last executing test programs: 9.831806895s ago: executing program 3 (id=3663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) poll(0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) 9.829542876s ago: executing program 3 (id=3664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) close(0xffffffffffffffff) socket(0x0, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 64) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async, rerun: 32) syz_emit_ethernet(0x3a, 0x0, 0x0) (async, rerun: 32) write$cgroup_subtree(r0, 0x0, 0x280) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x4, 0x6, 0x14c, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000002c0)={'custom1\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002340)={{0x0, 0x3, 0x2, 0xfffffffffffffff8, 0x2, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}) (async) chdir(0x0) (async) setuid(0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r7, 0x8929, &(0x7f0000000080)={'wg1\x00', @ifru_settings={0x0, 0x5dd4, @cisco=0x0}}) 9.790711049s ago: executing program 3 (id=3665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000110000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000001001800000000000800120000000200000000000000000006000000000000000000000000000000ff02190000000000000000000000000100"/136], 0x88}}, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x147a42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000004000000080000000b000000f68dd76d4ccc13277bac7800000000b0f436532c914801f9a6555a31bfc170acdabf4d965ceae3bf348a76b1c03364e5eee428a52db5b855f04f22f7b647fb04be7aec620b0050b4a9b4774e84156425829bc717e5277b6e601b60022fd2047e5aa220998fce8ab718", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0200ffff07"], 0xd) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='./bus\x00', &(0x7f00000004c0), 0x400801, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=rdma']) 9.766528171s ago: executing program 3 (id=3666): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async, rerun: 32) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 9.638318373s ago: executing program 3 (id=3668): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 9.587095607s ago: executing program 3 (id=3670): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000001380), &(0x7f00000013c0)=0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xa93, 0x4, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xfe, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) 5.455597414s ago: executing program 4 (id=3749): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0x7, 0x1, 0x2, 0x18, 0xffffffffffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x10, 0x14, &(0x7f0000000200)=""/20, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000400)=[{0x0, 0x4, 0x1, 0x2}, {0x3, 0x5, 0xf, 0x1}, {0x2, 0x5, 0xc, 0x7}, {0x1, 0x3, 0xe, 0xb405875a98d473b4}, {0x2, 0x3, 0xa, 0x7}, {0x2, 0x2, 0x0, 0xc}, {0x3, 0x4, 0xfffffff9, 0x7}, {0x5, 0x1, 0x2, 0x5}], 0x10, 0xfffff17c, @void, @value}, 0x94) r2 = socket$nl_generic(0x11, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='9p_protocol_dump\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000002, 0x0, @perf_config_ext, 0x22c0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:klogd_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) syz_read_part_table(0x5d8, &(0x7f0000000600)="$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") 3.279721232s ago: executing program 1 (id=3796): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 2.339658387s ago: executing program 1 (id=3805): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24008880) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) open(&(0x7f00000005c0)='./bus\x00', 0x147a42, 0x0) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='./bus\x00', &(0x7f00000004c0), 0x400801, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=rdma']) 2.339039988s ago: executing program 1 (id=3806): r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x48080, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x26fd, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x1, 0x242}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000dc2000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x1, 0x1) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.292113202s ago: executing program 0 (id=3807): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) 2.232259917s ago: executing program 0 (id=3808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$sock(0xffffffffffffffff, 0x0, 0x81) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x1a, &(0x7f0000000240)=ANY=[@ANYBLOB="180500f1a1d739470d00"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32, @ANYBLOB="00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000000500000010000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x90) write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[], 0x118) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = dup(0xffffffffffffffff) write$UHID_INPUT(r8, 0x0, 0x0) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.185797552s ago: executing program 4 (id=3809): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010700000000000000000800c40000000000"], 0x2c}}, 0x0) 2.173268743s ago: executing program 0 (id=3810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x200000000fff}, 0x1e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = semget$private(0x0, 0x1, 0x0) semtimedop(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) 2.150037414s ago: executing program 4 (id=3811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 2.149587914s ago: executing program 4 (id=3812): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000002c0)=""/169}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r8, 0xee01) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.141364186s ago: executing program 0 (id=3813): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x4000000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_triestat\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/212, 0xd4}], 0x1, 0xffff, 0x0) 1.98002212s ago: executing program 4 (id=3814): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000018c0)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080009003d0301000000000095000000000000006926000000000000bf67000000000000260608000fff52004507000002000000240600000ee60000bf050000000000000f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff2d350100000000009500000000000000050000000000000095000000f7ffffff1e1bd1fe4b3af9c97925711095cc1a3a25b9418ffdc4a1da470a14e4391c3fb6915cbff2a4911fe82664d775cdb9dfc83fa32db39b636c1866b526185f4ab35172a74e9afe751664f580a6c5bccf1ef6583e0c1cd1f7fe416be4278613dae5fbcd1714f63b545d08c2963a5a7231a91d595db8ef17d1af77506ab68c1df70237cc61b8b001f5dc9a200bc6328ea3277387562eefdeae09ab8d05ee86edc8f0cce9c7bcc809c5db956dbfa9fff683317a8f7855872008d59426e609"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 1.964232561s ago: executing program 0 (id=3816): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="2c8ef6fff25f71854bb02441c2edff2c66736dbdda08da0968bf8783e49a23113d3078303030303030303030303001003066581c000000000000bd2551db78fc65240062c543fd92499a55c4676e4ab57351fab1f21354c2000000000000a36961e03f1f9b339e1208fe76adf824d531e4f11e82cd11bccd3e4d4cd5b4502ba9708a2827923cada4e88ec20e806b355ece7f4afbdb8475f9b71f1eafd72d05729520434e51cc55317bb19441bd11c979ca9786b51118d9b1c2246f0b407eaa2083113d1bab6700000000000000", @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYRES32=r1], 0x0, 0x63e, &(0x7f00000004c0)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}, 0x1, 0x0, 0x0, 0x4004c8d4}, 0x0) 1.929741665s ago: executing program 0 (id=3818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x2, 0x35b, 0xc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x6, 0x4eb, &(0x7f0000000540)="$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") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000a40)={0x0, 0x3, 0x1, 'queue1\x00', 0x5}) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x90d, 0x5, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93831a4ae6ddd91d1ce5d29c2ee000600000ff8ee09e737ff0edf0a0ff4117639c2eb4b78c660e677df000005f9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7fd6d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf", [0x0, 0x80]}) write$tun(r4, 0x0, 0x1e) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.899579448s ago: executing program 4 (id=3819): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0x7, 0x1, 0x2, 0x18, 0xffffffffffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x10, 0x14, &(0x7f0000000200)=""/20, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000400)=[{0x0, 0x4, 0x1, 0x2}, {0x3, 0x5, 0xf, 0x1}, {0x2, 0x5, 0xc, 0x7}, {0x1, 0x3, 0xe, 0xb405875a98d473b4}, {0x2, 0x3, 0xa, 0x7}, {0x2, 0x2, 0x0, 0xc}, {0x3, 0x4, 0xfffffff9, 0x7}, {0x5, 0x1, 0x2, 0x5}], 0x10, 0xfffff17c, @void, @value}, 0x94) r2 = socket$nl_generic(0x11, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='9p_protocol_dump\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000002, 0x0, @perf_config_ext, 0x22c0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:klogd_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) syz_read_part_table(0x5d8, &(0x7f0000000600)="$eJzs289r03cYB/AnaUOnHrx48lQ9bDC8KB4NTCWJikLI7EUYKCjizCmCEFmgoAfNQTEH6bGXUsilP05Nw+guLS30XMoOhUIPhbHRXga9NKPrZ5eyjZWlg8HrBeHJ8/28P3ny/AHf4H8tG7/0er1MRPSGfn/w1dFE729uj7QLxdvD5euV+xGZ+DYifhr+4vuDk8wftw9/NS6mfiP1E+Onu+92b+XaP3796+cPF5vZdD5aysZoRJyZ7Iz0bUlOzFR+6ezrN7XS+3r+2XqpsfV2bfXe9E6h0rnbbM3cyd18nHLLqQ6m+iLq8Sqex6OoRjWeRK1P88fam5f3z5fac0+v7RW7HxaupFw5Igb+5a7/ZP7LCx8ftBo3Ls2e+3S1Pr9S2R6IOBUR1aETGA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN9N5ZfOvn5TK72v55+tlxpbb9dW703vFCqdu83WzJ3czccpt5zqYKovoh6v4nk8impk4knUjjf2s7+aP9bevLx/vtSee3ptr9j9sHAl5cp92PXPHJ3/8sLHB63GjUuz5z5drc+vVLYHDnPVoRP6AwAAAAAAAAAAAAAAAAAAABARheLt4fL1yv3DbjC+/Pm77MG3XnrfPRPxzQ8RcTHlN9LzifHT3Xe7t3Ltg+bhYvNUOh9NnzOTnZH/eheO77cAAAD//1z/lKM=") 1.410817032s ago: executing program 1 (id=3832): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000c47f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r3 = gettid() poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) fcntl$setown(0xffffffffffffffff, 0x8, r3) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) close(r4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="02dbdf2505001a00fc0211000000ab000000000000000000fc010000008ddffeac9a5b4c5a000000003300100402001300070000002dbd70000300040000000000d209000006003c0003a2000006000000000000000000000082cde244003fac440000000000004372e36e076761b5d0000000000000fc0000000000000000000000000000010000000000000000000000000002000000000000"], 0x88}}, 0x810) 495.640695ms ago: executing program 1 (id=3841): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) 412.079163ms ago: executing program 1 (id=3842): r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x48080, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x26fd, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x1, 0x242}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000dc2000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x1, 0x1) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 208.453082ms ago: executing program 2 (id=3843): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000000000010057f3f399ae20dd550bca010b174b6b0a00000059528589d162b5e05f6159187b53f151bbf492895b00d9f7b7681294580d49297a8a179d509a7b225060275866de7faeaef06a0a836500000000000000000000000000000000000000000000003a253ca4ea449669f4a0e46d3cd9433aed756415cf5bf9a7d8f31c4a6db8d9a0ddd8aa1ef16b8f019f384ec61ea585f5c98352fc1ffb0944b87ef91e7f318820bf0547307370bf4f2c79224e75a5b0a2966f3fc7f2427f58fec98c824a1a2b7d98dcfa167247e777697110e7fd4a515179", @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4054048}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0xf8}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000", @ANYRES16=r6, @ANYBLOB="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"], 0x154}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0xfe, 0x1, 0x7fff0003}]}) clock_gettime(0x0, &(0x7f0000000040)) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x0) 169.699515ms ago: executing program 2 (id=3844): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000ff078500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='skb_copy_datagram_iovec\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000004dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x3c}}, 0x404c0d4) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000060000000000004109da0100000088b69a91f6abad55a5e2b22df4ed857465353dacb6ccb5aa0d2b3de1873abb3da7ab8d219ab67dce92fa649dd5ff33a3e6359a8a23565aaf7db7af2692c3421860ecd46471cb79fbf7d1a1b0b98f62baebcd385ecafd6f57ed1c8ed37e98466b67100d97dda2d0f8c935b6aab1e21e9fd498f5e9fda5a578dcbd4617a44b635e99a94090d01de25056426c7057f783f9615923", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r12}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010000100000000000000000053000000", @ANYRES32, @ANYBLOB="efdd0e4af11f02000a0001"], 0x2c}}, 0x0) ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000200)="9e24934f10496fcdf2bccd3f885d55c834ec8bab71e614c89a7ff65d74e21673d34ff15f108d390a9ba9d4f090480efc42374db60c425c2401b9219e") 133.816168ms ago: executing program 2 (id=3845): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 133.433818ms ago: executing program 2 (id=3846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x27, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @call={0x85, 0x0, 0x0, 0x83}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0x4, 0x3, 0x4, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0xe3, &(0x7f0000000440)=""/227, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x5, 0x8, 0x9}, {0x1, 0x1, 0xe, 0x9}, {0x0, 0x2, 0xb, 0x2}, {0x2, 0x2, 0x4, 0x4}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="96010000100013070000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000100000000000400000000400000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000020000009600000000000000480002"], 0x1a0}}, 0x0) 109.864181ms ago: executing program 2 (id=3847): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x9000000) fcntl$setlease(r0, 0x400, 0x2) 0s ago: executing program 2 (id=3848): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) symlink(&(0x7f00000014c0)='./cgroup/file0\x00', &(0x7f00000024c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00010077697265677561726400000004", @ANYRES32, @ANYBLOB="05b720bb5d302423eeff31aceeba1c2d0fe73111c47523770613570558d9c25a608c8bd40048a88a451318ffcbfec9e61dc55b8556a0ae5cd48033b227778d21eee689f9822a13de6c"], 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) poll(&(0x7f0000000040)=[{r2, 0xcf9aa3956552782d}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0x11) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_free\x00', r6}, 0x10) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000000004000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): ffe6d238cbc R08: 0000000027b0919a R09: 7fffffffffffffff [ 237.521255][T11722] R10: 00007fa21c5720b8 R11: 00007fa21c572080 R12: 0000000000000032 [ 237.529240][T11722] R13: 0000000000038099 R14: 0000000000037f9f R15: 00007ffe6d238d10 [ 237.537240][T11722] [ 237.540305][T11722] memory: usage 307200kB, limit 307200kB, failcnt 2622 [ 237.540490][ T35] net_ratelimit: 16 callbacks suppressed [ 237.540507][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.547432][T11722] memory+swap: usage 307800kB, limit 9007199254740988kB, failcnt 0 [ 237.569056][T11722] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 237.576361][T11722] Memory cgroup stats for /syz2: [ 237.581645][T11722] cache 20480 [ 237.590008][T11722] rss 0 [ 237.592820][T11722] shmem 0 [ 237.595762][T11722] mapped_file 4096 [ 237.599607][T11722] dirty 12288 [ 237.602953][T11722] writeback 0 [ 237.606251][T11722] workingset_refault_anon 74 [ 237.610889][T11722] workingset_refault_file 23 [ 237.615492][T11722] swap 614400 [ 237.618786][T11722] swapcached 8192 [ 237.622473][T11722] pgpgin 97740 [ 237.625951][T11722] pgpgout 97733 [ 237.629455][T11722] pgfault 86255 [ 237.633016][T11722] pgmajfault 38 [ 237.636487][T11722] inactive_anon 0 [ 237.640505][T11722] active_anon 8192 [ 237.644340][T11722] inactive_file 0 [ 237.647986][T11722] active_file 20480 [ 237.651929][T11722] unevictable 0 [ 237.655425][T11722] hierarchical_memory_limit 314572800 [ 237.660792][T11722] hierarchical_memsw_limit 9223372036854771712 [ 237.667089][T11722] total_cache 20480 [ 237.670887][T11722] total_rss 0 [ 237.674159][T11722] total_shmem 0 [ 237.677654][T11722] total_mapped_file 4096 [ 237.681885][T11722] total_dirty 12288 [ 237.685692][T11722] total_writeback 0 [ 237.689599][T11722] total_workingset_refault_anon 74 [ 237.694697][T11722] total_workingset_refault_file 23 [ 237.699819][T11722] total_swap 614400 [ 237.703671][T11722] total_swapcached 8192 [ 237.707826][T11722] total_pgpgin 97740 [ 237.711750][T11722] total_pgpgout 97733 [ 237.715794][T11722] total_pgfault 86255 [ 237.719829][T11722] total_pgmajfault 38 [ 237.723897][T11722] total_inactive_anon 0 [ 237.728057][T11722] total_active_anon 8192 [ 237.732311][T11722] total_inactive_file 0 [ 237.736503][T11722] total_active_file 20480 [ 237.740835][T11722] total_unevictable 0 [ 237.744938][T11722] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3209,pid=13759,uid=0 [ 237.759768][T11722] Memory cgroup out of memory: Killed process 13759 (syz.2.3209) total-vm:89164kB, anon-rss:592kB, file-rss:16160kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 237.810834][ T36] team0 (unregistering): Port device wg2 removed [ 237.848124][T13762] syz.2.3209 (13762) used greatest stack depth: 9048 bytes left [ 237.904293][T13834] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.911408][T13834] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.918670][T13834] bridge_slave_0: entered allmulticast mode [ 237.925317][T13834] bridge_slave_0: entered promiscuous mode [ 237.932349][T13834] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.939465][T13834] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.946947][T13834] bridge_slave_1: entered allmulticast mode [ 237.953505][T13834] bridge_slave_1: entered promiscuous mode [ 237.990236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.001314][T13834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.018793][T13834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.043320][T13834] team0: Port device team_slave_0 added [ 238.060006][T13834] team0: Port device team_slave_1 added [ 238.080748][T13834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.087856][T13834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.113951][T13834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.114905][T13834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.131876][T13834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.157836][T13834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.180937][T13760] syz.2.3209 (13760) used greatest stack depth: 6472 bytes left [ 238.192449][T11722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.213194][T13834] hsr_slave_0: entered promiscuous mode [ 238.220574][T13834] hsr_slave_1: entered promiscuous mode [ 238.227288][T13834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.236378][T13834] Cannot create hsr debugfs directory [ 238.300219][T13893] loop0: detected capacity change from 0 to 512 [ 238.301020][T13890] netlink: 'syz.2.3240': attribute type 10 has an invalid length. [ 238.309178][T13893] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 238.357008][T13893] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 238.400606][T13862] chnl_net:caif_netlink_parms(): no params data found [ 238.443273][T13893] loop0: detected capacity change from 0 to 512 [ 238.450842][T13893] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 238.473107][T13893] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3242: iget: bad extended attribute block 19 [ 238.486148][T13893] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3242: couldn't read orphan inode 15 (err -117) [ 238.500107][T13893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.512771][ T1008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.519682][T13893] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3242: bg 0: block 65: padding at end of block bitmap is not set [ 238.537802][T13893] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.3242: Failed to acquire dquot type 0 [ 238.550029][T13862] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.557241][T13862] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.564687][T13862] bridge_slave_0: entered allmulticast mode [ 238.571320][T13862] bridge_slave_0: entered promiscuous mode [ 238.582462][T13862] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.582868][T13909] loop2: detected capacity change from 0 to 128 [ 238.589634][T13862] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.603325][T13862] bridge_slave_1: entered allmulticast mode [ 238.610022][T13862] bridge_slave_1: entered promiscuous mode [ 238.642687][T13862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.651843][T13911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3245'. [ 238.663195][T13862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.686393][T13862] team0: Port device team_slave_0 added [ 238.693648][T13862] team0: Port device team_slave_1 added [ 238.699667][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.721653][T13862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.728709][T13862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.755001][T13862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.766689][ T9730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.766778][T13862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.782784][T13862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.808782][T13862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.839352][T13834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.848491][T13834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.884652][T13834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.891909][T13921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3250'. [ 238.904380][T13862] hsr_slave_0: entered promiscuous mode [ 238.907095][T13921] netlink: 'syz.0.3250': attribute type 9 has an invalid length. [ 238.917858][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3250'. [ 238.927509][T13862] hsr_slave_1: entered promiscuous mode [ 238.943079][T13862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.951041][T13862] Cannot create hsr debugfs directory [ 238.956881][T13834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.969281][T13923] loop0: detected capacity change from 0 to 128 [ 238.977719][T13923] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 239.004988][T13923] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.026970][T13923] ext2 filesystem being mounted at /319/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 239.081630][T13834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.107867][ T9730] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.112905][T13834] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.123597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.143219][ T2310] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.150417][ T2310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.159646][ T2310] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.161154][T13929] loop2: detected capacity change from 0 to 128 [ 239.166759][ T2310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.184330][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3254'. [ 239.321643][T13834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.325565][T13948] loop0: detected capacity change from 0 to 512 [ 239.362188][T13948] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3259: bg 0: block 248: padding at end of block bitmap is not set [ 239.381425][T13948] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.3259: Failed to acquire dquot type 1 [ 239.397398][T13948] EXT4-fs (loop0): 1 truncate cleaned up [ 239.406425][T13948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.409025][T13953] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 239.425019][T13948] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.470597][T13834] veth0_vlan: entered promiscuous mode [ 239.489446][T13862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.501791][T13834] veth1_vlan: entered promiscuous mode [ 239.508790][T13862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.523885][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 239.523903][ T29] audit: type=1326 audit(2000000143.198:30285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.0.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602f76def9 code=0x7ffc0000 [ 239.531891][T13834] veth0_macvtap: entered promiscuous mode [ 239.563992][T13862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.572111][ T9730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.584716][T13862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.610440][T13968] Dead loop on virtual device ip6_vti0, fix it urgently! [ 239.617948][T13968] Dead loop on virtual device ip6_vti0, fix it urgently! [ 239.625273][T13968] Dead loop on virtual device ip6_vti0, fix it urgently! [ 239.632626][T13968] Dead loop on virtual device ip6_vti0, fix it urgently! [ 239.640051][T13968] Dead loop on virtual device ip6_vti0, fix it urgently! [ 239.651534][T13834] veth1_macvtap: entered promiscuous mode [ 239.668992][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.679584][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.689637][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.700260][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.710220][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.720690][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.730654][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.741119][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.752091][T13834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.766698][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.777399][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.787332][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.797847][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.807800][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.818377][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.828310][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.838920][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.848836][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.859617][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.871210][T13834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.888796][T13834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.897537][T13834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.906436][T13834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.915188][T13834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.981380][ T29] audit: type=1400 audit(2000000143.622:30286): avc: denied { mounton } for pid=13834 comm="syz-executor" path="/root/syzkaller.lt6kpL/syz-tmp" dev="sda1" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 240.006190][ T29] audit: type=1400 audit(2000000143.622:30287): avc: denied { mount } for pid=13834 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 240.010932][T13862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.028536][ T29] audit: type=1400 audit(2000000143.622:30288): avc: denied { mount } for pid=13834 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 240.058368][ T29] audit: type=1326 audit(2000000143.677:30289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.2.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 240.082073][ T29] audit: type=1326 audit(2000000143.677:30290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.2.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 240.091963][T13862] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.105712][ T29] audit: type=1326 audit(2000000143.677:30291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.2.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 240.105775][ T29] audit: type=1326 audit(2000000143.677:30292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.2.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 240.138769][ T29] audit: type=1326 audit(2000000143.770:30293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.2.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 240.174214][ T2310] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.183280][ T29] audit: type=1326 audit(2000000143.770:30294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.2.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 240.190182][ T2310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.210868][T13862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.231648][T13862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.250784][ T2310] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.257979][ T2310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.290758][T13985] loop3: detected capacity change from 0 to 1024 [ 240.297606][T13985] EXT4-fs: Ignoring removed mblk_io_submit option [ 240.313736][T13985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.318912][T13862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.372314][T13834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.427961][T14005] ipvlan1: entered promiscuous mode [ 240.433926][T14005] ipvlan1: left promiscuous mode [ 240.530344][T13862] veth0_vlan: entered promiscuous mode [ 240.540091][T13862] veth1_vlan: entered promiscuous mode [ 240.564413][T13862] veth0_macvtap: entered promiscuous mode [ 240.574733][T13862] veth1_macvtap: entered promiscuous mode [ 240.594012][T13862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.604667][T13862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.614509][T13862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.625024][T13862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.634946][T13862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.645454][T13862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.655312][T13862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.665755][T13862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.675670][T13862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.686176][T13862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.694007][T14031] loop3: detected capacity change from 0 to 512 [ 240.708783][T13862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.718376][T14031] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 240.718596][T13862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.737311][T13862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.747200][T13862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.757793][T13862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.767712][T13862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.778353][T13862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.788236][T13862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.798737][T13862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.800900][T14031] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 240.808564][T13862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.808586][T13862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.808609][T13862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.847818][T13862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.860082][T13862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.884051][T13862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.893050][T13862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.901946][T13862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.911087][T13862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.948438][T14031] loop3: detected capacity change from 0 to 512 [ 240.950091][T14041] team0 (unregistering): Port device team_slave_0 removed [ 240.962677][T14031] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 240.973902][T14041] team0 (unregistering): Port device team_slave_1 removed [ 240.996867][T14031] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3284: iget: bad extended attribute block 19 [ 241.009919][T14031] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3284: couldn't read orphan inode 15 (err -117) [ 241.020386][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3237'. [ 241.022761][T14031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.051901][T14031] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3284: bg 0: block 65: padding at end of block bitmap is not set [ 241.053578][T14045] loop0: detected capacity change from 0 to 128 [ 241.076070][T14045] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 241.086178][T14031] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.3284: Failed to acquire dquot type 0 [ 241.098751][T14045] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.111142][T14045] ext2 filesystem being mounted at /329/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.163753][T14055] netlink: 'syz.4.3292': attribute type 3 has an invalid length. [ 241.171718][T14058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3293'. [ 241.211814][ T9730] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.230122][T13834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.267820][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3300'. [ 241.279773][T14074] netlink: 'syz.2.3301': attribute type 4 has an invalid length. [ 241.300017][T14074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3301'. [ 241.310492][T14074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3301'. [ 241.319519][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3301'. [ 241.387546][T14074] netlink: 'syz.2.3301': attribute type 4 has an invalid length. [ 241.440759][T14092] loop2: detected capacity change from 0 to 128 [ 241.448196][T14092] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 241.457585][T14092] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.470231][T14092] ext2 filesystem being mounted at /194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.528405][T11722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.199430][T14115] loop0: detected capacity change from 0 to 128 [ 242.207938][T14115] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.221207][T14115] ext4 filesystem being mounted at /334/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 242.310154][T14124] loop3: detected capacity change from 0 to 1024 [ 242.317071][T14124] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.343902][T14124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.346564][T14126] team0: Device ipvlan2 failed to register rx_handler [ 242.383237][T13834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.029990][ T3338] net_ratelimit: 32 callbacks suppressed [ 243.030010][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.030022][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.110744][ T9730] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.196580][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.261472][T14169] loop0: detected capacity change from 0 to 512 [ 243.268711][T14169] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 243.279282][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.279985][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.305718][T14169] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 243.331072][T14173] tipc: Started in network mode [ 243.336078][T14173] tipc: Node identity 1, cluster identity 4711 [ 243.342432][T14173] tipc: Node number set to 1 [ 243.343634][T14169] loop0: detected capacity change from 0 to 512 [ 243.357620][T14169] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.377654][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.388610][T14169] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3336: iget: bad extended attribute block 19 [ 243.401646][T14169] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3336: couldn't read orphan inode 15 (err -117) [ 243.414490][T14169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.432690][T14176] vhci_hcd: invalid port number 0 [ 243.563935][ T9730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.582269][T14183] IPVS: Error connecting to the multicast addr [ 243.600585][T14185] loop2: detected capacity change from 0 to 1024 [ 243.611799][T14185] EXT4-fs: Ignoring removed mblk_io_submit option [ 243.627126][T14193] loop3: detected capacity change from 0 to 128 [ 243.633723][T14193] EXT4-fs: dax option not supported [ 243.652737][T14185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.668781][T14198] loop0: detected capacity change from 0 to 512 [ 243.722515][T14202] loop3: detected capacity change from 0 to 164 [ 243.730160][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.738309][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.746937][ T1008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.757342][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.762714][T14202] iso9660: Unknown parameter '0x00000000000000001844674407370955161500000000000000000004' [ 243.785391][T11722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.831461][T14193] loop3: detected capacity change from 0 to 2048 [ 243.859204][T14193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.884135][T14214] loop0: detected capacity change from 0 to 164 [ 243.908563][T14214] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 243.911730][T14193] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 243.942381][T14214] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 243.953017][T14193] EXT4-fs (loop3): Remounting filesystem read-only [ 243.960887][T14216] loop2: detected capacity change from 0 to 2048 [ 244.032464][T14216] loop2: p1 < > p4 [ 244.040752][T14216] loop2: p4 size 8388608 extends beyond EOD, truncated [ 244.049039][T13834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.087695][T14223] loop3: detected capacity change from 0 to 512 [ 244.117850][T14223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.131077][T14223] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.165404][T13834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.833437][T14236] loop2: detected capacity change from 0 to 164 [ 244.844488][T14236] syz.2.3356: attempt to access beyond end of device [ 244.844488][T14236] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 244.858819][T14236] syz.2.3356: attempt to access beyond end of device [ 244.858819][T14236] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 244.910132][T14240] __nla_validate_parse: 2 callbacks suppressed [ 244.910149][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3358'. [ 244.959279][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 244.959298][ T29] audit: type=1400 audit(2000000148.217:30711): avc: denied { create } for pid=14242 comm="syz.2.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 244.988769][ T29] audit: type=1400 audit(2000000148.245:30712): avc: denied { ioctl } for pid=14242 comm="syz.2.3360" path="socket:[49948]" dev="sockfs" ino=49948 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 245.147003][T14262] loop3: detected capacity change from 0 to 512 [ 245.157510][T14260] loop2: detected capacity change from 0 to 512 [ 245.165054][ T29] audit: type=1400 audit(2000000148.402:30713): avc: denied { create } for pid=14259 comm="syz.2.3366" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 245.173071][ T29] audit: type=1400 audit(2000000148.411:30714): avc: denied { associate } for pid=14259 comm="syz.2.3366" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 245.265259][ T29] audit: type=1326 audit(2000000148.411:30715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602f76def9 code=0x7ffc0000 [ 245.284523][T14264] loop0: detected capacity change from 0 to 512 [ 245.357829][ T29] audit: type=1326 audit(2000000148.411:30716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f602f76def9 code=0x7ffc0000 [ 245.395169][T14264] ext4: Unknown parameter 'subj_role' [ 245.411395][ T29] audit: type=1326 audit(2000000148.411:30717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602f76def9 code=0x7ffc0000 [ 245.440442][ T29] audit: type=1326 audit(2000000148.411:30718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f602f76def9 code=0x7ffc0000 [ 245.464045][ T29] audit: type=1326 audit(2000000148.411:30719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602f76def9 code=0x7ffc0000 [ 245.469189][T14262] ext4: Unknown parameter 'subj_role' [ 245.544016][ T29] audit: type=1400 audit(2000000148.411:30720): avc: denied { mounton } for pid=14259 comm="syz.2.3366" path=2F3231342F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 245.547178][T14260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.652542][T14260] ext4 filesystem being mounted at /214/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.690824][T14260] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.3366: Directory hole found for htree leaf block 0 [ 245.724933][T11722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.027298][T14282] loop2: detected capacity change from 0 to 256 [ 246.050030][T14282] FAT-fs (loop2): Directory bread(block 64) failed [ 246.069868][T14282] FAT-fs (loop2): Directory bread(block 65) failed [ 246.089075][T14282] FAT-fs (loop2): Directory bread(block 66) failed [ 246.109743][T14282] FAT-fs (loop2): Directory bread(block 67) failed [ 246.128469][T14282] FAT-fs (loop2): Directory bread(block 68) failed [ 246.144424][T14282] FAT-fs (loop2): Directory bread(block 69) failed [ 246.157206][T14279] coredump: 78(syz.3.3373): written to core: VMAs: 29, size 89030656; core: 60004722 bytes, pos 89038848 [ 246.158004][T14282] FAT-fs (loop2): Directory bread(block 70) failed [ 246.197492][T14282] FAT-fs (loop2): Directory bread(block 71) failed [ 246.213127][T14282] FAT-fs (loop2): Directory bread(block 72) failed [ 246.224926][T14282] FAT-fs (loop2): Directory bread(block 73) failed [ 246.274344][ T50] kworker/u8:3: attempt to access beyond end of device [ 246.274344][ T50] loop2: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 246.294422][ T50] kworker/u8:3: attempt to access beyond end of device [ 246.294422][ T50] loop2: rw=1, sector=1352, nr_sectors = 96 limit=256 [ 246.365205][T14286] loop2: detected capacity change from 0 to 128 [ 246.390621][T14286] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 246.406135][T14286] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.430498][T14286] ext2 filesystem being mounted at /217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 246.506186][T11722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.820228][T14314] tipc: Enabling of bearer rejected, failed to enable media [ 246.828807][T14315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3383'. [ 246.934013][T14298] chnl_net:caif_netlink_parms(): no params data found [ 246.988239][T14298] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.995498][T14298] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.005211][T14298] bridge_slave_0: entered allmulticast mode [ 247.013306][T14298] bridge_slave_0: entered promiscuous mode [ 247.022372][T14298] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.029496][T14298] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.037064][T14298] bridge_slave_1: entered allmulticast mode [ 247.046146][T14298] bridge_slave_1: entered promiscuous mode [ 247.069133][T14298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.080332][T14298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.107646][T14298] team0: Port device team_slave_0 added [ 247.114562][T14298] team0: Port device team_slave_1 added [ 247.135915][T14298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.143039][T14298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.169003][T14298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.184654][T14298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.191746][T14298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.217745][T14298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.257292][T14298] hsr_slave_0: entered promiscuous mode [ 247.263708][T14298] hsr_slave_1: entered promiscuous mode [ 247.272158][T14298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.279904][T14298] Cannot create hsr debugfs directory [ 247.348018][T14298] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.400547][T14298] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.467150][T14298] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.533553][T14298] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.589111][T14298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.598157][T14298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.607516][T14298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.617644][T14298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.639527][T14298] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.646673][T14298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.654122][T14298] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.661190][T14298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.710996][T14298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.733650][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.742302][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.758940][T14298] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.771287][T14341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.780343][T14341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.792455][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.799621][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.817018][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.824287][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.851534][T14344] loop3: detected capacity change from 0 to 164 [ 247.855927][T14298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.868365][T14298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.880893][T14344] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 247.890535][T14344] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 247.942095][T14298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.946493][T14352] loop3: detected capacity change from 0 to 512 [ 247.957861][T14352] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 247.968883][T14352] EXT4-fs (loop3): group descriptors corrupted! [ 247.998644][T14360] loop3: detected capacity change from 0 to 512 [ 248.006110][T14360] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.015225][T14360] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 248.025056][T14360] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 248.042610][T14298] veth0_vlan: entered promiscuous mode [ 248.053705][T14298] veth1_vlan: entered promiscuous mode [ 248.073922][T14298] veth0_macvtap: entered promiscuous mode [ 248.083020][T14298] veth1_macvtap: entered promiscuous mode [ 248.097040][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.107712][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.117725][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.128248][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.138325][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.148925][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.158853][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.165204][T14370] loop3: detected capacity change from 0 to 1024 [ 248.169389][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.169414][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.179220][T14370] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.185569][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.185588][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.185605][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.225448][T14370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.234775][T14298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.255834][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.266428][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.276359][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.286821][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.296681][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.307163][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.317010][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.327631][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.337478][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.347945][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.357859][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.368807][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.378677][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.389135][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.400800][T14298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.413053][T14298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.421927][T14298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.430790][T14298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.439642][T14298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.453371][T13834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.503668][T14378] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 248.552151][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'. [ 248.565726][T14386] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.630945][T14386] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.680607][T14386] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.767409][T14386] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.870052][T14386] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.874252][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3407'. [ 248.882855][T14386] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.887493][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3407'. [ 248.899503][T14386] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.908859][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3407'. [ 248.917817][T14386] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.921882][ T3341] net_ratelimit: 54 callbacks suppressed [ 248.921898][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.943969][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.952247][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.986674][T14410] loop2: detected capacity change from 0 to 2048 [ 249.003975][ T3342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.012739][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.014594][T14410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.104611][T14420] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 249.120051][T14420] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 249.132670][T14420] EXT4-fs (loop2): This should not happen!! Data will be lost [ 249.132670][T14420] [ 249.142460][T14420] EXT4-fs (loop2): Total free blocks count 0 [ 249.148499][T14420] EXT4-fs (loop2): Free/Dirty block details [ 249.154464][T14420] EXT4-fs (loop2): free_blocks=66060288 [ 249.160033][T14420] EXT4-fs (loop2): dirty_blocks=3760 [ 249.165367][T14420] EXT4-fs (loop2): Block reservation details [ 249.171384][T14420] EXT4-fs (loop2): i_reserved_data_blocks=258 [ 249.307846][ T3375] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 249.372938][T14427] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 249.438146][T14431] loop4: detected capacity change from 0 to 512 [ 249.444925][T14431] EXT4-fs: Ignoring removed i_version option [ 249.450137][T14433] tipc: Started in network mode [ 249.455879][T14433] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 249.463247][T14433] tipc: Enabled bearer , priority 0 [ 249.470523][T14431] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 249.472574][T14436] loop2: detected capacity change from 0 to 128 [ 249.485450][T14431] System zones: 1-12 [ 249.488381][T14433] loop3: detected capacity change from 0 to 512 [ 249.496478][T14431] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3416: bg 0: block 131: padding at end of block bitmap is not set [ 249.511350][T14431] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 249.511817][T14433] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.3417: corrupted in-inode xattr: invalid ea_ino [ 249.520475][T14431] EXT4-fs (loop4): 1 truncate cleaned up [ 249.539701][T14431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.552864][T14433] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3417: couldn't read orphan inode 12 (err -117) [ 249.567959][T14433] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.608851][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.658855][T13862] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 249.679415][T13834] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 249.696031][T13862] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 249.716248][T13862] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 249.736520][T13862] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 249.754136][T14446] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3422'. [ 249.777122][T13862] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 249.798503][T13862] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 249.818678][T13862] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 249.837626][T13862] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 249.857256][T13862] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 249.868479][T13862] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 249.892941][T14456] loop2: detected capacity change from 0 to 128 [ 249.956416][T14466] syz.1.3430[14466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.956540][T14466] syz.1.3430[14466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.984890][T14467] loop3: detected capacity change from 0 to 128 [ 250.040703][T14470] loop3: detected capacity change from 0 to 512 [ 250.047407][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.051452][T14470] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 250.065070][T14470] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 250.069805][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.074656][T14470] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 250.103123][T14472] sctp: [Deprecated]: syz.0.3432 (pid 14472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.103123][T14472] Use struct sctp_sack_info instead [ 250.120553][T14472] sctp: [Deprecated]: syz.0.3432 (pid 14472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.120553][T14472] Use struct sctp_sack_info instead [ 250.137702][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.147781][T14479] loop3: detected capacity change from 0 to 1024 [ 250.161545][T14479] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.171448][T13862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.172927][ T2310] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.210022][T14479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.262307][T13834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.273119][ T2310] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.308546][T14492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.327673][ T2310] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.410779][ T2310] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.479338][T14488] chnl_net:caif_netlink_parms(): no params data found [ 250.494926][T14506] loop3: detected capacity change from 0 to 512 [ 250.501888][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 250.501916][ T29] audit: type=1400 audit(2000000153.329:31016): avc: denied { remount } for pid=14505 comm="syz.3.3441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 250.549867][ T2310] bridge_slave_1: left allmulticast mode [ 250.555828][ T2310] bridge_slave_1: left promiscuous mode [ 250.561553][ T2310] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.569853][ T2310] bridge_slave_0: left allmulticast mode [ 250.575956][ T2310] bridge_slave_0: left promiscuous mode [ 250.581784][ T2310] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.670980][ T3342] tipc: Node number set to 8432298 [ 250.678580][ T2310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.689180][ T2310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.699450][ T2310] bond0 (unregistering): Released all slaves [ 250.723113][T14488] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.730279][T14488] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.737850][T14488] bridge_slave_0: entered allmulticast mode [ 250.744231][T14488] bridge_slave_0: entered promiscuous mode [ 250.751466][ T2310] tipc: Left network mode [ 250.751617][T14488] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.762953][T14488] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.770316][T14488] bridge_slave_1: entered allmulticast mode [ 250.777188][T14488] bridge_slave_1: entered promiscuous mode [ 250.796351][ T2310] hsr_slave_0: left promiscuous mode [ 250.802393][ T2310] hsr_slave_1: left promiscuous mode [ 250.808171][ T2310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.815670][ T2310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.823460][ T2310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.830957][ T2310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.841028][ T2310] veth1_macvtap: left promiscuous mode [ 250.846752][ T2310] veth0_macvtap: left promiscuous mode [ 250.852295][ T2310] veth1_vlan: left promiscuous mode [ 250.857560][ T2310] veth0_vlan: left promiscuous mode [ 250.919548][T14518] program syz.2.3445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.970433][ T2310] team0 (unregistering): Port device team_slave_1 removed [ 250.981855][ T2310] team0 (unregistering): Port device team_slave_0 removed [ 251.023813][T14488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.035225][T14522] netlink: 'syz.2.3447': attribute type 21 has an invalid length. [ 251.045028][T14488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.066044][T14488] team0: Port device team_slave_0 added [ 251.083200][T14488] team0: Port device team_slave_1 added [ 251.102558][T14488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.109628][T14488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.135744][T14488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.151423][T14488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.158447][T14488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.184496][T14488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.213408][T14488] hsr_slave_0: entered promiscuous mode [ 251.219623][T14488] hsr_slave_1: entered promiscuous mode [ 251.226015][T14488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.233600][T14488] Cannot create hsr debugfs directory [ 251.344813][T14533] loop2: detected capacity change from 0 to 1024 [ 251.351523][T14533] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.365786][T14533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.398199][T11722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.427969][T14540] loop2: detected capacity change from 0 to 2048 [ 251.471719][T14544] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 251.478346][T14544] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 251.485918][T14544] vhci_hcd vhci_hcd.0: Device attached [ 251.492968][T14544] 9pnet_fd: Insufficient options for proto=fd [ 251.499280][T14545] vhci_hcd: connection closed [ 251.499352][ T2310] vhci_hcd: stop threads [ 251.508449][ T2310] vhci_hcd: release socket [ 251.512952][ T2310] vhci_hcd: disconnect device [ 251.542442][T14488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.551291][T14488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.560035][T14488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.568731][T14488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.615483][T14488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.629891][T14488] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.640366][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.647457][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.659626][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.666738][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.742494][T14488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.867639][T14488] veth0_vlan: entered promiscuous mode [ 251.877205][T14488] veth1_vlan: entered promiscuous mode [ 251.898737][T14488] veth0_macvtap: entered promiscuous mode [ 251.907024][T14488] veth1_macvtap: entered promiscuous mode [ 251.919208][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.929699][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.939646][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.950106][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.960054][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.970573][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.980458][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.990886][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.000732][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.011212][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.021062][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.031658][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.043260][T14488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.057052][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.067646][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.077551][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.080419][T14565] netlink: 66 bytes leftover after parsing attributes in process `syz.2.3452'. [ 252.088011][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.106814][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.117288][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.127197][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.137684][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.147630][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.158156][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.168032][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.178546][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.188398][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.199015][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.214403][T14488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.226089][T14488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.234951][T14488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.243808][T14488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.252584][T14488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.387510][T14580] loop2: detected capacity change from 0 to 1024 [ 252.395822][T14580] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.418767][T14580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.448903][T11722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.475518][T14589] loop3: detected capacity change from 0 to 128 [ 252.490287][T14591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3461'. [ 252.510969][T14595] loop3: detected capacity change from 0 to 512 [ 252.518123][T14595] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 252.546491][T14595] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 252.559668][ T29] audit: type=1326 audit(2000000155.230:31017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.3.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 252.583574][ T29] audit: type=1326 audit(2000000155.230:31018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.3.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 252.607291][ T29] audit: type=1326 audit(2000000155.230:31019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.3.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 252.630929][ T29] audit: type=1326 audit(2000000155.230:31020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.3.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 252.654531][ T29] audit: type=1326 audit(2000000155.230:31021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.3.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 252.678514][ T29] audit: type=1326 audit(2000000155.230:31022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.3.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 252.702118][ T29] audit: type=1326 audit(2000000155.230:31023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.3.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 252.725832][ T29] audit: type=1326 audit(2000000155.230:31024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.3.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 252.749757][ T29] audit: type=1326 audit(2000000155.230:31025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.3.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 252.853435][T14609] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3468'. [ 252.894662][T14611] loop3: detected capacity change from 0 to 8192 [ 252.949093][T14621] can0: slcan on ttyS3. [ 253.025349][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3476'. [ 253.036289][T14631] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.089536][T14631] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.143531][T14631] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.186709][T14631] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.258721][T14631] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.273699][T14631] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.287735][T14631] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.302299][T14631] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.355674][T14648] loop2: detected capacity change from 0 to 512 [ 253.504799][T14636] delete_channel: no stack [ 253.568161][T14656] loop4: detected capacity change from 0 to 2048 [ 253.608707][T14656] Alternate GPT is invalid, using primary GPT. [ 253.615107][T14656] loop4: p1 p2 p3 [ 253.649202][T14662] loop4: detected capacity change from 0 to 128 [ 253.737695][T14665] syz.4.3490[14665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.737770][T14665] syz.4.3490[14665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.753141][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3490'. [ 254.200469][T14671] syz.1.3493[14671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.200574][T14671] syz.1.3493[14671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.243257][T14671] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 254.261704][T14671] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 254.269300][T14671] vhci_hcd vhci_hcd.0: Device attached [ 254.285019][T14672] vhci_hcd: connection closed [ 254.285685][ T36] vhci_hcd: stop threads [ 254.295048][ T36] vhci_hcd: release socket [ 254.299477][ T36] vhci_hcd: disconnect device [ 254.326698][T14675] netlink: 66 bytes leftover after parsing attributes in process `syz.2.3494'. [ 254.380241][T14679] loop2: detected capacity change from 0 to 512 [ 254.386978][T14679] EXT4-fs: Ignoring removed oldalloc option [ 254.409173][T14679] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.3496: Parent and EA inode have the same ino 15 [ 254.424580][T14679] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.3496: Parent and EA inode have the same ino 15 [ 254.437237][T14679] EXT4-fs (loop2): 1 orphan inode deleted [ 254.445821][T14679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.463094][T14665] loop4: detected capacity change from 0 to 2048 [ 254.550538][ T4160] net_ratelimit: 44 callbacks suppressed [ 254.550556][ T4160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.565189][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.638302][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.723696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.811369][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.992483][T14700] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.999779][T14700] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.012317][T14700] bridge_slave_1: left allmulticast mode [ 255.018044][T14700] bridge_slave_1: left promiscuous mode [ 255.023740][T14700] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.031999][T14700] bridge_slave_0: left allmulticast mode [ 255.037799][T14700] bridge_slave_0: left promiscuous mode [ 255.043660][T14700] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.177926][T14702] netlink: 66 bytes leftover after parsing attributes in process `syz.1.3505'. [ 255.254965][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.287150][T11722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.309272][T14710] veth0_macvtap: left promiscuous mode [ 255.337419][T14712] loop2: detected capacity change from 0 to 164 [ 255.344828][T14712] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 255.354794][T14712] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 255.400986][T14716] loop2: detected capacity change from 0 to 128 [ 255.486978][T14720] loop2: detected capacity change from 0 to 128 [ 255.501185][T14720] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 255.515649][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.540737][T14720] ext2 filesystem being mounted at /264/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.639361][T14726] loop3: detected capacity change from 0 to 512 [ 255.674596][T14726] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.685588][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.693863][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.703533][T14728] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3516'. [ 255.729924][T14726] Process accounting resumed [ 255.739425][T14740] loop2: detected capacity change from 0 to 164 [ 255.748440][T14740] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 255.757250][T14740] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 255.775874][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.822655][T14745] loop3: detected capacity change from 0 to 512 [ 255.834954][T14745] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3521: corrupted in-inode xattr: invalid ea_ino [ 255.848838][T14745] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3521: couldn't read orphan inode 15 (err -117) [ 255.871201][T14752] loop2: detected capacity change from 0 to 128 [ 255.880291][T14752] ext4 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.920345][T14752] syz.2.3525[14752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.920519][T14752] syz.2.3525[14752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.926318][T14757] loop3: detected capacity change from 0 to 512 [ 255.943408][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 255.943427][ T29] audit: type=1326 audit(2000000158.339:31384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 255.956431][T14757] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 255.979884][ T29] audit: type=1326 audit(2000000158.339:31385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 255.979985][ T29] audit: type=1326 audit(2000000158.339:31386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 256.037418][ T29] audit: type=1326 audit(2000000158.422:31387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 256.061083][ T29] audit: type=1326 audit(2000000158.422:31388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 256.085013][ T29] audit: type=1326 audit(2000000158.422:31389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 256.108757][ T29] audit: type=1326 audit(2000000158.422:31390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 256.132663][ T29] audit: type=1326 audit(2000000158.422:31391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 256.156274][ T29] audit: type=1326 audit(2000000158.422:31392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 256.179725][ T29] audit: type=1326 audit(2000000158.422:31393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21b87def9 code=0x7ffc0000 [ 256.301141][T14774] Cannot find add_set index 0 as target [ 256.349534][T14776] can0 (unregistered): slcan off ttyS3. [ 256.359282][T14776] FAULT_INJECTION: forcing a failure. [ 256.359282][T14776] name failslab, interval 1, probability 0, space 0, times 0 [ 256.372066][T14776] CPU: 1 UID: 0 PID: 14776 Comm: syz.2.3532 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 256.384000][T14776] Tainted: [W]=WARN [ 256.387817][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 256.397937][T14776] Call Trace: [ 256.401221][T14776] [ 256.404157][T14776] dump_stack_lvl+0xf2/0x150 [ 256.408785][T14776] dump_stack+0x15/0x20 [ 256.412995][T14776] should_fail_ex+0x229/0x230 [ 256.417698][T14776] ? security_file_alloc+0x32/0x100 [ 256.422981][T14776] should_failslab+0x8f/0xb0 [ 256.427590][T14776] kmem_cache_alloc_noprof+0x4c/0x290 [ 256.433007][T14776] security_file_alloc+0x32/0x100 [ 256.438058][T14776] alloc_empty_file+0x121/0x2f0 [ 256.442925][T14776] path_openat+0x6a/0x1fa0 [ 256.447356][T14776] ? _parse_integer+0x27/0x30 [ 256.452059][T14776] ? kstrtoull+0x110/0x140 [ 256.456530][T14776] ? kstrtouint+0x77/0xc0 [ 256.460981][T14776] do_filp_open+0xf7/0x200 [ 256.465410][T14776] do_sys_openat2+0xab/0x120 [ 256.470027][T14776] __x64_sys_openat+0xf3/0x120 [ 256.474930][T14776] x64_sys_call+0x1025/0x2d60 [ 256.479632][T14776] do_syscall_64+0xc9/0x1c0 [ 256.484159][T14776] ? clear_bhb_loop+0x55/0xb0 [ 256.488853][T14776] ? clear_bhb_loop+0x55/0xb0 [ 256.493572][T14776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.499512][T14776] RIP: 0033:0x7fa21b87def9 [ 256.504025][T14776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.523669][T14776] RSP: 002b:00007fa21a4f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 256.532117][T14776] RAX: ffffffffffffffda RBX: 00007fa21ba35f80 RCX: 00007fa21b87def9 [ 256.540090][T14776] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 256.548096][T14776] RBP: 00007fa21a4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 256.556079][T14776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.564078][T14776] R13: 0000000000000000 R14: 00007fa21ba35f80 R15: 00007ffe6d2388f8 [ 256.572057][T14776] [ 256.597980][T14782] loop2: detected capacity change from 0 to 512 [ 256.606998][T14782] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 256.622702][T14785] loop3: detected capacity change from 0 to 512 [ 256.629963][T14785] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 256.636658][T14782] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 256.674674][T14785] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 256.769106][T14802] syz.1.3542[14802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.769412][T14802] syz.1.3542[14802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.842054][T14821] loop3: detected capacity change from 0 to 128 [ 256.883307][T14830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3550'. [ 256.906812][T14833] loop2: detected capacity change from 0 to 1024 [ 256.936339][T14833] EXT4-fs: Ignoring removed orlov option [ 256.942189][T14833] EXT4-fs: Ignoring removed oldalloc option [ 256.948190][T14833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.972620][T14833] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e01c, mo2=0002] [ 256.978581][T14849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14849 comm=syz.1.3557 [ 256.994886][T14833] System zones: 0-1, 3-12 [ 257.013925][T14833] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2792: inode #14: comm syz.2.3552: corrupted in-inode xattr: bad magic number in in-inode xattr [ 257.031977][T14833] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #14: comm syz.2.3552: attempt to clear invalid blocks 1886221359 len 1 [ 257.059150][T14855] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.066507][T14855] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.089507][T14862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'. [ 257.098617][T14855] bridge_slave_1: left allmulticast mode [ 257.104466][T14855] bridge_slave_1: left promiscuous mode [ 257.110332][T14855] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.134604][T14855] bridge_slave_0: left allmulticast mode [ 257.140296][T14855] bridge_slave_0: left promiscuous mode [ 257.146036][T14855] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.250009][T14863] netlink: 'syz.2.3552': attribute type 6 has an invalid length. [ 257.360638][T14877] loop3: detected capacity change from 0 to 512 [ 257.372819][T14875] loop4: detected capacity change from 0 to 2048 [ 257.381896][T14877] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 257.419005][T14877] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 257.503186][T14885] loop3: detected capacity change from 0 to 128 [ 257.585427][T14896] loop4: detected capacity change from 0 to 512 [ 257.592356][T14896] EXT4-fs: Ignoring removed oldalloc option [ 257.600933][T14896] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.3573: Parent and EA inode have the same ino 15 [ 257.616024][T14896] EXT4-fs (loop4): Remounting filesystem read-only [ 257.622604][T14896] EXT4-fs warning (device loop4): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 257.635723][T14896] EXT4-fs (loop4): 1 orphan inode deleted [ 257.643844][T14896] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 257.798791][T14904] syz.4.3576[14904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.798872][T14904] syz.4.3576[14904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.827752][T14904] loop4: detected capacity change from 0 to 1024 [ 257.850620][T14904] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 257.861686][T14904] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 257.883395][T14904] JBD2: no valid journal superblock found [ 257.889220][T14904] EXT4-fs (loop4): Could not load journal inode [ 258.043343][T14910] syz.2.3577[14910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.043457][T14910] syz.2.3577[14910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.538196][T14924] __nla_validate_parse: 4 callbacks suppressed [ 258.538216][T14924] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 258.736420][T14932] loop3: detected capacity change from 0 to 1024 [ 258.813469][T14943] loop3: detected capacity change from 0 to 128 [ 258.820527][T14943] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 258.830608][T14943] ext2 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 258.905036][T14948] loop3: detected capacity change from 0 to 512 [ 258.920782][T14948] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.033464][T14955] loop3: detected capacity change from 0 to 512 [ 259.041584][T14955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 259.053919][T14955] EXT4-fs (loop3): 1 orphan inode deleted [ 259.059717][T14955] EXT4-fs (loop3): 1 truncate cleaned up [ 259.087264][T14963] loop3: detected capacity change from 0 to 128 [ 259.101506][T14965] netlink: 66 bytes leftover after parsing attributes in process `syz.1.3595'. [ 259.187789][T14977] loop3: detected capacity change from 0 to 164 [ 259.195194][T14977] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 259.226082][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3603'. [ 259.235163][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3603'. [ 259.410287][T15005] netlink: 'syz.4.3613': attribute type 46 has an invalid length. [ 259.420168][T15005] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 259.428520][T15005] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 259.459605][T15007] loop4: detected capacity change from 0 to 764 [ 259.467769][T15007] Symlink component flag not implemented [ 259.473465][T15007] Symlink component flag not implemented [ 259.479491][T15007] Symlink component flag not implemented (112) [ 259.485720][T15007] Symlink component flag not implemented (22) [ 259.547103][T15013] loop4: detected capacity change from 0 to 128 [ 259.619316][T15015] loop4: detected capacity change from 0 to 512 [ 259.646159][T15015] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.686957][T15015] EXT4-fs error (device loop4): ext4_do_update_inode:5151: inode #19: comm syz.4.3618: corrupted inode contents [ 259.699196][T15015] EXT4-fs error (device loop4): ext4_dirty_inode:6011: inode #19: comm syz.4.3618: mark_inode_dirty error [ 259.710947][T15015] EXT4-fs error (device loop4): ext4_do_update_inode:5151: inode #19: comm syz.4.3618: corrupted inode contents [ 259.723027][T15015] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3007: inode #19: comm syz.4.3618: mark_inode_dirty error [ 259.735896][T15015] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3010: inode #19: comm syz.4.3618: mark inode dirty (error -117) [ 259.749242][T15015] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 259.841909][T15020] loop4: detected capacity change from 0 to 1024 [ 259.848687][T15020] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.031712][T15035] loop4: detected capacity change from 0 to 128 [ 260.051327][T15035] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.094389][T15038] loop4: detected capacity change from 0 to 1024 [ 260.101426][T15038] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 260.112377][T15038] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 260.122909][T15038] JBD2: no valid journal superblock found [ 260.128716][T15038] EXT4-fs (loop4): Could not load journal inode [ 260.163257][T15042] loop3: detected capacity change from 0 to 1024 [ 260.171092][T15042] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 260.182040][T15042] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 260.192516][T15042] JBD2: no valid journal superblock found [ 260.195768][T15044] loop4: detected capacity change from 0 to 128 [ 260.198327][T15042] EXT4-fs (loop3): Could not load journal inode [ 260.247391][T15049] loop3: detected capacity change from 0 to 164 [ 260.256366][T15049] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 260.285779][T15052] netlink: 66 bytes leftover after parsing attributes in process `syz.3.3631'. [ 260.314587][T15054] loop3: detected capacity change from 0 to 512 [ 260.323689][T15054] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 260.352067][T15054] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #17: comm syz.3.3632: iget: bad i_size value: -6917529027641081756 [ 260.377196][T15054] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3632: couldn't read orphan inode 17 (err -117) [ 260.468932][T15070] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3637'. [ 260.470248][T15071] loop4: detected capacity change from 0 to 512 [ 260.481470][T15070] net_ratelimit: 1057 callbacks suppressed [ 260.481497][T15070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.485083][T15071] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 260.526063][T15071] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 260.535066][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.543335][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.581985][T15079] netlink: 66 bytes leftover after parsing attributes in process `syz.4.3642'. [ 260.593275][T15081] loop3: detected capacity change from 0 to 128 [ 260.677028][T15092] pim6reg1: entered promiscuous mode [ 260.682419][T15092] pim6reg1: entered allmulticast mode [ 260.689281][T15096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8976 sclass=netlink_route_socket pid=15096 comm=syz.3.3650 [ 260.706484][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.730673][T15098] loop3: detected capacity change from 0 to 164 [ 260.737740][T15098] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 260.771158][T15100] loop3: detected capacity change from 0 to 1024 [ 260.778124][T15100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.785504][T15100] EXT4-fs (loop3): stripe (4095) is not aligned with cluster size (16), stripe is disabled [ 260.930383][T15118] loop3: detected capacity change from 0 to 128 [ 260.937642][T15118] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 260.949852][T15118] ext2 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 261.018780][T15124] Cannot find set identified by id 0 to match [ 261.301986][T15127] chnl_net:caif_netlink_parms(): no params data found [ 261.351146][T15127] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.358409][T15127] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.372370][ T29] kauditd_printk_skb: 651 callbacks suppressed [ 261.372388][ T29] audit: type=1400 audit(2000000163.359:32045): avc: denied { bind } for pid=15164 comm="syz.2.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.398529][T15127] bridge_slave_0: entered allmulticast mode [ 261.408270][T15127] bridge_slave_0: entered promiscuous mode [ 261.415354][T15127] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.422464][T15127] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.429678][T15127] bridge_slave_1: entered allmulticast mode [ 261.436305][T15127] bridge_slave_1: entered promiscuous mode [ 261.454065][ T29] audit: type=1326 audit(2000000163.432:32046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15162 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 261.480648][ T29] audit: type=1326 audit(2000000163.442:32047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15162 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 261.504687][ T29] audit: type=1326 audit(2000000163.442:32048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15162 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 261.528656][ T29] audit: type=1326 audit(2000000163.442:32049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15162 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 261.532662][T15127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.552266][ T29] audit: type=1326 audit(2000000163.442:32050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15162 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 261.587536][T15127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.589293][ T29] audit: type=1326 audit(2000000163.562:32051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15162 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 261.624702][ T29] audit: type=1326 audit(2000000163.589:32052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15162 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 261.648382][ T29] audit: type=1326 audit(2000000163.589:32053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15162 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 261.672212][ T29] audit: type=1326 audit(2000000163.589:32054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15162 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7734def9 code=0x7ffc0000 [ 261.732926][T15127] team0: Port device team_slave_0 added [ 261.741904][T15127] team0: Port device team_slave_1 added [ 261.765343][T15127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.772429][T15127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.798597][T15127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.812744][T15127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.819708][T15127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.846016][T15127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.851098][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.864932][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.873980][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.921307][T15127] hsr_slave_0: entered promiscuous mode [ 261.927502][T15127] hsr_slave_1: entered promiscuous mode [ 261.937968][T15127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.945973][T15127] Cannot create hsr debugfs directory [ 262.024128][T15179] loop4: detected capacity change from 0 to 512 [ 262.073152][T15127] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.083616][T15179] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.096741][ T3342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.114654][T15179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3677'. [ 262.123800][T15179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3677'. [ 262.171285][T15127] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.209944][ T2310] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.237383][T15203] loop4: detected capacity change from 0 to 164 [ 262.248041][T15203] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 262.259585][T15127] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.293344][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3683'. [ 262.310027][ T2310] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.334548][T15127] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.355404][ T2310] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.378685][T15181] chnl_net:caif_netlink_parms(): no params data found [ 262.440877][ T3342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.449172][ T2310] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.460164][T15181] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.461454][T15230] futex_wake_op: syz.1.3690 tries to shift op by -1; fix this program [ 262.467438][T15181] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.484112][T15181] bridge_slave_0: entered allmulticast mode [ 262.504989][T15181] bridge_slave_0: entered promiscuous mode [ 262.512204][T15181] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.519351][T15181] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.526749][T15181] bridge_slave_1: entered allmulticast mode [ 262.533419][T15181] bridge_slave_1: entered promiscuous mode [ 262.540193][T15127] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 262.549774][T15127] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.558768][T15127] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.587572][T15127] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 262.596018][T15237] syz.1.3693[15237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.596165][T15237] syz.1.3693[15237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.643849][T15181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.822703][ T2310] bond0 (unregistering): Released all slaves [ 262.833992][T15181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.867641][T15181] team0: Port device team_slave_0 added [ 262.895455][T15181] team0: Port device team_slave_1 added [ 262.918097][T15181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.925070][T15181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.947847][T15265] loop4: detected capacity change from 0 to 8192 [ 262.951281][T15181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.969251][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.979091][T15181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.986155][T15181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.012175][T15181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.028408][ T2310] tipc: Disabling bearer [ 263.033510][ T2310] tipc: Left network mode [ 263.041646][T15127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.059039][T15127] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.077309][ T2310] hsr_slave_0: left promiscuous mode [ 263.083645][ T2310] hsr_slave_1: left promiscuous mode [ 263.089440][ T2310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.097140][ T2310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.105477][ T2310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.113056][ T2310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.122309][ T2310] veth1_macvtap: left promiscuous mode [ 263.128036][ T2310] veth1_vlan: left promiscuous mode [ 263.133302][ T2310] veth0_vlan: left promiscuous mode [ 263.247762][ T3375] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.254853][ T3375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.268280][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.275452][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.297985][T15181] hsr_slave_0: entered promiscuous mode [ 263.304221][T15181] hsr_slave_1: entered promiscuous mode [ 263.310813][T15181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.318537][T15181] Cannot create hsr debugfs directory [ 263.419167][T15127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.495463][T15127] veth0_vlan: entered promiscuous mode [ 263.506589][T15127] veth1_vlan: entered promiscuous mode [ 263.526124][T15127] veth0_macvtap: entered promiscuous mode [ 263.534435][T15127] veth1_macvtap: entered promiscuous mode [ 263.546543][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.557134][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.566999][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.577478][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.587364][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.597858][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.607779][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.618316][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.628343][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.638848][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.648789][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.659305][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.670294][T15127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.684978][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.695514][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.705360][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.715838][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.725723][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.736214][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.746113][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.756556][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.766420][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.777019][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.786891][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.797408][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.807349][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.817872][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.830828][T15127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.840076][T15127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.848824][T15127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.857580][T15127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.866352][T15127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.896003][ T2310] IPVS: stop unused estimator thread 0... [ 263.940988][T15288] loop0: detected capacity change from 0 to 128 [ 263.956910][T15288] EXT4-fs mount: 36 callbacks suppressed [ 263.956931][T15288] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.979158][T15288] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 264.071727][T15181] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.086632][T15181] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.099754][T15181] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.109874][T15181] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.117864][T15297] program syz.4.3710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.174447][T15181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.190042][T15181] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.204102][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.211216][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.226302][T15305] loop4: detected capacity change from 0 to 8192 [ 264.234743][ T3375] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.242063][ T3375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.334365][T15181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.430344][T15181] veth0_vlan: entered promiscuous mode [ 264.442222][T15181] veth1_vlan: entered promiscuous mode [ 264.465041][T15181] veth0_macvtap: entered promiscuous mode [ 264.476954][T15181] veth1_macvtap: entered promiscuous mode [ 264.494736][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.505290][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.515362][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.526317][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.536677][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.547133][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.557038][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.567503][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.577392][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.587842][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.597702][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.608252][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.618132][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.628618][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.640586][T15181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.649340][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.659839][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.669766][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.680213][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.690116][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.700563][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.710391][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.720836][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.730683][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.741192][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.751187][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.761638][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.771494][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.781966][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.791807][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.802305][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.813201][T15181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.829772][T15181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.838591][T15181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.847460][T15181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.856281][T15181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.865609][T15339] __nla_validate_parse: 3 callbacks suppressed [ 264.865625][T15339] netlink: 66 bytes leftover after parsing attributes in process `syz.1.3722'. [ 264.908627][T15341] syz.1.3723[15341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.908694][T15341] syz.1.3723[15341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.910865][T15127] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 264.947408][T15341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3723'. [ 264.992654][T15348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3725'. [ 265.001812][T15348] tipc: Started in network mode [ 265.006703][T15348] tipc: Node identity 40060020000000006e, cluster identity 8 [ 265.016901][T15348] loop0: detected capacity change from 0 to 256 [ 265.066938][T15355] loop0: detected capacity change from 0 to 1024 [ 265.074912][T15355] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 265.085985][T15355] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 265.100041][T15355] JBD2: no valid journal superblock found [ 265.105795][T15355] EXT4-fs (loop0): Could not load journal inode [ 265.120907][T15359] loop4: detected capacity change from 0 to 512 [ 265.127772][T15359] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 265.156545][T15359] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 265.173761][T15365] netlink: 66 bytes leftover after parsing attributes in process `syz.0.3732'. [ 265.278512][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3739'. [ 265.287685][T15380] tipc: Started in network mode [ 265.292704][T15380] tipc: Node identity 40060020000000006e, cluster identity 8 [ 265.325765][T15380] loop4: detected capacity change from 0 to 256 [ 265.328412][T15387] netlink: 66 bytes leftover after parsing attributes in process `syz.2.3743'. [ 265.390366][T15394] loop0: detected capacity change from 0 to 512 [ 265.414216][T15394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.428637][T15394] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.485885][T15404] bridge0: port 3(vlan2) entered blocking state [ 265.492310][T15404] bridge0: port 3(vlan2) entered disabled state [ 265.495553][T15402] syz.4.3749[15402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.499040][T15404] vlan2: entered allmulticast mode [ 265.499010][T15402] syz.4.3749[15402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.516945][T15404] vlan2: left allmulticast mode [ 265.537177][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3749'. [ 265.546753][T15127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.579657][T15408] loop0: detected capacity change from 0 to 164 [ 265.587124][T15408] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 265.692912][T15415] netlink: 'syz.2.3754': attribute type 1 has an invalid length. [ 265.750683][T15419] netlink: 66 bytes leftover after parsing attributes in process `syz.2.3756'. [ 265.785726][T15402] loop4: detected capacity change from 0 to 2048 [ 265.830527][T15427] netlink: 'syz.2.3760': attribute type 49 has an invalid length. [ 265.877538][T15432] loop2: detected capacity change from 0 to 512 [ 265.884422][T15432] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 265.909259][ T3340] net_ratelimit: 8 callbacks suppressed [ 265.909277][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.910165][T15432] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 265.968996][T15436] loop2: detected capacity change from 0 to 128 [ 266.075089][T15442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3766'. [ 266.084136][T15442] tipc: Started in network mode [ 266.089085][T15442] tipc: Node identity 40060020000000006e, cluster identity 8 [ 266.101037][T15442] loop2: detected capacity change from 0 to 256 [ 266.124727][T15444] netlink: 66 bytes leftover after parsing attributes in process `syz.2.3767'. [ 266.342145][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.350612][ T4160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.564430][T15469] tipc: Cannot configure node identity twice [ 266.573391][T15469] loop0: detected capacity change from 0 to 256 [ 266.603214][ T1008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.635823][T15475] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.643284][T15475] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.655328][T15475] bridge_slave_1: left allmulticast mode [ 266.661107][T15475] bridge_slave_1: left promiscuous mode [ 266.667005][T15475] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.674913][T15475] bridge_slave_0: left allmulticast mode [ 266.680690][T15475] bridge_slave_0: left promiscuous mode [ 266.686477][T15475] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.183729][T15477] loop2: detected capacity change from 0 to 1024 [ 267.190921][T15477] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 267.201830][T15477] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 267.212832][T15477] JBD2: no valid journal superblock found [ 267.218622][T15477] EXT4-fs (loop2): Could not load journal inode [ 267.364689][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 267.364705][ T29] audit: type=1326 audit(2000000168.892:32564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15486 comm="syz.1.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6167def9 code=0x7ffc0000 [ 267.404806][ T29] audit: type=1326 audit(2000000168.892:32565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15486 comm="syz.1.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fdc6167def9 code=0x7ffc0000 [ 267.428596][ T29] audit: type=1326 audit(2000000168.892:32566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15486 comm="syz.1.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6167def9 code=0x7ffc0000 [ 267.452356][ T29] audit: type=1326 audit(2000000168.892:32567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15486 comm="syz.1.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fdc6167def9 code=0x7ffc0000 [ 267.476197][ T29] audit: type=1326 audit(2000000168.892:32568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15486 comm="syz.1.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6167def9 code=0x7ffc0000 [ 267.502068][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.510461][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.597209][ T29] audit: type=1326 audit(2000000169.095:32569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6167def9 code=0x7ffc0000 [ 267.621180][ T29] audit: type=1326 audit(2000000169.095:32570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6167def9 code=0x7ffc0000 [ 267.645091][ T29] audit: type=1326 audit(2000000169.095:32571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fdc6167def9 code=0x7ffc0000 [ 267.668656][ T29] audit: type=1326 audit(2000000169.095:32572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6167def9 code=0x7ffc0000 [ 267.692396][ T29] audit: type=1326 audit(2000000169.095:32573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdc6167def9 code=0x7ffc0000 [ 268.271983][T15523] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.279346][T15523] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.291718][T15523] bridge_slave_1: left allmulticast mode [ 268.297466][T15523] bridge_slave_1: left promiscuous mode [ 268.303185][T15523] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.311993][T15523] bridge_slave_0: left allmulticast mode [ 268.317990][T15523] bridge_slave_0: left promiscuous mode [ 268.323661][T15523] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.339599][T15525] loop0: detected capacity change from 0 to 764 [ 268.349097][T15525] Symlink component flag not implemented [ 268.354739][T15525] Symlink component flag not implemented [ 268.360602][T15525] Symlink component flag not implemented (112) [ 268.366751][T15525] Symlink component flag not implemented (22) [ 268.597817][ T4160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.606084][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.682903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.691055][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.786462][T15550] bond1: entered promiscuous mode [ 268.791580][T15550] bond1: entered allmulticast mode [ 268.796841][T15550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.807577][T15550] bond1 (unregistering): Released all slaves [ 268.822450][T15553] bond1: entered promiscuous mode [ 268.827799][T15553] bond1: entered allmulticast mode [ 268.833198][T15553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.844561][T15553] bond1 (unregistering): Released all slaves [ 268.954507][T15562] loop0: detected capacity change from 0 to 164 [ 268.961473][T15562] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 269.017789][T15571] syz.4.3819[15571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.017914][T15571] syz.4.3819[15571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.038404][T15573] 9pnet_fd: Insufficient options for proto=fd [ 269.105261][T15578] loop2: detected capacity change from 0 to 2048 [ 269.143618][T15578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.156190][T15578] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.169651][T15577] EXT4-fs (loop2): shut down requested (2) [ 269.188953][T15181] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.199351][T15579] loop4: detected capacity change from 0 to 2048 [ 269.305461][T15591] loop2: detected capacity change from 0 to 1024 [ 269.312501][T15591] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 269.323438][T15591] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 269.333698][T15591] JBD2: no valid journal superblock found [ 269.339473][T15591] EXT4-fs (loop2): Could not load journal inode [ 269.401147][T15595] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 269.447528][T15599] loop2: detected capacity change from 0 to 128 [ 269.454319][T15599] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.467506][T15599] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.494152][ T3375] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.513485][T15603] xt_TCPMSS: Only works on TCP SYN packets [ 269.704302][T15622] loop2: detected capacity change from 0 to 1024 [ 269.711102][T15622] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.736861][T15622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.772088][T15181] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.712561][T15638] __nla_validate_parse: 11 callbacks suppressed [ 270.712577][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3843'. [ 270.727952][T15638] tipc: Cannot configure node identity twice [ 270.784142][T15644] netlink: 66 bytes leftover after parsing attributes in process `syz.2.3846'. [ 270.936450][T15650] ================================================================== [ 270.944631][T15650] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 270.951859][T15650] [ 270.954189][T15650] race at unknown origin, with assert no writes to 0xffff888109a8c268 of 4 bytes by task 15650 on cpu 0: [ 270.965480][T15650] dequeue_entities+0x6df/0x760 [ 270.970354][T15650] pick_next_task_fair+0x7d/0x410 [ 270.975482][T15650] __schedule+0x27c/0x940 [ 270.979819][T15650] schedule+0x55/0xc0 [ 270.983810][T15650] __futex_wait+0x141/0x290 [ 270.988324][T15650] futex_wait+0x99/0x1c0 [ 270.992578][T15650] do_futex+0x276/0x370 [ 270.996837][T15650] __se_sys_futex+0x25d/0x3a0 [ 271.001537][T15650] __x64_sys_futex+0x78/0x90 [ 271.006146][T15650] x64_sys_call+0x23c4/0x2d60 [ 271.010851][T15650] do_syscall_64+0xc9/0x1c0 [ 271.015368][T15650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.021302][T15650] [ 271.023646][T15650] value changed: 0x00000000 -> 0x00000001 [ 271.029397][T15650] [ 271.031730][T15650] Reported by Kernel Concurrency Sanitizer on: [ 271.037897][T15650] CPU: 0 UID: 0 PID: 15650 Comm: syz.2.3848 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 271.049804][T15650] Tainted: [W]=WARN [ 271.053607][T15650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 271.063687][T15650] ================================================================== [ 271.988501][ T4160] net_ratelimit: 8 callbacks suppressed [ 271.988521][ T4160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.002359][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.324330][ T1008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.105035][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.113436][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.059039][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.233407][ T4160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.241908][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.359104][ T2929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.367342][ T2929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.613440][ T3338] net_ratelimit: 6 callbacks suppressed [ 277.613457][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.627418][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.740398][ T4160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.748724][ T4160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.914753][ T1008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.867507][ T2929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.877159][ T2929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.660933][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog