last executing test programs: 2m25.666459919s ago: executing program 32 (id=86): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) 1m42.57825763s ago: executing program 33 (id=1340): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 1m38.018135012s ago: executing program 34 (id=1400): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x15, 0x5, 0x0) recvmsg$can_raw(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 1m37.295576065s ago: executing program 35 (id=1428): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) 1m36.368515299s ago: executing program 36 (id=1070): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x242, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00', r1}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 1m30.565614487s ago: executing program 37 (id=1549): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m29.68800286s ago: executing program 38 (id=1565): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@chain) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x8, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) add_key$keyring(&(0x7f0000000400), &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r0) 1m12.464781411s ago: executing program 39 (id=2110): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d80), 0x208e24b) fdatasync(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xd63c75d7ed2}], 0x10000000000002a9, 0x0, 0x40) 1m8.047755982s ago: executing program 40 (id=2219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000005000100ff00000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000800000000000000fcfffff818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlockall(0x3) 59.98260215s ago: executing program 41 (id=2504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001300)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0x7}, &(0x7f00000002c0)=0x19e2, 0x0, 0x9, 0x10000, 0xe73c, 0x4, 0x33, 0xfffffffffffffffd}}], 0x58}, 0x0) 39.294309847s ago: executing program 3 (id=3255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 39.218814827s ago: executing program 3 (id=3258): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 39.211502197s ago: executing program 3 (id=3260): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x6) 39.167110568s ago: executing program 3 (id=3262): r0 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r0, 0x0) ftruncate(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 39.138471077s ago: executing program 3 (id=3264): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@noinit_itable}]}, 0x1, 0x505, &(0x7f0000001180)="$eJzs3c9vI1cdAPCvnThxstkmLT0AgnZpCwtarZN426jqAcoJIVQJ0SNI25B4oyh2HMVOacIe0jNXJCpxgiN/AOeeuHNBcONSDkj8iEBNJQ6DZjxOvVl7E22ydhR/PtJo3pvn+PveZue9zTc7fgGMrVsRcRgRUxHxXkTM59cL+RFvd470dZ8ePVw7Pnq4Vogkefdfhaw9vRY9X5O6kb9nOSJ+9L2InxYej9vaP9harddru3l9sd3YWWztH9zdbKxu1DZq29XqyvLK0pv33qhe2lhfbkzlpa9+8sfDb/087dZcfqV3HJepM/TSSZzUZET84FkEG4GJfDxTo+4IT6UYES9ExCvZ/T8fE9l3EwC4zpJkPpL53joAcN0VsxxYoVjJcwFzUSxWKp0c3osxW6w3W+07D5p72+udXNlClIoPNuu1pTxXuBClQlpfzsqf16un6vci4vmI+OX0TFavrDXr66P8hw8AjLEbp9b//0531n8A4Jorj7oDAMDQWf8BYPxY/wFg/Jys/579A4Cx0Vn/Z0bdDQBgiOT/AWD8WP8BYKz88J130iM5zj//ev39/b2t5vt312utrUpjb62y1tzdqWw0mxvZZ/Y0znq/erO5s/x67H2w8O2dVnuxtX9wv9Hc227fzz7X+36tlL3qcAgjAwAGef7lj/9SSFfkt2ayI3r2ciiNtGfAs1YcdQeAkZkYdQeAkfHED4yvC/yMLz0A10SfLXofUe73gFCSJMnFwt682JcDF3H7S/L/MK568v/+FzCMGfl/GF/y/zC+kqRw3j3/47wvBACuNjl+YMDv/1/Iz7/Lfznwk/XTr/joWfYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArrbu/r+VfC/wuSgWK5WImxGxEKXCg816bSkinouIP0+XptP68oj7DABcVPHvhXz/r9vzr8090vTSjZPiVET87Nfv/uqD1XZ7908RU4V/T3evtz/Kr1eH33sA4GzddTo79/wg/+nRw7XuMcz+/OO7EVHuxD8+morjk/iTMZmdy1GKiNn/FPJ6R6End3ERhx9GxBf7jb8Qc1kOpLPz6en4aeybQ41ffCR+MWvrnNM/iy9cQl9g3Hyczj9v97v/inErO/e//8vZDHVx+fyXvtXacTYHfh6/O/9NDJj/bp03xut/+H6nNPN424cRX56M6MY+7pl/uvELA+K/ds74f/3KS68Makt+E3E7+sfvjbXYbuwstvYP7m42VjdqG7XtanVleWXpzXtvVBezHPXi4NXgn2/deW5QWzr+2QHxy2eM/+vnHP9v//fej7/2hPjffLVf/GK8+IT46Zr4jXPGX539ffn0tc+SJOnGXx8w/rO+/3fOGf+Tvx08tm04ADA6rf2DrdV6vbaroHD1C+lf2SvQjb6F7wwr1lT0b/rFq517+lRTkjxVrEEzxmVk3YCr4OSmj4jPRt0ZAAAAAAAAAAAAAACgr2E8sTTqMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9/T8AAP//3ofTKQ==") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) 38.893976198s ago: executing program 42 (id=3270): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 38.792155929s ago: executing program 3 (id=3273): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000008000000080000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 38.761116419s ago: executing program 43 (id=3273): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000008000000080000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 34.759220098s ago: executing program 1 (id=3351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000900)='kfree\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000000)={'gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 34.698127698s ago: executing program 1 (id=3363): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 34.664191908s ago: executing program 9 (id=3356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) 34.603608819s ago: executing program 9 (id=3357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 34.603251589s ago: executing program 9 (id=3358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 34.586535489s ago: executing program 9 (id=3360): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x7, 0x1, 0x20000}, 0x20) 34.547815979s ago: executing program 9 (id=3362): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) 33.852464552s ago: executing program 1 (id=3374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 33.828126652s ago: executing program 1 (id=3375): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x7, 0x1, 0x20000}, 0x20) 33.804128892s ago: executing program 1 (id=3376): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 33.570355443s ago: executing program 1 (id=3378): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="0c0802"], 0x48) 33.570044224s ago: executing program 44 (id=3378): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="0c0802"], 0x48) 32.644069468s ago: executing program 9 (id=3382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0xfdef, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x86100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000d80)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 32.581614888s ago: executing program 45 (id=3382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0xfdef, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x86100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000d80)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 8.538414711s ago: executing program 8 (id=4135): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@delalloc}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@nouid32}, {@resgid}, {@nobarrier}, {@sysvgroups}]}, 0x1, 0x573, &(0x7f0000001140)="$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") chdir(&(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 8.438659911s ago: executing program 8 (id=4136): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='smaps\x00') preadv(r2, &(0x7f0000000440)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1, 0x1e, 0x20704513) 8.038091713s ago: executing program 8 (id=4141): unshare(0x8040480) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7.166642397s ago: executing program 8 (id=4156): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2800800, &(0x7f0000000600)={[{@user_xattr}, {@data_err_abort}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@nogrpid}]}, 0x1, 0x54f, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x236) 6.927644498s ago: executing program 8 (id=4165): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 6.57841552s ago: executing program 8 (id=4175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f00000000c0), 0xfe, 0x558, &(0x7f0000000380)="$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") r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3ed7, 0x0) open$dir(0x0, 0x0, 0x0) 6.57824642s ago: executing program 46 (id=4175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f00000000c0), 0xfe, 0x558, &(0x7f0000000380)="$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") r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3ed7, 0x0) open$dir(0x0, 0x0, 0x0) 3.187019505s ago: executing program 2 (id=4281): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000207010200000000000000000a000000000000030900010073797a31000000000c0002400000000000000003"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x400801c) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.155492916s ago: executing program 2 (id=4272): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x4, 0x0, 0x0, 0x3}) 3.126447166s ago: executing program 2 (id=4274): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd82, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x2}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0xd6c, 0x66, 0x0, 0x81, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x5, 0x3, 0x1, 0x1, 0x6, 0x9}, 0x1, {0xab64}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0x34, 0x0, 0x0, 0x1, 0x2, 0xe}, 0x2, {0x3, 0x3ff, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}}, 0x0) 3.082697796s ago: executing program 2 (id=4277): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x7, 0x1, 0x20000}, 0x20) 3.074577476s ago: executing program 2 (id=4278): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x400) r3 = dup(r1) inotify_rm_watch(r3, r2) 2.794425888s ago: executing program 2 (id=4290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 2.794276018s ago: executing program 47 (id=4290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 1.732642272s ago: executing program 6 (id=4310): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet6(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 1.498106394s ago: executing program 6 (id=4314): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x21, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.412969524s ago: executing program 6 (id=4318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6c1, &(0x7f0000001640)="$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") open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) 1.412470454s ago: executing program 4 (id=4319): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.343655124s ago: executing program 6 (id=4320): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0xffffffff}]}) 1.332621824s ago: executing program 4 (id=4321): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb4e, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 1.130301055s ago: executing program 6 (id=4322): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/'], 0x20) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 898.420606ms ago: executing program 7 (id=4325): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r0}, 0x18) r1 = io_uring_setup(0x3450, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8000000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 645.621228ms ago: executing program 0 (id=4300): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000c7591c0000000000f7002300850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800082}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c) 592.746178ms ago: executing program 0 (id=4326): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 533.255338ms ago: executing program 0 (id=4327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xe}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 508.826668ms ago: executing program 7 (id=4328): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast1}, {@in=@multicast2, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 504.512968ms ago: executing program 0 (id=4329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6c1, &(0x7f0000001640)="$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") open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) 470.712818ms ago: executing program 4 (id=4331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 469.966448ms ago: executing program 7 (id=4332): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0x4, 0x2}, 0x10) close(r0) 449.163928ms ago: executing program 0 (id=4333): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000480)={{0x80, 0x3}, 'port1\x00', 0x85, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port1\x00', 0x0, 0x40409, 0x0, 0x100, 0x4}) 448.404798ms ago: executing program 7 (id=4334): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 411.812068ms ago: executing program 4 (id=4336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x45, 0x1480, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x2, &(0x7f0000000a80)=ANY=[], 0x1, 0x24a, &(0x7f0000001140)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 399.291209ms ago: executing program 0 (id=4337): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 366.105179ms ago: executing program 5 (id=4338): creat(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)='./file1\x00') 364.771839ms ago: executing program 4 (id=4339): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_GETX(r1, 0x80089203, 0x0) 316.771779ms ago: executing program 5 (id=4340): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000008c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000009, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2c011, r1, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9) 315.637039ms ago: executing program 6 (id=4341): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) close(r0) 167.39345ms ago: executing program 4 (id=4342): syz_open_procfs(0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000005c0)='mm_page_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 167.13993ms ago: executing program 7 (id=4343): pipe(&(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) 166.87783ms ago: executing program 5 (id=4344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 58.39318ms ago: executing program 5 (id=4345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000340)=r1}, 0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) 58.01167ms ago: executing program 7 (id=4346): unshare(0x8040480) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 47.43483ms ago: executing program 5 (id=4347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000008000000080000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_io_uring_submit(r2, 0x0, 0x0) 0s ago: executing program 5 (id=4348): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000007100)={0x0, 0x0, &(0x7f00000070c0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18000000120a00040000000000000000000000000400048020000000000a01040000000000000000030000000900010073797a300000000030000000160a0101000000000000000003000000040003800900020073797a31000000000900010073797a30"], 0x90}}, 0x40840) kernel console output (not intermixed with test programs): 12423] bridge_slave_0: entered allmulticast mode [ 141.794883][T12423] bridge_slave_0: entered promiscuous mode [ 141.803714][T12413] team0: Port device team_slave_1 added [ 141.814782][T12423] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.821882][T12423] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.829046][T12423] bridge_slave_1: entered allmulticast mode [ 141.835423][T12423] bridge_slave_1: entered promiscuous mode [ 141.856831][T12413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.863850][T12413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.889842][T12413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.902005][T12423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.911419][T12413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.918508][T12413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.944617][T12413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.960187][T12423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.980852][T12423] team0: Port device team_slave_0 added [ 141.991281][T12423] team0: Port device team_slave_1 added [ 142.013066][T12413] hsr_slave_0: entered promiscuous mode [ 142.019179][T12413] hsr_slave_1: entered promiscuous mode [ 142.025576][T12423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.032593][T12423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.058589][T12423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.069952][T12423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.076937][T12423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.102994][T12423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.141191][T12423] hsr_slave_0: entered promiscuous mode [ 142.147456][T12423] hsr_slave_1: entered promiscuous mode [ 142.153394][T12423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.161025][T12423] Cannot create hsr debugfs directory [ 142.559921][T12413] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 142.568838][T12413] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 142.585805][T12413] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 142.596788][T12413] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 142.605242][T12423] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 142.614063][T12423] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 142.623064][T12423] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 142.632086][T12423] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 142.690825][T12423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.700361][T12413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.717094][T12413] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.724884][T12423] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.737086][ T7517] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.744251][ T7517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.753297][ T7517] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.760475][ T7517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.771740][ T7520] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.778908][ T7520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.789424][ T7536] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.796568][ T7536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.879594][T12423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.892878][T12413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.014394][T12423] veth0_vlan: entered promiscuous mode [ 143.027932][T12423] veth1_vlan: entered promiscuous mode [ 143.037427][T12413] veth0_vlan: entered promiscuous mode [ 143.045444][T12413] veth1_vlan: entered promiscuous mode [ 143.059186][T12423] veth0_macvtap: entered promiscuous mode [ 143.067635][T12423] veth1_macvtap: entered promiscuous mode [ 143.079292][T12413] veth0_macvtap: entered promiscuous mode [ 143.087203][T12413] veth1_macvtap: entered promiscuous mode [ 143.094832][T12423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.104286][T12423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.116602][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.127122][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.137777][T12413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.145778][T12423] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.154555][T12423] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.163327][T12423] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.172080][T12423] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.185251][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.195828][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.206406][T12413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.217585][T12413] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.226453][T12413] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.235262][T12413] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.244033][T12413] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.317153][T12498] syz.9.3272: attempt to access beyond end of device [ 143.317153][T12498] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 143.352022][T12501] loop7: detected capacity change from 0 to 7 [ 143.366037][T12501] Buffer I/O error on dev loop7, logical block 0, async page read [ 143.378621][T12501] Buffer I/O error on dev loop7, logical block 0, async page read [ 143.386624][T12501] loop7: unable to read partition table [ 143.398578][T12508] vlan2: entered promiscuous mode [ 143.404584][T12501] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 143.404584][T12501] ) failed (rc=-5) [ 143.519614][T12523] loop9: detected capacity change from 0 to 2048 [ 143.539628][T12523] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.575953][T12413] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.588034][T12531] wireguard0: entered promiscuous mode [ 143.593565][T12531] wireguard0: entered allmulticast mode [ 143.706501][T12540] loop9: detected capacity change from 0 to 512 [ 143.746519][T12540] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 143.761293][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 143.761307][ T29] audit: type=1400 audit(1867147916.260:5640): avc: denied { ioctl } for pid=12539 comm="syz.9.3296" path="socket:[36697]" dev="sockfs" ino=36697 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.817409][ T29] audit: type=1326 audit(1867147916.320:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12547 comm="syz.9.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9036d10849 code=0x7ffc0000 [ 143.841073][ T29] audit: type=1326 audit(1867147916.320:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12547 comm="syz.9.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9036d0f1b0 code=0x7ffc0000 [ 143.864666][ T29] audit: type=1326 audit(1867147916.320:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12547 comm="syz.9.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9036d0f1b0 code=0x7ffc0000 [ 143.888227][ T29] audit: type=1326 audit(1867147916.320:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12547 comm="syz.9.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9036d10849 code=0x7ffc0000 [ 143.911786][ T29] audit: type=1326 audit(1867147916.320:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12547 comm="syz.9.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9036d10849 code=0x7ffc0000 [ 143.935397][ T29] audit: type=1326 audit(1867147916.320:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12547 comm="syz.9.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f9036d10849 code=0x7ffc0000 [ 143.958910][ T29] audit: type=1326 audit(1867147916.320:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12547 comm="syz.9.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9036d10849 code=0x7ffc0000 [ 143.982540][ T29] audit: type=1326 audit(1867147916.320:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12547 comm="syz.9.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9036d10849 code=0x7ffc0000 [ 144.015587][ T29] audit: type=1326 audit(1867147916.520:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12549 comm="syz.9.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9036d10849 code=0x7ffc0000 [ 144.359981][T12576] loop9: detected capacity change from 0 to 256 [ 144.369936][T12576] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 144.498260][T12592] macsec1: entered allmulticast mode [ 144.503610][T12592] hsr0: entered allmulticast mode [ 144.508720][T12592] hsr_slave_0: entered allmulticast mode [ 144.514538][T12592] hsr_slave_1: entered allmulticast mode [ 144.532634][T12592] hsr0: left allmulticast mode [ 144.537507][T12592] hsr_slave_0: left allmulticast mode [ 144.543084][T12592] hsr_slave_1: left allmulticast mode [ 144.588835][T12602] sd 0:0:1:0: device reset [ 144.770066][T12637] loop8: detected capacity change from 0 to 164 [ 144.793278][T12640] hsr0: entered promiscuous mode [ 144.814674][T12640] macsec1: entered allmulticast mode [ 144.820066][T12640] hsr0: entered allmulticast mode [ 144.825109][T12640] hsr_slave_0: entered allmulticast mode [ 144.830806][T12640] hsr_slave_1: entered allmulticast mode [ 144.846222][T12640] hsr0: left allmulticast mode [ 144.851035][T12640] hsr_slave_0: left allmulticast mode [ 144.856477][T12640] hsr_slave_1: left allmulticast mode [ 144.958234][T12652] __nla_validate_parse: 1 callbacks suppressed [ 144.958257][T12652] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3349'. [ 145.063999][T12663] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12663 comm=syz.5.3354 [ 145.083450][T12666] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.113262][T12668] netlink: 'syz.9.3357': attribute type 3 has an invalid length. [ 145.347537][T12695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3370'. [ 145.466094][T10909] : (slave syz_tun): Releasing backup interface [ 146.056593][T12708] chnl_net:caif_netlink_parms(): no params data found [ 146.095440][T12708] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.102570][T12708] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.111288][T12708] bridge_slave_0: entered allmulticast mode [ 146.117897][T12708] bridge_slave_0: entered promiscuous mode [ 146.124661][T12708] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.131808][T12708] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.140357][T12708] bridge_slave_1: entered allmulticast mode [ 146.147002][T12708] bridge_slave_1: entered promiscuous mode [ 146.180464][T12708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.191228][T12708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.212344][T12708] team0: Port device team_slave_0 added [ 146.226174][T12708] team0: Port device team_slave_1 added [ 146.250931][T12708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.257964][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.283920][T12708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.296936][T12708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.303944][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.330342][T12708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.367776][T12708] hsr_slave_0: entered promiscuous mode [ 146.375948][T12708] hsr_slave_1: entered promiscuous mode [ 146.381983][T12708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.389636][T12708] Cannot create hsr debugfs directory [ 146.509249][T12728] chnl_net:caif_netlink_parms(): no params data found [ 146.549427][T12728] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.556562][T12728] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.563810][T12728] bridge_slave_0: entered allmulticast mode [ 146.570578][T12728] bridge_slave_0: entered promiscuous mode [ 146.577351][T12728] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.584520][T12728] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.591920][T12728] bridge_slave_1: entered allmulticast mode [ 146.598388][T12728] bridge_slave_1: entered promiscuous mode [ 146.617245][T12728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.627775][T12728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.647125][T12728] team0: Port device team_slave_0 added [ 146.653770][T12728] team0: Port device team_slave_1 added [ 146.669321][T12728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.676411][T12728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.702568][T12728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.714820][T12728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.721840][T12728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.747843][T12728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.774299][T12728] hsr_slave_0: entered promiscuous mode [ 146.780552][T12728] hsr_slave_1: entered promiscuous mode [ 146.786539][T12728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.794101][T12728] Cannot create hsr debugfs directory [ 146.803655][ T7507] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.842518][T12708] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.853127][T12708] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.864196][T12708] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.875249][T12708] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.890593][ T7507] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.924136][T12708] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.931289][T12708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.938652][T12708] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.945774][T12708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.956222][ T7507] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.968144][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.976453][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.013552][T12708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.026792][T12708] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.036089][ T7507] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.049531][ T7520] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.056660][ T7520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.068418][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.075585][ T7509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.101866][T12708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.112299][T12708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.186039][ T7507] bridge_slave_1: left allmulticast mode [ 147.191801][ T7507] bridge_slave_1: left promiscuous mode [ 147.197535][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.215649][ T7507] bridge_slave_0: left allmulticast mode [ 147.221401][ T7507] bridge_slave_0: left promiscuous mode [ 147.227251][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.338706][ T7507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.348809][ T7507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.358422][ T7507] bond0 (unregistering): Released all slaves [ 147.402907][T12728] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.447085][ T7507] hsr_slave_0: left promiscuous mode [ 147.452970][ T7507] hsr_slave_1: left promiscuous mode [ 147.467356][ T7507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.474804][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.485840][ T7507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.493277][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.518922][ T7507] veth1_macvtap: left promiscuous mode [ 147.524433][ T7507] veth0_macvtap: left promiscuous mode [ 147.530053][ T7507] veth1_vlan: left promiscuous mode [ 147.535361][ T7507] veth0_vlan: left promiscuous mode [ 147.638246][ T7507] team0 (unregistering): Port device team_slave_1 removed [ 147.651441][T12784] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3393'. [ 147.662275][ T7507] team0 (unregistering): Port device team_slave_0 removed [ 147.882305][T12759] chnl_net:caif_netlink_parms(): no params data found [ 147.942169][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.949297][T12759] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.956665][T12759] bridge_slave_0: entered allmulticast mode [ 147.963439][T12759] bridge_slave_0: entered promiscuous mode [ 147.971830][T12759] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.979006][T12759] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.986237][T12759] bridge_slave_1: entered allmulticast mode [ 147.992845][T12759] bridge_slave_1: entered promiscuous mode [ 148.048941][T12759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.066083][T12759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.098148][T12778] chnl_net:caif_netlink_parms(): no params data found [ 148.109174][T12759] team0: Port device team_slave_0 added [ 148.121111][T12759] team0: Port device team_slave_1 added [ 148.156251][T12759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.163282][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.189435][T12759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.203858][T12759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.210955][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.236877][T12759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.289188][T12759] hsr_slave_0: entered promiscuous mode [ 148.295423][T12759] hsr_slave_1: entered promiscuous mode [ 148.301873][T12759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.309672][T12759] Cannot create hsr debugfs directory [ 148.341360][T12778] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.342585][T12843] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3407'. [ 148.348513][T12778] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.367996][T12778] bridge_slave_0: entered allmulticast mode [ 148.374629][T12778] bridge_slave_0: entered promiscuous mode [ 148.383671][T12778] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.390788][T12778] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.398331][T12778] bridge_slave_1: entered allmulticast mode [ 148.404815][T12778] bridge_slave_1: entered promiscuous mode [ 148.416748][T12791] chnl_net:caif_netlink_parms(): no params data found [ 148.445532][T12778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.475053][T12778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.523021][T12778] team0: Port device team_slave_0 added [ 148.544088][T12778] team0: Port device team_slave_1 added [ 148.589410][T12778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.596426][T12778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.622497][T12778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.637427][T12791] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.644548][T12791] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.652725][T12791] bridge_slave_0: entered allmulticast mode [ 148.659331][T12791] bridge_slave_0: entered promiscuous mode [ 148.666143][T12778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.673148][T12778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.699390][T12778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.714451][T12791] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.721593][T12791] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.729154][T12791] bridge_slave_1: entered allmulticast mode [ 148.735798][T12791] bridge_slave_1: entered promiscuous mode [ 148.769199][T12867] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3417'. [ 148.779705][T12791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.799541][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 148.799559][ T29] audit: type=1400 audit(1867147921.300:5921): avc: denied { create } for pid=12868 comm="syz.5.3418" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 148.801516][T12778] hsr_slave_0: entered promiscuous mode [ 148.827244][ T29] audit: type=1400 audit(1867147921.320:5922): avc: denied { map } for pid=12868 comm="syz.5.3418" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 148.857338][ T29] audit: type=1400 audit(1867147921.320:5923): avc: denied { read write } for pid=12868 comm="syz.5.3418" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 148.884187][T12778] hsr_slave_1: entered promiscuous mode [ 148.891122][T12778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.899045][T12778] Cannot create hsr debugfs directory [ 148.905808][T12791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.921775][ T7507] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.948793][T12791] team0: Port device team_slave_0 added [ 148.960326][T12791] team0: Port device team_slave_1 added [ 148.993300][ T29] audit: type=1400 audit(1867147921.490:5924): avc: denied { create } for pid=12872 comm="syz.5.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 149.016045][T12791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.023013][T12791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.035572][ T29] audit: type=1400 audit(1867147921.510:5925): avc: denied { write } for pid=12872 comm="syz.5.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 149.049133][T12791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.069539][ T29] audit: type=1400 audit(1867147921.510:5926): avc: denied { nlmsg_read } for pid=12872 comm="syz.5.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 149.119058][T12791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.126088][T12791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.152185][T12791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.167882][ T7507] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.225959][T12791] hsr_slave_0: entered promiscuous mode [ 149.232277][T12791] hsr_slave_1: entered promiscuous mode [ 149.238504][T12791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.246331][T12791] Cannot create hsr debugfs directory [ 149.254216][T12759] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 149.265040][ T7507] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.279545][T12759] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 149.297686][T12759] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 149.310322][T12759] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 149.321788][ T7507] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.415473][ T7507] bridge_slave_1: left allmulticast mode [ 149.421287][ T7507] bridge_slave_1: left promiscuous mode [ 149.427039][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.434816][ T7507] bridge_slave_0: left allmulticast mode [ 149.440547][ T7507] bridge_slave_0: left promiscuous mode [ 149.446288][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.454195][ T7507] bridge_slave_1: left allmulticast mode [ 149.459871][ T7507] bridge_slave_1: left promiscuous mode [ 149.465492][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.473356][ T7507] bridge_slave_0: left allmulticast mode [ 149.479092][ T7507] bridge_slave_0: left promiscuous mode [ 149.484824][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.617545][ T7507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.627664][ T7507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.637245][ T7507] bond0 (unregistering): Released all slaves [ 149.646203][ T7507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.656299][ T7507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.666236][ T7507] bond0 (unregistering): Released all slaves [ 149.712321][T12877] chnl_net:caif_netlink_parms(): no params data found [ 149.729230][ T7507] hsr_slave_0: left promiscuous mode [ 149.734933][ T7507] hsr_slave_1: left promiscuous mode [ 149.741042][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.749362][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.758738][ T7507] hsr_slave_0: left promiscuous mode [ 149.764509][ T7507] hsr_slave_1: left promiscuous mode [ 149.772424][ T7507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.779916][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.788743][ T7507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.796426][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.809094][ T7507] veth1_macvtap: left promiscuous mode [ 149.814593][ T7507] veth0_macvtap: left promiscuous mode [ 149.820457][ T7507] veth1_vlan: left promiscuous mode [ 149.822898][ T29] audit: type=1326 audit(1867147922.330:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.5.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 149.825945][ T7507] veth0_vlan: left promiscuous mode [ 149.849237][ T29] audit: type=1326 audit(1867147922.330:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.5.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 149.852335][ T29] audit: type=1326 audit(1867147922.360:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.5.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 149.903430][ T29] audit: type=1326 audit(1867147922.360:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.5.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 149.979947][ T7507] team0 (unregistering): Port device team_slave_1 removed [ 149.989949][ T7507] team0 (unregistering): Port device team_slave_0 removed [ 150.046172][ T7507] team0 (unregistering): Port device team_slave_1 removed [ 150.055681][ T7507] team0 (unregistering): Port device team_slave_0 removed [ 150.103616][T12759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.144240][T12877] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.151494][T12877] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.158731][T12877] bridge_slave_0: entered allmulticast mode [ 150.165110][T12877] bridge_slave_0: entered promiscuous mode [ 150.175766][T12759] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.182801][T12877] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.190040][T12877] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.197264][T12877] bridge_slave_1: entered allmulticast mode [ 150.203698][T12877] bridge_slave_1: entered promiscuous mode [ 150.222690][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.229852][ T7509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.238675][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.245748][ T7509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.272804][T12877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.295292][T12877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.306556][T12778] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 150.317749][T12778] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 150.339338][T12759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.353176][T12778] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 150.367881][T12877] team0: Port device team_slave_0 added [ 150.373905][T12778] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 150.385744][T12877] team0: Port device team_slave_1 added [ 150.417564][T12877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.424543][T12877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.450583][T12877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.472061][T12877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.479147][T12877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.505380][T12877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.552019][T12877] hsr_slave_0: entered promiscuous mode [ 150.558399][T12877] hsr_slave_1: entered promiscuous mode [ 150.584829][T12759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.631128][T12778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.696637][T12791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.710388][T12791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.736613][T12791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.745767][T12791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.756181][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3435'. [ 150.768524][T12778] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.801204][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.808361][ T7499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.834016][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.841224][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.862153][T12778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.923116][T12791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.932264][T12759] veth0_vlan: entered promiscuous mode [ 150.942750][T12759] veth1_vlan: entered promiscuous mode [ 150.953074][T12791] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.962792][ T7507] bridge_slave_1: left allmulticast mode [ 150.968579][ T7507] bridge_slave_1: left promiscuous mode [ 150.974387][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.983075][ T7507] bridge_slave_0: left allmulticast mode [ 150.988794][ T7507] bridge_slave_0: left promiscuous mode [ 150.994559][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.067695][ T7507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.077680][ T7507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.087526][ T7507] bond0 (unregistering): Released all slaves [ 151.108810][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.116102][ T7499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.125643][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.132777][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.150172][ T7507] hsr_slave_0: left promiscuous mode [ 151.155975][ T7507] hsr_slave_1: left promiscuous mode [ 151.161763][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.169548][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.214765][ T7507] team0 (unregistering): Port device team_slave_1 removed [ 151.232336][ T7507] team0 (unregistering): Port device team_slave_0 removed [ 151.254501][ T3395] hid-generic 0000:0000:0000.0007: unknown main item tag 0x7 [ 151.262164][ T3395] hid-generic 0000:0000:0000.0007: ignoring exceeding usage max [ 151.273560][ T3395] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 151.281522][ T3395] hid-generic 0000:0000:0000.0007: unknown main item tag 0x6 [ 151.289091][ T3395] hid-generic 0000:0000:0000.0007: unknown main item tag 0xd [ 151.299475][ T3395] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 151.328025][T12778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.343944][T12759] veth0_macvtap: entered promiscuous mode [ 151.352122][T12759] veth1_macvtap: entered promiscuous mode [ 151.387355][T12759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.398901][T12877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.424195][T12877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 151.441853][T12759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.455813][T12877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.469555][T12877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.487700][T12791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.506799][T12759] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.515638][T12759] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.524351][T12759] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.533380][T12759] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.651018][T12877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.689466][T12877] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.708812][T12990] wireguard0: entered promiscuous mode [ 151.714341][T12990] wireguard0: entered allmulticast mode [ 151.725473][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.732671][ T7507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.742078][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.749207][ T7507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.781737][T12778] veth0_vlan: entered promiscuous mode [ 151.800859][T12877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.811339][T12877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.832649][T12778] veth1_vlan: entered promiscuous mode [ 151.868633][T12778] veth0_macvtap: entered promiscuous mode [ 151.893105][T12791] veth0_vlan: entered promiscuous mode [ 151.906351][T12778] veth1_macvtap: entered promiscuous mode [ 151.922763][T12791] veth1_vlan: entered promiscuous mode [ 151.947557][T12778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.958110][T12778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.963465][T13002] loop6: detected capacity change from 0 to 8192 [ 151.970195][T12778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.992356][T12791] veth0_macvtap: entered promiscuous mode [ 152.006590][T12791] veth1_macvtap: entered promiscuous mode [ 152.020573][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.031129][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.041200][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.051815][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.072731][T12791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.083621][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.094257][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.104998][T12791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.113539][T12778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.124173][T12778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.134048][T12778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.144513][T12778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.155858][T12778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.164246][T12778] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.173083][T12778] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.182071][T12778] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.190819][T12778] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.231352][T12791] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.240239][T12791] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.249177][T12791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.258131][T12791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.280713][T12877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.304094][T13021] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3384'. [ 152.442095][T12877] veth0_vlan: entered promiscuous mode [ 152.471311][T12877] veth1_vlan: entered promiscuous mode [ 152.504120][T12877] veth0_macvtap: entered promiscuous mode [ 152.517621][T12877] veth1_macvtap: entered promiscuous mode [ 152.545372][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.556015][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.566061][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.576607][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.586444][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.596903][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.608919][T12877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.620253][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.630889][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.640766][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.651333][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.661445][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.672012][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.682679][T12877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.691288][T12877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.700101][T12877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.708847][T12877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.717732][T12877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.841778][T13062] Â: renamed from veth1_macvtap (while UP) [ 152.962975][T13080] syz.2.3472[13080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.963077][T13080] syz.2.3472[13080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.975325][T13080] syz.2.3472[13080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.155912][T13090] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 153.229144][T13094] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 153.364288][T13103] syz.8.3482[13103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.364417][T13103] syz.8.3482[13103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.378581][T13103] syz.8.3482[13103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.391790][T13103] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 153.428840][T13105] syz.8.3483[13105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.428952][T13105] syz.8.3483[13105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.440737][T13105] syz.8.3483[13105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.597821][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3487'. [ 153.704050][T13126] bridge0: port 3(vlan2) entered blocking state [ 153.710486][T13126] bridge0: port 3(vlan2) entered disabled state [ 153.717209][T13126] vlan2: entered allmulticast mode [ 153.722800][T13126] vlan2: left allmulticast mode [ 153.853782][T13139] program syz.8.3497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.860349][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 153.860367][ T29] audit: type=1400 audit(1867147926.350:6019): avc: denied { write } for pid=13135 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.931085][ T29] audit: type=1400 audit(1867147926.430:6020): avc: denied { write } for pid=13147 comm="syz.5.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 153.953918][T13148] netlink: 'syz.5.3501': attribute type 10 has an invalid length. [ 153.962119][T13148] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3501'. [ 153.973142][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3504'. [ 154.015845][T13156] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 154.025510][ T29] audit: type=1400 audit(1867147926.520:6021): avc: denied { create } for pid=13157 comm="syz.6.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.073901][T13160] ipip1: entered promiscuous mode [ 154.134855][ T29] audit: type=1400 audit(1867147926.530:6022): avc: denied { bind } for pid=13157 comm="syz.6.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.154248][ T29] audit: type=1400 audit(1867147926.590:6023): avc: denied { setopt } for pid=13161 comm="syz.6.3508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.174332][ T29] audit: type=1400 audit(1867147926.590:6024): avc: denied { write } for pid=13161 comm="syz.6.3508" path="socket:[41100]" dev="sockfs" ino=41100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.215186][T13166] loop4: detected capacity change from 0 to 256 [ 154.222057][T13166] vfat: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿÿ18446744073709551615' [ 154.308546][T13172] loop4: detected capacity change from 0 to 1024 [ 154.343355][ T29] audit: type=1400 audit(1867147926.840:6025): avc: denied { bind } for pid=13179 comm="syz.6.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.370665][T13172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.389272][ T29] audit: type=1326 audit(1867147926.860:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.5.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 154.412940][ T29] audit: type=1326 audit(1867147926.860:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.5.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 154.436484][ T29] audit: type=1326 audit(1867147926.870:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.5.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 154.651661][T12791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.864173][T13222] sd 0:0:1:0: device reset [ 155.012502][T13243] bridge_slave_0: left allmulticast mode [ 155.018252][T13243] bridge_slave_0: left promiscuous mode [ 155.024055][T13243] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.033379][T13243] bridge_slave_1: left allmulticast mode [ 155.039232][T13243] bridge_slave_1: left promiscuous mode [ 155.045094][T13243] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.057090][T13243] bond0: (slave bond_slave_0): Releasing backup interface [ 155.073538][T13243] bond0: (slave bond_slave_1): Releasing backup interface [ 155.086529][T13243] team0: Port device team_slave_0 removed [ 155.095605][T13243] team0: Port device team_slave_1 removed [ 155.102672][T13243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.110228][T13243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.120046][T13243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.121321][T13264] loop6: detected capacity change from 0 to 1024 [ 155.127992][T13243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.134184][T13264] EXT4-fs: Ignoring removed orlov option [ 155.147555][T13264] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.159709][T13264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.166675][T13256] team0: Mode changed to "loadbalance" [ 155.223205][T13268] ip6tnl1: entered promiscuous mode [ 155.233072][T13268] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 155.277970][T12759] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.321310][T13276] loop4: detected capacity change from 0 to 512 [ 155.328358][T13276] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.342442][T13285] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.350697][T13276] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b856c118, mo2=0002] [ 155.359719][T13276] System zones: 1-12 [ 155.364053][T13276] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3558: corrupted in-inode xattr: e_value size too large [ 155.379297][T13276] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3558: couldn't read orphan inode 15 (err -117) [ 155.392694][T13276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.437388][T12791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.544578][T13304] bridge0: entered promiscuous mode [ 155.555803][T13304] macvlan2: entered promiscuous mode [ 155.568230][T13304] bridge0: port 3(macvlan2) entered blocking state [ 155.574843][T13304] bridge0: port 3(macvlan2) entered disabled state [ 155.588857][T13304] macvlan2: entered allmulticast mode [ 155.594311][T13304] bridge0: entered allmulticast mode [ 155.601066][T13304] macvlan2: left allmulticast mode [ 155.606361][T13304] bridge0: left allmulticast mode [ 155.614915][T13304] bridge0: left promiscuous mode [ 155.727953][T13316] loop4: detected capacity change from 0 to 512 [ 155.754152][T13316] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 155.766004][T13316] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 155.776348][T13316] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3574: Corrupt directory, running e2fsck is recommended [ 155.796015][T13316] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 155.804606][T13316] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3574: corrupted in-inode xattr: invalid ea_ino [ 155.820408][T13316] EXT4-fs (loop4): Remounting filesystem read-only [ 155.836054][T13316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.855662][T13316] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 155.866546][T13316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.915736][T13316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.932708][T13316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.063782][T13342] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 156.258961][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3594'. [ 156.548661][T13370] loop4: detected capacity change from 0 to 128 [ 156.599508][T13370] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.637830][T13375] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 156.657281][T13370] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.739879][T12791] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.860272][T13390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13390 comm=syz.2.3606 [ 156.892096][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3606'. [ 156.925486][T13390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.964224][T13402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.986654][T13402] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 157.017346][T13402] bond1: (slave vti0): Error -95 calling set_mac_address [ 157.080190][T13416] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3615'. [ 157.146322][T13422] loop6: detected capacity change from 0 to 128 [ 157.156065][T13422] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.182274][T13422] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.370582][T12759] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.528106][T13458] loop6: detected capacity change from 0 to 1024 [ 157.550313][T13458] EXT4-fs: Ignoring removed oldalloc option [ 157.566074][T13458] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 157.567377][T13462] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3632'. [ 157.644369][T13458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.691470][T12759] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.758107][T13475] SELinux: Context system_u:object_r:xconsole_device_t:s0 is not valid (left unmapped). [ 157.837841][T13486] pim6reg1: entered promiscuous mode [ 157.843427][T13486] pim6reg1: entered allmulticast mode [ 157.852556][T13480] hub 6-0:1.0: USB hub found [ 157.857306][T13480] hub 6-0:1.0: 8 ports detected [ 157.911417][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'. [ 157.929311][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'. [ 158.210710][T13533] SELinux: Context system_u:object_r:lirc_device_t:s0 is not valid (left unmapped). [ 158.225042][T13534] block device autoloading is deprecated and will be removed. [ 158.354200][T13543] syzkaller0: entered promiscuous mode [ 158.359748][T13543] syzkaller0: entered allmulticast mode [ 158.392726][T13546] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 158.776548][T13573] macvlan2: entered promiscuous mode [ 158.782033][T13573] bridge0: entered promiscuous mode [ 158.806081][T13573] bridge0: port 3(macvlan2) entered blocking state [ 158.812677][T13573] bridge0: port 3(macvlan2) entered disabled state [ 158.829707][T13573] macvlan2: entered allmulticast mode [ 158.835202][T13573] bridge0: entered allmulticast mode [ 158.848288][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3682'. [ 158.857951][T13573] macvlan2: left allmulticast mode [ 158.863116][T13573] bridge0: left allmulticast mode [ 158.870930][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 158.870946][ T29] audit: type=1400 audit(1867147931.370:6271): avc: denied { map } for pid=13561 comm="syz.6.3678" path="socket:[41751]" dev="sockfs" ino=41751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.902753][T13573] bridge0: left promiscuous mode [ 158.908524][ T29] audit: type=1400 audit(1867147931.370:6272): avc: denied { read } for pid=13561 comm="syz.6.3678" path="socket:[41751]" dev="sockfs" ino=41751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.998184][ T29] audit: type=1326 audit(1867147931.480:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be1ca0849 code=0x7ffc0000 [ 159.021832][ T29] audit: type=1326 audit(1867147931.480:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be1ca0849 code=0x7ffc0000 [ 159.045396][ T29] audit: type=1326 audit(1867147931.490:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0be1ca0849 code=0x7ffc0000 [ 159.069052][ T29] audit: type=1326 audit(1867147931.490:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be1ca0849 code=0x7ffc0000 [ 159.092716][ T29] audit: type=1326 audit(1867147931.490:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f0be1ca0849 code=0x7ffc0000 [ 159.116376][ T29] audit: type=1326 audit(1867147931.550:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be1ca0849 code=0x7ffc0000 [ 159.140058][ T29] audit: type=1326 audit(1867147931.550:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be1ca0849 code=0x7ffc0000 [ 159.259898][T13593] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3689'. [ 159.265624][ T29] audit: type=1400 audit(1867147931.760:6280): avc: denied { write } for pid=13590 comm="syz.5.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.250582][T13639] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 160.535964][T13657] netlink: 'syz.2.3717': attribute type 4 has an invalid length. [ 160.802915][T13682] pim6reg1: entered allmulticast mode [ 161.107567][T13701] loop6: detected capacity change from 0 to 2048 [ 161.132448][T13701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.242023][T12759] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.287160][T13710] loop4: detected capacity change from 0 to 164 [ 161.400281][T13728] loop6: detected capacity change from 0 to 128 [ 161.415255][T13726] syz.2.3750: attempt to access beyond end of device [ 161.415255][T13726] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 161.416342][T13730] loop5: detected capacity change from 0 to 128 [ 161.432044][T13728] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.466237][T13730] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.480459][T13728] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.487050][T13730] ext4 filesystem being mounted at /804/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.554681][T13728] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3751'. [ 161.564840][T13735] bridge0: port 3(bond0) entered blocking state [ 161.571425][T13735] bridge0: port 3(bond0) entered disabled state [ 161.587847][T13735] bond0: entered allmulticast mode [ 161.593039][T13735] bond_slave_0: entered allmulticast mode [ 161.598972][T13735] bond_slave_1: entered allmulticast mode [ 161.607330][T13735] bond0: entered promiscuous mode [ 161.612463][T13735] bond_slave_0: entered promiscuous mode [ 161.619024][T13735] bond_slave_1: entered promiscuous mode [ 161.626449][T13735] bridge0: port 3(bond0) entered blocking state [ 161.632823][T13735] bridge0: port 3(bond0) entered forwarding state [ 161.650882][T13742] bond0: left allmulticast mode [ 161.655915][T13742] bond_slave_0: left allmulticast mode [ 161.661490][T13742] bond_slave_1: left allmulticast mode [ 161.667031][T13742] bond0: left promiscuous mode [ 161.671813][T13742] bond_slave_0: left promiscuous mode [ 161.677303][T13742] bond_slave_1: left promiscuous mode [ 161.682917][T13742] bridge0: port 3(bond0) entered disabled state [ 161.699907][T13750] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3760'. [ 161.751675][ T3654] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.797257][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3763'. [ 161.897610][T13771] loop5: detected capacity change from 0 to 512 [ 161.920190][T13771] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 161.939700][T13771] EXT4-fs (loop5): 1 truncate cleaned up [ 161.946160][T13771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.002874][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.306308][T13814] loop8: detected capacity change from 0 to 1024 [ 162.318565][T13815] loop5: detected capacity change from 0 to 256 [ 162.333627][T13815] FAT-fs (loop5): Directory bread(block 64) failed [ 162.341585][T13815] FAT-fs (loop5): Directory bread(block 65) failed [ 162.347495][T13814] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.364505][T13815] FAT-fs (loop5): Directory bread(block 66) failed [ 162.371299][T13815] FAT-fs (loop5): Directory bread(block 67) failed [ 162.381661][T13821] bridge_slave_0: left allmulticast mode [ 162.387394][T13821] bridge_slave_0: left promiscuous mode [ 162.393157][T13821] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.403175][T13821] bridge_slave_1: left allmulticast mode [ 162.408913][T13821] bridge_slave_1: left promiscuous mode [ 162.414610][T13821] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.422355][T13815] FAT-fs (loop5): Directory bread(block 68) failed [ 162.434250][T13815] FAT-fs (loop5): Directory bread(block 69) failed [ 162.441298][T13815] FAT-fs (loop5): Directory bread(block 70) failed [ 162.441454][T13821] bond0: (slave bond_slave_0): Releasing backup interface [ 162.448151][T13815] FAT-fs (loop5): Directory bread(block 71) failed [ 162.459825][T12778] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.461973][T13815] FAT-fs (loop5): Directory bread(block 72) failed [ 162.477529][T13815] FAT-fs (loop5): Directory bread(block 73) failed [ 162.515797][T13815] syz.5.3790: attempt to access beyond end of device [ 162.515797][T13815] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 162.516842][T13821] bond0: (slave bond_slave_1): Releasing backup interface [ 162.571338][T13821] team0: Port device team_slave_0 removed [ 162.594644][T13821] team0: Port device team_slave_1 removed [ 162.613664][T13821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.621242][T13821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.649445][T13821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.657132][T13821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.734576][T13834] atomic_op ffff88812601e528 conn xmit_atomic 0000000000000000 [ 162.776879][T13822] team0: Mode changed to "loadbalance" [ 162.816794][ T8] page_pool_release_retry() stalled pool shutdown: id 70, 1 inflight 60 sec [ 162.875405][T13840] netlink: 'syz.8.3801': attribute type 1 has an invalid length. [ 162.892343][T13842] loop6: detected capacity change from 0 to 7 [ 162.898894][T13842] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.907025][T13842] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.914961][T13842] loop6: unable to read partition table [ 162.918674][T13840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.923916][T13842] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 162.923916][T13842] ) failed (rc=-5) [ 162.950398][T13849] SELinux: syz.4.3804 (13849) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 162.990659][T13853] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 162.998927][T13840] bond1: (slave gretap1): making interface the new active one [ 163.009775][T13840] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 163.261079][T13896] rdma_op ffff88811650b580 conn xmit_rdma 0000000000000000 [ 163.309571][T13894] loop8: detected capacity change from 0 to 8192 [ 163.357081][T13894] loop8: p1 p3 p4 [ 163.360931][T13894] loop8: p1 start 51379968 is beyond EOD, truncated [ 163.367664][T13894] loop8: p3 start 8192000 is beyond EOD, truncated [ 163.374254][T13894] loop8: p4 size 81920 extends beyond EOD, truncated [ 163.420023][T13911] loop8: detected capacity change from 0 to 128 [ 163.429477][T13911] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.441958][T13911] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.459976][T13914] loop6: detected capacity change from 0 to 736 [ 163.478814][T13914] Symlink component flag not implemented [ 163.484597][T13914] Symlink component flag not implemented (122) [ 163.527625][T12778] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.598714][T13930] loop6: detected capacity change from 0 to 512 [ 163.616558][T13930] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 163.624789][T13930] EXT4-fs (loop6): orphan cleanup on readonly fs [ 163.632073][T13930] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 163.646952][T13930] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 163.654271][T13930] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3842: bg 0: block 40: padding at end of block bitmap is not set [ 163.669938][T13930] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 163.679206][T13930] EXT4-fs (loop6): 1 truncate cleaned up [ 163.685349][T13930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.699945][T13930] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #16: comm syz.6.3842: corrupted xattr block 31: invalid header [ 163.713703][T13930] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 163.724517][T13930] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #16: comm syz.6.3842: corrupted xattr block 31: invalid header [ 163.740651][T13930] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 163.757163][T13930] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.3842: bad symlink. [ 163.774766][T13944] loop8: detected capacity change from 0 to 128 [ 163.790244][T12759] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.866547][T13955] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.884975][T13956] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3851'. [ 163.894650][T13949] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3851'. [ 163.908751][T13955] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.970673][T13955] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.988160][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 163.988179][ T29] audit: type=1326 audit(1867147936.490:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 164.022746][T13967] loop5: detected capacity change from 0 to 512 [ 164.031212][ T29] audit: type=1326 audit(1867147936.490:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 164.054850][ T29] audit: type=1326 audit(1867147936.530:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 164.078431][ T29] audit: type=1326 audit(1867147936.530:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 164.103534][ T29] audit: type=1326 audit(1867147936.530:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 164.127927][ T29] audit: type=1326 audit(1867147936.530:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 164.151468][ T29] audit: type=1326 audit(1867147936.530:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 164.175073][ T29] audit: type=1326 audit(1867147936.530:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 164.198664][ T29] audit: type=1326 audit(1867147936.600:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 164.222191][ T29] audit: type=1326 audit(1867147936.620:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 164.224375][T13967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.261044][T13955] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.274163][T13967] ext4 filesystem being mounted at /817/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.307800][T13967] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3858: bg 0: block 178: padding at end of block bitmap is not set [ 164.341979][T13955] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.351449][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.368645][T13955] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.383469][T13955] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.407752][T13955] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.517762][T13985] x_tables: duplicate underflow at hook 1 [ 164.528275][T13990] loop5: detected capacity change from 0 to 512 [ 164.547448][T13990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.564167][T13990] ext4 filesystem being mounted at /819/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.652231][T14009] syz.4.3877[14009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.652329][T14009] syz.4.3877[14009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.653567][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.664057][T14009] syz.4.3877[14009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.703902][T14010] serio: Serial port ptm0 [ 164.767829][T14021] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 164.775280][T14021] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 164.840375][T14029] loop5: detected capacity change from 0 to 1024 [ 164.868878][T14029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.903297][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.014744][T14051] loop8: detected capacity change from 0 to 2048 [ 165.060136][T14051] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.137570][T12778] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.185229][T14074] loop8: detected capacity change from 0 to 512 [ 165.218884][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3905'. [ 165.227948][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3905'. [ 165.238161][T14074] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.3901: corrupted in-inode xattr: invalid ea_ino [ 165.252489][T14074] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.3901: couldn't read orphan inode 15 (err -117) [ 165.266753][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3906'. [ 165.276968][T14074] EXT4-fs (loop8): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.346821][T14089] loop6: detected capacity change from 0 to 128 [ 165.365444][T14089] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 165.385631][T14091] bond1: entered promiscuous mode [ 165.390767][T14091] bond1: entered allmulticast mode [ 165.396268][T14091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.420693][T12778] EXT4-fs (loop8): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 165.431821][T14091] bond1 (unregistering): Released all slaves [ 165.444592][T14089] syz.6.3910: attempt to access beyond end of device [ 165.444592][T14089] loop6: rw=0, sector=216, nr_sectors = 1 limit=128 [ 165.549505][ T7499] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 165.592492][T14107] bridge_slave_0: left allmulticast mode [ 165.598387][T14107] bridge_slave_0: left promiscuous mode [ 165.604227][T14107] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.622974][T14107] bridge_slave_1: left allmulticast mode [ 165.628852][T14107] bridge_slave_1: left promiscuous mode [ 165.634737][T14107] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.654661][T14107] bond0: (slave bond_slave_0): Releasing backup interface [ 165.681420][T14107] bond0: (slave bond_slave_1): Releasing backup interface [ 165.727452][T14107] team0: Port device team_slave_0 removed [ 165.737611][T14107] team0: Port device team_slave_1 removed [ 165.744480][T14107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.752037][T14107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.781625][T14107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.789164][T14107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.813170][T14111] team0: Mode changed to "loadbalance" [ 165.959180][T14135] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 165.972265][T14137] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 166.011408][T14142] loop8: detected capacity change from 0 to 2048 [ 166.076506][T14142] loop8: p1 < > p4 [ 166.081022][T14142] loop8: p4 size 8388608 extends beyond EOD, truncated [ 166.142209][T14163] syz.5.3943[14163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.142358][T14163] syz.5.3943[14163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.154450][T14163] syz.5.3943[14163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.162123][T14162] loop8: detected capacity change from 0 to 736 [ 166.189160][T14165] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3944'. [ 166.199249][T14165] netlink: 'syz.2.3944': attribute type 10 has an invalid length. [ 166.205422][T14162] Symlink component flag not implemented [ 166.212858][T14162] Symlink component flag not implemented (122) [ 166.217502][T14165] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.279008][T14173] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3948'. [ 166.290269][T14175] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 166.290269][T14175] program syz.8.3949 not setting count and/or reply_len properly [ 166.399391][T14163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.408502][T14163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.471020][T14192] loop8: detected capacity change from 0 to 8192 [ 166.478974][T14192] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.942710][T14195] loop5: detected capacity change from 0 to 736 [ 166.967545][T14195] Symlink component flag not implemented [ 166.976842][T14195] Symlink component flag not implemented (122) [ 167.261435][T14225] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 167.315646][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3976'. [ 167.468750][T14244] loop8: detected capacity change from 0 to 512 [ 167.498079][T14244] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.518071][T14244] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.551799][T12778] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.678687][T14269] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3992'. [ 167.688818][T14267] loop5: detected capacity change from 0 to 512 [ 167.695336][T14267] EXT4-fs: Ignoring removed nobh option [ 167.701004][T14267] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.731674][T14267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.755023][T14280] sd 0:0:1:0: device reset [ 167.866985][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.349361][T14332] loop5: detected capacity change from 0 to 1024 [ 168.382713][T14332] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.4023: Failed to acquire dquot type 0 [ 168.396041][T14332] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 168.413005][T14332] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.4023: corrupted inode contents [ 168.425409][T14332] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #13: comm syz.5.4023: mark_inode_dirty error [ 168.438068][T14332] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.4023: corrupted inode contents [ 168.450627][T14332] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.4023: mark_inode_dirty error [ 168.465041][T14332] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.4023: corrupted inode contents [ 168.478226][T14332] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 168.487436][T14332] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.4023: corrupted inode contents [ 168.491947][T14341] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4025'. [ 168.500687][T14332] EXT4-fs error (device loop5): ext4_truncate:4240: inode #13: comm syz.5.4023: mark_inode_dirty error [ 168.512767][T14341] netlink: 'syz.4.4025': attribute type 10 has an invalid length. [ 168.520437][T14332] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 168.539265][T14332] EXT4-fs (loop5): 1 truncate cleaned up [ 168.540806][T14341] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 168.556143][T14332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.625765][ C0] ------------[ cut here ]------------ [ 168.631277][ C0] refcount_t: underflow; use-after-free. [ 168.637200][ C0] WARNING: CPU: 0 PID: 15 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 168.646657][ C0] Modules linked in: [ 168.650588][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 168.660916][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.671005][ C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 168.677192][ C0] Code: 72 ff ff ff e8 9b 30 70 ff 48 c7 c7 8b e6 b2 86 e8 1f 7e 89 ff c6 05 a3 8c f2 04 01 90 48 c7 c7 d3 5c 1c 86 e8 2b c1 51 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 6c 30 70 ff 48 c7 c7 88 e6 b2 86 e8 [ 168.696833][ C0] RSP: 0018:ffffc900000879f8 EFLAGS: 00010246 [ 168.702936][ C0] RAX: b99678b5656ea900 RBX: ffff8881377976e4 RCX: ffff8881001d0000 [ 168.710941][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.718945][ C0] RBP: 0000000000000003 R08: ffffffff81121c87 R09: 0000000000000000 [ 168.726941][ C0] R10: 0001ffffffffffff R11: ffff8881001d0000 R12: ffff888117d4d868 [ 168.734942][ C0] R13: ffff888116ba0000 R14: ffff8881377976e4 R15: 0000000000000000 [ 168.742935][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 168.752003][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.758635][ C0] CR2: 0000000020003e40 CR3: 0000000114838000 CR4: 00000000003506f0 [ 168.766635][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 168.774629][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 168.782631][ C0] Call Trace: [ 168.785957][ C0] [ 168.788905][ C0] ? __warn+0x141/0x350 [ 168.793085][ C0] ? report_bug+0x315/0x420 [ 168.797618][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 168.803630][ C0] ? handle_bug+0x60/0x90 [ 168.807992][ C0] ? exc_invalid_op+0x1a/0x50 [ 168.812711][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 168.817776][ C0] ? __warn_printk+0x167/0x1b0 [ 168.822570][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 168.828153][ C0] ? refcount_warn_saturate+0x1c5/0x230 [ 168.833761][ C0] sk_skb_reason_drop+0xe9/0x290 [ 168.838767][ C0] j1939_session_put+0x157/0x2a0 [ 168.843733][ C0] j1939_xtp_rx_eoma+0x1f0/0x260 [ 168.848734][ C0] j1939_tp_recv+0x651/0xa80 [ 168.853349][ C0] j1939_can_recv+0x45f/0x550 [ 168.858089][ C0] ? ttwu_do_activate+0x206/0x240 [ 168.863198][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 168.868616][ C0] can_rcv_filter+0x225/0x4c0 [ 168.873342][ C0] can_receive+0x182/0x1f0 [ 168.877798][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 168.882332][ C0] can_rcv+0xe7/0x180 [ 168.886371][ C0] ? __pfx_can_rcv+0x10/0x10 [ 168.890991][ C0] __netif_receive_skb+0x123/0x280 [ 168.896151][ C0] process_backlog+0x22e/0x440 [ 168.901041][ C0] __napi_poll+0x63/0x3c0 [ 168.905413][ C0] ? net_rx_action+0x376/0x7f0 [ 168.910212][ C0] net_rx_action+0x3a1/0x7f0 [ 168.914871][ C0] handle_softirqs+0xbf/0x280 [ 168.919593][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 168.924723][ C0] run_ksoftirqd+0x1c/0x30 [ 168.929183][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 168.934130][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 168.939609][ C0] kthread+0x1d1/0x210 [ 168.943696][ C0] ? __pfx_kthread+0x10/0x10 [ 168.948327][ C0] ret_from_fork+0x4b/0x60 [ 168.952784][ C0] ? __pfx_kthread+0x10/0x10 [ 168.957429][ C0] ret_from_fork_asm+0x1a/0x30 [ 168.962235][ C0] [ 168.965285][ C0] ---[ end trace 0000000000000000 ]--- [ 168.976811][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.042261][T14366] netlink: 'syz.5.4037': attribute type 1 has an invalid length. [ 169.059573][T14366] bond1: entered promiscuous mode [ 169.076729][T14366] bond1: (slave team_slave_1): Enslaving as an active interface with a down link [ 169.098000][T14374] loop4: detected capacity change from 0 to 764 [ 169.108410][T14374] rock: directory entry would overflow storage [ 169.108418][T14374] rock: sig=0x4654, size=5, remaining=4 [ 169.133855][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4041'. [ 169.224035][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 169.224054][ T29] audit: type=1326 audit(1867147941.720:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 169.253936][ T29] audit: type=1326 audit(1867147941.720:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 169.277502][ T29] audit: type=1326 audit(1867147941.720:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 169.279171][T14391] atomic_op ffff888138f01928 conn xmit_atomic 0000000000000000 [ 169.301680][ T29] audit: type=1326 audit(1867147941.720:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 169.301737][ T29] audit: type=1326 audit(1867147941.720:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 169.301770][ T29] audit: type=1326 audit(1867147941.720:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 169.309854][T14393] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4049'. [ 169.333200][ T29] audit: type=1326 audit(1867147941.720:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 169.412988][ T29] audit: type=1326 audit(1867147941.790:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 169.435285][T14395] loop5: detected capacity change from 0 to 512 [ 169.436484][ T29] audit: type=1326 audit(1867147941.870:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 169.445100][T14395] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 169.466318][ T29] audit: type=1326 audit(1867147941.870:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541c00849 code=0x7ffc0000 [ 169.503440][T14395] EXT4-fs (loop5): 1 truncate cleaned up [ 169.510779][T14395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.591553][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.640021][T14412] loop8: detected capacity change from 0 to 2048 [ 169.659186][T14412] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.704045][T14412] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 169.720825][T14412] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 169.733334][T14412] EXT4-fs (loop8): This should not happen!! Data will be lost [ 169.733334][T14412] [ 169.743057][T14412] EXT4-fs (loop8): Total free blocks count 0 [ 169.749254][T14412] EXT4-fs (loop8): Free/Dirty block details [ 169.755330][T14412] EXT4-fs (loop8): free_blocks=2415919104 [ 169.761095][T14412] EXT4-fs (loop8): dirty_blocks=16 [ 169.766260][T14412] EXT4-fs (loop8): Block reservation details [ 169.772300][T14412] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 169.793383][T12778] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.816137][T14432] loop5: detected capacity change from 0 to 1024 [ 169.870582][T14432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.893315][T14440] loop8: detected capacity change from 0 to 512 [ 169.904893][T14440] EXT4-fs: Ignoring removed nobh option [ 169.910557][T14440] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.928532][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.939256][T14440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.063209][T12778] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.131040][T14482] rdma_op ffff888137fae180 conn xmit_rdma 0000000000000000 [ 170.207082][T14489] loop4: detected capacity change from 0 to 512 [ 170.216538][T14489] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.223179][T14495] hub 5-0:1.0: USB hub found [ 170.228545][T14495] hub 5-0:1.0: 8 ports detected [ 170.237936][T14489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.242006][T14497] syz.5.4095[14497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.250342][T14497] syz.5.4095[14497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.262089][T14497] syz.5.4095[14497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.293573][T14500] loop6: detected capacity change from 0 to 512 [ 170.311822][T14500] EXT4-fs: Ignoring removed nobh option [ 170.312891][T12791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.317523][T14500] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.348002][T14500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.362113][T14507] netlink: 'syz.8.4099': attribute type 1 has an invalid length. [ 170.378935][T14507] bond2: entered promiscuous mode [ 170.404215][T14507] team0: Port device team_slave_1 removed [ 170.414145][T14507] bond2: (slave team_slave_1): making interface the new active one [ 170.422170][T14507] team_slave_1: entered promiscuous mode [ 170.428583][T14507] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 170.438738][T14512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4100'. [ 170.475915][T12759] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.503590][T14518] loop4: detected capacity change from 0 to 512 [ 170.511885][T14518] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.556860][T14518] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.4104: bad orphan inode 131083 [ 170.576870][T14518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.626604][T12791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.711956][T14546] loop4: detected capacity change from 0 to 512 [ 170.721480][T14550] syz.5.4118[14550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.721782][T14550] syz.5.4118[14550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.722112][T14546] EXT4-fs: Ignoring removed nobh option [ 170.745486][T14550] syz.5.4118[14550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.750381][T14546] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.773680][T14546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.865639][T12791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.891754][T14567] vlan2: entered allmulticast mode [ 170.896967][T14567] bridge_slave_0: entered allmulticast mode [ 170.909990][T14567] bridge_slave_0: left allmulticast mode [ 170.926891][T14568] loop4: detected capacity change from 0 to 2048 [ 170.960161][T14574] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.990831][T14568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.015202][T14577] loop5: detected capacity change from 0 to 2048 [ 171.038399][T14574] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.062538][T14577] loop5: p1 < > p3 p4 < > [ 171.067893][T14577] loop5: p3 start 4284289 is beyond EOD, truncated [ 171.118221][T14574] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.178813][T14574] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.205869][T14589] loop8: detected capacity change from 0 to 1024 [ 171.233631][T14589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.278092][T14574] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.300748][T12778] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.318366][T14574] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.357999][T14583] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 171.376962][T14574] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.395649][T14583] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 171.408159][T14583] EXT4-fs (loop4): This should not happen!! Data will be lost [ 171.408159][T14583] [ 171.417092][T14574] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.417850][T14583] EXT4-fs (loop4): Total free blocks count 0 [ 171.432117][T14583] EXT4-fs (loop4): Free/Dirty block details [ 171.438044][T14583] EXT4-fs (loop4): free_blocks=2415919104 [ 171.443776][T14583] EXT4-fs (loop4): dirty_blocks=8192 [ 171.449102][T14583] EXT4-fs (loop4): Block reservation details [ 171.455089][T14583] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 171.589765][T14568] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 171.748947][T14628] loop6: detected capacity change from 0 to 256 [ 171.964067][T14642] bond1: entered promiscuous mode [ 171.969279][T14642] bond1: entered allmulticast mode [ 171.974806][T14642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.986544][T14642] bond1 (unregistering): Released all slaves [ 172.106182][T14651] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.240438][T14663] loop6: detected capacity change from 0 to 512 [ 172.244577][T14667] loop4: detected capacity change from 0 to 512 [ 172.262620][T14667] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.278414][T14663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.297202][T14667] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.301040][T14663] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.312239][T14667] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.4148: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 172.402227][T14667] EXT4-fs error (device loop4): ext4_quota_enable:7115: comm syz.4.4148: Bad quota inode: 3, type: 0 [ 172.459411][T14667] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 172.474158][T14667] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 172.498454][T14667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.512509][T12759] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.533945][T14667] syz.4.4148[14667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.534140][T14667] syz.4.4148[14667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.554768][T14667] syz.4.4148[14667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.608958][T14722] loop8: detected capacity change from 0 to 1024 [ 172.651559][T14722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.659021][T14732] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 172.678596][T14722] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 172.707854][T12791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.724238][T14734] netlink: 'syz.2.4160': attribute type 1 has an invalid length. [ 172.734891][T14722] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.772285][T14734] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.826321][T14734] bond2: (slave bridge2): making interface the new active one [ 172.835115][T14734] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 172.953970][T14756] loop4: detected capacity change from 0 to 8192 [ 173.098786][T12778] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.293003][T14782] loop4: detected capacity change from 0 to 512 [ 173.324775][T14790] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4180'. [ 173.328809][T14782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.348033][T14782] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.412366][T12791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.451565][T14774] chnl_net:caif_netlink_parms(): no params data found [ 173.453517][T14802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14802 comm=syz.4.4183 [ 173.486192][T14805] loop5: detected capacity change from 0 to 512 [ 173.494391][T14805] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.514511][T14774] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.516453][T14805] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 173.521614][T14774] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.543345][T14774] bridge_slave_0: entered allmulticast mode [ 173.550246][T14774] bridge_slave_0: entered promiscuous mode [ 173.557019][T14774] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.564149][T14774] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.571437][T14774] bridge_slave_1: entered allmulticast mode [ 173.571646][ T3654] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 173.578089][T14774] bridge_slave_1: entered promiscuous mode [ 173.603438][T14774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.614555][T14774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.636519][T14774] team0: Port device team_slave_0 added [ 173.643601][T14774] team0: Port device team_slave_1 added [ 173.663244][T14774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.670269][T14774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.696325][T14774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.709708][T14774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.716805][T14774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.742956][T14774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.775085][T14774] hsr_slave_0: entered promiscuous mode [ 173.781294][T14774] hsr_slave_1: entered promiscuous mode [ 173.787258][T14774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.794831][T14774] Cannot create hsr debugfs directory [ 173.877867][T14819] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4188'. [ 173.925882][T14826] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4192'. [ 174.040909][T14774] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 174.063819][T14774] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 174.084264][T14774] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 174.103548][T14774] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 174.121551][T14774] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.128774][T14774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.163474][T14774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.174375][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.190967][T14774] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.202667][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.209766][ T7499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.232452][T14774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.243055][T14774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.279027][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.286209][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.371007][T14774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.550312][ T29] kauditd_printk_skb: 537 callbacks suppressed [ 174.550327][ T29] audit: type=1326 audit(1867147947.050:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.2.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 174.580103][ T29] audit: type=1326 audit(1867147947.050:7268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.2.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 174.603758][ T29] audit: type=1326 audit(1867147947.050:7269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.2.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 174.610101][T14871] loop6: detected capacity change from 0 to 8192 [ 174.627255][ T29] audit: type=1326 audit(1867147947.050:7270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.2.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 174.627304][ T29] audit: type=1326 audit(1867147947.050:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.2.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 174.627334][ T29] audit: type=1326 audit(1867147947.050:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.2.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 174.703058][T14880] loop5: detected capacity change from 0 to 512 [ 174.704265][ T29] audit: type=1326 audit(1867147947.050:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.2.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 174.734188][ T29] audit: type=1326 audit(1867147947.050:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.2.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 174.757776][ T29] audit: type=1326 audit(1867147947.050:7275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.2.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 174.781336][ T29] audit: type=1326 audit(1867147947.050:7276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.2.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f40d0849 code=0x7ffc0000 [ 174.842743][T14774] veth0_vlan: entered promiscuous mode [ 174.859180][T14774] veth1_vlan: entered promiscuous mode [ 174.882029][T14774] veth0_macvtap: entered promiscuous mode [ 174.895453][T14774] veth1_macvtap: entered promiscuous mode [ 174.943906][T14774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.954418][T14774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.973861][T14774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.984206][T14774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.987030][T14894] loop5: detected capacity change from 0 to 512 [ 174.994721][T14774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.012422][T14774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.022635][T14774] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.031489][T14774] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.040366][T14774] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.046465][T14894] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 175.049202][T14774] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.095318][T14894] EXT4-fs (loop5): 1 truncate cleaned up [ 175.102586][T14894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.132669][T14894] EXT4-fs warning (device loop5): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 175.231993][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.263973][T14923] loop4: detected capacity change from 0 to 512 [ 175.296861][T14923] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.327126][T14923] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 175.376744][T14936] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4229'. [ 175.408876][T12791] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 175.478905][T14943] loop6: detected capacity change from 0 to 512 [ 175.514947][T14943] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 175.525867][T14943] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 175.536042][T14943] EXT4-fs (loop6): group descriptors corrupted! [ 175.551408][T14939] loop7: detected capacity change from 0 to 8192 [ 175.613133][T14943] loop6: detected capacity change from 0 to 8192 [ 176.039175][T14962] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4241'. [ 176.061438][T14964] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4242'. [ 176.081618][T14966] vhci_hcd: invalid port number 116 [ 176.086946][T14966] vhci_hcd: default hub control req: d365 v735f i0074 l29556 [ 176.228937][T14985] devtmpfs: Unknown parameter 'posixacl' [ 176.272318][T14992] loop5: detected capacity change from 0 to 512 [ 176.288568][T14996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4256'. [ 176.298779][T14994] geneve0: entered allmulticast mode [ 176.318808][T14992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.334705][T14992] ext4 filesystem being mounted at /916/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.368224][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.391788][T15009] netem: change failed [ 176.518517][T15020] loop4: detected capacity change from 0 to 8192 [ 176.579382][T15033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4270'. [ 176.731308][T15058] loop4: detected capacity change from 0 to 128 [ 176.740872][T15058] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 176.748823][T15058] FAT-fs (loop4): Filesystem has been set read-only [ 176.755506][T15058] syz.4.4285: attempt to access beyond end of device [ 176.755506][T15058] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 176.769433][T15058] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 176.777790][T15058] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 176.779923][T15054] loop5: detected capacity change from 0 to 8192 [ 176.786906][T15058] syz.4.4285: attempt to access beyond end of device [ 176.786906][T15058] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 176.808914][T15058] syz.4.4285: attempt to access beyond end of device [ 176.808914][T15058] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 176.822787][T15058] syz.4.4285: attempt to access beyond end of device [ 176.822787][T15058] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 176.914567][T15067] loop4: detected capacity change from 0 to 2048 [ 176.921854][T15067] EXT4-fs: Ignoring removed orlov option [ 176.951460][ T7499] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 176.967701][ T7499] EXT4-fs (loop4): Remounting filesystem read-only [ 177.032488][T15084] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.040818][T15084] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.049123][T15084] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.057422][T15084] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.065811][T15084] vxlan0: entered promiscuous mode [ 177.071121][T15084] vxlan0: entered allmulticast mode [ 177.078286][T15084] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.087020][T15084] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.095426][T15084] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.103873][T15084] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.173207][T15094] loop7: detected capacity change from 0 to 2048 [ 177.231243][T15072] chnl_net:caif_netlink_parms(): no params data found [ 177.287513][T15072] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.294663][T15072] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.302306][T15072] bridge_slave_0: entered allmulticast mode [ 177.310436][T15072] bridge_slave_0: entered promiscuous mode [ 177.317710][T15072] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.324901][T15072] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.333799][T15072] bridge_slave_1: entered allmulticast mode [ 177.340687][T15072] bridge_slave_1: entered promiscuous mode [ 177.362788][T15072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.375860][T15072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.398835][T15094] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 177.413963][T15094] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 177.415559][T15072] team0: Port device team_slave_0 added [ 177.426522][T15094] EXT4-fs (loop7): This should not happen!! Data will be lost [ 177.426522][T15094] [ 177.435281][T15072] team0: Port device team_slave_1 added [ 177.441671][T15094] EXT4-fs (loop7): Total free blocks count 0 [ 177.453261][T15094] EXT4-fs (loop7): Free/Dirty block details [ 177.459210][T15094] EXT4-fs (loop7): free_blocks=2415919104 [ 177.464924][T15094] EXT4-fs (loop7): dirty_blocks=8192 [ 177.470325][T15094] EXT4-fs (loop7): Block reservation details [ 177.476365][T15094] EXT4-fs (loop7): i_reserved_data_blocks=512 [ 177.491155][T15072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.495693][T15104] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 177.498170][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.510848][T15104] EXT4-fs (loop7): This should not happen!! Data will be lost [ 177.510848][T15104] [ 177.547455][T15072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.559549][T15072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.566582][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.592605][T15072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.622955][T15072] hsr_slave_0: entered promiscuous mode [ 177.629445][T15072] hsr_slave_1: entered promiscuous mode [ 177.635389][T15072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.643014][T15072] Cannot create hsr debugfs directory [ 177.711794][T15072] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.721643][T15072] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 177.796443][T15109] loop7: detected capacity change from 0 to 8192 [ 177.803777][T15072] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.813717][T15072] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 177.827398][T15118] sd 0:0:1:0: device reset [ 177.867893][T15072] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.877870][T15072] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 177.900107][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.907586][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.915023][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.922699][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.930339][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.938064][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.945497][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.953004][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.960453][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.967881][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.975292][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.982724][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.990201][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.997710][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.005578][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.013115][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.020545][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.027983][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.035461][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.042945][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.047842][T15129] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 178.050361][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.066189][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.073740][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.081194][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.088807][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.096321][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.103761][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.111204][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.118631][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.126055][ T4443] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.134721][T15072] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.144603][T15072] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.154817][ T4443] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 178.198767][T15129] IPVS: Error joining to the multicast group [ 178.281263][T15072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.316093][T15072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.338724][T15147] loop6: detected capacity change from 0 to 164 [ 178.343958][T15072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.360110][T15072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.413547][T15152] loop6: detected capacity change from 0 to 128 [ 178.437375][T15152] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.447940][T15072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.481699][T15072] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.504342][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.511593][ T7499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.524796][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.531955][ T7495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.702569][T15072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.808158][T15072] veth0_vlan: entered promiscuous mode [ 178.822924][T15072] veth1_vlan: entered promiscuous mode [ 178.850525][T15072] veth0_macvtap: entered promiscuous mode [ 178.864724][T15072] veth1_macvtap: entered promiscuous mode [ 178.884214][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.894918][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.904827][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.915315][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.929785][T15072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.941233][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.951754][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.961611][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.972141][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.986309][T15072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.998472][T15072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.007253][T15072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.016045][T15072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.024760][T15072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.164579][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4326'. [ 179.244850][T15185] loop0: detected capacity change from 0 to 164 [ 179.325203][T15195] loop7: detected capacity change from 0 to 2048 [ 179.350368][T15200] loop4: detected capacity change from 0 to 128 [ 179.384737][T15202] loop0: detected capacity change from 0 to 8192 [ 179.410867][T15195] Alternate GPT is invalid, using primary GPT. [ 179.417381][T15195] loop7: p2 p3 p7 [ 179.741891][T15214] ================================================================== [ 179.750033][T15214] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 179.758310][T15214] [ 179.760646][T15214] write to 0xffff888106a95f28 of 4 bytes by task 15202 on cpu 0: [ 179.768411][T15214] writeback_single_inode+0x14f/0x3f0 [ 179.773846][T15214] sync_inode_metadata+0x5c/0x90 [ 179.778835][T15214] __generic_file_fsync+0xed/0x140 [ 179.783980][T15214] fat_file_fsync+0x46/0x100 [ 179.788598][T15214] vfs_fsync_range+0x116/0x130 [ 179.793372][T15214] generic_file_write_iter+0x185/0x1c0 [ 179.798874][T15214] iter_file_splice_write+0x5f1/0x980 [ 179.804278][T15214] direct_splice_actor+0x160/0x2c0 [ 179.809429][T15214] splice_direct_to_actor+0x302/0x670 [ 179.814941][T15214] do_splice_direct+0xd7/0x150 [ 179.819748][T15214] do_sendfile+0x398/0x660 [ 179.824189][T15214] __x64_sys_sendfile64+0x110/0x150 [ 179.829426][T15214] x64_sys_call+0xfbd/0x2dc0 [ 179.834054][T15214] do_syscall_64+0xc9/0x1c0 [ 179.838585][T15214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.844506][T15214] [ 179.846842][T15214] read to 0xffff888106a95f28 of 4 bytes by task 15214 on cpu 1: [ 179.854667][T15214] __mark_inode_dirty+0x198/0x7e0 [ 179.859723][T15214] fat_update_time+0x1e8/0x200 [ 179.864526][T15214] touch_atime+0x14f/0x350 [ 179.868973][T15214] filemap_splice_read+0x8a5/0x910 [ 179.874118][T15214] splice_direct_to_actor+0x269/0x670 [ 179.879624][T15214] do_splice_direct+0xd7/0x150 [ 179.884434][T15214] do_sendfile+0x398/0x660 [ 179.888885][T15214] __x64_sys_sendfile64+0x110/0x150 [ 179.894104][T15214] x64_sys_call+0xfbd/0x2dc0 [ 179.898715][T15214] do_syscall_64+0xc9/0x1c0 [ 179.903235][T15214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.909220][T15214] [ 179.911557][T15214] value changed: 0x00000038 -> 0x00000002 [ 179.917285][T15214] [ 179.919616][T15214] Reported by Kernel Concurrency Sanitizer on: [ 179.925784][T15214] CPU: 1 UID: 0 PID: 15214 Comm: syz.0.4337 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 179.937708][T15214] Tainted: [W]=WARN [ 179.941523][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.951596][T15214] ================================================================== [ 179.966995][T15232] syz.5.4348[15232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 179.967104][T15232] syz.5.4348[15232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.990384][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 179.990404][ T29] audit: type=1400 audit(1867147952.470:7441): avc: denied { write } for pid=3307 comm="syz-executor" path="pipe:[2478]" dev="pipefs" ino=2478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 180.036252][ T29] audit: type=1400 audit(1867147952.540:7442): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 180.058370][ T29] audit: type=1400 audit(1867147952.540:7443): avc: denied { search } for pid=3004 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.070628][T15232] syz.5.4348[15232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.080143][ T29] audit: type=1400 audit(1867147952.540:7444): avc: denied { append } for pid=3004 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 180.115092][ T29] audit: type=1400 audit(1867147952.540:7445): avc: denied { open } for pid=3004 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 180.137841][ T29] audit: type=1400 audit(1867147952.540:7446): avc: denied { getattr } for pid=3004 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 180.470653][ T7526] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.509451][ T7526] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.573430][ T7526] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.639323][ T7526] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.708148][ T7526] bridge_slave_1: left allmulticast mode [ 180.713806][ T7526] bridge_slave_1: left promiscuous mode [ 180.719489][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.728611][ T7526] bridge_slave_0: left allmulticast mode [ 180.734266][ T7526] bridge_slave_0: left promiscuous mode [ 180.741210][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.817713][ T7526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.827635][ T7526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.837323][ T7526] bond0 (unregistering): Released all slaves [ 180.879346][ T7526] hsr_slave_0: left promiscuous mode [ 180.885055][ T7526] hsr_slave_1: left promiscuous mode [ 180.891020][ T7526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.898477][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.906231][ T7526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.913690][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.923592][ T7526] veth1_macvtap: left promiscuous mode [ 180.929148][ T7526] veth0_macvtap: left promiscuous mode [ 180.934895][ T7526] veth1_vlan: left promiscuous mode [ 180.940241][ T7526] veth0_vlan: left promiscuous mode [ 181.003452][ T7526] team0 (unregistering): Port device team_slave_1 removed [ 181.014523][ T7526] team0 (unregistering): Port device team_slave_0 removed [ 181.387282][ T7526] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.437236][ T7526] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.477063][ T7526] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.517009][ T7526] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.678335][ T7526] bond0 (unregistering): Released all slaves [ 181.740692][ T7526] hsr_slave_0: left promiscuous mode [ 181.746477][ T7526] hsr_slave_1: left promiscuous mode [ 181.753687][ T7526] veth1_macvtap: left promiscuous mode [ 181.759206][ T7526] veth0_macvtap: left promiscuous mode [ 181.764689][ T7526] veth1_vlan: left promiscuous mode [ 181.770000][ T7526] veth0_vlan: left promiscuous mode [ 182.158414][ T7526] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.687951][ T7526] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.738524][ T7526] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.778685][ T7526] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.839199][ T7526] bridge_slave_1: left allmulticast mode [ 182.844872][ T7526] bridge_slave_1: left promiscuous mode [ 182.850665][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.858464][ T7526] bridge_slave_0: left allmulticast mode [ 182.864171][ T7526] bridge_slave_0: left promiscuous mode [ 182.869903][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.957816][ T7526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.968200][ T7526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.977658][ T7526] bond0 (unregistering): Released all slaves [ 183.029446][ T7526] hsr_slave_0: left promiscuous mode [ 183.035139][ T7526] hsr_slave_1: left promiscuous mode [ 183.040830][ T7526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.048401][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.056119][ T7526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.063585][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.073229][ T7526] veth1_macvtap: left promiscuous mode [ 183.078838][ T7526] veth0_macvtap: left promiscuous mode [ 183.084368][ T7526] veth1_vlan: left promiscuous mode [ 183.089608][ T7526] veth0_vlan: left promiscuous mode [ 183.152690][ T7526] team0 (unregistering): Port device team_slave_1 removed [ 183.162350][ T7526] team0 (unregistering): Port device team_slave_0 removed