0x6, 0x2, 0xa, 0x3}, {0x6, 0x93e, 0x4, 0x80000000, 0x68d8, 0x5}, {0x2, 0x9, 0x8, 0x9, 0x4, 0x1ff}, {0xa392, 0x4, 0x1000, 0xd, 0x800, 0x3}, {0x0, 0xfef, 0x9, 0xfff, 0xb, 0x7}, {0x7ff, 0x2, 0xda27, 0xffffff5d, 0x1ce00000, 0x3}, {0xc, 0x1ff, 0xe, 0x7, 0x4, 0x5}, {0x6, 0x1, 0xffff7fff, 0x8, 0x1, 0x5}, {0x4, 0x8000, 0x2, 0x0, 0x1b6f}, {0x2, 0x53, 0x3, 0x5, 0x200, 0x3}, {0x3, 0x0, 0xfffffffa, 0x6, 0x3c, 0x3}, {0x8, 0x2, 0x1, 0x1, 0x2, 0x8001}, {0x5, 0x81, 0x5325, 0x3, 0xf, 0x7}, {0x0, 0x9, 0x9, 0x1, 0x2, 0xc}, {0x8, 0x171f, 0x3, 0x5, 0x69d, 0x5}, {0xffff, 0xef1, 0x2, 0x1, 0x57, 0x190}, {0x4, 0x400, 0x3, 0x1, 0x9, 0x3}, {0x2, 0xffff989f, 0xffff0000, 0x1, 0x0, 0x9}, {0x20004000, 0x1000, 0xd, 0x9, 0x4, 0x6}, {0xfffff478, 0x84d8, 0x9, 0x3, 0x7fffffff}, {0x852, 0x9, 0x4, 0xffffffff, 0xb, 0x5}, {0x2c208619, 0x6, 0x7fffffff, 0x9, 0x980000, 0x1ff}, {0xffff, 0x2, 0x1000, 0x101, 0x200, 0x2}, {0x2, 0x80, 0xfffffffc, 0x3, 0x1b, 0xfffffffa}, {0xe873, 0x5, 0x5, 0x1ff, 0x9}, {0x8, 0xffffffff, 0x27371e95, 0x8, 0x7, 0x7}, {0x18, 0x0, 0x0, 0x7fffffff, 0x3, 0x3}, {0x7fff, 0x0, 0x0, 0xc, 0x5, 0x7}, {0x8, 0x2, 0x3, 0xffffffff, 0x4, 0x7}, {0x7, 0x1, 0x2, 0xfffffff1, 0x9, 0x3}, {0x4, 0x9d1, 0x5, 0x8, 0x69b, 0x453}, {0x0, 0x3, 0x779a, 0x200, 0x100, 0xfffffff7}, {0x4, 0x5, 0x4, 0x8, 0x6, 0xe}, {0x81, 0x6, 0x10000, 0x200, 0x9, 0x3ff}, {0x61, 0x1ff, 0x9, 0x9, 0x8, 0xd}, {0x7, 0x9, 0x0, 0x9, 0x2, 0x374a692b}, {0x8, 0x1, 0xe8c3, 0x9, 0x401, 0xe8}, {0x349c, 0x4, 0x5, 0xfffffffc, 0x10001, 0x6}, {0xa0, 0x6, 0x4, 0x3, 0x8}, {0x1, 0x38000000, 0xd, 0x6, 0xe}, {0xe, 0xfe1a, 0x2, 0xd5, 0xffff8001, 0xa334}, {0x5, 0x80, 0x2, 0x1400000, 0x1, 0x1}, {0xfffffff7, 0x5, 0x0, 0x30, 0x6, 0x1e94000}, {0x1c782a63, 0x1, 0xee56, 0x4b828785, 0xf, 0x6}, {0x7, 0x80000000, 0x8001, 0x5, 0x5}, {0x3e93, 0x2, 0x9, 0x1, 0x507f, 0x5}, {0xffff8000, 0xfaa, 0x1, 0x1, 0x1, 0x9}, {0x68ca, 0x8, 0x1, 0x10001, 0x6, 0x60000}, {0x8, 0x5, 0x2, 0x5, 0x9, 0x81}, {0x1, 0xfff, 0x8, 0x5, 0x6}, {0x7ff, 0xffff0001, 0x6, 0xffff8500, 0x9, 0x7f}, {0x7fff, 0x7, 0x4, 0x8, 0xfff, 0xc36}, {0x2, 0x7, 0x8, 0x2, 0x4, 0x1}, {0x10, 0x7, 0xb, 0x8, 0x4, 0x100}, {0x6, 0x1, 0x7ff, 0x0, 0x6, 0x4}, {0xe, 0x3, 0x5, 0xffff, 0x0, 0x5}, {0x3, 0x7f, 0x6, 0x100, 0x89ef3b5, 0x3}, {0x7, 0x4, 0x0, 0x0, 0x9}, {0x4, 0x19c2, 0x9, 0x400, 0x3, 0x3}, {0x2, 0x8, 0x7, 0x5, 0x7, 0xc}, {0xe, 0x7, 0x2, 0x8, 0x5, 0x4}, {0x2, 0x6, 0x70f, 0x8, 0x101, 0xc}, {0x2, 0x800, 0x1000, 0x2, 0xa56d, 0xfffffff5}, {0x3a1, 0x9, 0x1, 0x0, 0xfffffffe, 0x7ff}, {0x40, 0x0, 0x9, 0x4, 0x8, 0x5}], [{0x3, 0x1}, {0x1, 0x2}, {0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x1}, {0x6}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0xbc4f4036bd57b964, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x6, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x6}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x5}, {0x5}, {}, {}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x9, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3, 0x2, 0x0, 0x3, 0x8}, 0x1, 0xa}, [{0x800, 0xbd, 0x7, 0x7ff, 0x4, 0x10}, {0x3ff, 0x7fffffff, 0x9, 0xd2, 0x0, 0x6}, {0x4, 0x400, 0xfffffff8, 0x800, 0x3ff, 0x5}, {0x2, 0x4, 0xc, 0xfffffffd, 0x4, 0xd}, {0x4, 0x22, 0x9, 0x5, 0x3, 0x5df}, {0xc75, 0x8, 0x1, 0xb, 0x5, 0x3}, {0x10, 0x2926, 0xfffff801, 0xfff, 0x2, 0xfff}, {0x4, 0x4, 0x6, 0xc, 0x1, 0xf}, {0x9, 0x8, 0xfffffffc, 0xfffffffd, 0x7, 0x4}, {0xa17, 0xff, 0x5, 0x8, 0x7ff, 0x9}, {0xa0df3871, 0x750, 0x9, 0x0, 0xc7378a1f, 0x3}, {0xa, 0x80, 0xa, 0x7ff, 0x1169, 0x673ec0a0}, {0x8, 0x0, 0x7, 0x6, 0x8, 0x6}, {0x7fffffff, 0x75ab, 0x200, 0x9, 0x80, 0x3}, {0x9, 0xffffffff, 0x66d, 0x5, 0x4, 0xf}, {0xfffffff9, 0xfff, 0x2, 0x8001, 0x1000, 0x200}, {0xfffffff7, 0xffffffff, 0x7fffffff, 0x3, 0x5, 0x7fff}, {0xfff, 0x101, 0x10, 0xffffffff, 0x8, 0x6}, {0x6, 0xe, 0xfffff800, 0x2, 0x9, 0xd715}, {0x400, 0x7, 0x5, 0x0, 0x1}, {0x6, 0x30000000, 0x0, 0x9, 0x1, 0x5}, {0xe, 0x3, 0xd, 0x10001, 0x0, 0x5091}, {0xd4, 0x0, 0x0, 0x7fffffff, 0x1, 0x8b}, {0x8001, 0x0, 0x101, 0x5, 0x5, 0x9}, {0x7, 0x8000, 0x0, 0x81, 0x4, 0x4}, {0x2, 0x8, 0x4, 0x5, 0xfffff622, 0x16bf}, {0x2, 0x1, 0x7, 0x8, 0x2, 0x101}, {0x2, 0x4, 0x0, 0x800, 0x0, 0x3}, {0x2, 0x4, 0xffffffe6, 0x3, 0x9, 0x4}, {0x8, 0xd3b9, 0x500000, 0x200, 0x1ff, 0x2}, {0x0, 0x0, 0xfffffff9, 0x4, 0x7, 0x1}, {0x6, 0x3, 0x7, 0x6, 0x0, 0x9}, {0x80000001, 0x4, 0x1b, 0x8, 0x1, 0xfe9}, {0x5, 0x80000000, 0x40, 0x400, 0x423, 0x2}, {0x5, 0xef, 0x9, 0x2, 0xfffffffe, 0x917}, {0x80000001, 0x4, 0x8, 0x4, 0xffffffff, 0x8}, {0x4, 0x5, 0x8, 0x8, 0x7}, {0x2, 0xdc, 0xffffff9c, 0x9, 0xfff, 0x200}, {0x7, 0x6, 0xffff0001, 0x5, 0x2, 0x10000}, {0x8, 0x6, 0x0, 0x2, 0x0, 0x6}, {0x5, 0x3ff, 0x8, 0x6, 0x5, 0x26c0}, {0xf, 0x1, 0x8, 0xd, 0xc, 0x3}, {0x3, 0x6, 0x400, 0x4, 0xd1, 0x7ff}, {0x8, 0xc63e, 0x10001, 0x9, 0x4, 0x8}, {0x0, 0x7fff, 0x800, 0x6, 0x80000000, 0x5}, {0x401, 0x3, 0x3, 0x40, 0x6, 0x6}, {0x401, 0x8001, 0x7, 0x4, 0x9, 0xfffffff7}, {0xd340, 0x0, 0x10001, 0x3, 0x8, 0x63f57f96}, {0x6, 0xd, 0x1ff, 0x2, 0x4, 0xf85}, {0x0, 0x3ff, 0x6, 0x2, 0xab6, 0xffffffff}, {0xa, 0xcd20, 0x10001, 0xfffffffe, 0xe1, 0x1}, {0x5a, 0x1, 0x3, 0x4, 0x24e}, {0x0, 0x8, 0x1, 0x5, 0x0, 0x3}, {0x6, 0x7, 0x2, 0xc6, 0x0, 0xaf}, {0x5, 0xfffffe00, 0x1, 0x1b56a4d4, 0x6d59, 0xfffffe01}, {0x8, 0x0, 0xf8, 0x7, 0x9, 0x1}, {0xfffff800, 0xff, 0x6, 0x7, 0x7, 0x7}, {0xfffffffb, 0x8, 0x6, 0x9, 0x80000001, 0x8e6}, {0x1, 0x0, 0x7, 0x23, 0xcad, 0x8}, {0x11c, 0x10001, 0xffffffff, 0x3, 0x80000001, 0xeb37}, {0x7, 0x6, 0x1, 0x5, 0x18000000, 0x100}, {0x8, 0x1, 0x7, 0x7, 0x5, 0x6}, {0x6, 0x9, 0x8, 0x9, 0x0, 0x1}, {0x40, 0x2, 0x3df2, 0x9, 0x8001, 0x75}, {0x10001, 0x4, 0x7, 0x8001, 0xfffff772, 0x10}, {0x7, 0x1, 0x3, 0xfffffff8, 0x6, 0x10000}, {0xc, 0x4c7, 0x8, 0x101, 0x7, 0xc1}, {0x8cc3, 0x9, 0x9f, 0x8001, 0x8, 0x8}, {0x5, 0x6, 0x1, 0x14bf, 0xffffff01}, {0x80000000, 0x101, 0xc, 0x100, 0x2, 0x1}, {0x1, 0x7, 0x7, 0x3, 0x4, 0x2}, {0x3, 0x7f, 0x10, 0xc4, 0x7, 0x5}, {0xe, 0x5, 0x8001, 0x8, 0x5, 0x6}, {0x8, 0x3, 0x400, 0x7, 0xc2f9, 0x7fff}, {0x3, 0xa, 0xaeb1, 0x4, 0x6, 0xffffffff}, {0x7, 0x6, 0x80000000, 0x7, 0x6}, {0xefa, 0x7ff, 0x1, 0x8, 0x8, 0x6}, {0x8, 0x2, 0x3, 0x1000, 0x7, 0xc1}, {0x2, 0x6, 0x3372, 0x7, 0x5, 0x2}, {0x1, 0x60f, 0xa, 0xfffffff9, 0x4, 0x100}, {0x8, 0x7fff, 0x7ff, 0x9fb0, 0x927b, 0x4}, {0x4, 0x7fff, 0x3, 0x80, 0x100, 0x5d76517d}, {0x1, 0x6, 0x7, 0x6, 0x7, 0x3ff}, {0x9, 0x3, 0x3, 0x7, 0x1, 0x1}, {0xc13f, 0x2, 0x1ff, 0x1, 0x8, 0x1}, {0x80000001, 0x2, 0x1000, 0x31ee5e5f, 0x9, 0xfffffff7}, {0x8, 0x901, 0xf, 0x4, 0x8, 0xea3}, {0x6, 0xd170, 0x4, 0x0, 0x7, 0x1}, {0xfffffffb, 0x1, 0xd, 0x81, 0xb, 0x7fff}, {0x7, 0x9, 0x86, 0x8, 0x0, 0x2}, {0x6, 0x8, 0x3b9b, 0x4, 0x5, 0xd}, {0x7fff, 0x6, 0x5, 0xfffff08f, 0x9, 0x9}, {0xe, 0x8, 0x9, 0x4c, 0x1000, 0x4}, {0x4, 0x8, 0x1, 0x9, 0x8, 0x7}, {0xfffffe00, 0x7, 0x5, 0x52, 0x7f, 0x3}, {0x8c7, 0x8000, 0x5, 0x2, 0x2, 0x101}, {0x7fffffff, 0xc, 0x8, 0x9, 0x80}, {0xec, 0xd, 0x3, 0x0, 0xc, 0x8}, {0x7, 0x2, 0x8, 0x6, 0x1}, {0x0, 0xf86, 0x7, 0x3, 0x4, 0x6}, {0x0, 0x8, 0x81, 0x0, 0x10001, 0xfffff705}, {0x2, 0x3, 0x1, 0x2, 0x200, 0xfff}, {0x9, 0x4d41, 0x3, 0x1, 0x4, 0xf677}, {0x1, 0x2, 0x7, 0x7e, 0x47, 0x7fff}, {0x9, 0xfc, 0x7fff, 0x0, 0x9, 0x6}, {0x9, 0xffffffff, 0xc9e, 0x9, 0x200}, {0x8, 0x6, 0x2e9, 0x3, 0xffffffff, 0x4}, {0x100, 0x5, 0x8b, 0x8, 0x1, 0x8}, {0x3ff, 0x0, 0x0, 0x4, 0x9, 0x69}, {0x2, 0x4, 0x4, 0x800, 0x2, 0xfffffff7}, {0x10001, 0x2, 0x3, 0x8, 0x5, 0x1ff}, {0x1ff, 0x9, 0x6, 0x9, 0x40, 0xbdff}, {0x9, 0x3, 0xd145, 0x6, 0x5, 0x5}, {0x2db, 0x0, 0x3f6, 0xfffffff3, 0x4a16, 0x9}, {0xff, 0x2, 0x1, 0x81, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x3f3, 0x1, 0x5}, {0x80000000, 0xcb6a, 0x3, 0x967, 0x9, 0xe4e}, {0x7, 0xffffffff, 0xa, 0x2, 0x7, 0x9}, {0x9, 0x4, 0xe11, 0x2, 0x4, 0x2}, {0xd, 0x4, 0x3, 0x2, 0x5, 0x9}, {0x81, 0x3, 0x9, 0x5, 0x7, 0x1}, {0x9, 0x5, 0x3, 0xf12f, 0x7f, 0x1}, {0x4, 0xd26, 0xf4, 0x5, 0x8, 0xe}, {0x7c, 0x5, 0x7, 0x1, 0x8, 0x5}, {0x6, 0x8, 0x3ff, 0x1000, 0x6, 0x8}, {0x10001, 0x5, 0xfffffffd, 0x9, 0x31d9, 0x10001}, {0x51, 0x0, 0x3, 0x0, 0x5}, {0x22, 0x25, 0x53f4, 0x8, 0x3, 0x5}], [{}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x5}, {0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x7}, {0x3}, {0x1}, {}, {0x3}, {0xb, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {}, {0x6, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0x4, 0x1}, {0x0, 0xbc50ade1ca1c7051}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {}, {0x4}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0xfa56d6cd112b24a6}, {0x1, 0x1}, {0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x1}, {0x3}, {0x4}, {0x1}, {0x3}, {0x5}, {0x4}, {0x3}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x1f44}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwrite64(r0, &(0x7f0000005040)="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", 0xfd5, 0x36c) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 37.093493186s ago: executing program 3 (id=4028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 36.974337816s ago: executing program 3 (id=4019): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 36.878825964s ago: executing program 3 (id=4024): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x7fffffff, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 36.503013464s ago: executing program 3 (id=4046): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 36.496972564s ago: executing program 42 (id=4046): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 1.59993832s ago: executing program 2 (id=5475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 1.540776085s ago: executing program 2 (id=5480): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000140)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 1.532493616s ago: executing program 2 (id=5481): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000e0000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.512984827s ago: executing program 2 (id=5482): r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x3, 0x0) 1.254878118s ago: executing program 7 (id=5488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa00000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) truncate(&(0x7f0000000080)='./file1\x00', 0x7d1a626) 1.23042143s ago: executing program 7 (id=5490): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x9, 0x0, 0x0, 0x0, 0x7, 0x2610, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffd, 0x0, 0x6, 0xa, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000002e0000000a0001007770616e3100000005002e007f0000000c0005000201aada92afc3aa05002b"], 0x3c}}, 0x0) 1.168846765s ago: executing program 7 (id=5492): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 939.335283ms ago: executing program 7 (id=5497): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@init_itable}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x2007ff3) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) 796.788925ms ago: executing program 6 (id=5498): r0 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) wait4(r1, 0x0, 0x40000000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 733.10181ms ago: executing program 6 (id=5499): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 641.315678ms ago: executing program 2 (id=5511): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 512.338498ms ago: executing program 0 (id=5500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 512.208018ms ago: executing program 6 (id=5501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18) setgroups(0x0, 0x0) 511.185198ms ago: executing program 2 (id=5513): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 432.417115ms ago: executing program 6 (id=5502): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 392.712718ms ago: executing program 1 (id=5503): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) syz_emit_ethernet(0x48, &(0x7f0000000180)={@local, @random="416cee93a4a6", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3a, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x2}, {"3416af759b3c6a17234d4c2152b5ae2e004f"}}}}}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) 381.035008ms ago: executing program 0 (id=5504): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x4, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) 325.022753ms ago: executing program 6 (id=5505): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) 324.853093ms ago: executing program 1 (id=5507): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, 0x1}) io_uring_enter(r1, 0x8ba, 0x696d, 0x20, 0x0, 0x0) 291.669746ms ago: executing program 7 (id=5508): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) 282.037487ms ago: executing program 1 (id=5510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x2000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb851}, 0x1c) 230.067611ms ago: executing program 1 (id=5512): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 175.670105ms ago: executing program 1 (id=5514): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 93.265442ms ago: executing program 0 (id=5515): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 92.816182ms ago: executing program 0 (id=5516): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) close(0x3) 75.680853ms ago: executing program 1 (id=5517): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) fcntl$setstatus(r0, 0x4, 0x7c00) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 64.380564ms ago: executing program 0 (id=5518): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 46.853206ms ago: executing program 6 (id=5519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(r1) 607.569µs ago: executing program 7 (id=5520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 0s ago: executing program 0 (id=5521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ks suppressed [ 130.500258][ T29] audit: type=1326 audit(133.185:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.6.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 130.530380][ T29] audit: type=1326 audit(133.217:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.6.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 130.537141][T12506] EXT4-fs (loop3): mount failed [ 130.553410][ T29] audit: type=1326 audit(133.217:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.6.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 130.581298][ T29] audit: type=1326 audit(133.217:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.6.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 130.631874][ T29] audit: type=1400 audit(133.311:6044): avc: denied { execmem } for pid=12514 comm="syz.2.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 130.674632][T12521] netlink: 'syz.5.3711': attribute type 22 has an invalid length. [ 130.676768][ T29] audit: type=1326 audit(133.343:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz.6.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 130.705406][ T29] audit: type=1326 audit(133.343:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz.6.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 130.706261][T12521] netlink: 'syz.5.3711': attribute type 22 has an invalid length. [ 130.728303][ T29] audit: type=1326 audit(133.343:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz.6.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 130.728350][ T29] audit: type=1326 audit(133.343:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz.6.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 130.781981][ T29] audit: type=1326 audit(133.343:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz.6.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 130.926973][T12536] loop3: detected capacity change from 0 to 1024 [ 130.934785][T12536] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 130.944696][T12536] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 130.982033][T12536] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 131.010495][T12536] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #5: comm ,&#^%: unexpected bad inode w/o EXT4_IGET_BAD [ 131.039864][T12536] EXT4-fs (loop3): no journal found [ 131.045130][T12536] EXT4-fs (loop3): can't get journal size [ 131.058877][T12536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.083421][T12536] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm ,&#^%: path /567/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 131.140389][ T5954] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.388612][T12581] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 131.439979][T12588] loop2: detected capacity change from 0 to 7 [ 131.452067][T12578] ref_ctr_offset mismatch. inode: 0xd2c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 131.548875][T12600] loop4: detected capacity change from 0 to 512 [ 131.568227][T12600] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 131.583182][T12600] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3747: corrupted in-inode xattr: overlapping e_value [ 131.631338][T12600] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3747: couldn't read orphan inode 15 (err -117) [ 131.648570][T12604] loop3: detected capacity change from 0 to 512 [ 131.675712][T12600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.709012][T12604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.732178][T12614] loop2: detected capacity change from 0 to 2048 [ 131.758580][T12614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.788558][T12604] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.3752: corrupted inode contents [ 131.801963][T12604] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.3752: mark_inode_dirty error [ 131.865269][T12604] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.3752: corrupted inode contents [ 132.023600][ T5954] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.034880][T10074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.094481][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.146834][T12630] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 132.188587][T12637] syz_tun: entered allmulticast mode [ 132.197771][T12636] syz_tun: left allmulticast mode [ 132.347278][T12645] ref_ctr_offset mismatch. inode: 0x484 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 132.614075][T12667] loop5: detected capacity change from 0 to 512 [ 132.652433][T12667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.693694][T12673] hub 9-0:1.0: USB hub found [ 132.705808][T12673] hub 9-0:1.0: 8 ports detected [ 132.802338][T12678] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.3771: corrupted inode contents [ 132.815454][T12678] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #18: comm syz.5.3771: mark_inode_dirty error [ 132.827207][T12678] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.3771: corrupted inode contents [ 132.840328][T12678] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.3771: mark_inode_dirty error [ 132.853206][T12678] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.3771: mark inode dirty (error -117) [ 132.865980][T12678] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 132.903595][T11532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.936441][T12681] loop2: detected capacity change from 0 to 512 [ 133.023533][T12681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.064826][T12681] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3781: bg 0: block 64: padding at end of block bitmap is not set [ 133.178714][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.360764][T12746] loop4: detected capacity change from 0 to 512 [ 133.375840][T12746] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.407739][T12746] EXT4-fs (loop4): 1 truncate cleaned up [ 133.432548][T12746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.452924][T12756] loop3: detected capacity change from 0 to 512 [ 133.460091][T12746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.470407][T12755] random: crng reseeded on system resumption [ 133.487788][T12756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.548741][T12756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.582255][T12765] loop4: detected capacity change from 0 to 512 [ 133.612255][ T5954] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.625638][T12765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.670657][T12776] loop2: detected capacity change from 0 to 512 [ 133.677731][T10074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.685551][T12779] loop5: detected capacity change from 0 to 512 [ 133.694013][T12779] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 133.697315][T12776] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 133.710938][T12776] EXT4-fs (loop2): orphan cleanup on readonly fs [ 133.712812][T12779] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3821: iget: bogus i_mode (5) [ 133.730408][T12776] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3819: iget: bad i_size value: 38620345925642 [ 133.747126][T12779] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3821: couldn't read orphan inode 15 (err -117) [ 133.762045][T12779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.801445][T12776] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3819: couldn't read orphan inode 15 (err -117) [ 133.814044][T12776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.835686][T11532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.867414][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.963614][T12812] loop6: detected capacity change from 0 to 512 [ 133.978876][T12815] loop5: detected capacity change from 0 to 512 [ 133.994987][T12812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.009430][T12815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.036036][T12815] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3835: bg 0: block 64: padding at end of block bitmap is not set [ 134.123738][T11532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.152876][T12824] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #18: comm syz.6.3834: corrupted inode contents [ 134.172351][T12824] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #18: comm syz.6.3834: mark_inode_dirty error [ 134.194402][T12824] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #18: comm syz.6.3834: corrupted inode contents [ 134.214564][T12824] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.3834: mark_inode_dirty error [ 134.249331][T12824] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.3834: mark inode dirty (error -117) [ 134.263883][T12824] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 134.284324][T12843] loop4: detected capacity change from 0 to 512 [ 134.293587][ T4298] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.328398][T12843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.344471][T12843] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3855: bg 0: block 64: padding at end of block bitmap is not set [ 134.383343][T12849] loop6: detected capacity change from 0 to 512 [ 134.391087][T12853] __nla_validate_parse: 27 callbacks suppressed [ 134.391104][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3848'. [ 134.406475][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3848'. [ 134.417133][T12849] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 134.427533][T10074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.437398][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3848'. [ 134.446447][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3848'. [ 134.462666][T12849] EXT4-fs (loop6): 1 truncate cleaned up [ 134.468811][T12849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.490554][T12849] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.529124][T12864] loop5: detected capacity change from 0 to 1024 [ 134.536747][T12864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.548427][T12864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.601156][T11532] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 134.618631][T11532] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 134.647837][T12875] SELinux: security_context_str_to_sid () failed with errno=-22 [ 134.776160][T12871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.793720][T11728] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.804036][T11728] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.817935][T12895] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3865'. [ 134.827070][T12895] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3865'. [ 134.836207][T12895] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3865'. [ 134.920027][T12899] netlink: 348 bytes leftover after parsing attributes in process `syz.6.3879'. [ 134.937198][T11728] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.947558][T11728] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.036632][T11728] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.046986][T11728] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.131006][T11728] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.141334][T11728] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.220103][T11728] bridge_slave_1: left allmulticast mode [ 135.225809][T11728] bridge_slave_1: left promiscuous mode [ 135.231516][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.286781][T11728] bridge_slave_0: left allmulticast mode [ 135.292538][T11728] bridge_slave_0: left promiscuous mode [ 135.298365][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.386307][T11728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.396118][T11728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.405579][T11728] bond0 (unregistering): Released all slaves [ 135.416361][T12900] chnl_net:caif_netlink_parms(): no params data found [ 135.446434][T12900] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.453639][T12900] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.460985][T12900] bridge_slave_0: entered allmulticast mode [ 135.467452][T12900] bridge_slave_0: entered promiscuous mode [ 135.474222][T12900] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.481407][T12900] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.488611][T12900] bridge_slave_1: entered allmulticast mode [ 135.495045][T12900] bridge_slave_1: entered promiscuous mode [ 135.508297][T11728] hsr_slave_0: left promiscuous mode [ 135.514104][T11728] hsr_slave_1: left promiscuous mode [ 135.519712][T11728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.527098][T11728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.534689][T11728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.542148][T11728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.552037][T11728] veth1_macvtap: left promiscuous mode [ 135.557574][T11728] veth0_macvtap: left promiscuous mode [ 135.563052][T11728] veth1_vlan: left promiscuous mode [ 135.568366][T11728] veth0_vlan: left promiscuous mode [ 135.620010][T11728] team0 (unregistering): Port device team_slave_1 removed [ 135.631872][T11728] team0 (unregistering): Port device team_slave_0 removed [ 135.663542][T12900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.674540][T12900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.694225][T12900] team0: Port device team_slave_0 added [ 135.700693][T12900] team0: Port device team_slave_1 added [ 135.714382][T12900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.721392][T12900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.747358][T12900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.759394][T12900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.766375][T12900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.792344][T12900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.817003][T12900] hsr_slave_0: entered promiscuous mode [ 135.823067][T12900] hsr_slave_1: entered promiscuous mode [ 136.214710][T12900] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 136.223262][T12900] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.232113][T12900] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.240770][T12900] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.272621][T12900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.284649][T12900] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.293533][T11725] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.300676][T11725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.310931][T11725] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.318012][T11725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.370429][T12900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.423303][T12900] veth0_vlan: entered promiscuous mode [ 136.430517][T12900] veth1_vlan: entered promiscuous mode [ 136.443945][T12900] veth0_macvtap: entered promiscuous mode [ 136.451313][T12900] veth1_macvtap: entered promiscuous mode [ 136.461318][T12900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.472014][T12900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.481888][T11728] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.490984][T11728] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.500310][T11728] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.511938][T11728] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.524940][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 136.524955][ T29] audit: type=1400 audit(139.508:6303): avc: denied { mounton } for pid=12900 comm="syz-executor" path="/root/syzkaller.zK2zJU/syz-tmp" dev="sda1" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 136.556228][ T29] audit: type=1400 audit(139.508:6304): avc: denied { mount } for pid=12900 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.577882][ T29] audit: type=1400 audit(139.508:6305): avc: denied { mount } for pid=12900 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 136.599275][ T29] audit: type=1400 audit(139.508:6306): avc: denied { mounton } for pid=12900 comm="syz-executor" path="/root/syzkaller.zK2zJU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 136.625512][ T29] audit: type=1400 audit(139.508:6307): avc: denied { mounton } for pid=12900 comm="syz-executor" path="/root/syzkaller.zK2zJU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 136.653010][ T29] audit: type=1400 audit(139.550:6308): avc: denied { mounton } for pid=12900 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 136.675460][ T29] audit: type=1400 audit(139.550:6309): avc: denied { mount } for pid=12900 comm="syz-executor" name="/" dev="gadgetfs" ino=4452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 136.751543][T12947] loop6: detected capacity change from 0 to 512 [ 136.765060][T12950] loop1: detected capacity change from 0 to 512 [ 136.786706][T12947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.803380][T12950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.816753][T12947] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3872: bg 0: block 64: padding at end of block bitmap is not set [ 136.846216][ T4298] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.936892][T12957] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.3871: corrupted inode contents [ 136.963671][T12957] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #18: comm syz.1.3871: mark_inode_dirty error [ 136.981421][T12957] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.3871: corrupted inode contents [ 136.993781][T12957] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.3871: mark_inode_dirty error [ 137.006553][T12957] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.3871: mark inode dirty (error -117) [ 137.019272][T12957] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 137.038913][T12900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.075559][ T29] audit: type=1400 audit(140.086:6310): avc: denied { name_connect } for pid=12967 comm="syz.3.3877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 137.120945][T12976] netlink: 'syz.4.3894': attribute type 10 has an invalid length. [ 137.128835][T12976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3894'. [ 137.143990][T12976] dummy0: entered promiscuous mode [ 137.151371][T12976] bridge0: port 3(dummy0) entered blocking state [ 137.158278][T12976] bridge0: port 3(dummy0) entered disabled state [ 137.165728][T12976] dummy0: entered allmulticast mode [ 137.171436][ T29] audit: type=1326 audit(140.180:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.1.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8744ebe9 code=0x7ffc0000 [ 137.195674][T12976] bridge0: port 3(dummy0) entered blocking state [ 137.202064][T12976] bridge0: port 3(dummy0) entered forwarding state [ 137.212185][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3885'. [ 137.221514][ T29] audit: type=1326 audit(140.212:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.1.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f6c8744ebe9 code=0x7ffc0000 [ 137.808253][T13030] netlink: 'syz.1.3909': attribute type 2 has an invalid length. [ 137.868348][T13035] team_slave_1: mtu greater than device maximum [ 137.874787][T13035] team0: Device team_slave_1 failed to change mtu [ 138.021757][T13054] loop1: detected capacity change from 0 to 512 [ 138.053221][T13054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.084646][T13054] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3922: bg 0: block 64: padding at end of block bitmap is not set [ 138.157556][T12900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.173432][T13066] loop3: detected capacity change from 0 to 512 [ 138.189955][T13066] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.207325][T13066] EXT4-fs (loop3): 1 truncate cleaned up [ 138.217260][T13066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.231277][T13066] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.269088][T13074] loop2: detected capacity change from 0 to 512 [ 138.289785][T13074] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 138.312920][T13074] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3929: iget: bogus i_mode (5) [ 138.355316][T13074] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3929: couldn't read orphan inode 15 (err -117) [ 138.383629][T13074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.434089][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.457897][T13088] 0X: renamed from caif0 [ 138.478986][T13088] 0X: entered allmulticast mode [ 138.484252][T13088] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 138.668289][T13103] SELinux: failed to load policy [ 138.767302][T13122] loop1: detected capacity change from 0 to 512 [ 138.781612][T13122] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.812926][T13127] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 138.833218][T13122] EXT4-fs (loop1): 1 truncate cleaned up [ 138.839364][T13122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.852764][T13122] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.905886][T13136] loop6: detected capacity change from 0 to 512 [ 138.920431][T13136] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 138.932117][T13139] loop1: detected capacity change from 0 to 512 [ 138.947631][T13139] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 138.949845][T13136] EXT4-fs (loop6): 1 truncate cleaned up [ 138.968683][T13136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.983249][T13136] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.994185][T13139] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3952: iget: bogus i_mode (5) [ 139.019940][T13139] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3952: couldn't read orphan inode 15 (err -117) [ 139.042731][T13139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.071712][T12900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.384708][T11728] dummy0: left allmulticast mode [ 139.389677][T11728] dummy0: left promiscuous mode [ 139.394956][T11728] bridge0: port 3(dummy0) entered disabled state [ 139.402007][T11728] bridge_slave_1: left allmulticast mode [ 139.407704][T11728] bridge_slave_1: left promiscuous mode [ 139.413401][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.421025][T11728] bridge_slave_0: left allmulticast mode [ 139.426650][T11728] bridge_slave_0: left promiscuous mode [ 139.432267][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.479274][T11728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.488795][T11728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.498214][T11728] bond0 (unregistering): Released all slaves [ 139.557100][T11728] hsr_slave_0: left promiscuous mode [ 139.563851][T11728] hsr_slave_1: left promiscuous mode [ 139.591143][T11728] team0 (unregistering): Port device team_slave_1 removed [ 139.602614][T11728] team0 (unregistering): Port device team_slave_0 removed [ 139.854607][T13199] loop1: detected capacity change from 0 to 1024 [ 139.877325][T13199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.898356][T13199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.015186][T13169] chnl_net:caif_netlink_parms(): no params data found [ 140.026072][T12900] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 140.043236][T12900] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 140.095513][T13178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.155663][T13169] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.162771][T13169] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.170086][T13169] bridge_slave_0: entered allmulticast mode [ 140.177529][T13169] bridge_slave_0: entered promiscuous mode [ 140.184558][T13169] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.191785][T13169] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.198969][T13169] bridge_slave_1: entered allmulticast mode [ 140.205423][T13169] bridge_slave_1: entered promiscuous mode [ 140.226610][T13169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.237085][T13169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.256159][T13169] team0: Port device team_slave_0 added [ 140.262760][T13169] team0: Port device team_slave_1 added [ 140.278456][T13169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.285428][T13169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.311756][T13169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.322838][T13169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.329785][T13169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.355752][T13169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.376032][T11728] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.403270][T13169] hsr_slave_0: entered promiscuous mode [ 140.409441][T13169] hsr_slave_1: entered promiscuous mode [ 140.415510][T13169] debugfs: 'hsr0' already exists in 'hsr' [ 140.421284][T13169] Cannot create hsr debugfs directory [ 140.428893][T11728] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.499428][T11728] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.584447][T11728] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.651219][T11728] bridge_slave_1: left allmulticast mode [ 140.656950][T11728] bridge_slave_1: left promiscuous mode [ 140.662595][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.670478][T11728] bridge_slave_0: left allmulticast mode [ 140.676149][T11728] bridge_slave_0: left promiscuous mode [ 140.681882][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.736910][T11728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.746799][T11728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.756559][T11728] bond0 (unregistering): Released all slaves [ 140.814794][T11728] hsr_slave_0: left promiscuous mode [ 140.820858][T11728] hsr_slave_1: left promiscuous mode [ 140.826541][T11728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.833946][T11728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.841441][T11728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.848886][T11728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.859233][T11728] veth1_macvtap: left promiscuous mode [ 140.864735][T11728] veth0_macvtap: left promiscuous mode [ 140.870346][T11728] veth1_vlan: left promiscuous mode [ 140.875557][T11728] veth0_vlan: left promiscuous mode [ 140.943463][T11728] team0 (unregistering): Port device team_slave_1 removed [ 140.954390][T11728] team0 (unregistering): Port device team_slave_0 removed [ 140.990876][T13169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.999389][T13169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.007953][T13169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.017449][T13169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.046059][T13169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.057909][T13169] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.067694][T11725] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.074893][T11725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.085316][T11758] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.092393][T11758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.144047][T13169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.197284][T13169] veth0_vlan: entered promiscuous mode [ 141.205232][T13169] veth1_vlan: entered promiscuous mode [ 141.218184][T13169] veth0_macvtap: entered promiscuous mode [ 141.227711][T13169] veth1_macvtap: entered promiscuous mode [ 141.238294][T13169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.247973][T13169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.258460][T11734] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.267173][T11734] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.276764][T11734] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.286166][T11734] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.333445][T13249] loop3: detected capacity change from 0 to 2048 [ 141.345406][T13249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.360289][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 141.360305][ T29] audit: type=1400 audit(144.592:6460): avc: denied { watch } for pid=13247 comm="syz.3.3967" path="/0/file2" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.406968][T13169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.427278][T13259] __nla_validate_parse: 11 callbacks suppressed [ 141.427297][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3990'. [ 141.497159][T13271] loop2: detected capacity change from 0 to 512 [ 141.522646][T13276] loop4: detected capacity change from 0 to 1024 [ 141.535944][T13271] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 141.539466][T13253] chnl_net:caif_netlink_parms(): no params data found [ 141.553280][T13276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.569977][T13271] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.577981][T13284] loop6: detected capacity change from 0 to 512 [ 141.589922][T13276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.603962][T13271] EXT4-fs (loop2): mount failed [ 141.611023][T13286] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3995'. [ 141.620126][T13286] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3995'. [ 141.629272][T13286] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3995'. [ 141.641436][T13284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.702771][T10074] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 141.722802][T13253] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.730166][T13253] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.737441][ T29] audit: type=1400 audit(144.949:6461): avc: denied { append } for pid=13282 comm="syz.6.3994" path="/687/file0/hugetlb.1GB.usage_in_bytes" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 141.767732][T13253] bridge_slave_0: entered allmulticast mode [ 141.774622][T13253] bridge_slave_0: entered promiscuous mode [ 141.780998][ T29] audit: type=1400 audit(144.991:6462): avc: denied { map } for pid=13282 comm="syz.6.3994" path="/687/file0/hugetlb.1GB.usage_in_bytes" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 141.806984][T13253] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.814247][T13253] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.822101][T13253] bridge_slave_1: entered allmulticast mode [ 141.831201][T10074] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 141.848920][T13253] bridge_slave_1: entered promiscuous mode [ 141.849612][ T4298] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.866440][ T29] audit: type=1326 audit(145.117:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.2.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078924ebe9 code=0x7ffc0000 [ 141.889430][ T29] audit: type=1326 audit(145.117:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.2.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078924ebe9 code=0x7ffc0000 [ 141.932274][ T29] audit: type=1326 audit(145.117:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.2.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f078924ebe9 code=0x7ffc0000 [ 141.955217][ T29] audit: type=1326 audit(145.117:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.2.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078924ebe9 code=0x7ffc0000 [ 141.978221][ T29] audit: type=1326 audit(145.117:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.2.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f078924ebe9 code=0x7ffc0000 [ 142.001167][ T29] audit: type=1326 audit(145.117:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.2.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078924ebe9 code=0x7ffc0000 [ 142.006278][T13253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.038010][T13253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.059562][T13253] team0: Port device team_slave_0 added [ 142.066109][T13253] team0: Port device team_slave_1 added [ 142.084887][T13253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.091904][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.117850][T13253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.129737][T13253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.136749][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.162707][T13253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.196921][T13253] hsr_slave_0: entered promiscuous mode [ 142.203282][T13306] loop2: detected capacity change from 0 to 1024 [ 142.203401][T13253] hsr_slave_1: entered promiscuous mode [ 142.222232][T13306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.232986][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4004'. [ 142.245835][T11758] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.258776][T13306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.317884][T11758] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.369796][ T3310] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 142.413727][T11758] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.455681][T13322] netlink: 'syz.3.4012': attribute type 3 has an invalid length. [ 142.482786][ T3310] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 142.503387][T11758] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.616602][T11758] dummy0: left allmulticast mode [ 142.621989][T11758] bridge0: port 3(dummy0) entered disabled state [ 142.629516][T11758] bridge_slave_1: left allmulticast mode [ 142.635148][T11758] bridge_slave_1: left promiscuous mode [ 142.640879][T11758] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.649048][T11758] bridge_slave_0: left allmulticast mode [ 142.654695][T11758] bridge_slave_0: left promiscuous mode [ 142.660445][T11758] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.735690][T11758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.745334][T11758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.754797][T11758] bond0 (unregistering): Released all slaves [ 142.794899][T11758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.802447][T11758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.810745][T11758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.818145][T11758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.827935][T11758] veth1_macvtap: left promiscuous mode [ 142.833643][T11758] veth0_macvtap: left promiscuous mode [ 142.839291][T11758] veth1_vlan: left promiscuous mode [ 142.844551][T11758] veth0_vlan: left promiscuous mode [ 142.895466][T11758] team0 (unregistering): Port device team_slave_1 removed [ 142.904464][T11758] team0 (unregistering): Port device team_slave_0 removed [ 142.935061][T13325] chnl_net:caif_netlink_parms(): no params data found [ 142.972636][T13325] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.979795][T13325] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.987045][T13325] bridge_slave_0: entered allmulticast mode [ 142.994537][T13325] bridge_slave_0: entered promiscuous mode [ 143.001426][T13325] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.008478][T13325] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.015665][T13325] bridge_slave_1: entered allmulticast mode [ 143.022243][T13325] bridge_slave_1: entered promiscuous mode [ 143.040002][T13325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.056018][T13325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.081580][T13325] team0: Port device team_slave_0 added [ 143.088223][T13325] team0: Port device team_slave_1 added [ 143.106737][T13325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.113693][T13325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.139610][T13325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.150926][T13325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.157948][T13325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.183940][T13325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.196958][T13253] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.208696][T13253] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.217599][T13253] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.227668][T13253] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.252024][T13325] hsr_slave_0: entered promiscuous mode [ 143.258147][T13325] hsr_slave_1: entered promiscuous mode [ 143.263897][T13325] debugfs: 'hsr0' already exists in 'hsr' [ 143.269656][T13325] Cannot create hsr debugfs directory [ 143.290546][T11758] ------------[ cut here ]------------ [ 143.296059][T11758] WARNING: CPU: 0 PID: 11758 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x17c/0x1f0 [ 143.305764][T11758] Modules linked in: [ 143.309745][T11758] CPU: 0 UID: 0 PID: 11758 Comm: kworker/u8:41 Tainted: G W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 143.323804][T11758] Tainted: [W]=WARN [ 143.327593][T11758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.337756][T11758] Workqueue: netns cleanup_net [ 143.342596][T11758] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 143.348173][T11758] Code: 48 8d bb 30 0e 00 00 e8 c2 3d bd fc 48 8b bb 30 0e 00 00 e8 f6 bd c9 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 45 80 a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 37 80 a2 fc 90 0f 0b 90 4c 89 f7 e8 8b [ 143.367806][T11758] RSP: 0018:ffffc90001c43c60 EFLAGS: 00010293 [ 143.373952][T11758] RAX: ffffffff84b5797b RBX: ffff8881179d4740 RCX: ffff88812a31b180 [ 143.381999][T11758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881179d5540 [ 143.390074][T11758] RBP: ffffffff86c8a4a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 143.398051][T11758] R10: ffffc90001c43be8 R11: 0001c90001c43be8 R12: ffffffff86c8a4c0 [ 143.406042][T11758] R13: ffff8881179d4768 R14: ffff8881179d5540 R15: ffff8881179d4740 [ 143.414009][T11758] FS: 0000000000000000(0000) GS:ffff8882aee47000(0000) knlGS:0000000000000000 [ 143.423011][T11758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.429698][T11758] CR2: 00007feb3bd5fe9c CR3: 000000011a5ba000 CR4: 00000000003506f0 [ 143.437734][T11758] Call Trace: [ 143.441015][T11758] [ 143.443928][T11758] xfrm_net_exit+0x2d/0x60 [ 143.448351][T11758] ops_undo_list+0x27b/0x410 [ 143.452953][T11758] cleanup_net+0x2de/0x4d0 [ 143.457369][T11758] process_scheduled_works+0x4ce/0x9d0 [ 143.462843][T11758] worker_thread+0x582/0x770 [ 143.467525][T11758] kthread+0x486/0x510 [ 143.471577][T11758] ? __pfx_worker_thread+0x10/0x10 [ 143.476710][T11758] ? __pfx_kthread+0x10/0x10 [ 143.481294][T11758] ret_from_fork+0xda/0x150 [ 143.485806][T11758] ? __pfx_kthread+0x10/0x10 [ 143.490425][T11758] ret_from_fork_asm+0x1a/0x30 [ 143.495219][T11758] [ 143.498286][T11758] ---[ end trace 0000000000000000 ]--- [ 143.536166][T11758] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.560592][T13253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.572160][T13253] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.580746][T11734] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.587821][T11734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.598396][T11751] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.605526][T11751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.615326][T11758] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.673195][T13253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.687924][T11758] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.732351][T13253] veth0_vlan: entered promiscuous mode [ 143.738831][T11758] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.751581][T13253] veth1_vlan: entered promiscuous mode [ 143.765156][T13253] veth0_macvtap: entered promiscuous mode [ 143.772338][T13253] veth1_macvtap: entered promiscuous mode [ 143.784441][T13253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.794978][T13253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.805040][T11734] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.814068][T11734] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.823209][T11734] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.834106][T11734] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.902294][T11758] bond1 (unregistering): (slave bridge1): Releasing active interface [ 143.910563][T13363] loop3: detected capacity change from 0 to 2048 [ 143.945734][T11758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.956277][T11758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.966728][T11758] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 143.976728][T11758] bond0 (unregistering): Released all slaves [ 143.986263][T11758] bond1 (unregistering): Released all slaves [ 144.023445][T13325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.034161][T13325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.046820][T13325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.062282][T11758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.069988][T11758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.097255][T11758] team0 (unregistering): Port device team_slave_1 removed [ 144.106950][T11758] team0 (unregistering): Port device team_slave_0 removed [ 144.133194][T13325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.165789][T13325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.178923][T13325] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.188564][T11728] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.195653][T11728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.205863][T11725] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.212958][T11725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.269589][T13325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.325222][T13325] veth0_vlan: entered promiscuous mode [ 144.333285][T13325] veth1_vlan: entered promiscuous mode [ 144.347301][T13325] veth0_macvtap: entered promiscuous mode [ 144.354820][T13325] veth1_macvtap: entered promiscuous mode [ 144.365098][T13325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.373488][T13325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.386254][T11734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.397614][T11734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.406989][T11734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.421480][T11734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.427537][T11758] ------------[ cut here ]------------ [ 144.435715][T11758] WARNING: CPU: 1 PID: 11758 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x17c/0x1f0 [ 144.445380][T11758] Modules linked in: [ 144.449334][T11758] CPU: 1 UID: 0 PID: 11758 Comm: kworker/u8:41 Tainted: G W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 144.463416][T11758] Tainted: [W]=WARN [ 144.467247][T11758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.477340][T11758] Workqueue: netns cleanup_net [ 144.482116][T11758] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 144.487679][T11758] Code: 48 8d bb 30 0e 00 00 e8 c2 3d bd fc 48 8b bb 30 0e 00 00 e8 f6 bd c9 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 45 80 a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 37 80 a2 fc 90 0f 0b 90 4c 89 f7 e8 8b [ 144.507313][T11758] RSP: 0018:ffffc90001c43c60 EFLAGS: 00010293 [ 144.513379][T11758] RAX: ffffffff84b5797b RBX: ffff8881097d0000 RCX: ffff88812a31b180 [ 144.521356][T11758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881097d0e00 [ 144.529357][T11758] RBP: ffffffff86c8a4a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 144.537384][T11758] R10: ffffc90001c43be8 R11: 0001c90001c43be8 R12: ffffffff86c8a4c0 [ 144.545354][T11758] R13: ffff8881097d0028 R14: ffff8881097d0e00 R15: ffff8881097d0000 [ 144.553324][T11758] FS: 0000000000000000(0000) GS:ffff8882aef47000(0000) knlGS:0000000000000000 [ 144.562269][T11758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.568836][T11758] CR2: 00007faae40ed000 CR3: 000000010cac0000 CR4: 00000000003506f0 [ 144.576807][T11758] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.584781][T11758] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 144.592758][T11758] Call Trace: [ 144.596027][T11758] [ 144.598940][T11758] xfrm_net_exit+0x2d/0x60 [ 144.603486][T11758] ops_undo_list+0x27b/0x410 [ 144.608096][T11758] cleanup_net+0x2de/0x4d0 [ 144.612558][T11758] process_scheduled_works+0x4ce/0x9d0 [ 144.618008][T11758] worker_thread+0x582/0x770 [ 144.622617][T11758] kthread+0x486/0x510 [ 144.626669][T11758] ? __pfx_worker_thread+0x10/0x10 [ 144.631782][T11758] ? __pfx_kthread+0x10/0x10 [ 144.636355][T11758] ret_from_fork+0xda/0x150 [ 144.640925][T11758] ? __pfx_kthread+0x10/0x10 [ 144.645525][T11758] ret_from_fork_asm+0x1a/0x30 [ 144.650345][T11758] [ 144.653344][T11758] ---[ end trace 0000000000000000 ]--- [ 144.739157][T13388] loop6: detected capacity change from 0 to 1024 [ 144.747411][T13388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.757038][T13392] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4016'. [ 144.766265][T13392] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4016'. [ 144.775440][T13392] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4016'. [ 144.805255][T13400] loop3: detected capacity change from 0 to 1024 [ 144.813263][T13400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.915069][T13169] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 144.940727][T13169] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 144.987577][T13389] chnl_net:caif_netlink_parms(): no params data found [ 145.036510][T13433] netlink: 'syz.6.4036': attribute type 6 has an invalid length. [ 145.084727][T13389] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.091946][T13389] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.123180][T13389] bridge_slave_0: entered allmulticast mode [ 145.129801][T13389] bridge_slave_0: entered promiscuous mode [ 145.146911][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.154146][T13389] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.185934][T13454] loop1: detected capacity change from 0 to 512 [ 145.190320][T13389] bridge_slave_1: entered allmulticast mode [ 145.199170][T13389] bridge_slave_1: entered promiscuous mode [ 145.210834][T13454] EXT4-fs (loop1): orphan cleanup on readonly fs [ 145.230482][T13454] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.4043: bad orphan inode 13 [ 145.242829][T13389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.255845][T11747] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.271622][T13454] ext4_test_bit(bit=12, block=18) = 1 [ 145.277124][T13454] is_bad_inode(inode)=0 [ 145.281301][T13454] NEXT_ORPHAN(inode)=2130706432 [ 145.286186][T13454] max_ino=32 [ 145.289542][T13454] i_nlink=1 [ 145.300451][T13389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.340027][T13389] team0: Port device team_slave_0 added [ 145.360715][T11747] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.386895][T13389] team0: Port device team_slave_1 added [ 145.427038][T13389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.434052][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.460005][T13389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.476514][T11747] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.523549][T13389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.530537][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.556602][T13389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.574478][T11747] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.626499][T13389] hsr_slave_0: entered promiscuous mode [ 145.633145][T13389] hsr_slave_1: entered promiscuous mode [ 145.644437][T13389] debugfs: 'hsr0' already exists in 'hsr' [ 145.650238][T13389] Cannot create hsr debugfs directory [ 145.658873][T13499] loop6: detected capacity change from 0 to 512 [ 145.669999][T13499] EXT4-fs (loop6): shut down requested (1) [ 145.787085][T11747] bridge_slave_1: left allmulticast mode [ 145.792802][T11747] bridge_slave_1: left promiscuous mode [ 145.798531][T11747] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.808801][T11747] bridge_slave_0: left allmulticast mode [ 145.814461][T11747] bridge_slave_0: left promiscuous mode [ 145.820167][T11747] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.848325][T11640] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 145.855803][T11640] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 145.863347][T11640] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 145.870877][T11640] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 145.878350][T11640] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 145.885836][T11640] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 145.893435][T11640] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 145.901047][T11640] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 145.908642][T11640] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 145.916076][T11640] hid-generic 0000:0000:0008.0008: unknown main item tag 0x0 [ 145.944685][T11640] hid-generic 0000:0000:0008.0008: hidraw0: HID vc.87 Device [syz0] on syz1 [ 145.961494][T13529] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4070'. [ 146.030276][T11747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.040674][T11747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.052167][T11747] bond0 (unregistering): Released all slaves [ 146.103031][T11725] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.120489][T11747] hsr_slave_0: left promiscuous mode [ 146.129299][T11747] hsr_slave_1: left promiscuous mode [ 146.135362][T11747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.142852][T11747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.155554][T11747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.163231][T11747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.183548][T11747] veth1_macvtap: left promiscuous mode [ 146.189138][T11747] veth0_macvtap: left promiscuous mode [ 146.196394][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 146.196408][ T29] audit: type=1400 audit(149.675:6516): avc: denied { name_bind } for pid=13554 comm="syz.0.4082" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 146.196516][T11747] veth1_vlan: left promiscuous mode [ 146.229388][T11747] veth0_vlan: left promiscuous mode [ 146.234754][ T29] audit: type=1326 audit(149.706:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.6.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 146.271585][ T29] audit: type=1326 audit(149.706:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.6.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 146.294780][ T29] audit: type=1326 audit(149.706:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.6.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 146.317576][ T29] audit: type=1326 audit(149.706:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.6.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 146.340590][ T29] audit: type=1326 audit(149.706:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.6.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 146.348717][T13560] netlink: 'syz.6.4084': attribute type 21 has an invalid length. [ 146.363439][ T29] audit: type=1326 audit(149.706:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.6.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 146.394699][ T29] audit: type=1326 audit(149.790:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.0.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9906ebe9 code=0x7ffc0000 [ 146.417618][ T29] audit: type=1326 audit(149.790:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.0.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9906ebe9 code=0x7ffc0000 [ 146.440726][ T29] audit: type=1326 audit(149.822:6525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.0.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae9906ebe9 code=0x7ffc0000 [ 146.490422][T11747] team0 (unregistering): Port device team_slave_1 removed [ 146.499720][T11747] team0 (unregistering): Port device team_slave_0 removed [ 146.537404][T11725] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.547457][T11725] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.576431][T11725] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.585565][T13469] chnl_net:caif_netlink_parms(): no params data found [ 146.648470][T13469] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.655558][T13469] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.662779][T13469] bridge_slave_0: entered allmulticast mode [ 146.669377][T13469] bridge_slave_0: entered promiscuous mode [ 146.683035][T13469] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.690341][T13469] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.706896][T13469] bridge_slave_1: entered allmulticast mode [ 146.713716][T13469] bridge_slave_1: entered promiscuous mode [ 146.740071][T13586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4092'. [ 146.749231][T13586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4092'. [ 146.775263][T13469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.778608][T13586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4092'. [ 146.789987][T13469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.793392][T13586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4092'. [ 146.842417][T13586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4092'. [ 146.851551][T13586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4092'. [ 146.870899][T13600] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 146.879081][T13469] team0: Port device team_slave_0 added [ 146.894105][T13469] team0: Port device team_slave_1 added [ 146.920621][T13603] loop6: detected capacity change from 0 to 512 [ 146.931857][T13603] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4100: casefold flag without casefold feature [ 146.947001][T13469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.954017][T13469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.979982][T13469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.992264][T13603] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4100: couldn't read orphan inode 15 (err -117) [ 147.029536][T13609] 9pnet_fd: Insufficient options for proto=fd [ 147.064910][T13469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.071939][T13469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.097951][T13469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.143383][T13469] hsr_slave_0: entered promiscuous mode [ 147.149820][T13469] hsr_slave_1: entered promiscuous mode [ 147.156206][T13469] debugfs: 'hsr0' already exists in 'hsr' [ 147.162070][T13469] Cannot create hsr debugfs directory [ 147.174433][T13389] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 147.192037][T13389] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 147.217605][T13389] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.229355][T13389] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.371176][T13389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.413435][T13389] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.435756][T11766] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.442905][T11766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.940795][T13629] syz.6.4109 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 147.954996][T13629] CPU: 0 UID: 0 PID: 13629 Comm: syz.6.4109 Tainted: G W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 147.955033][T13629] Tainted: [W]=WARN [ 147.955040][T13629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.955054][T13629] Call Trace: [ 147.955060][T13629] [ 147.955068][T13629] __dump_stack+0x1d/0x30 [ 147.955092][T13629] dump_stack_lvl+0xe8/0x140 [ 147.955130][T13629] dump_stack+0x15/0x1b [ 147.955146][T13629] dump_header+0x81/0x220 [ 147.955180][T13629] oom_kill_process+0x342/0x400 [ 147.955212][T13629] out_of_memory+0x979/0xb80 [ 147.955321][T13629] try_charge_memcg+0x5e6/0x9e0 [ 147.955351][T13629] obj_cgroup_charge_pages+0xa6/0x150 [ 147.955413][T13629] __memcg_kmem_charge_page+0x9f/0x170 [ 147.955457][T13629] __alloc_frozen_pages_noprof+0x188/0x360 [ 147.955494][T13629] alloc_pages_mpol+0xb3/0x250 [ 147.955581][T13629] alloc_pages_noprof+0x90/0x130 [ 147.955616][T13629] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 147.955704][T13629] __kvmalloc_node_noprof+0x30f/0x4e0 [ 147.955735][T13629] ? ip_set_alloc+0x1f/0x30 [ 147.955814][T13629] ? ip_set_alloc+0x1f/0x30 [ 147.955868][T13629] ip_set_alloc+0x1f/0x30 [ 147.955959][T13629] hash_netiface_create+0x282/0x740 [ 147.955989][T13629] ? __pfx_hash_netiface_create+0x10/0x10 [ 147.956020][T13629] ip_set_create+0x3c9/0x960 [ 147.956112][T13629] ? __nla_parse+0x40/0x60 [ 147.956134][T13629] nfnetlink_rcv_msg+0x4c6/0x590 [ 147.956176][T13629] netlink_rcv_skb+0x120/0x220 [ 147.956281][T13629] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 147.956312][T13629] nfnetlink_rcv+0x16b/0x1690 [ 147.956368][T13629] ? free_frozen_page_commit+0x6f/0x2a0 [ 147.956533][T13629] ? _raw_spin_unlock+0x26/0x50 [ 147.956630][T13629] ? __free_frozen_pages+0x25a/0x4e0 [ 147.956666][T13629] ? free_large_kmalloc+0xb1/0x100 [ 147.956696][T13629] ? bpf_check+0x29d6/0xd9e0 [ 147.956792][T13629] ? __rcu_read_unlock+0x4f/0x70 [ 147.956819][T13629] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 147.956852][T13629] ? sysvec_irq_work+0xe/0x80 [ 147.956887][T13629] ? native_apic_msr_write+0x3d/0x60 [ 147.956946][T13629] ? should_fail_ex+0x30/0x280 [ 147.957032][T13629] ? selinux_nlmsg_lookup+0x99/0x890 [ 147.957060][T13629] ? __rcu_read_unlock+0x34/0x70 [ 147.957123][T13629] ? __netlink_lookup+0x266/0x2a0 [ 147.957147][T13629] netlink_unicast+0x5c0/0x690 [ 147.957224][T13629] netlink_sendmsg+0x58b/0x6b0 [ 147.957256][T13629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.957419][T13629] __sock_sendmsg+0x142/0x180 [ 147.957452][T13629] ____sys_sendmsg+0x31e/0x4e0 [ 147.957491][T13629] ___sys_sendmsg+0x17b/0x1d0 [ 147.957588][T13629] __x64_sys_sendmsg+0xd4/0x160 [ 147.957747][T13629] x64_sys_call+0x191e/0x2ff0 [ 147.957772][T13629] do_syscall_64+0xd2/0x200 [ 147.957798][T13629] ? switch_fpu_return+0xe/0x20 [ 147.957828][T13629] ? ret_from_fork+0xb1/0x150 [ 147.957847][T13629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.957888][T13629] RIP: 0033:0x7fad4c53ebe9 [ 147.957918][T13629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.957948][T13629] RSP: 002b:00007fad4af9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.957966][T13629] RAX: ffffffffffffffda RBX: 00007fad4c765fa0 RCX: 00007fad4c53ebe9 [ 147.957979][T13629] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 147.957993][T13629] RBP: 00007fad4c5c1e19 R08: 0000000000000000 R09: 0000000000000000 [ 147.958007][T13629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.958034][T13629] R13: 00007fad4c766038 R14: 00007fad4c765fa0 R15: 00007fffedccbd68 [ 147.958051][T13629] [ 147.958058][T13629] memory: usage 307200kB, limit 307200kB, failcnt 183 [ 148.042955][T13389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.045221][T13629] memory+swap: usage 307592kB, limit 9007199254740988kB, failcnt 0 [ 148.045239][T13629] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 148.050212][T13389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.056013][T13629] Memory cgroup stats for [ 148.111474][T13389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.114467][T13629] /syz6: [ 148.142598][T13629] cache 0 [ 148.374823][T13629] rss 32768 [ 148.377937][T13629] shmem 0 [ 148.380995][T13629] mapped_file 0 [ 148.384447][T13629] dirty 0 [ 148.387421][T13629] writeback 0 [ 148.390778][T13629] workingset_refault_anon 24 [ 148.395354][T13629] workingset_refault_file 4 [ 148.399876][T13629] swap 401408 [ 148.403177][T13629] swapcached 32768 [ 148.406968][T13629] pgpgin 101717 [ 148.410461][T13629] pgpgout 101707 [ 148.414000][T13629] pgfault 143838 [ 148.417614][T13629] pgmajfault 15 [ 148.421058][T13629] inactive_anon 0 [ 148.424756][T13629] active_anon 32768 [ 148.428608][T13629] inactive_file 0 [ 148.432239][T13629] active_file 8192 [ 148.435959][T13629] unevictable 0 [ 148.439441][T13629] hierarchical_memory_limit 314572800 [ 148.444831][T13629] hierarchical_memsw_limit 9223372036854771712 [ 148.451083][T13629] total_cache 0 [ 148.454672][T13629] total_rss 32768 [ 148.458406][T13629] total_shmem 0 [ 148.461892][T13629] total_mapped_file 0 [ 148.465923][T13629] total_dirty 0 [ 148.469375][T13629] total_writeback 0 [ 148.473250][T13629] total_workingset_refault_anon 24 [ 148.478377][T13629] total_workingset_refault_file 4 [ 148.483400][T13629] total_swap 401408 [ 148.487243][T13629] total_swapcached 32768 [ 148.491478][T13629] total_pgpgin 101717 [ 148.495464][T13629] total_pgpgout 101707 [ 148.499528][T13629] total_pgfault 143838 [ 148.503610][T13629] total_pgmajfault 15 [ 148.507582][T13629] total_inactive_anon 0 [ 148.511739][T13629] total_active_anon 32768 [ 148.516098][T13629] total_inactive_file 0 [ 148.520238][T13629] total_active_file 8192 [ 148.524625][T13629] total_unevictable 0 [ 148.528828][T13629] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4109,pid=13627,uid=0 [ 148.543602][T13629] Memory cgroup out of memory: Killed process 13627 (syz.6.4109) total-vm:93632kB, anon-rss:1072kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 148.574527][T11766] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.581626][T11766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.670129][T13469] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 148.692533][T13469] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 148.709625][T13469] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 148.740495][T13469] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 148.789373][T13389] veth0_vlan: entered promiscuous mode [ 148.805934][T13389] veth1_vlan: entered promiscuous mode [ 148.833896][T13629] syz.6.4109 (13629) used greatest stack depth: 7312 bytes left [ 148.839281][T13389] veth0_macvtap: entered promiscuous mode [ 148.852864][T13389] veth1_macvtap: entered promiscuous mode [ 148.864584][T13469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.884563][T13469] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.904233][T13389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.931286][T11783] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.938393][T11783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.941604][T13683] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 148.947738][T11783] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.962277][T11783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.994917][T13389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.032531][T11723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.050510][T11723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.104632][T11723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.114976][T11723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.144132][T13469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.159171][T13709] loop2: detected capacity change from 0 to 1024 [ 149.308129][T13732] loop2: detected capacity change from 0 to 1024 [ 149.328191][T13732] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 149.339139][T13732] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 149.393550][T13732] JBD2: no valid journal superblock found [ 149.399397][T13732] EXT4-fs (loop2): Could not load journal inode [ 149.421760][T13469] veth0_vlan: entered promiscuous mode [ 149.433086][T13469] veth1_vlan: entered promiscuous mode [ 149.438749][T13732] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 149.481625][T13469] veth0_macvtap: entered promiscuous mode [ 149.506830][T13469] veth1_macvtap: entered promiscuous mode [ 149.529814][T13469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.559839][T13469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.569649][T11783] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.582081][T11783] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.598708][ T51] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.607504][ T51] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.830557][T13780] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 149.857977][T13782] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.865337][T13782] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.866840][T13788] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4163'. [ 149.881440][T13788] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4163'. [ 149.890533][T13788] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4163'. [ 149.926042][T13782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.936289][T13782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.976085][T11718] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.997870][T11718] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.009363][T11718] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.019598][T11718] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.154441][T13799] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.161702][T13799] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.205850][T13799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.216910][T13799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.247672][T11723] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.273349][T11723] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.294199][T11723] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.305065][T11723] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.624285][T13847] rdma_op ffff88811c9c3580 conn xmit_rdma 0000000000000000 [ 150.889603][T13871] loop6: detected capacity change from 0 to 1024 [ 150.908779][T13871] EXT4-fs: Ignoring removed orlov option [ 150.975638][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 150.975725][ T29] audit: type=1400 audit(154.685:6614): avc: denied { create } for pid=13882 comm="syz.2.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.035772][ T29] audit: type=1400 audit(154.716:6615): avc: denied { setopt } for pid=13882 comm="syz.2.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.247106][T13893] sd 0:0:1:0: device reset [ 151.267255][T13895] IPVS: Error connecting to the multicast addr [ 151.423554][T13902] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4216'. [ 151.452493][ T29] audit: type=1326 audit(155.189:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13903 comm="syz.7.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa82bc65ba7 code=0x7ffc0000 [ 151.475601][ T29] audit: type=1326 audit(155.189:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13903 comm="syz.7.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa82bc0add9 code=0x7ffc0000 [ 151.486119][T13906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.498505][ T29] audit: type=1326 audit(155.189:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13903 comm="syz.7.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa82bc65ba7 code=0x7ffc0000 [ 151.498536][ T29] audit: type=1326 audit(155.189:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13903 comm="syz.7.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa82bc0add9 code=0x7ffc0000 [ 151.498561][ T29] audit: type=1326 audit(155.189:6620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13903 comm="syz.7.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 151.574124][ T29] audit: type=1326 audit(155.189:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13903 comm="syz.7.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 151.597014][ T29] audit: type=1326 audit(155.189:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13903 comm="syz.7.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 151.619974][ T29] audit: type=1326 audit(155.189:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13903 comm="syz.7.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa82bc65ba7 code=0x7ffc0000 [ 151.661173][T13906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.728503][T13909] loop6: detected capacity change from 0 to 512 [ 151.766357][T13909] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.4219: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 151.784604][T13909] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.4219: Bad quota inode: 3, type: 0 [ 151.796244][T13909] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 151.811589][T13909] EXT4-fs (loop6): mount failed [ 151.816250][T13916] SELinux: failed to load policy [ 151.826075][T13920] __nla_validate_parse: 1 callbacks suppressed [ 151.826091][T13920] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4222'. [ 151.904417][T13930] IPVS: Error connecting to the multicast addr [ 151.937052][T13932] loop6: detected capacity change from 0 to 2048 [ 152.047473][T13943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4232'. [ 152.112545][T13949] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4233'. [ 152.121564][T13949] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4233'. [ 152.136733][T13952] loop2: detected capacity change from 0 to 512 [ 152.151511][T13949] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4233'. [ 152.160650][T13949] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4233'. [ 152.190921][T13952] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.4235: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 152.209112][T13952] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.4235: Bad quota inode: 3, type: 0 [ 152.233510][T13949] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4233'. [ 152.239359][T13952] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 152.242797][T13949] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4233'. [ 152.257403][T13952] EXT4-fs (loop2): mount failed [ 152.362443][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4240'. [ 152.405131][T13968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.413054][T13968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.421146][T13978] netlink: 'syz.2.4245': attribute type 2 has an invalid length. [ 152.428931][T13978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4245'. [ 152.439350][T13968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.446866][T13968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.504902][T13986] netlink: 'syz.2.4249': attribute type 3 has an invalid length. [ 152.600949][T13992] bond1: entered promiscuous mode [ 152.606027][T13992] bond1: entered allmulticast mode [ 152.612207][T13992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.622284][T13992] bond1 (unregistering): Released all slaves [ 152.723410][T14012] netlink: 'syz.7.4259': attribute type 2 has an invalid length. [ 152.808557][T14024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.815967][T14024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.835397][T14024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.842807][T14024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.975958][T14046] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 153.550814][T14106] loop2: detected capacity change from 0 to 512 [ 153.607846][T14106] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.631920][T14106] EXT4-fs (loop2): mount failed [ 153.911532][T14144] pimreg: entered allmulticast mode [ 153.920316][T14144] pimreg: left allmulticast mode [ 154.125751][T14158] netlink: 'syz.6.4329': attribute type 1 has an invalid length. [ 154.181791][T14174] sctp: [Deprecated]: syz.6.4335 (pid 14174) Use of int in max_burst socket option deprecated. [ 154.181791][T14174] Use struct sctp_assoc_value instead [ 154.316017][T14185] 9pnet_fd: Insufficient options for proto=fd [ 154.522795][T14205] ip6gretap0: entered promiscuous mode [ 154.548722][T14205] ip6gretap0: left promiscuous mode [ 154.843706][T14226] loop2: detected capacity change from 0 to 1024 [ 154.879858][T14226] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.4357: Allocating blocks 497-513 which overlap fs metadata [ 154.924772][T14226] EXT4-fs (loop2): pa ffff888106a15b60: logic 256, phys. 369, len 9 [ 154.932865][T14226] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 154.944637][T14226] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 155.203403][T14265] loop6: detected capacity change from 0 to 512 [ 155.216027][T14265] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.225405][T14265] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 155.259684][T14265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 155.271553][T14265] System zones: 1-12 [ 155.275988][T14265] EXT4-fs (loop6): 1 truncate cleaned up [ 155.401451][ T3407] hid_parser_main: 34 callbacks suppressed [ 155.401471][ T3407] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 155.415098][ T3407] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 155.425577][ T3407] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 155.433413][ T3407] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 155.441182][ T3407] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 155.448919][ T3407] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 155.456634][ T3407] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 155.464300][ T3407] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 155.471961][ T3407] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 155.479721][ T3407] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 155.488514][ T3407] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 155.599080][T14301] netlink: 'syz.7.4387': attribute type 22 has an invalid length. [ 155.616626][T11727] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.625514][T11727] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.630040][T14301] netlink: 'syz.7.4387': attribute type 22 has an invalid length. [ 155.635657][T11727] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.651452][T11727] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.889386][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 155.889400][ T29] audit: type=1400 audit(159.842:6748): avc: denied { ioctl } for pid=14344 comm="syz.2.4406" path="socket:[46661]" dev="sockfs" ino=46661 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.948712][ T29] audit: type=1400 audit(159.915:6749): avc: denied { read } for pid=14296 comm="syz.0.4385" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.999749][ T29] audit: type=1400 audit(159.926:6750): avc: denied { read write } for pid=4298 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.023381][ T29] audit: type=1400 audit(159.926:6751): avc: denied { open } for pid=4298 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.047091][ T29] audit: type=1400 audit(159.926:6752): avc: denied { ioctl } for pid=4298 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.072091][ T29] audit: type=1400 audit(159.926:6753): avc: denied { create } for pid=14345 comm="syz.1.4405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.092468][ T29] audit: type=1400 audit(159.926:6754): avc: denied { write } for pid=14345 comm="syz.1.4405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.112604][ T29] audit: type=1400 audit(159.947:6755): avc: denied { map_create } for pid=14355 comm="syz.2.4411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 156.131313][ T29] audit: type=1400 audit(159.947:6756): avc: denied { perfmon } for pid=14355 comm="syz.2.4411" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 156.151675][ T29] audit: type=1400 audit(159.947:6757): avc: denied { map_read map_write } for pid=14355 comm="syz.2.4411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 156.205147][T14374] loop6: detected capacity change from 0 to 512 [ 156.212499][T14374] EXT4-fs: test_dummy_encryption option not supported [ 156.327604][T14381] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 156.709707][T14413] __nla_validate_parse: 10 callbacks suppressed [ 156.709725][T14413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4437'. [ 156.888370][T14443] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 157.066038][T14469] netlink: 'syz.6.4461': attribute type 10 has an invalid length. [ 157.074072][T14469] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4461'. [ 157.087167][T14469] dummy0: entered promiscuous mode [ 157.118014][T14469] bond0: (slave dummy0): Releasing backup interface [ 157.126365][T14469] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 157.221059][T14493] hub 9-0:1.0: USB hub found [ 157.249532][T14493] hub 9-0:1.0: 8 ports detected [ 157.446690][T14500] loop6: detected capacity change from 0 to 512 [ 157.454571][T14500] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 157.464277][T14500] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 157.472773][T14500] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.4473: corrupted in-inode xattr: e_value size too large [ 157.487218][T14500] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4473: couldn't read orphan inode 15 (err -117) [ 158.126500][T14584] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 158.137489][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4500'. [ 158.445811][T14608] loop6: detected capacity change from 0 to 128 [ 158.568624][T14620] hub 9-0:1.0: USB hub found [ 158.579398][T14620] hub 9-0:1.0: 8 ports detected [ 159.150263][T14682] loop6: detected capacity change from 0 to 512 [ 159.159820][T14682] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 159.170199][T14682] EXT4-fs (loop6): orphan cleanup on readonly fs [ 159.177028][T14682] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4543: iget: bad i_size value: 38620345925642 [ 159.190898][T14682] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4543: couldn't read orphan inode 15 (err -117) [ 159.203863][T14682] EXT4-fs mount: 26 callbacks suppressed [ 159.203880][T14682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.236409][ T4298] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.591478][T14742] loop6: detected capacity change from 0 to 512 [ 159.618379][T14742] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 159.643210][T14742] EXT4-fs (loop6): mount failed [ 159.777424][T14760] SELinux: failed to load policy [ 159.878180][T14782] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4586'. [ 160.662705][T14906] netlink: 'syz.7.4640': attribute type 3 has an invalid length. [ 160.675538][T14910] loop2: detected capacity change from 0 to 512 [ 160.704437][T14910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.715127][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 160.715142][ T29] audit: type=1400 audit(164.915:6996): avc: denied { create } for pid=14917 comm="syz.7.4645" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.733252][T14910] EXT4-fs (loop2): shut down requested (1) [ 160.760712][ T29] audit: type=1400 audit(164.967:6997): avc: denied { setattr } for pid=14909 comm="syz.2.4642" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.784316][T13389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.794885][ T29] audit: type=1400 audit(164.999:6998): avc: denied { unlink } for pid=13469 comm="syz-executor" name="file0" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.825558][ T29] audit: type=1400 audit(165.030:6999): avc: denied { name_bind } for pid=14923 comm="syz.2.4647" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 160.848443][ T29] audit: type=1400 audit(165.030:7000): avc: denied { node_bind } for pid=14923 comm="syz.2.4647" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 160.972648][ T29] audit: type=1326 audit(165.188:7001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14940 comm="syz.7.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 160.995574][ T29] audit: type=1326 audit(165.188:7002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14940 comm="syz.7.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 161.019043][ T29] audit: type=1326 audit(165.188:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14940 comm="syz.7.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 161.041965][ T29] audit: type=1326 audit(165.188:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14940 comm="syz.7.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 161.064878][ T29] audit: type=1326 audit(165.188:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14940 comm="syz.7.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 161.176615][T14951] SELinux: failed to load policy [ 161.425575][T14995] loop2: detected capacity change from 0 to 512 [ 161.466916][T14995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.480169][T15003] netlink: 'syz.1.4695': attribute type 21 has an invalid length. [ 161.547998][T13389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.598184][T15021] 9pnet_fd: Insufficient options for proto=fd [ 161.638924][T15025] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 161.672610][ T36] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=36 comm=kworker/1:1 [ 162.119065][T15094] netlink: 'syz.0.4721': attribute type 21 has an invalid length. [ 162.462947][T15131] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 162.879586][T15164] 9pnet_fd: Insufficient options for proto=fd [ 163.021618][T15185] binfmt_misc: register: failed to install interpreter file ./file2 [ 163.408357][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4786'. [ 163.417401][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4786'. [ 163.450147][T15230] binfmt_misc: register: failed to install interpreter file ./file2 [ 163.460749][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4786'. [ 163.469753][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4786'. [ 163.493808][T15239] netlink: 'syz.7.4788': attribute type 6 has an invalid length. [ 163.526692][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4786'. [ 163.535779][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4786'. [ 163.735052][T15253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4805'. [ 163.744124][T15253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4805'. [ 163.765105][T15253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4805'. [ 163.774151][T15253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4805'. [ 163.837723][T15271] loop2: detected capacity change from 0 to 512 [ 163.850734][T15271] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4798: casefold flag without casefold feature [ 163.876410][ T3602] IPVS: starting estimator thread 0... [ 163.899990][T15271] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4798: couldn't read orphan inode 15 (err -117) [ 163.929475][T15271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.949915][T15289] netlink: 'syz.0.4804': attribute type 6 has an invalid length. [ 163.974881][T15280] IPVS: using max 2112 ests per chain, 105600 per kthread [ 164.052484][T15305] rdma_op ffff88811ac5c980 conn xmit_rdma 0000000000000000 [ 164.062280][T13389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.201382][T15332] netlink: 'syz.2.4827': attribute type 6 has an invalid length. [ 164.665401][T15408] netlink: 'syz.7.4866': attribute type 30 has an invalid length. [ 164.779195][T15414] loop2: detected capacity change from 0 to 256 [ 164.824457][T15417] SELinux: failed to load policy [ 164.842057][T15414] syz.2.4868: attempt to access beyond end of device [ 164.842057][T15414] loop2: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 164.857491][T15414] syz.2.4868: attempt to access beyond end of device [ 164.857491][T15414] loop2: rw=2049, sector=608, nr_sectors = 416 limit=256 [ 164.872760][T15414] syz.2.4868: attempt to access beyond end of device [ 164.872760][T15414] loop2: rw=2049, sector=1056, nr_sectors = 448 limit=256 [ 165.183802][T15462] netlink: 'syz.2.4889': attribute type 3 has an invalid length. [ 165.232293][T15470] netlink: 'syz.7.4894': attribute type 3 has an invalid length. [ 165.686256][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 165.686272][ T29] audit: type=1400 audit(170.135:7276): avc: denied { read } for pid=15516 comm="syz.2.4915" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 165.716268][ T29] audit: type=1400 audit(170.135:7277): avc: denied { open } for pid=15516 comm="syz.2.4915" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 165.780350][ T29] audit: type=1400 audit(170.229:7278): avc: denied { shutdown } for pid=15518 comm="syz.0.4916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.863138][ T29] audit: type=1400 audit(170.250:7279): avc: denied { ioctl } for pid=15516 comm="syz.2.4915" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 165.888739][ T29] audit: type=1326 audit(170.282:7280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.2.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9c4e15ba7 code=0x7ffc0000 [ 165.911514][ T29] audit: type=1326 audit(170.282:7281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.2.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc9c4dbadd9 code=0x7ffc0000 [ 165.934359][ T29] audit: type=1326 audit(170.282:7282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.2.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9c4e15ba7 code=0x7ffc0000 [ 165.957246][ T29] audit: type=1326 audit(170.282:7283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.2.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc9c4dbadd9 code=0x7ffc0000 [ 165.980031][ T29] audit: type=1326 audit(170.282:7284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.2.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c4e1ebe9 code=0x7ffc0000 [ 166.003047][ T29] audit: type=1326 audit(170.282:7285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.2.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc9c4e1ebe9 code=0x7ffc0000 [ 166.066811][T15528] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004DB|0xffffffffffffffffmemory.events [ 166.225412][T15559] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.232606][T15559] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.250941][T15559] bridge0: entered allmulticast mode [ 166.335345][T15566] vlan2: entered promiscuous mode [ 166.340472][T15566] macvtap0: entered promiscuous mode [ 166.347548][T15573] ref_ctr_offset mismatch. inode: 0x11cd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 166.368984][T15575] netlink: 'syz.1.4941': attribute type 13 has an invalid length. [ 166.385017][T15575] erspan0: refused to change device tx_queue_len [ 166.594622][T15604] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2 [ 166.606109][T15607] netlink: 'syz.0.4955': attribute type 1 has an invalid length. [ 166.632136][T15611] pimreg: entered allmulticast mode [ 166.656968][T15611] pimreg: left allmulticast mode [ 167.915191][T15794] 9pnet_fd: Insufficient options for proto=fd [ 168.030474][T15819] pimreg: entered allmulticast mode [ 168.046305][T15819] pimreg: left allmulticast mode [ 168.256489][T15853] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 168.629732][T15910] __nla_validate_parse: 11 callbacks suppressed [ 168.629827][T15910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5096'. [ 168.674009][T15918] serio: Serial port ptm0 [ 168.726598][T15929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5104'. [ 168.843274][T15953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5116'. [ 168.906946][T15964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5121'. [ 170.260054][T16094] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5183'. [ 170.297559][T16096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5185'. [ 170.337556][T16100] loop2: detected capacity change from 0 to 512 [ 170.365248][T16100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.421411][T13389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.624423][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 170.624436][ T29] audit: type=1326 audit(175.323:7575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16141 comm="syz.6.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 170.667732][ T29] audit: type=1326 audit(175.355:7576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16141 comm="syz.6.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 170.690728][ T29] audit: type=1326 audit(175.355:7577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16141 comm="syz.6.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4c53ebe9 code=0x7ffc0000 [ 170.750947][T16156] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5207'. [ 170.774842][ T29] audit: type=1326 audit(175.470:7578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.2.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c4e1ebe9 code=0x7ffc0000 [ 170.797825][ T29] audit: type=1326 audit(175.470:7579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.2.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c4e1ebe9 code=0x7ffc0000 [ 170.821009][ T29] audit: type=1326 audit(175.470:7580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.2.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9c4e1ebe9 code=0x7ffc0000 [ 170.843927][ T29] audit: type=1326 audit(175.470:7581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.2.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c4e1ebe9 code=0x7ffc0000 [ 170.866818][ T29] audit: type=1326 audit(175.470:7582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.2.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c4e1ebe9 code=0x7ffc0000 [ 170.889755][ T29] audit: type=1326 audit(175.470:7583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.2.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc9c4e1ebe9 code=0x7ffc0000 [ 170.912589][ T29] audit: type=1326 audit(175.470:7584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.2.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c4e1ebe9 code=0x7ffc0000 [ 170.940944][T16166] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2 [ 170.940972][T16162] loop2: detected capacity change from 0 to 1024 [ 170.966273][T16162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.025581][T16173] netlink: 'syz.6.5215': attribute type 10 has an invalid length. [ 171.034010][T16173] dummy0: left promiscuous mode [ 171.040172][T16173] team0: Port device dummy0 added [ 171.089686][T16172] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.248109][T11769] bridge_slave_1: left allmulticast mode [ 171.253830][T11769] bridge_slave_1: left promiscuous mode [ 171.259633][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.267423][T11769] bridge_slave_0: left allmulticast mode [ 171.273134][T11769] bridge_slave_0: left promiscuous mode [ 171.278909][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.346214][T11769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.355721][T11769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.373059][T11769] bond0 (unregistering): Released all slaves [ 171.423476][T11769] hsr_slave_0: left promiscuous mode [ 171.429194][T11769] hsr_slave_1: left promiscuous mode [ 171.496619][T11769] team0 (unregistering): Port device team_slave_1 removed [ 171.574192][T11769] team0 (unregistering): Port device team_slave_0 removed [ 172.044293][T16196] chnl_net:caif_netlink_parms(): no params data found [ 172.091554][T16196] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.098683][T16196] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.106433][T16196] bridge_slave_0: entered allmulticast mode [ 172.113161][T16196] bridge_slave_0: entered promiscuous mode [ 172.123211][T16196] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.129872][T16233] raw_sendmsg: syz.1.5237 forgot to set AF_INET. Fix it! [ 172.130359][T16196] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.145513][T16196] bridge_slave_1: entered allmulticast mode [ 172.151999][T16196] bridge_slave_1: entered promiscuous mode [ 172.197153][T16196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.211178][T16196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.242999][T16196] team0: Port device team_slave_0 added [ 172.260315][T16196] team0: Port device team_slave_1 added [ 172.298108][T16196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.305078][T16196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.331118][T16196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.432782][T16196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.439846][T16196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.465872][T16196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.565716][T16196] hsr_slave_0: entered promiscuous mode [ 172.572047][T16196] hsr_slave_1: entered promiscuous mode [ 172.582390][T16196] debugfs: 'hsr0' already exists in 'hsr' [ 172.588135][T16196] Cannot create hsr debugfs directory [ 172.947700][T16196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.974111][T16196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.992152][T16196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.002348][T16196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.091027][T16196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.121243][T16196] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.131215][T11769] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.138333][T11769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.157352][T16196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.167885][T16196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.180900][T11769] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.188045][T11769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.269647][T16196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.358116][T16196] veth0_vlan: entered promiscuous mode [ 173.368069][T16196] veth1_vlan: entered promiscuous mode [ 173.388432][T16196] veth0_macvtap: entered promiscuous mode [ 173.399701][T16196] veth1_macvtap: entered promiscuous mode [ 173.471075][T16196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.487306][T16196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.503031][T11727] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.512492][T11727] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.525910][T11727] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.534789][T11727] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.898065][T16384] ipvlan0: entered promiscuous mode [ 173.904202][T16384] bridge0: port 3(ipvlan0) entered blocking state [ 173.910808][T16384] bridge0: port 3(ipvlan0) entered disabled state [ 173.921972][T16384] ipvlan0: entered allmulticast mode [ 173.927961][T16384] ipvlan0: left allmulticast mode [ 174.086269][T16412] ref_ctr_offset mismatch. inode: 0x661 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 174.890853][T16421] rdma_op ffff888119c88580 conn xmit_rdma 0000000000000000 [ 174.961016][T16429] netlink: 'syz.1.5310': attribute type 10 has an invalid length. [ 174.980259][T16429] team0: Port device dummy0 added [ 175.103767][T11640] IPVS: starting estimator thread 0... [ 175.171815][T16463] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5321'. [ 175.180832][T16463] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5321'. [ 175.190740][T16452] IPVS: using max 2448 ests per chain, 122400 per kthread [ 175.233910][T16463] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5321'. [ 175.243090][T16463] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5321'. [ 175.283396][T16474] sd 0:0:1:0: device reset [ 175.309268][T16463] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5321'. [ 175.318337][T16463] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5321'. [ 175.344508][T16482] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5331'. [ 175.385397][T16491] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5333'. [ 175.430523][T16501] loop2: detected capacity change from 0 to 128 [ 175.485555][T16512] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 175.880742][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 175.880769][ T29] audit: type=1326 audit(180.848:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16526 comm="syz.7.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 175.914591][ T29] audit: type=1400 audit(180.879:7652): avc: denied { bind } for pid=16524 comm="syz.2.5359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 175.933427][ T29] audit: type=1326 audit(180.879:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16526 comm="syz.7.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 175.956314][ T29] audit: type=1326 audit(180.879:7653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16526 comm="syz.7.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 175.979283][ T29] audit: type=1326 audit(180.879:7654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16526 comm="syz.7.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 176.002282][ T29] audit: type=1326 audit(180.879:7655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16526 comm="syz.7.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 176.025429][ T29] audit: type=1326 audit(180.879:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16526 comm="syz.7.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 176.031268][T16523] ip6gretap0: entered promiscuous mode [ 176.048330][ T29] audit: type=1326 audit(180.879:7657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16526 comm="syz.7.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 176.076748][ T29] audit: type=1326 audit(180.879:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16526 comm="syz.7.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 176.099714][ T29] audit: type=1326 audit(180.879:7659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16526 comm="syz.7.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa82bc6ebe9 code=0x7ffc0000 [ 176.123419][T16523] ip6gretap0: left promiscuous mode [ 176.262914][T16544] netlink: 'syz.1.5356': attribute type 30 has an invalid length. [ 176.663395][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5378'. [ 176.769782][T16596] netlink: 116 bytes leftover after parsing attributes in process `syz.7.5384'. [ 176.778914][T16596] netlink: 'syz.7.5384': attribute type 1 has an invalid length. [ 176.936662][T16603] bond1: entered promiscuous mode [ 176.941749][T16603] bond1: entered allmulticast mode [ 176.947269][T16603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.958243][T16603] bond1 (unregistering): Released all slaves [ 178.114649][T16650] loop2: detected capacity change from 0 to 512 [ 178.121284][T16650] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.144024][T16650] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 178.166610][T16650] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 178.177196][T16650] System zones: 1-12 [ 178.183367][T16650] EXT4-fs (loop2): 1 truncate cleaned up [ 178.189477][T16650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.279674][T16196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.331896][T16680] ip6gretap0: entered promiscuous mode [ 178.339165][T16680] ip6gretap0: left promiscuous mode [ 180.070514][T16796] __nla_validate_parse: 4 callbacks suppressed [ 180.070532][T16796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5471'. [ 180.400031][T16825] ipvlan0: entered promiscuous mode [ 180.406663][T16825] bridge0: port 3(ipvlan0) entered blocking state [ 180.413232][T16825] bridge0: port 3(ipvlan0) entered disabled state [ 180.421541][T16825] ipvlan0: entered allmulticast mode [ 180.426853][T16825] bridge0: entered allmulticast mode [ 180.432826][T16825] ipvlan0: left allmulticast mode [ 180.437935][T16825] bridge0: left allmulticast mode [ 180.574570][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5492'. [ 180.597197][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5494'. [ 180.606211][T16841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5494'. [ 180.632076][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5494'. [ 180.641009][T16841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5494'. [ 180.863964][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 180.863979][ T29] audit: type=1326 audit(186.078:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.1.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087d4debe9 code=0x7ffc0000 [ 180.941296][ T29] audit: type=1326 audit(186.078:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.1.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087d4debe9 code=0x7ffc0000 [ 180.964303][ T29] audit: type=1326 audit(186.131:7753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.1.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f087d4debe9 code=0x7ffc0000 [ 180.987299][ T29] audit: type=1326 audit(186.131:7754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.1.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087d4debe9 code=0x7ffc0000 [ 181.010271][ T29] audit: type=1326 audit(186.131:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.1.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087d4debe9 code=0x7ffc0000 [ 181.033346][ T29] audit: type=1326 audit(186.131:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.1.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f087d4debe9 code=0x7ffc0000 [ 181.056315][ T29] audit: type=1326 audit(186.131:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.1.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087d4debe9 code=0x7ffc0000 [ 181.079264][ T29] audit: type=1326 audit(186.131:7758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.1.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087d4debe9 code=0x7ffc0000 [ 181.102238][ T29] audit: type=1326 audit(186.131:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.1.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f087d4debe9 code=0x7ffc0000 [ 181.125307][ T29] audit: type=1326 audit(186.131:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.1.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087d4debe9 code=0x7ffc0000 [ 181.264463][T16866] loop2: detected capacity change from 0 to 1024 [ 181.271288][T16866] EXT4-fs: Ignoring removed orlov option [ 181.288497][T16866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.415019][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5504'. [ 181.455665][T16878] hsr_slave_0 (unregistering): left promiscuous mode [ 181.772403][T11739] ================================================================== [ 181.780537][T11739] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 181.790003][T11739] [ 181.792321][T11739] write to 0xffff8881420e3545 of 2 bytes by task 16874 on cpu 0: [ 181.800022][T11739] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 181.805911][T11739] generic_perform_write+0x2c2/0x490 [ 181.811185][T11739] ext4_buffered_write_iter+0x1ee/0x3c0 [ 181.816728][T11739] ext4_file_write_iter+0x383/0xf00 [ 181.821923][T11739] iter_file_splice_write+0x5f2/0x970 [ 181.827280][T11739] direct_splice_actor+0x153/0x2a0 [ 181.832378][T11739] splice_direct_to_actor+0x30f/0x680 [ 181.837740][T11739] do_splice_direct+0xda/0x150 [ 181.842497][T11739] do_sendfile+0x380/0x650 [ 181.846907][T11739] __x64_sys_sendfile64+0x105/0x150 [ 181.852097][T11739] x64_sys_call+0x2bb0/0x2ff0 [ 181.856762][T11739] do_syscall_64+0xd2/0x200 [ 181.861259][T11739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.867147][T11739] [ 181.869457][T11739] read to 0xffff8881420e3400 of 1024 bytes by task 11739 on cpu 1: [ 181.877332][T11739] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 181.883219][T11739] generic_perform_write+0x2c2/0x490 [ 181.888498][T11739] shmem_file_write_iter+0xc5/0xf0 [ 181.893602][T11739] lo_rw_aio+0x6a0/0x760 [ 181.897842][T11739] loop_process_work+0x52d/0xa60 [ 181.902774][T11739] loop_workfn+0x31/0x40 [ 181.907012][T11739] process_scheduled_works+0x4ce/0x9d0 [ 181.912468][T11739] worker_thread+0x582/0x770 [ 181.917061][T11739] kthread+0x486/0x510 [ 181.921120][T11739] ret_from_fork+0xda/0x150 [ 181.925610][T11739] ret_from_fork_asm+0x1a/0x30 [ 181.930364][T11739] [ 181.932668][T11739] Reported by Kernel Concurrency Sanitizer on: [ 181.938811][T11739] CPU: 1 UID: 0 PID: 11739 Comm: kworker/u8:25 Tainted: G W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 181.952778][T11739] Tainted: [W]=WARN [ 181.956565][T11739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.966608][T11739] Workqueue: loop2 loop_workfn [ 181.971372][T11739] ================================================================== [ 181.982341][T16906] sd 0:0:1:0: device reset [ 181.987465][T16908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5517'. [ 182.115999][T16874] ================================================================== [ 182.124119][T16874] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 182.131255][T16874] [ 182.133581][T16874] write to 0xffff88811a047254 of 4 bytes by task 16866 on cpu 1: [ 182.141300][T16874] xas_set_mark+0x12b/0x140 [ 182.145836][T16874] __folio_start_writeback+0x1dd/0x440 [ 182.151277][T16874] ext4_bio_write_folio+0x5ad/0x9f0 [ 182.156457][T16874] mpage_process_page_bufs+0x4a1/0x620 [ 182.161891][T16874] mpage_prepare_extent_to_map+0x786/0xc00 [ 182.167672][T16874] ext4_do_writepages+0xa05/0x2750 [ 182.172763][T16874] ext4_writepages+0x176/0x300 [ 182.177501][T16874] do_writepages+0x1c6/0x310 [ 182.182067][T16874] file_write_and_wait_range+0x156/0x2c0 [ 182.187680][T16874] generic_buffers_fsync_noflush+0x45/0x120 [ 182.193554][T16874] ext4_sync_file+0x1ab/0x690 [ 182.198215][T16874] vfs_fsync_range+0x10d/0x130 [ 182.202957][T16874] ext4_buffered_write_iter+0x34f/0x3c0 [ 182.208485][T16874] ext4_file_write_iter+0x383/0xf00 [ 182.213664][T16874] iter_file_splice_write+0x5f2/0x970 [ 182.219026][T16874] direct_splice_actor+0x153/0x2a0 [ 182.224114][T16874] splice_direct_to_actor+0x30f/0x680 [ 182.229494][T16874] do_splice_direct+0xda/0x150 [ 182.234231][T16874] do_sendfile+0x380/0x650 [ 182.238628][T16874] __x64_sys_sendfile64+0x105/0x150 [ 182.243803][T16874] x64_sys_call+0x2bb0/0x2ff0 [ 182.248473][T16874] do_syscall_64+0xd2/0x200 [ 182.252956][T16874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.258827][T16874] [ 182.261145][T16874] read to 0xffff88811a047254 of 4 bytes by task 16874 on cpu 0: [ 182.268751][T16874] xas_find_marked+0x5dc/0x620 [ 182.273493][T16874] find_get_entry+0x5d/0x380 [ 182.278066][T16874] filemap_get_folios_tag+0x92/0x210 [ 182.283324][T16874] filemap_fdatawait_range+0x88/0x1d0 [ 182.288674][T16874] __writeback_single_inode+0xdb/0x7c0 [ 182.294122][T16874] writeback_single_inode+0x167/0x3e0 [ 182.299495][T16874] sync_inode_metadata+0x5b/0x90 [ 182.304413][T16874] generic_buffers_fsync_noflush+0xd9/0x120 [ 182.310282][T16874] ext4_sync_file+0x1ab/0x690 [ 182.314942][T16874] vfs_fsync_range+0x10d/0x130 [ 182.319683][T16874] ext4_buffered_write_iter+0x34f/0x3c0 [ 182.325209][T16874] ext4_file_write_iter+0x383/0xf00 [ 182.330389][T16874] iter_file_splice_write+0x5f2/0x970 [ 182.335734][T16874] direct_splice_actor+0x153/0x2a0 [ 182.340819][T16874] splice_direct_to_actor+0x30f/0x680 [ 182.346165][T16874] do_splice_direct+0xda/0x150 [ 182.350911][T16874] do_sendfile+0x380/0x650 [ 182.355327][T16874] __x64_sys_sendfile64+0x105/0x150 [ 182.360503][T16874] x64_sys_call+0x2bb0/0x2ff0 [ 182.365155][T16874] do_syscall_64+0xd2/0x200 [ 182.369644][T16874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.375514][T16874] [ 182.377814][T16874] value changed: 0x0a000021 -> 0x04000021 [ 182.383505][T16874] [ 182.385803][T16874] Reported by Kernel Concurrency Sanitizer on: [ 182.391928][T16874] CPU: 0 UID: 0 PID: 16874 Comm: syz.2.5513 Tainted: G W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 182.405622][T16874] Tainted: [W]=WARN [ 182.409416][T16874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.419445][T16874] ================================================================== [ 182.438409][T16196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.