last executing test programs: 1m45.827217686s ago: executing program 3 (id=162): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000240), 0x4) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 1m45.827069856s ago: executing program 32 (id=162): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000240), 0x4) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 1m28.138971846s ago: executing program 2 (id=516): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x7fffffff}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m28.071716467s ago: executing program 2 (id=518): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m28.032391928s ago: executing program 2 (id=519): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb, 0x0, 0x7ffc1feb}]}) r0 = getpgrp(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getcwd(&(0x7f00000001c0)=""/134, 0x86) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = gettid() rt_tgsigqueueinfo(r0, r2, 0x1f, &(0x7f00000003c0)={0x33, 0x1, 0x10004}) 1m28.010352198s ago: executing program 2 (id=520): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) 1m27.92276098s ago: executing program 2 (id=521): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) close(r0) 1m24.27811782s ago: executing program 2 (id=592): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) 1m24.27461699s ago: executing program 33 (id=592): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) 58.721336881s ago: executing program 4 (id=1165): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000017c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) 58.456946676s ago: executing program 0 (id=1170): memfd_secret(0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 58.406358558s ago: executing program 4 (id=1172): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000001080)=0x9, 0xffffffffffffffff, 0x0, 0x387, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_perm_addr={0x51}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 58.29686923s ago: executing program 0 (id=1173): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7ffff000) 57.574058043s ago: executing program 4 (id=1178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2", 0x2}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 57.341317418s ago: executing program 0 (id=1179): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='hrtimer_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r3}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 57.323037358s ago: executing program 0 (id=1180): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x2c020400) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 56.874450987s ago: executing program 1 (id=1186): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xbd, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 56.873782997s ago: executing program 1 (id=1187): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 56.813852678s ago: executing program 1 (id=1188): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2004, 0x7fc}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 56.798384529s ago: executing program 1 (id=1189): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @multicast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 56.71405654s ago: executing program 4 (id=1194): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 56.650388361s ago: executing program 4 (id=1196): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c110081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, 0x0, 0x4000) close(r2) 56.586906413s ago: executing program 1 (id=1197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) 56.342707767s ago: executing program 1 (id=1198): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @remote}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b33143b7461fd777b1c012bd14efb9f49fcdb8f080d26a083ad5c8c82b8af00", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"00000000000000000000000020040001", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x3f3, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x87}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 56.342102987s ago: executing program 0 (id=1208): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) open_by_handle_at(r0, 0x0, 0x101000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0'}, 0xb) syz_usbip_server_init(0x2) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$key(r1, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 56.303491468s ago: executing program 34 (id=1198): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @remote}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b33143b7461fd777b1c012bd14efb9f49fcdb8f080d26a083ad5c8c82b8af00", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"00000000000000000000000020040001", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x3f3, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x87}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 55.578256122s ago: executing program 0 (id=1200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 55.577179802s ago: executing program 35 (id=1200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 54.582351881s ago: executing program 4 (id=1216): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000852000/0x1000)=nil, 0x1000, 0x2000003, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 54.582187481s ago: executing program 36 (id=1216): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000852000/0x1000)=nil, 0x1000, 0x2000003, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 3.938775915s ago: executing program 6 (id=2243): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) listen(r3, 0x0) 3.870371716s ago: executing program 6 (id=2247): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x2000000005}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000) 3.858623496s ago: executing program 6 (id=2249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=") r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 3.67564532s ago: executing program 6 (id=2253): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1389899, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88f8d2, 0x0) 3.560667312s ago: executing program 6 (id=2256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r2}, 0x18) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r1, 0x0) 3.511406923s ago: executing program 6 (id=2258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 3.501803343s ago: executing program 37 (id=2258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 2.362427315s ago: executing program 3 (id=2267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x4}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) 2.315765156s ago: executing program 3 (id=2262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff73}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000840)={[{@nouid32}]}, 0x1, 0x71c, &(0x7f0000000f40)="$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") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x5f501}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) 2.192482458s ago: executing program 3 (id=2266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 2.167833609s ago: executing program 3 (id=2268): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000010000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000b494d036769720", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x5000) 2.11175464s ago: executing program 3 (id=2269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 2.11150394s ago: executing program 9 (id=2270): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r2}) 1.257012736s ago: executing program 9 (id=2294): syz_emit_ethernet(0x36, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x804, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.03594394s ago: executing program 9 (id=2299): r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 972.767612ms ago: executing program 5 (id=2300): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 890.311324ms ago: executing program 9 (id=2301): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 890.121994ms ago: executing program 9 (id=2302): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r1, &(0x7f0000000040), 0x4000000000002ac, 0x0, 0x0) 889.936663ms ago: executing program 5 (id=2303): sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x200080c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x44}}, 0x40000c0) 849.282774ms ago: executing program 5 (id=2304): sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) 807.159745ms ago: executing program 7 (id=2305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x9, 0x1, 0x8, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0]}, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 689.193917ms ago: executing program 7 (id=2306): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 689.058957ms ago: executing program 5 (id=2307): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@discard}, {@acl}]}, 0x1, 0x790, &(0x7f0000000fc0)="$eJzs3M9rXNUeAPDvvc00/ZH3kgdv8d6mCi20UHqTNJt2ZdyIm0Kh4LaG5CaE3HRKZlKTWGjqThBqs1ERRPcu3Sql/gHupKDgXhCtcaFFiMxk8juTTtsk06afD9zMOWfOud/znTtz5l7InQBeWq/W/iQRXRFxOSK6G+1pRByul45EzC/3W3x4c7i2JbG0dOXXJDo27StpPB6P+pD4X0TcL0WcfW9r3Mrs3MRQUeRTjXpvdfJ6b2V27tz45NBYPpZf6x+42HdhYOBC38Cu5XrqrYtH7373xsLC919V75zoOJfEYD3vaOS2a4HWWX5NSjG4vvHviGt7EayNkhb6bH6/AACw/2rn+Yca52al6I5DO52lOYEDAACAF9JS51Kr/mq5JwAAAPCcSaLdMwAAAAD21sr/Aazc27tX98E288vrEdGzXfyO+j3EEUeiFBHHFjfeb5wsD4NnMn87Iu4NbvP+a+WO5nW+2drUt1Y8+hR7ZB/cq60/g43159H645+urj+xzfrTsfLbCc+o+fq3Fv9Qk/Xvcosxvv7s/6Wm8W9XZt4/sV38ZDV+0iT+2y3Gv7Pwwd1mzy19EXG69v0zH00/f8nOvw/ROzpebPfRWp3u/UdnHjTPP+LYlu+/JKlHTXbO/3qL+b+7+PvE/A7xz5zc+fgvx+/cMK72nviwMY80Iu42Hmv1hU0xTk7+8O3WyMn8SvyRbb//147/kQ35vxkrr+3nLeb/05edM5uaOlscCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsqjYiuSNJstZymWRZxPCL+G8fSolypnh0tR9Lo3xOldHS8yPsionu5ntTq/fXyWv38pvpARPznx6PLOxkv8my4XIy0M3EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2OB4RXZGkWUSkEfFHd5pmWbtnBQAAAOy6nnZPAAAAANhzrv8BAADg4Hva6/9kl+cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHGiXL12qbUuLD28O1+ojN2anJ8o3zo3klYlscno4Gy5PXc/GyuWxIs+Gy5OP218aEf0XY3qmt5pXqr2V2bmrk+Xpa9Wr45NDY/nVvLQvWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCkuupbkmYRkdbLaZplEf+KiJ4oJaPjRd4XEf+OiAfdpc5avb/dkwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDXVWbnJoaKIp96sQtLByudlguRRDwH02hS+KRxVHbqk8xHtH2qaWOiz7KfiCcZdesxL0u7C6+0aT0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKC9KrNzE0NFkU9V2j0TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2iv9OYmI2na6+1TX5mcPJ3921x8j4p1Pr3w0M1StTvXX2n9bba9+3Gg/v27grf3MAQAAAA68156k88p1+sp1PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKsqs3MTQ0WRT+1hIW63O0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBp/BMAAP//jNG3aA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r3, r3, 0x0, 0x80000000) 585.563969ms ago: executing program 5 (id=2309): syz_emit_ethernet(0x36, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x804, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 434.987612ms ago: executing program 5 (id=2311): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 370.380583ms ago: executing program 8 (id=2312): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3ae1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x94, 0x10, 0x0, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x1, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 333.649414ms ago: executing program 7 (id=2313): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000300)='\x00!', 0x2}], 0x1, 0xee, 0x1) 232.777616ms ago: executing program 7 (id=2314): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 172.646557ms ago: executing program 7 (id=2315): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 172.156337ms ago: executing program 7 (id=2316): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) shutdown(r0, 0x1) syz_clone(0xa5144411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) 171.699807ms ago: executing program 8 (id=2325): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdb8, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 63.952749ms ago: executing program 9 (id=2317): sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) 63.216499ms ago: executing program 8 (id=2328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 38.408209ms ago: executing program 8 (id=2318): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000000380)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 20.83472ms ago: executing program 8 (id=2319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shutdown(0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r3, 0x400, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x2) 0s ago: executing program 8 (id=2320): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e4ffffffffff"], 0xe) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) kernel console output (not intermixed with test programs): interface: batadv_slave_0 [ 87.923031][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.949173][ T6543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.970369][ T6541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.007907][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.014918][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.040875][ T6543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.112386][ T6541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.127652][ T6543] hsr_slave_0: entered promiscuous mode [ 88.133936][ T6543] hsr_slave_1: entered promiscuous mode [ 88.142652][ T6543] debugfs: 'hsr0' already exists in 'hsr' [ 88.148566][ T6543] Cannot create hsr debugfs directory [ 88.185214][ T6541] team0: Port device team_slave_0 added [ 88.511977][ T3319] bond0 (unregistering): Released all slaves [ 88.528275][ T3319] bond1 (unregistering): Released all slaves [ 88.542466][ T6541] team0: Port device team_slave_1 added [ 88.585673][ T3319] tipc: Disabling bearer [ 88.590956][ T3319] tipc: Disabling bearer [ 88.596076][ T3319] tipc: Left network mode [ 88.596560][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.607414][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.633674][ T6541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.645942][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.652962][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.678916][ T6541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.693619][ T6592] chnl_net:caif_netlink_parms(): no params data found [ 88.711112][ T3319] veth1_macvtap: left promiscuous mode [ 88.716662][ T3319] veth0_macvtap: left promiscuous mode [ 88.722174][ T3319] veth1_vlan: left promiscuous mode [ 88.732367][ T3319] veth0_vlan: left promiscuous mode [ 88.944550][ T6692] loop6: detected capacity change from 0 to 1024 [ 88.970200][ T6541] hsr_slave_0: entered promiscuous mode [ 88.977778][ T6541] hsr_slave_1: entered promiscuous mode [ 88.978745][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1228'. [ 88.983826][ T6541] debugfs: 'hsr0' already exists in 'hsr' [ 88.998204][ T6541] Cannot create hsr debugfs directory [ 89.003979][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.005983][ T6692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.011141][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.031216][ T6592] bridge_slave_0: entered allmulticast mode [ 89.037884][ T6592] bridge_slave_0: entered promiscuous mode [ 89.053329][ T6692] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 89.053793][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.068897][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.076425][ T6592] bridge_slave_1: entered allmulticast mode [ 89.083291][ T6592] bridge_slave_1: entered promiscuous mode [ 89.116003][ T36] IPVS: starting estimator thread 0... [ 89.126413][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.128971][ T6543] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 89.167364][ T6543] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 89.177877][ T6543] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 89.187223][ T6543] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 89.200798][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.209914][ T6703] IPVS: using max 2928 ests per chain, 146400 per kthread [ 89.243203][ T6592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.432820][ T6541] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 89.452970][ T6592] team0: Port device team_slave_0 added [ 89.464851][ T6592] team0: Port device team_slave_1 added [ 89.471647][ T6541] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 89.527758][ T6541] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 89.554844][ T6541] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 89.594423][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.601528][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.627715][ T6592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.645911][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.652945][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.679538][ T6592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.714330][ T6592] hsr_slave_0: entered promiscuous mode [ 89.720435][ T6592] hsr_slave_1: entered promiscuous mode [ 89.726659][ T6592] debugfs: 'hsr0' already exists in 'hsr' [ 89.732500][ T6592] Cannot create hsr debugfs directory [ 89.742691][ T6543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.774579][ T6543] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.799589][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.806743][ T6677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.826352][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.833507][ T6677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.861221][ T6541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.905506][ T6541] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.916149][ T6747] syzkaller0: entered allmulticast mode [ 89.938182][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.945409][ T6683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.956138][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.963300][ T6683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.975312][ T6592] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 89.991061][ T6592] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 90.000847][ T6592] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 90.010251][ T6747] syzkaller0: entered promiscuous mode [ 90.017374][ T6592] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 90.032673][ T6747] syzkaller0 (unregistering): left allmulticast mode [ 90.039473][ T6747] syzkaller0 (unregistering): left promiscuous mode [ 90.107902][ T6543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.176715][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.202917][ T6592] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.219505][ T6541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.232413][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.239715][ T3319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.251145][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.258365][ T3319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.395048][ T6592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.497604][ T6543] veth0_vlan: entered promiscuous mode [ 90.507960][ T6543] veth1_vlan: entered promiscuous mode [ 90.541688][ T6543] veth0_macvtap: entered promiscuous mode [ 90.573082][ T6543] veth1_macvtap: entered promiscuous mode [ 90.616527][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.635524][ T6541] veth0_vlan: entered promiscuous mode [ 90.645819][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.668881][ T3319] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.679867][ T6541] veth1_vlan: entered promiscuous mode [ 90.697468][ T3319] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.780744][ T3319] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.810103][ T3319] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.823378][ T6592] veth0_vlan: entered promiscuous mode [ 90.843544][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 90.843572][ T29] audit: type=1400 audit(90.820:3172): avc: denied { mounton } for pid=6543 comm="syz-executor" path="/root/syzkaller.ssliFM/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 90.845461][ T6541] veth0_macvtap: entered promiscuous mode [ 90.849766][ T29] audit: type=1400 audit(90.820:3173): avc: denied { mount } for pid=6543 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.880945][ T6592] veth1_vlan: entered promiscuous mode [ 90.911464][ T6541] veth1_macvtap: entered promiscuous mode [ 90.927667][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.938468][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.949742][ T29] audit: type=1400 audit(90.860:3174): avc: denied { mounton } for pid=6543 comm="syz-executor" path="/root/syzkaller.ssliFM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 90.962668][ T6592] veth0_macvtap: entered promiscuous mode [ 90.976106][ T29] audit: type=1400 audit(90.860:3175): avc: denied { mounton } for pid=6543 comm="syz-executor" path="/root/syzkaller.ssliFM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 90.985052][ T6592] veth1_macvtap: entered promiscuous mode [ 91.008730][ T29] audit: type=1400 audit(90.900:3176): avc: denied { mounton } for pid=6543 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 91.023619][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.036715][ T29] audit: type=1400 audit(90.900:3177): avc: denied { mount } for pid=6543 comm="syz-executor" name="/" dev="gadgetfs" ino=3778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 91.072398][ T3319] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.082184][ T3319] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.092896][ T3319] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.126138][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.133427][ T3319] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.172737][ T6678] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.211824][ T6678] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.223780][ T6678] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.261528][ T6678] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.302963][ T29] audit: type=1326 audit(91.280:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.7.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7a7aeba9 code=0x7ffc0000 [ 91.325943][ T29] audit: type=1326 audit(91.280:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.7.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7a7aeba9 code=0x7ffc0000 [ 91.348806][ T29] audit: type=1326 audit(91.280:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.7.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fda7a7aeba9 code=0x7ffc0000 [ 91.372030][ T29] audit: type=1326 audit(91.280:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.7.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7a7aeba9 code=0x7ffc0000 [ 91.663938][ T6847] loop9: detected capacity change from 0 to 8192 [ 91.719510][ T6847] loop9: p1 p2[DM] p4 [ 91.728409][ T6847] loop9: p1 size 196608 extends beyond EOD, truncated [ 91.736385][ T6847] loop9: p2 start 4292936063 is beyond EOD, truncated [ 91.743274][ T6847] loop9: p4 size 50331648 extends beyond EOD, truncated [ 91.898662][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.905992][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.009897][ T6877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.024041][ T6885] loop6: detected capacity change from 0 to 1024 [ 92.036851][ T6885] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.043741][ T6885] EXT4-fs: inline encryption not supported [ 92.054403][ T6877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.067179][ T6885] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.094523][ T6885] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1275: bad orphan inode 11 [ 92.115086][ T6885] ext4_test_bit(bit=10, block=4) = 1 [ 92.120674][ T6885] is_bad_inode(inode)=0 [ 92.125061][ T6885] NEXT_ORPHAN(inode)=3254779904 [ 92.129914][ T6885] max_ino=32 [ 92.133117][ T6885] i_nlink=0 [ 92.142410][ T6885] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.1275: lblock 2 mapped to illegal pblock 2 (length 1) [ 92.185250][ T6885] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.1275: lblock 0 mapped to illegal pblock 48 (length 1) [ 92.194404][ T6683] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.210919][ T6885] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1275: Failed to acquire dquot type 0 [ 92.225558][ T6885] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 92.255449][ T6683] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.274124][ T6683] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.286711][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1276'. [ 92.295596][ T6885] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.1275: mark_inode_dirty error [ 92.316273][ T6683] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.328433][ T6885] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 92.348273][ T6885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.386468][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.397107][ T4947] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 92.419611][ T6894] serio: Serial port ptm0 [ 92.432079][ T4947] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 92.455291][ T4947] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 92.552505][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1281'. [ 92.799235][ T6916] loop6: detected capacity change from 0 to 512 [ 92.833644][ T6916] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.842887][ T6916] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 92.874774][ T6916] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 92.896894][ T6916] System zones: 0-2, 18-18, 34-35 [ 92.922524][ T6916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 93.227070][ T6916] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 93.227268][ T6916] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 93.227297][ T6916] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 93.233746][ T6916] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1287: bg 0: block 353: padding at end of block bitmap is not set [ 93.279288][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.280546][ T6927] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1291'. [ 93.400131][ T6929] pim6reg1: entered promiscuous mode [ 93.400157][ T6929] pim6reg1: entered allmulticast mode [ 93.624947][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1294'. [ 93.804251][ C0] net_ratelimit: 72 callbacks suppressed [ 93.804270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.905984][ T6954] loop7: detected capacity change from 0 to 512 [ 93.912540][ T6954] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.956822][ T6952] bridge_slave_1: left allmulticast mode [ 93.962536][ T6952] bridge_slave_1: left promiscuous mode [ 93.963602][ T6954] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 93.968255][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.022228][ T6954] EXT4-fs (loop7): 1 truncate cleaned up [ 94.034638][ T6952] bridge_slave_0: left allmulticast mode [ 94.040428][ T6952] bridge_slave_0: left promiscuous mode [ 94.044796][ T6954] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.046264][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.094789][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1306'. [ 94.146274][ T6961] ip6gre1: entered allmulticast mode [ 94.225835][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1309'. [ 94.234985][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1309'. [ 94.248196][ T6541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.258962][ T6971] netlink: 'syz.6.1310': attribute type 83 has an invalid length. [ 94.393211][ T6976] loop8: detected capacity change from 0 to 164 [ 94.489549][ T6999] syzkaller1: entered promiscuous mode [ 94.495194][ T6999] syzkaller1: entered allmulticast mode [ 94.951833][ T7047] syzkaller1: entered promiscuous mode [ 94.957508][ T7047] syzkaller1: entered allmulticast mode [ 95.158483][ T7075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7075 comm=syz.5.1356 [ 95.186005][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1356'. [ 95.216870][ T7079] netlink: 'syz.9.1357': attribute type 1 has an invalid length. [ 95.224688][ T7079] netlink: 161700 bytes leftover after parsing attributes in process `syz.9.1357'. [ 95.258344][ T7079] loop9: detected capacity change from 0 to 128 [ 95.278787][ T7079] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 95.414775][ T6592] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.457466][ T7090] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1359'. [ 95.620694][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1363'. [ 95.732970][ T7101] vlan2: entered promiscuous mode [ 95.738087][ T7101] syz_tun: entered promiscuous mode [ 95.837075][ T7105] loop9: detected capacity change from 0 to 1024 [ 95.861838][ T7105] EXT4-fs: inline encryption not supported [ 95.867919][ T7105] EXT4-fs: Ignoring removed bh option [ 95.893887][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 95.893903][ T29] audit: type=1400 audit(95.870:3212): avc: denied { read write } for pid=7111 comm="syz.6.1368" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.923947][ T29] audit: type=1400 audit(95.870:3213): avc: denied { open } for pid=7111 comm="syz.6.1368" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.949024][ T7105] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.013295][ T6592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.125882][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1369'. [ 96.175599][ T7118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.192988][ T7118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.219015][ T7118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.226765][ T7118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.365413][ T7133] loop9: detected capacity change from 0 to 2048 [ 96.383532][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1375'. [ 96.407510][ T7130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.427536][ T7139] geneve2: entered promiscuous mode [ 96.432793][ T7139] geneve2: entered allmulticast mode [ 96.442686][ T7143] netdevsim netdevsim7 eth1: IPsec offload requires 128 bit authentication [ 96.510750][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1380'. [ 96.709190][ T29] audit: type=1326 audit(96.690:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b69eeba9 code=0x7ffc0000 [ 96.780248][ T29] audit: type=1326 audit(96.690:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b69eeba9 code=0x7ffc0000 [ 96.803703][ T29] audit: type=1326 audit(96.690:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b69eeba9 code=0x7ffc0000 [ 96.809130][ T7176] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 96.826673][ T29] audit: type=1326 audit(96.690:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b69eeba9 code=0x7ffc0000 [ 96.858261][ T29] audit: type=1326 audit(96.690:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b69eeba9 code=0x7ffc0000 [ 96.881399][ T29] audit: type=1326 audit(96.690:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57b69eeba9 code=0x7ffc0000 [ 96.904464][ T29] audit: type=1326 audit(96.690:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b69eeba9 code=0x7ffc0000 [ 96.927242][ T29] audit: type=1326 audit(96.690:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57b69eeba9 code=0x7ffc0000 [ 97.240448][ T7185] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 97.468032][ T7208] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 97.492504][ T7211] team1: entered promiscuous mode [ 97.497747][ T7211] team1: entered allmulticast mode [ 97.691981][ T7236] netlink: 'syz.9.1420': attribute type 10 has an invalid length. [ 97.709951][ T7236] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 98.672761][ T7277] loop8: detected capacity change from 0 to 8192 [ 99.431899][ T7294] Set syz1 is full, maxelem 65536 reached [ 99.582809][ T7313] loop6: detected capacity change from 0 to 2048 [ 99.608082][ T7313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.672971][ T7327] sctp: [Deprecated]: syz.9.1457 (pid 7327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.672971][ T7327] Use struct sctp_sack_info instead [ 99.691633][ T7327] __nla_validate_parse: 2 callbacks suppressed [ 99.691651][ T7327] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1457'. [ 99.729921][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1458'. [ 99.919769][ T7344] loop9: detected capacity change from 0 to 512 [ 100.048273][ T7349] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 100.135338][ T7344] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 100.148078][ T7344] EXT4-fs (loop9): 1 truncate cleaned up [ 100.159909][ T7344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.258563][ T6592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.369002][ T7373] netdevsim netdevsim9 5Â: renamed from netdevsim0 (while UP) [ 100.388929][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.398773][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1478'. [ 100.420249][ T7377] loop7: detected capacity change from 0 to 128 [ 100.455862][ T7379] netlink: 'syz.9.1481': attribute type 30 has an invalid length. [ 100.520717][ T7390] sd 0:0:1:0: device reset [ 100.611145][ T7402] loop9: detected capacity change from 0 to 512 [ 100.628245][ T7405] loop6: detected capacity change from 0 to 512 [ 100.648931][ T7406] pim6reg1: entered promiscuous mode [ 100.654310][ T7406] pim6reg1: entered allmulticast mode [ 100.666434][ T7405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.682761][ T7402] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 100.705526][ T7402] EXT4-fs (loop9): orphan cleanup on readonly fs [ 100.716835][ T7402] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.1490: corrupted inode contents [ 100.739319][ T7402] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.1490: mark_inode_dirty error [ 100.775039][ T7402] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.1490: corrupted inode contents [ 100.803123][ T7402] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.1490: mark_inode_dirty error [ 100.843222][ T7402] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.1490: corrupted inode contents [ 100.854506][ T7416] IPVS: stopping master sync thread 7417 ... [ 100.857303][ T7402] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 100.861133][ T7417] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 100.870085][ T7402] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.1490: corrupted inode contents [ 100.894415][ T7402] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.1490: mark_inode_dirty error [ 100.907654][ T7402] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 100.934740][ T7402] EXT4-fs (loop9): 1 truncate cleaned up [ 100.940842][ T6667] __quota_error: 104 callbacks suppressed [ 100.940860][ T6667] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 100.956741][ T6667] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:52: Failed to release dquot type 1 [ 100.974845][ T7402] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.035163][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.075697][ T29] audit: type=1400 audit(101.050:3326): avc: denied { read } for pid=7423 comm="syz.8.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.110767][ T6592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.129243][ T29] audit: type=1400 audit(101.110:3327): avc: denied { read } for pid=7433 comm="+}[@" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.151676][ T29] audit: type=1400 audit(101.110:3328): avc: denied { open } for pid=7433 comm="+}[@" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.175813][ T29] audit: type=1400 audit(101.110:3329): avc: denied { ioctl } for pid=7433 comm="+}[@" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.201137][ T29] audit: type=1326 audit(101.180:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.8.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 101.224270][ T29] audit: type=1326 audit(101.180:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.8.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 101.299165][ T29] audit: type=1326 audit(101.230:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.8.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 101.322152][ T29] audit: type=1326 audit(101.230:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.8.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 101.345269][ T29] audit: type=1326 audit(101.230:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.8.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 101.615022][ T7467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.622284][ T7467] IPv6: NLM_F_CREATE should be set when creating new route [ 101.651104][ T7471] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 101.651104][ T7471] program syz.9.1517 not setting count and/or reply_len properly [ 101.750506][ T7481] loop8: detected capacity change from 0 to 512 [ 101.768845][ T7481] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 101.797906][ T7481] EXT4-fs (loop8): 1 truncate cleaned up [ 101.808540][ T7481] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.835769][ T6543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.108487][ T7510] loop6: detected capacity change from 0 to 512 [ 102.145941][ T7510] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.174955][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1534'. [ 102.184783][ T7510] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.199287][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1534'. [ 102.211943][ T7510] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.1530: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 102.281371][ T7520] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1546'. [ 102.338794][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.847986][ T7544] bond0: (slave bond_slave_0): Releasing backup interface [ 102.899797][ T7545] netlink: 'syz.9.1542': attribute type 10 has an invalid length. [ 102.907929][ T7545] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1542'. [ 102.967118][ T7544] bond0: (slave bond_slave_1): Releasing backup interface [ 103.064581][ T7531] Set syz1 is full, maxelem 65536 reached [ 103.169914][ T7544] team0: Port device team_slave_0 removed [ 103.196195][ T7544] team0: Port device team_slave_1 removed [ 103.246538][ T7545] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 103.555970][ T7557] netlink: 'syz.6.1549': attribute type 1 has an invalid length. [ 103.570832][ T7557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.587355][ T7559] loop8: detected capacity change from 0 to 512 [ 103.587672][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1549'. [ 103.651285][ T7559] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.1550: error while reading EA inode 32 err=-116 [ 103.677315][ T7557] bond1 (unregistering): Released all slaves [ 103.677951][ T7559] EXT4-fs (loop8): Remounting filesystem read-only [ 103.689952][ T7559] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 103.701857][ T7559] EXT4-fs (loop8): 1 orphan inode deleted [ 103.708964][ T7559] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.722637][ T7559] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.748697][ T7562] loop9: detected capacity change from 0 to 1024 [ 103.786210][ T7562] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.811007][ T7570] sd 0:0:1:0: device reset [ 103.918316][ T6592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.876305][ T7634] loop7: detected capacity change from 0 to 512 [ 104.888572][ T7634] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.897702][ T7634] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 104.915717][ T7634] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 104.923915][ T7634] System zones: 0-2, 18-18, 34-35 [ 104.948999][ T7634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.089520][ T7634] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 105.114766][ T7643] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1584'. [ 105.134521][ T7643] netlink: zone id is out of range [ 105.140676][ T7651] Falling back ldisc for ttyS3. [ 105.149298][ T7643] netlink: zone id is out of range [ 105.154786][ T7634] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 105.163181][ T7634] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 105.177797][ T7634] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1580: bg 0: block 353: padding at end of block bitmap is not set [ 105.186676][ T7643] netlink: del zone limit has 8 unknown bytes [ 105.250209][ T6541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.299307][ T7667] netlink: 'syz.9.1596': attribute type 1 has an invalid length. [ 105.307325][ T7667] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1596'. [ 105.407667][ T7674] loop9: detected capacity change from 0 to 512 [ 105.421359][ T7674] EXT4-fs: Ignoring removed orlov option [ 105.427639][ T7674] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 105.438224][ T7674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 105.455426][ T7674] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.1598: corrupted in-inode xattr: e_value size too large [ 105.495845][ T7674] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1598: couldn't read orphan inode 15 (err -117) [ 105.513331][ T7674] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.600296][ T7683] vlan2: entered allmulticast mode [ 105.623141][ T7683] dummy0: entered allmulticast mode [ 105.623209][ T7674] SELinux: failed to load policy [ 105.685750][ T6592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.778447][ T7688] Falling back ldisc for ttyS3. [ 105.811874][ T7693] loop7: detected capacity change from 0 to 512 [ 105.852901][ T7693] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 105.885791][ T7693] EXT4-fs (loop7): 1 truncate cleaned up [ 105.891876][ T7693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.998164][ T6541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.035949][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 106.035966][ T29] audit: type=1400 audit(106.020:3420): avc: denied { remount } for pid=7698 comm="syz.5.1604" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.075161][ T7703] smc: net device bond0 applied user defined pnetid SYZ0 [ 106.082632][ T7703] smc: net device bond0 erased user defined pnetid SYZ0 [ 106.387441][ T29] audit: type=1326 audit(106.370:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7a7aeba9 code=0x7ffc0000 [ 106.410443][ T29] audit: type=1326 audit(106.370:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7a7aeba9 code=0x7ffc0000 [ 106.468847][ T29] audit: type=1326 audit(106.420:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fda7a7aeba9 code=0x7ffc0000 [ 106.491772][ T29] audit: type=1326 audit(106.420:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7a7aeba9 code=0x7ffc0000 [ 106.514760][ T29] audit: type=1326 audit(106.420:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7a7aeba9 code=0x7ffc0000 [ 106.543463][ T7737] bridge_slave_0: left allmulticast mode [ 106.549272][ T7737] bridge_slave_0: left promiscuous mode [ 106.554989][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.599445][ T7743] netlink: 'syz.7.1624': attribute type 10 has an invalid length. [ 106.607731][ T7743] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1624'. [ 106.633989][ T7737] bridge_slave_1: left allmulticast mode [ 106.639758][ T7737] bridge_slave_1: left promiscuous mode [ 106.645532][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.661976][ T7737] bond0: (slave bond_slave_0): Releasing backup interface [ 106.673846][ T7737] bond0: (slave bond_slave_1): Releasing backup interface [ 106.697017][ T7737] team0: Port device team_slave_0 removed [ 106.711012][ T7737] team0: Port device team_slave_1 removed [ 106.747523][ T7737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.756766][ T7737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.796630][ T7743] veth1_vlan: left promiscuous mode [ 106.816317][ T7743] batman_adv: batadv0: Adding interface: veth1_vlan [ 106.823041][ T7743] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.829919][ T7752] loop9: detected capacity change from 0 to 512 [ 106.857755][ T7752] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.858236][ T7743] batman_adv: batadv0: Interface activated: veth1_vlan [ 106.876138][ T7752] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.905647][ T7759] netlink: 'syz.7.1631': attribute type 3 has an invalid length. [ 106.906002][ T7752] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 3: comm syz.9.1629: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 106.913701][ T7759] netlink: 'syz.7.1631': attribute type 3 has an invalid length. [ 106.998258][ T7764] loop7: detected capacity change from 0 to 1024 [ 107.005581][ T6592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.016585][ T7764] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.023509][ T7764] EXT4-fs: inline encryption not supported [ 107.035874][ T7764] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.055435][ T7764] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.1634: bad orphan inode 11 [ 107.070387][ T7764] ext4_test_bit(bit=10, block=4) = 1 [ 107.075862][ T7764] is_bad_inode(inode)=0 [ 107.080096][ T7764] NEXT_ORPHAN(inode)=3254779904 [ 107.085341][ T7764] max_ino=32 [ 107.088573][ T7764] i_nlink=0 [ 107.102809][ T7764] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.1634: lblock 2 mapped to illegal pblock 2 (length 1) [ 107.118520][ T7764] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 107.127349][ T7764] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.1634: lblock 0 mapped to illegal pblock 48 (length 1) [ 107.143210][ T7764] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 107.152389][ T7764] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1634: Failed to acquire dquot type 0 [ 107.167119][ T7764] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 107.177308][ T7764] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.1634: mark_inode_dirty error [ 107.189954][ T7764] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 107.201131][ T7764] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.256780][ T6541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.294795][ T6541] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 107.334817][ T6541] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 107.364329][ T6541] EXT4-fs error (device loop7): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 107.389779][ T7779] smc: net device bond0 applied user defined pnetid SYZ0 [ 107.400130][ T7779] smc: net device bond0 erased user defined pnetid SYZ0 [ 107.548122][ T7789] bond0: (slave 0!): Releasing backup interface [ 107.569277][ T7789] bridge_slave_0: left allmulticast mode [ 107.575180][ T7789] bridge_slave_0: left promiscuous mode [ 107.580959][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.608208][ T7790] netlink: 'syz.5.1643': attribute type 10 has an invalid length. [ 107.616167][ T7790] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1643'. [ 107.626221][ T7789] bridge_slave_1: left allmulticast mode [ 107.632008][ T7789] bridge_slave_1: left promiscuous mode [ 107.637860][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.653653][ T29] audit: type=1326 audit(107.630:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.9.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3513eba9 code=0x7fc00000 [ 107.676596][ T29] audit: type=1326 audit(107.630:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.9.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c3513eba9 code=0x7fc00000 [ 107.711171][ T7789] bond0: (slave bond_slave_0): Releasing backup interface [ 107.737541][ T7789] bond0: (slave bond_slave_1): Releasing backup interface [ 107.755981][ T7789] team0: Port device team_slave_0 removed [ 107.767333][ T7789] team0: Port device team_slave_1 removed [ 107.790435][ T7789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.797926][ T7789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.808138][ T7789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.815855][ T7789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.823677][ T7796] loop7: detected capacity change from 0 to 1024 [ 107.833180][ T7796] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.847096][ T7796] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.1647: lblock 1 mapped to illegal pblock 1 (length 1) [ 107.862346][ T7790] batman_adv: batadv0: Adding interface: veth1_vlan [ 107.869156][ T7790] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.875256][ T7796] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1647: Failed to acquire dquot type 0 [ 107.899384][ T7790] batman_adv: batadv0: Interface activated: veth1_vlan [ 107.914879][ T7801] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1648'. [ 107.920802][ T7796] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.1647: Freeing blocks not in datazone - block = 0, count = 4096 [ 107.948710][ T7796] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.1647: Invalid inode bitmap blk 0 in block_group 0 [ 107.964274][ T56] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 107.988502][ T7796] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 107.998546][ T7796] EXT4-fs (loop7): 1 orphan inode deleted [ 108.004660][ T56] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 108.005322][ T7796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.024830][ T7810] loop8: detected capacity change from 0 to 1024 [ 108.035839][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1650'. [ 108.043871][ T7810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.044859][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1650'. [ 108.064441][ T7810] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 108.091339][ T7810] System zones: 0-1, 3-36 [ 108.103926][ T7810] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.134537][ T7796] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.163743][ T7822] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.207245][ T7822] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.239915][ T6543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.255035][ T7827] netlink: 14 bytes leftover after parsing attributes in process `gtp'. [ 108.264060][ T7827] hsr_slave_0: left promiscuous mode [ 108.271528][ T7827] hsr_slave_1: left promiscuous mode [ 108.281254][ T7822] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.356537][ T7833] bridge_slave_1: left allmulticast mode [ 108.362241][ T7833] bridge_slave_1: left promiscuous mode [ 108.368071][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.395357][ T7833] bridge_slave_0: left allmulticast mode [ 108.401136][ T7833] bridge_slave_0: left promiscuous mode [ 108.407064][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.501794][ T7822] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.586316][ T56] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.606535][ T56] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.621864][ T56] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.642988][ T56] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.744363][ T7849] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1666'. [ 108.753728][ T7849] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1666'. [ 108.819790][ T7848] loop8: detected capacity change from 0 to 512 [ 108.875794][ T7850] loop6: detected capacity change from 0 to 8192 [ 108.882567][ T7850] msdos: Unknown parameter 'A' [ 109.021776][ T7861] syz_tun: entered allmulticast mode [ 109.067381][ T7860] syz_tun: left allmulticast mode [ 109.075561][ T7848] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.145524][ T7866] netlink: 'syz.6.1673': attribute type 1 has an invalid length. [ 109.153298][ T7866] netlink: 'syz.6.1673': attribute type 4 has an invalid length. [ 109.165232][ T7866] netlink: 'syz.6.1673': attribute type 1 has an invalid length. [ 109.173170][ T7866] netlink: 'syz.6.1673': attribute type 4 has an invalid length. [ 109.228742][ T6543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.265905][ T7880] smc: net device bond0 applied user defined pnetid SYZ0 [ 109.274943][ T7883] loop6: detected capacity change from 0 to 128 [ 109.281955][ T7883] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 109.287183][ T7880] smc: net device bond0 erased user defined pnetid SYZ0 [ 109.323144][ T7883] syz.6.1682: attempt to access beyond end of device [ 109.323144][ T7883] loop6: rw=0, sector=97, nr_sectors = 944 limit=128 [ 109.340870][ T7889] loop9: detected capacity change from 0 to 128 [ 109.347933][ T7889] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 109.373967][ T6651] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 109.407181][ T7889] syz.9.1684: attempt to access beyond end of device [ 109.407181][ T7889] loop9: rw=0, sector=97, nr_sectors = 944 limit=128 [ 109.430576][ T56] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 109.458033][ T7896] loop6: detected capacity change from 0 to 1024 [ 109.488369][ T7896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.502702][ T7903] loop8: detected capacity change from 0 to 1024 [ 109.515031][ T7896] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 109.552082][ T7896] System zones: 0-1, 3-36 [ 109.557820][ T7896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.581661][ T7903] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.721577][ T7903] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.1690: Allocating blocks 385-513 which overlap fs metadata [ 109.762722][ T7903] EXT4-fs (loop8): pa ffff888106d944d0: logic 16, phys. 129, len 24 [ 109.770845][ T7903] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 109.794653][ T7903] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 109.807119][ T7903] EXT4-fs (loop8): This should not happen!! Data will be lost [ 109.807119][ T7903] [ 109.816900][ T7903] EXT4-fs (loop8): Total free blocks count 0 [ 109.822918][ T7903] EXT4-fs (loop8): Free/Dirty block details [ 109.828930][ T7903] EXT4-fs (loop8): free_blocks=128 [ 109.834052][ T7903] EXT4-fs (loop8): dirty_blocks=0 [ 109.839192][ T7903] EXT4-fs (loop8): Block reservation details [ 109.845311][ T7903] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 109.912061][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.930860][ T7903] syz.8.1690 (7903) used greatest stack depth: 9128 bytes left [ 109.964404][ T7914] gretap1: left allmulticast mode [ 109.969504][ T7914] gretap1: left promiscuous mode [ 109.974707][ T7914] bridge0: port 3(gretap1) entered disabled state [ 109.996711][ T7914] bridge_slave_1: left allmulticast mode [ 110.002499][ T7914] bridge_slave_1: left promiscuous mode [ 110.008365][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.074910][ T7914] bridge_slave_0: left allmulticast mode [ 110.080687][ T7914] bridge_slave_0: left promiscuous mode [ 110.086502][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.183915][ T7930] loop7: detected capacity change from 0 to 128 [ 110.190938][ T7930] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 110.264487][ T7930] syz.7.1700: attempt to access beyond end of device [ 110.264487][ T7930] loop7: rw=0, sector=97, nr_sectors = 944 limit=128 [ 110.318574][ T6650] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 110.349685][ T7940] __nla_validate_parse: 2 callbacks suppressed [ 110.349702][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1704'. [ 110.369392][ T7940] ip6gre1: entered allmulticast mode [ 110.414878][ T7948] $Hÿ: renamed from bond0 (while UP) [ 110.425298][ T7948] $Hÿ: entered promiscuous mode [ 110.509210][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1708'. [ 110.531163][ T7953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.538768][ T7953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.569341][ T7953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.576854][ T7953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.804485][ T7947] Set syz1 is full, maxelem 65536 reached [ 110.950555][ T7965] loop9: detected capacity change from 0 to 1024 [ 110.957330][ T7965] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.967887][ T7965] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.979083][ T7965] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.066286][ T6592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.185524][ T7977] loop8: detected capacity change from 0 to 128 [ 111.192613][ T7977] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 111.211163][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 111.211180][ T29] audit: type=1326 audit(111.190:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.8.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 111.240230][ T29] audit: type=1326 audit(111.190:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.8.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 111.263174][ T29] audit: type=1326 audit(111.200:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.8.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 111.276364][ T7977] syz.8.1716: attempt to access beyond end of device [ 111.276364][ T7977] loop8: rw=0, sector=97, nr_sectors = 944 limit=128 [ 111.286100][ T29] audit: type=1326 audit(111.200:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.8.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 111.322415][ T29] audit: type=1326 audit(111.210:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.8.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 111.345139][ T29] audit: type=1326 audit(111.210:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.8.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 111.368071][ T29] audit: type=1326 audit(111.210:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.8.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 111.391139][ T29] audit: type=1326 audit(111.210:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.8.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 111.414393][ T29] audit: type=1326 audit(111.210:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.8.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 111.437655][ T29] audit: type=1326 audit(111.210:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.8.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0419eba9 code=0x7ffc0000 [ 111.489367][ T6673] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 111.604550][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1726'. [ 112.402583][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1731'. [ 112.414346][ T8006] vlan2: entered promiscuous mode [ 112.419414][ T8006] syz_tun: entered promiscuous mode [ 112.431895][ T8011] netem: change failed [ 112.506472][ T8016] netlink: 'syz.7.1733': attribute type 1 has an invalid length. [ 112.514328][ T8016] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1733'. [ 113.206528][ T8022] bond0: (slave dummy0): Releasing backup interface [ 113.223484][ T8022] bond0: (slave bond_slave_0): Releasing backup interface [ 113.234293][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.249179][ T8022] bond0: (slave bond_slave_1): Releasing backup interface [ 113.278676][ T8027] netlink: 'syz.6.1734': attribute type 10 has an invalid length. [ 113.286576][ T8027] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1734'. [ 113.303142][ T8029] loop9: detected capacity change from 0 to 512 [ 113.310232][ T8022] team0: Port device team_slave_0 removed [ 113.330936][ T8029] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.1737: iget: bad i_size value: 38620345925642 [ 113.356336][ T8022] team0: Port device team_slave_1 removed [ 113.366449][ T8022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.373878][ T8022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.387275][ T8029] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1737: couldn't read orphan inode 15 (err -117) [ 113.387643][ T8039] loop7: detected capacity change from 0 to 764 [ 113.400122][ T8029] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.421305][ T8022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.428900][ T8022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.481603][ T8027] batman_adv: batadv0: Adding interface: veth1_vlan [ 113.497430][ T8040] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.1737: bg 0: block 5: invalid block bitmap [ 113.516507][ T8027] batman_adv: batadv0: Interface activated: veth1_vlan [ 113.524292][ T8035] $Hÿ: renamed from bond0 (while UP) [ 113.535947][ T8035] $Hÿ: entered promiscuous mode [ 113.541142][ T8035] bond_slave_0: entered promiscuous mode [ 113.541251][ T8040] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1860 with error 28 [ 113.547056][ T8035] bond_slave_1: entered promiscuous mode [ 113.559325][ T8040] EXT4-fs (loop9): This should not happen!! Data will be lost [ 113.559325][ T8040] [ 113.574795][ T8040] EXT4-fs (loop9): Total free blocks count 0 [ 113.580828][ T8040] EXT4-fs (loop9): Free/Dirty block details [ 113.586863][ T8040] EXT4-fs (loop9): free_blocks=0 [ 113.591850][ T8040] EXT4-fs (loop9): dirty_blocks=1876 [ 113.597351][ T8040] EXT4-fs (loop9): Block reservation details [ 113.603355][ T8040] EXT4-fs (loop9): i_reserved_data_blocks=1876 [ 113.767387][ T8062] netlink: 'syz.8.1754': attribute type 4 has an invalid length. [ 113.835545][ T8065] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1756'. [ 113.844769][ T8065] tipc: Started in network mode [ 113.849925][ T8065] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 113.858845][ T8065] tipc: Enabling of bearer rejected, failed to enable media [ 113.910656][ T6651] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 1860 with max blocks 16 with error 28 [ 113.945182][ T8081] loop6: detected capacity change from 0 to 2048 [ 113.979854][ T8088] loop8: detected capacity change from 0 to 4096 [ 113.988704][ T8088] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.061175][ T6543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.087032][ T8101] loop6: detected capacity change from 0 to 512 [ 114.101444][ T8103] loop7: detected capacity change from 0 to 1024 [ 114.122331][ T8103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.141668][ T8109] loop9: detected capacity change from 0 to 512 [ 114.152684][ T8101] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1770: iget: bad i_size value: 38620345925642 [ 114.174405][ T8101] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1770: couldn't read orphan inode 15 (err -117) [ 114.190369][ T8109] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 114.221908][ T8101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.246674][ T6541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.277741][ T8109] EXT4-fs (loop9): 1 truncate cleaned up [ 114.283920][ T8109] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.370509][ T8109] EXT4-fs error (device loop9): ext4_ext_precache:632: inode #15: comm syz.9.1772: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 114.372192][ T8124] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1770: bg 0: block 5: invalid block bitmap [ 114.410164][ T8124] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 988 with error 28 [ 114.422749][ T8124] EXT4-fs (loop6): This should not happen!! Data will be lost [ 114.422749][ T8124] [ 114.432510][ T8124] EXT4-fs (loop6): Total free blocks count 0 [ 114.438640][ T8124] EXT4-fs (loop6): Free/Dirty block details [ 114.444797][ T8124] EXT4-fs (loop6): free_blocks=0 [ 114.449852][ T8124] EXT4-fs (loop6): dirty_blocks=988 [ 114.455145][ T8124] EXT4-fs (loop6): Block reservation details [ 114.461139][ T8124] EXT4-fs (loop6): i_reserved_data_blocks=988 [ 114.471080][ T6592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.586390][ T2956] Process accounting resumed [ 114.590514][ T8131] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 114.613800][ T8133] netlink: 'syz.7.1782': attribute type 1 has an invalid length. [ 114.621713][ T8133] netlink: 161700 bytes leftover after parsing attributes in process `syz.7.1782'. [ 114.635383][ T8133] loop7: detected capacity change from 0 to 128 [ 114.653413][ T8133] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 114.673810][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.719413][ T6541] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.757566][ T8150] netlink: 'syz.6.1789': attribute type 1 has an invalid length. [ 114.766299][ T8150] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.1789'. [ 114.856748][ T8160] netlink: 'syz.6.1793': attribute type 1 has an invalid length. [ 114.884801][ T8160] bond1: entered promiscuous mode [ 114.889985][ T8160] bond1: entered allmulticast mode [ 114.896428][ T8160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.912157][ T8160] bridge0: entered promiscuous mode [ 114.917588][ T8160] bridge0: entered allmulticast mode [ 114.924867][ T8160] bond1: (slave bridge0): Enslaving as a backup interface with an up link [ 115.004623][ T6650] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 115.124456][ T6651] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 115.226654][ T8175] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 115.236949][ T8175] bond_slave_0: left promiscuous mode [ 115.252071][ T8175] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 115.260764][ T8175] bond_slave_1: left promiscuous mode [ 115.272757][ T8175] team0: Port device team_slave_0 removed [ 115.278804][ T8182] loop6: detected capacity change from 0 to 512 [ 115.289708][ T8175] team0: Port device team_slave_1 removed [ 115.292771][ T8183] netlink: 'syz.8.1797': attribute type 10 has an invalid length. [ 115.303723][ T8183] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1797'. [ 115.312580][ T8177] tipc: Enabling of bearer rejected, failed to enable media [ 115.322823][ T8183] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 115.323587][ T8182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.477706][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.525258][ T8203] IPv4: Oversized IP packet from 127.202.26.0 [ 115.545525][ T8199] tipc: Started in network mode [ 115.550603][ T8199] tipc: Node identity ca7bde597946, cluster identity 4711 [ 115.557986][ T8199] tipc: Enabled bearer , priority 0 [ 115.610005][ T8217] netlink: 'syz.6.1813': attribute type 1 has an invalid length. [ 115.617980][ T8217] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.1813'. [ 115.644399][ T8199] tipc: Disabling bearer [ 115.654678][ T8217] loop6: detected capacity change from 0 to 128 [ 115.663968][ T8217] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 115.800935][ T4947] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.862536][ T8229] loop6: detected capacity change from 0 to 1024 [ 115.892554][ T8229] EXT4-fs: Ignoring removed orlov option [ 115.900325][ T8221] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.921303][ T8229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.108555][ T8235] loop9: detected capacity change from 0 to 8192 [ 116.117814][ T8238] loop7: detected capacity change from 0 to 2048 [ 116.128240][ T8221] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.157095][ T8238] EXT4-fs (loop7): failed to initialize system zone (-117) [ 116.171651][ T8238] EXT4-fs (loop7): mount failed [ 116.190845][ T8242] rdma_op ffff88811a93d980 conn xmit_rdma 0000000000000000 [ 116.202081][ T8238] geneve2: entered promiscuous mode [ 116.214526][ T6650] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.223188][ T6650] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.230444][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.253036][ T6650] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.262720][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 116.262737][ T29] audit: type=1326 audit(116.240:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.9.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 116.291919][ T29] audit: type=1326 audit(116.240:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.9.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 116.292405][ T6650] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.346839][ T29] audit: type=1326 audit(116.240:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.9.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 116.369840][ T29] audit: type=1326 audit(116.240:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.9.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 116.392793][ T29] audit: type=1326 audit(116.240:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.9.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 116.415830][ T29] audit: type=1326 audit(116.240:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.9.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 116.438670][ T29] audit: type=1326 audit(116.260:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.9.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 116.461834][ T29] audit: type=1400 audit(116.330:4081): avc: denied { connect } for pid=8250 comm="syz.5.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.552383][ T8221] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.586394][ T8255] loop9: detected capacity change from 0 to 512 [ 116.594447][ T8255] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.609782][ T8258] netlink: 'syz.5.1830': attribute type 1 has an invalid length. [ 116.617698][ T8258] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.1830'. [ 116.629133][ T8221] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.698945][ T6651] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.708013][ T8262] netlink: 'syz.6.1832': attribute type 49 has an invalid length. [ 116.724412][ T29] audit: type=1400 audit(116.710:4082): avc: denied { kexec_image_load } for pid=8259 comm="syz.7.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 116.747053][ T6592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.752732][ T6651] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.764670][ T6651] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.772858][ T6651] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.794443][ T8268] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.810800][ T8270] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.896044][ T8268] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.917911][ T8270] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.956077][ T8268] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.001520][ T8270] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.045892][ T8268] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.088586][ T8270] netdevsim netdevsim9 5Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.113356][ T8279] SELinux: Context is not valid (left unmapped). [ 117.120100][ T29] audit: type=1400 audit(117.110:4083): avc: denied { relabelto } for pid=8278 comm="syz.5.1837" name="cgroup.controllers" dev="tmpfs" ino=1847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 117.180837][ T6651] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.192264][ T6651] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.203447][ T6651] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.214570][ T6650] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.494038][ T8285] loop7: detected capacity change from 0 to 512 [ 117.496771][ T8287] loop9: detected capacity change from 0 to 512 [ 117.505296][ T8285] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1839: iget: bad i_size value: 38620345925642 [ 117.520146][ T8287] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 117.520543][ T8285] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1839: couldn't read orphan inode 15 (err -117) [ 117.543817][ T8285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.558204][ T8287] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 117.577598][ T8287] EXT4-fs (loop9): 1 truncate cleaned up [ 117.588217][ T8287] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.665350][ T8293] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1839: bg 0: block 5: invalid block bitmap [ 117.678115][ T8293] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 117.690618][ T8293] EXT4-fs (loop7): This should not happen!! Data will be lost [ 117.690618][ T8293] [ 117.697374][ T8298] loop6: detected capacity change from 0 to 1024 [ 117.700637][ T8293] EXT4-fs (loop7): Total free blocks count 0 [ 117.712921][ T8293] EXT4-fs (loop7): Free/Dirty block details [ 117.716923][ T8298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.718880][ T8293] EXT4-fs (loop7): free_blocks=0 [ 117.730452][ T8293] EXT4-fs (loop7): dirty_blocks=2720 [ 117.735783][ T8293] EXT4-fs (loop7): Block reservation details [ 117.741784][ T8293] EXT4-fs (loop7): i_reserved_data_blocks=2720 [ 117.749074][ T8298] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 117.757759][ T8298] System zones: 0-1, 3-36 [ 117.763067][ T8298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.795754][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.840593][ T6592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.865606][ T3432] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 668 with error 28 [ 117.883723][ T8308] loop6: detected capacity change from 0 to 128 [ 118.041608][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1858'. [ 118.082347][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1859'. [ 118.096022][ T8335] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.110012][ T8335] sd 0:0:1:0: device reset [ 120.049599][ T6673] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.060439][ T6673] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.070549][ T6673] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.081769][ T6673] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.128044][ T8343] loop8: detected capacity change from 0 to 512 [ 120.165650][ T8343] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1861: iget: bad i_size value: 38620345925642 [ 120.185479][ T8343] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1861: couldn't read orphan inode 15 (err -117) [ 120.220417][ T8353] hub 6-0:1.0: USB hub found [ 120.231018][ T8353] hub 6-0:1.0: 8 ports detected [ 120.293714][ T8354] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1861: bg 0: block 5: invalid block bitmap [ 120.307301][ T8354] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 864 with error 28 [ 120.319725][ T8354] EXT4-fs (loop8): This should not happen!! Data will be lost [ 120.319725][ T8354] [ 120.329432][ T8354] EXT4-fs (loop8): Total free blocks count 0 [ 120.335566][ T8354] EXT4-fs (loop8): Free/Dirty block details [ 120.341663][ T8354] EXT4-fs (loop8): free_blocks=0 [ 120.346713][ T8354] EXT4-fs (loop8): dirty_blocks=864 [ 120.351937][ T8354] EXT4-fs (loop8): Block reservation details [ 120.357968][ T8354] EXT4-fs (loop8): i_reserved_data_blocks=864 [ 120.509646][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1879'. [ 120.522652][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1879'. [ 120.524530][ T8364] netlink: 'syz.8.1867': attribute type 1 has an invalid length. [ 120.539582][ T8364] netlink: 161700 bytes leftover after parsing attributes in process `syz.8.1867'. [ 120.575521][ T8364] loop8: detected capacity change from 0 to 128 [ 120.614729][ T8359] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.700442][ T8376] netlink: 'syz.7.1877': attribute type 10 has an invalid length. [ 120.729883][ T8376] team0: Port device dummy0 added [ 120.748625][ T8378] loop8: detected capacity change from 0 to 128 [ 120.799742][ T8382] loop9: detected capacity change from 0 to 512 [ 120.805173][ T8359] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.806472][ T8382] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.806892][ T8382] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 120.835211][ T8382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 120.843499][ T8382] System zones: 1-12 [ 120.848788][ T8382] EXT4-fs (loop9): 1 truncate cleaned up [ 120.943020][ T8359] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.039859][ T8359] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.221292][ T8391] loop8: detected capacity change from 0 to 512 [ 121.424719][ T6648] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.442159][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 121.442213][ T29] audit: type=1326 audit(121.420:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 121.452230][ T56] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.471307][ T29] audit: type=1326 audit(121.420:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 121.471341][ T29] audit: type=1326 audit(121.420:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 121.525230][ T29] audit: type=1326 audit(121.420:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 121.548674][ T29] audit: type=1326 audit(121.420:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 121.571531][ T29] audit: type=1326 audit(121.420:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 121.582177][ T56] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.617440][ T29] audit: type=1326 audit(121.420:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 121.635538][ T56] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.640601][ T29] audit: type=1326 audit(121.420:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 121.671481][ T29] audit: type=1326 audit(121.420:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 121.694399][ T29] audit: type=1326 audit(121.420:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 121.758325][ T8413] pim6reg1: entered promiscuous mode [ 121.764243][ T8413] pim6reg1: entered allmulticast mode [ 121.853836][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1896'. [ 121.911033][ T8431] loop9: detected capacity change from 0 to 512 [ 122.020521][ T8442] vlan2: entered allmulticast mode [ 122.025966][ T8442] bridge_slave_0: entered allmulticast mode [ 122.100191][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1906'. [ 122.372965][ T8470] netlink: 292 bytes leftover after parsing attributes in process `syz.5.1916'. [ 122.583144][ T8491] loop8: detected capacity change from 0 to 512 [ 122.602923][ T8491] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 122.621057][ T8491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 122.629320][ T8491] System zones: 1-12 [ 122.633551][ T8491] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.1927: corrupted in-inode xattr: e_value size too large [ 122.648984][ T8491] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1927: couldn't read orphan inode 15 (err -117) [ 122.697360][ T8498] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.797938][ T8498] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.808119][ T8508] loop8: detected capacity change from 0 to 1024 [ 122.855933][ T8498] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.991813][ T8498] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.103338][ T6650] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.142354][ T6650] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.181103][ T6650] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.215002][ T6650] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.662413][ T8549] netlink: 'syz.9.1949': attribute type 1 has an invalid length. [ 123.670221][ T8549] netlink: 198116 bytes leftover after parsing attributes in process `syz.9.1949'. [ 124.362995][ T8571] syz_tun: entered allmulticast mode [ 124.393997][ T8571] dvmrp8: entered allmulticast mode [ 124.412811][ T8571] syz_tun: left allmulticast mode [ 124.423523][ T8571] dvmrp8: left allmulticast mode [ 124.561754][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1960'. [ 124.570776][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1960'. [ 124.632243][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1960'. [ 124.673675][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1960'. [ 124.682646][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1960'. [ 124.810664][ T8554] Set syz1 is full, maxelem 65536 reached [ 124.978343][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.986951][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.022149][ T8586] binfmt_misc: register: failed to install interpreter file ./file2 [ 125.336786][ T8604] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.366427][ T8606] bond1: entered promiscuous mode [ 125.371527][ T8606] bond1: entered allmulticast mode [ 125.376996][ T8606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.385345][ T8606] bond1 (unregistering): Released all slaves [ 125.416333][ T8604] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.466638][ T8604] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.476777][ T8613] loop7: detected capacity change from 0 to 512 [ 125.515746][ T8604] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.548935][ T8621] loop7: detected capacity change from 0 to 512 [ 125.644258][ T8625] loop7: detected capacity change from 0 to 512 [ 125.657834][ T8625] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 125.854025][ T8647] loop6: detected capacity change from 0 to 1024 [ 125.877334][ T8647] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1986: Allocating blocks 385-513 which overlap fs metadata [ 125.899096][ T8647] EXT4-fs (loop6): pa ffff888106db8930: logic 16, phys. 129, len 24 [ 125.907273][ T8647] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 125.920432][ T8647] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 125.932827][ T8647] EXT4-fs (loop6): This should not happen!! Data will be lost [ 125.932827][ T8647] [ 125.942515][ T8647] EXT4-fs (loop6): Total free blocks count 0 [ 125.948707][ T8647] EXT4-fs (loop6): Free/Dirty block details [ 125.954650][ T8647] EXT4-fs (loop6): free_blocks=128 [ 125.959935][ T8647] EXT4-fs (loop6): dirty_blocks=0 [ 125.965248][ T8647] EXT4-fs (loop6): Block reservation details [ 125.971239][ T8647] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 126.042027][ T8651] tipc: Enabled bearer , priority 0 [ 126.049827][ T8650] tipc: Resetting bearer [ 126.064570][ T8650] tipc: Disabling bearer [ 126.174074][ T8657] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1990'. [ 126.311360][ T8667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8667 comm=syz.9.1995 [ 126.345833][ T8665] loop6: detected capacity change from 0 to 8192 [ 126.454619][ T8677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8677 comm=syz.9.1999 [ 126.653561][ T8689] vlan2: entered promiscuous mode [ 127.102983][ T8704] loop9: detected capacity change from 0 to 8192 [ 127.209710][ T8710] loop9: detected capacity change from 0 to 512 [ 127.218878][ T8710] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2013: iget: bad i_size value: 38620345925642 [ 127.232153][ T8710] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2013: couldn't read orphan inode 15 (err -117) [ 127.284743][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 127.284763][ T29] audit: type=1400 audit(127.270:4327): avc: denied { create } for pid=8712 comm="syz.6.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 127.319745][ T8715] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2013: bg 0: block 5: invalid block bitmap [ 127.344103][ T8715] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1044 with error 28 [ 127.356719][ T8715] EXT4-fs (loop9): This should not happen!! Data will be lost [ 127.356719][ T8715] [ 127.366443][ T8715] EXT4-fs (loop9): Total free blocks count 0 [ 127.372449][ T8715] EXT4-fs (loop9): Free/Dirty block details [ 127.378435][ T8715] EXT4-fs (loop9): free_blocks=0 [ 127.383418][ T8715] EXT4-fs (loop9): dirty_blocks=1044 [ 127.388780][ T8715] EXT4-fs (loop9): Block reservation details [ 127.394834][ T8715] EXT4-fs (loop9): i_reserved_data_blocks=1044 [ 127.440267][ T8717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8717 comm=syz.6.2015 [ 127.574241][ T6673] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.582614][ T6673] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.616832][ T6673] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.631788][ T6673] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.668870][ T29] audit: type=1400 audit(127.650:4328): avc: denied { mount } for pid=8728 comm="syz.6.2020" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 127.713871][ T8732] __nla_validate_parse: 3 callbacks suppressed [ 127.713889][ T8732] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2022'. [ 127.720914][ T29] audit: type=1400 audit(127.650:4329): avc: denied { unmount } for pid=8728 comm="syz.6.2020" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 127.748360][ T29] audit: type=1326 audit(127.690:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8730 comm="syz.9.2021" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c3513eba9 code=0x0 [ 127.749709][ T8732] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2022'. [ 127.785886][ T8735] syzkaller0: entered promiscuous mode [ 127.791643][ T8735] syzkaller0: entered allmulticast mode [ 127.954359][ T8747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8747 comm=syz.5.2029 [ 127.987540][ T8751] loop7: detected capacity change from 0 to 1024 [ 127.994910][ T8751] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.003825][ T8749] loop6: detected capacity change from 0 to 512 [ 128.011254][ T8751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 128.022017][ T8749] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2030: iget: bad i_size value: 38620345925642 [ 128.048646][ T8749] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2030: couldn't read orphan inode 15 (err -117) [ 128.114405][ T29] audit: type=1326 audit(128.090:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.7.2036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda7a7aeba9 code=0x0 [ 128.161129][ T8764] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2030: bg 0: block 5: invalid block bitmap [ 128.174156][ T8764] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 128.186897][ T8764] EXT4-fs (loop6): This should not happen!! Data will be lost [ 128.186897][ T8764] [ 128.196569][ T8764] EXT4-fs (loop6): Total free blocks count 0 [ 128.202715][ T8764] EXT4-fs (loop6): Free/Dirty block details [ 128.208653][ T8764] EXT4-fs (loop6): free_blocks=0 [ 128.213641][ T8764] EXT4-fs (loop6): dirty_blocks=3312 [ 128.218978][ T8764] EXT4-fs (loop6): Block reservation details [ 128.225008][ T8764] EXT4-fs (loop6): i_reserved_data_blocks=3312 [ 128.234597][ T29] audit: type=1400 audit(128.210:4332): avc: denied { create } for pid=8762 comm="syz.7.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 128.253732][ T29] audit: type=1400 audit(128.210:4333): avc: denied { read write } for pid=8762 comm="syz.7.2036" path="socket:[27216]" dev="sockfs" ino=27216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 128.312257][ T8767] syzkaller0: entered promiscuous mode [ 128.317813][ T8767] syzkaller0: entered allmulticast mode [ 128.402318][ T6673] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1260 with error 28 [ 128.415120][ T6673] EXT4-fs (loop6): This should not happen!! Data will be lost [ 128.415120][ T6673] [ 128.474272][ T8783] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 128.482491][ T8783] SELinux: failed to load policy [ 128.510806][ T8787] loop8: detected capacity change from 0 to 1024 [ 128.540868][ T8787] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 128.575963][ T8795] loop9: detected capacity change from 0 to 512 [ 128.605801][ T29] audit: type=1400 audit(128.590:4334): avc: denied { getopt } for pid=8794 comm="syz.9.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.636065][ T29] audit: type=1400 audit(128.620:4335): avc: denied { rename } for pid=8786 comm="syz.8.2046" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.657712][ T29] audit: type=1400 audit(128.620:4336): avc: denied { rmdir } for pid=8786 comm="syz.8.2046" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.166806][ T8825] loop7: detected capacity change from 0 to 128 [ 129.253058][ T8825] EXT4-fs (loop7): shut down requested (2) [ 129.476426][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2061'. [ 129.605682][ T8840] loop9: detected capacity change from 0 to 1024 [ 129.649220][ T8840] EXT4-fs mount: 34 callbacks suppressed [ 129.649238][ T8840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.718293][ T8840] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 129.781255][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2065'. [ 129.821580][ T6592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.140599][ T8871] netlink: 'syz.9.2072': attribute type 4 has an invalid length. [ 130.168362][ T8873] loop9: detected capacity change from 0 to 1024 [ 130.186251][ T8873] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.202455][ T8873] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.2073: Allocating blocks 385-513 which overlap fs metadata [ 130.223090][ T8873] EXT4-fs (loop9): pa ffff888106d94700: logic 16, phys. 129, len 24 [ 130.231252][ T8873] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 130.276098][ T6592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.300751][ T8885] netlink: 'syz.5.2077': attribute type 10 has an invalid length. [ 130.311336][ T8885] team0: Port device 0! added [ 130.329954][ T8885] netlink: 'syz.5.2077': attribute type 10 has an invalid length. [ 130.342604][ T8885] team0: Failed to send port change of device 0! via netlink (err -105) [ 130.354078][ T8885] team0: Failed to send options change via netlink (err -105) [ 130.361795][ T8885] team0: Failed to send port change of device 0! via netlink (err -105) [ 130.371642][ T8885] team0: Port device 0! removed [ 130.380109][ T8885] bond0: (slave 0!): Enslaving as an active interface with an up link [ 130.392137][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2078'. [ 130.430808][ T8890] netlink: 'syz.5.2079': attribute type 4 has an invalid length. [ 130.480118][ T8896] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2083'. [ 130.489469][ T8896] tipc: Started in network mode [ 130.494460][ T8896] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 130.503620][ T8896] tipc: Enabling of bearer rejected, failed to enable media [ 130.515818][ T8894] netlink: 'syz.5.2082': attribute type 4 has an invalid length. [ 130.593336][ T8908] loop6: detected capacity change from 0 to 1024 [ 130.619812][ T8908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.634951][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2092'. [ 130.647721][ T8908] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2089: Allocating blocks 385-513 which overlap fs metadata [ 130.665397][ T8908] EXT4-fs (loop6): pa ffff888106d94690: logic 16, phys. 129, len 24 [ 130.673560][ T8908] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 130.712651][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.776470][ T8918] netlink: 'syz.8.2093': attribute type 10 has an invalid length. [ 130.794620][ T8918] team0: Port device dummy0 added [ 130.806157][ T8918] netlink: 'syz.8.2093': attribute type 10 has an invalid length. [ 130.829687][ T8918] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 130.844675][ T8918] team0: Failed to send options change via netlink (err -105) [ 130.855493][ T8918] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 130.866130][ T8918] team0: Port device dummy0 removed [ 130.873715][ T8918] dummy0: entered promiscuous mode [ 130.880369][ T8918] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 130.891203][ T8927] netlink: 'syz.9.2098': attribute type 4 has an invalid length. [ 130.933199][ T8931] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2099'. [ 130.942390][ T8931] tipc: Enabling of bearer rejected, failed to enable media [ 130.988578][ T8933] pim6reg1: entered promiscuous mode [ 130.993941][ T8933] pim6reg1: entered allmulticast mode [ 131.002550][ T8935] loop8: detected capacity change from 0 to 512 [ 131.073031][ T8935] Invalid ELF header magic: != ELF [ 131.130362][ T8943] loop8: detected capacity change from 0 to 1024 [ 131.138066][ T8943] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.149905][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2103'. [ 131.160713][ T8943] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #3: block 1: comm syz.8.2104: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.176392][ T8943] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.2104: Failed to acquire dquot type 0 [ 131.188274][ T8943] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.2104: Freeing blocks not in datazone - block = 0, count = 4096 [ 131.203061][ T8943] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.2104: Invalid inode bitmap blk 0 in block_group 0 [ 131.217326][ T6673] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:58: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.231917][ T6673] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:58: Failed to release dquot type 0 [ 131.245107][ T8943] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 131.254388][ T8943] EXT4-fs (loop8): 1 orphan inode deleted [ 131.260724][ T8943] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.283236][ T8943] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.460196][ T8912] Set syz1 is full, maxelem 65536 reached [ 131.476513][ T8949] loop8: detected capacity change from 0 to 128 [ 131.510179][ T8949] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 131.641791][ T8949] syz.8.2106: attempt to access beyond end of device [ 131.641791][ T8949] loop8: rw=0, sector=97, nr_sectors = 944 limit=128 [ 131.697951][ T56] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 131.711727][ T8960] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2112'. [ 131.720878][ T8960] tipc: Enabling of bearer rejected, failed to enable media [ 132.295847][ T29] kauditd_printk_skb: 1282 callbacks suppressed [ 132.295860][ T29] audit: type=1326 audit(132.280:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 132.325501][ T29] audit: type=1326 audit(132.310:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 132.348776][ T29] audit: type=1326 audit(132.330:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 132.371806][ T29] audit: type=1326 audit(132.340:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 132.395063][ T29] audit: type=1326 audit(132.350:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 132.418131][ T29] audit: type=1326 audit(132.360:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 132.441158][ T29] audit: type=1326 audit(132.370:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 132.464285][ T29] audit: type=1326 audit(132.380:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 132.487284][ T29] audit: type=1326 audit(132.390:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 132.510481][ T29] audit: type=1326 audit(132.400:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f53bac7eba9 code=0x7ffc0000 [ 132.862442][ T8990] loop7: detected capacity change from 0 to 128 [ 132.871874][ T8990] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 132.876345][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118ee9000: rx timeout, send abort [ 132.889488][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888118ee9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 132.919116][ T8990] syz.7.2122: attempt to access beyond end of device [ 132.919116][ T8990] loop7: rw=0, sector=97, nr_sectors = 944 limit=128 [ 132.959758][ T56] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 133.006384][ T9001] loop7: detected capacity change from 0 to 1024 [ 133.040822][ T9001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.126193][ T9001] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2125: Allocating blocks 385-513 which overlap fs metadata [ 133.171977][ T9001] EXT4-fs (loop7): pa ffff888106d94770: logic 16, phys. 129, len 24 [ 133.180576][ T9001] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 133.193282][ T9024] Invalid ELF header magic: != ELF [ 133.253126][ T6541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.293528][ T9032] loop7: detected capacity change from 0 to 1024 [ 133.300961][ T9032] EXT4-fs: Ignoring removed orlov option [ 133.323228][ T9032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.501411][ T6541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.632538][ T9049] loop8: detected capacity change from 0 to 512 [ 133.643712][ T9049] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.665689][ T9049] EXT4-fs (loop8): failed to initialize system zone (-117) [ 133.677047][ T9049] EXT4-fs (loop8): mount failed [ 133.866597][ T9059] rdma_op ffff88812d09c580 conn xmit_rdma 0000000000000000 [ 133.988774][ T9063] loop6: detected capacity change from 0 to 1024 [ 134.000972][ T9065] loop8: detected capacity change from 0 to 1024 [ 134.019094][ T9063] EXT4-fs: Ignoring removed orlov option [ 134.068706][ T9063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.088701][ T9065] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.134121][ T9074] loop7: detected capacity change from 0 to 1024 [ 134.151197][ T9074] EXT4-fs: inline encryption not supported [ 134.162169][ T9065] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2155: Allocating blocks 385-513 which overlap fs metadata [ 134.192741][ T9074] EXT4-fs (loop7): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 134.225549][ T9065] EXT4-fs (loop8): pa ffff888106db8930: logic 16, phys. 129, len 24 [ 134.233660][ T9065] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 134.268984][ T9074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.299316][ T9074] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 134.365619][ T6541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.378248][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.389319][ T6543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.470928][ T9088] loop6: detected capacity change from 0 to 512 [ 134.584330][ T9088] Invalid ELF header magic: != ELF [ 134.624025][ T9093] loop8: detected capacity change from 0 to 2048 [ 134.642039][ T9093] EXT4-fs (loop8): failed to initialize system zone (-117) [ 134.650406][ T9093] EXT4-fs (loop8): mount failed [ 134.669347][ T9093] geneve2: entered promiscuous mode [ 134.738182][ T9105] loop8: detected capacity change from 0 to 8192 [ 134.818091][ T9116] rdma_op ffff888142e61d80 conn xmit_rdma 0000000000000000 [ 134.869389][ T9121] loop8: detected capacity change from 0 to 1024 [ 134.877843][ T9121] EXT4-fs: Ignoring removed orlov option [ 134.888970][ T9121] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.058034][ T6543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.115881][ T9130] tipc: Enabled bearer , priority 0 [ 135.131741][ T9130] tipc: Disabling bearer [ 135.153197][ T9133] loop9: detected capacity change from 0 to 2048 [ 135.182716][ T9133] EXT4-fs (loop9): failed to initialize system zone (-117) [ 135.190517][ T9133] EXT4-fs (loop9): mount failed [ 135.222778][ T9133] geneve2: entered promiscuous mode [ 135.267367][ T9139] loop9: detected capacity change from 0 to 164 [ 135.273423][ T9141] loop8: detected capacity change from 0 to 1024 [ 135.280792][ T9141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.305109][ T9141] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 135.313700][ T9139] syz.9.2183: attempt to access beyond end of device [ 135.313700][ T9139] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 135.328840][ T9141] System zones: 0-1, 3-36 [ 135.334002][ T9141] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.347766][ T9139] syz.9.2183: attempt to access beyond end of device [ 135.347766][ T9139] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 135.383997][ T6543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.465452][ T9149] netlink: 'syz.9.2187': attribute type 49 has an invalid length. [ 135.497992][ T9156] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.573400][ T9167] loop6: detected capacity change from 0 to 512 [ 135.583273][ T9167] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.597811][ T9156] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.635878][ T9156] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.658414][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.686616][ T9156] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.702468][ T9174] loop6: detected capacity change from 0 to 2048 [ 135.715261][ T9174] EXT4-fs (loop6): failed to initialize system zone (-117) [ 135.722553][ T9174] EXT4-fs (loop6): mount failed [ 135.736686][ T9174] geneve2: entered promiscuous mode [ 135.753500][ T6682] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.773520][ T6682] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.791478][ T6682] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.800115][ T6682] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.914062][ T9195] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.985992][ T9195] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.036218][ T9195] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.085962][ T9195] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.130854][ T6631] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.142184][ T6631] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.153456][ T6631] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.165170][ T6631] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.280274][ T9198] Invalid ELF header magic: != ELF [ 136.490729][ T9216] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2223'. [ 136.617983][ T9225] loop7: detected capacity change from 0 to 512 [ 136.650080][ T9225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.747502][ T6541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.137422][ T9244] loop7: detected capacity change from 0 to 128 [ 137.171046][ T9244] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 137.299830][ T6541] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.309211][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 137.309227][ T29] audit: type=1326 audit(137.280:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.9.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 137.381421][ T29] audit: type=1326 audit(137.290:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.9.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 137.404340][ T29] audit: type=1326 audit(137.300:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.9.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 137.427304][ T29] audit: type=1326 audit(137.310:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.9.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 137.455227][ T29] audit: type=1326 audit(137.320:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.9.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 137.478309][ T29] audit: type=1326 audit(137.330:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.9.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 137.501169][ T29] audit: type=1326 audit(137.340:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.9.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 137.524249][ T29] audit: type=1326 audit(137.350:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.9.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 137.584288][ T29] audit: type=1326 audit(137.360:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.9.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 137.607409][ T29] audit: type=1326 audit(137.370:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.9.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3c3513eba9 code=0x7ffc0000 [ 137.717217][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2231'. [ 137.789739][ T9261] geneve2: entered promiscuous mode [ 137.868449][ T9254] netlink: 'syz.7.2228': attribute type 10 has an invalid length. [ 137.884318][ T9254] ipvlan0: entered allmulticast mode [ 137.889663][ T9254] veth0_vlan: entered allmulticast mode [ 137.904301][ T9254] team0: Device ipvlan0 failed to register rx_handler [ 137.932513][ T9268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.012922][ T9280] openvswitch: netlink: Message has 6 unknown bytes. [ 138.041566][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2239'. [ 138.107367][ T9290] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.160089][ T9290] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.178192][ T9296] loop8: detected capacity change from 0 to 2048 [ 138.215966][ T9296] EXT4-fs (loop8): failed to initialize system zone (-117) [ 138.226171][ T9303] loop6: detected capacity change from 0 to 128 [ 138.233906][ T9296] EXT4-fs (loop8): mount failed [ 138.240660][ T9303] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.264364][ T9290] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.335521][ T9290] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.384100][ T4947] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.426765][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.436969][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.457558][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.466503][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.584664][ T9325] tipc: Enabled bearer , priority 0 [ 138.593048][ T9325] tipc: Disabling bearer [ 138.744428][ T9328] chnl_net:caif_netlink_parms(): no params data found [ 138.783257][ T9328] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.790642][ T9328] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.797980][ T9328] bridge_slave_0: entered allmulticast mode [ 138.804585][ T9328] bridge_slave_0: entered promiscuous mode [ 138.811252][ T9328] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.818556][ T9328] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.826111][ T9328] bridge_slave_1: entered allmulticast mode [ 138.832501][ T9328] bridge_slave_1: entered promiscuous mode [ 138.850696][ T9328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.861244][ T9328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.880933][ T9328] team0: Port device team_slave_0 added [ 138.887633][ T9328] team0: Port device team_slave_1 added [ 138.903615][ T9328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.910642][ T9328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.936890][ T9328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.949094][ T9328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.956191][ T9328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.982166][ T9328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.008160][ T9328] hsr_slave_0: entered promiscuous mode [ 139.014097][ T9328] hsr_slave_1: entered promiscuous mode [ 139.020048][ T9328] debugfs: 'hsr0' already exists in 'hsr' [ 139.025787][ T9328] Cannot create hsr debugfs directory [ 139.288646][ T9328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 139.297850][ T9328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 139.306984][ T9328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 139.316096][ T9328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 139.331099][ T9328] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.338311][ T9328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.345800][ T9328] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.352832][ T9328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.379918][ T9328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.391449][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.399728][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.410790][ T9328] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.420792][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.427874][ T6631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.437966][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.445091][ T6628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.509601][ T9328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.569786][ T9328] veth0_vlan: entered promiscuous mode [ 139.577606][ T9328] veth1_vlan: entered promiscuous mode [ 139.592656][ T9328] veth0_macvtap: entered promiscuous mode [ 139.600307][ T9328] veth1_macvtap: entered promiscuous mode [ 139.611618][ T9328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.622904][ T9328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.632765][ T6628] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.644982][ T6628] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.656222][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.665018][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.781111][ T9378] loop3: detected capacity change from 0 to 2048 [ 139.799082][ T9378] EXT4-fs (loop3): failed to initialize system zone (-117) [ 139.807819][ T9378] EXT4-fs (loop3): mount failed [ 139.926538][ T9393] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.952931][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2272'. [ 140.155144][ T9407] loop7: detected capacity change from 0 to 1024 [ 140.166153][ T9407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.184604][ T9407] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.2280: inode #3843031323: comm syz.7.2280: iget: illegal inode # [ 140.199075][ T9407] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.2280: error while reading EA inode 3843031323 err=-117 [ 140.223843][ T6541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.282762][ T9415] loop7: detected capacity change from 0 to 2048 [ 140.295882][ T9415] EXT4-fs (loop7): failed to initialize system zone (-117) [ 140.303213][ T9415] EXT4-fs (loop7): mount failed [ 140.332044][ T9419] loop7: detected capacity change from 0 to 128 [ 140.577002][ T9433] loop8: detected capacity change from 0 to 512 [ 140.596652][ T9433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 140.621747][ T9433] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.2287: Failed to acquire dquot type 0 [ 140.649427][ T6543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 141.158870][ T9481] pimreg: entered allmulticast mode [ 141.169483][ T9481] pimreg: left allmulticast mode [ 141.263024][ T9487] loop7: detected capacity change from 0 to 512 [ 141.317675][ T9487] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.374680][ T6541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.408685][ T9494] loop7: detected capacity change from 0 to 512 [ 141.418465][ T9494] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 141.429886][ T9494] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 141.445754][ T9494] EXT4-fs (loop7): 1 truncate cleaned up [ 141.451874][ T9494] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.703008][ T9393] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.725498][ T6541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.133350][ T9507] ================================================================== [ 142.141468][ T9507] BUG: KCSAN: data-race in __delete_from_swap_cache / folio_mapping [ 142.149517][ T9507] [ 142.151855][ T9507] write to 0xffffea00057ea6a8 of 8 bytes by task 9504 on cpu 1: [ 142.159502][ T9507] __delete_from_swap_cache+0x1e8/0x280 [ 142.165147][ T9507] delete_from_swap_cache+0x73/0xe0 [ 142.170498][ T9507] shmem_swapin_folio+0xf3e/0x13e0 [ 142.175614][ T9507] shmem_get_folio_gfp+0x26c/0xd60 [ 142.180732][ T9507] shmem_fault+0xf6/0x250 [ 142.185048][ T9507] __do_fault+0xb9/0x200 [ 142.189280][ T9507] handle_mm_fault+0xf78/0x2c20 [ 142.194121][ T9507] do_user_addr_fault+0x3fe/0x1090 [ 142.199232][ T9507] exc_page_fault+0x62/0xa0 [ 142.203817][ T9507] asm_exc_page_fault+0x26/0x30 [ 142.208661][ T9507] fault_in_readable+0xad/0x170 [ 142.213512][ T9507] fault_in_iov_iter_readable+0x129/0x210 [ 142.219227][ T9507] generic_perform_write+0x3cf/0x490 [ 142.224517][ T9507] shmem_file_write_iter+0xc5/0xf0 [ 142.229627][ T9507] vfs_write+0x52a/0x960 [ 142.233860][ T9507] ksys_write+0xda/0x1a0 [ 142.238095][ T9507] __x64_sys_write+0x40/0x50 [ 142.242762][ T9507] x64_sys_call+0x27fe/0x2ff0 [ 142.247444][ T9507] do_syscall_64+0xd2/0x200 [ 142.252141][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.258028][ T9507] [ 142.260350][ T9507] read to 0xffffea00057ea6a8 of 8 bytes by task 9507 on cpu 0: [ 142.267879][ T9507] folio_mapping+0xdd/0x120 [ 142.272392][ T9507] lru_add+0x80/0x430 [ 142.276359][ T9507] folio_batch_move_lru+0x174/0x230 [ 142.281544][ T9507] lru_add_drain_cpu+0x77/0x250 [ 142.286382][ T9507] lru_add_drain+0x25/0x70 [ 142.290884][ T9507] swap_cluster_readahead+0x35a/0x3e0 [ 142.296259][ T9507] shmem_swapin_folio+0xa2f/0x13e0 [ 142.301356][ T9507] shmem_get_folio_gfp+0x26c/0xd60 [ 142.306508][ T9507] shmem_fault+0xf6/0x250 [ 142.310823][ T9507] __do_fault+0xb9/0x200 [ 142.315056][ T9507] handle_mm_fault+0xf78/0x2c20 [ 142.319983][ T9507] __get_user_pages+0x102e/0x1fa0 [ 142.324995][ T9507] __mm_populate+0x243/0x3a0 [ 142.329588][ T9507] do_mlock+0x47f/0x520 [ 142.333739][ T9507] __x64_sys_mlock+0x36/0x50 [ 142.338842][ T9507] x64_sys_call+0x18f8/0x2ff0 [ 142.343775][ T9507] do_syscall_64+0xd2/0x200 [ 142.348274][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.354154][ T9507] [ 142.356514][ T9507] value changed: 0x0000000000001369 -> 0x0000000000000000 [ 142.363603][ T9507] [ 142.365911][ T9507] Reported by Kernel Concurrency Sanitizer on: [ 142.372046][ T9507] CPU: 0 UID: 0 PID: 9507 Comm: syz.5.2311 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.381839][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.391889][ T9507] ================================================================== [ 142.408317][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 142.408392][ T29] audit: type=1326 audit(142.390:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.7.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fda7a7aeba9 code=0x7ffc0000 [ 142.438310][ T29] audit: type=1326 audit(142.390:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.7.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7a7aeba9 code=0x7ffc0000 [ 142.464309][ T29] audit: type=1326 audit(142.450:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.7.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7a7aeba9 code=0x7ffc0000 [ 142.508643][ T29] audit: type=1400 audit(142.490:6385): avc: denied { unlink } for pid=6543 comm="syz-executor" name="file0" dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.626871][ T9393] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.697153][ T9393] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.750554][ T6669] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.761802][ T6669] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.772855][ T6669] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.784601][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0