last executing test programs: 4m8.362613666s ago: executing program 32 (id=167): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xc0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 4m2.860952311s ago: executing program 33 (id=306): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000041000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendfile(r0, r0, 0x0, 0x7f03) 4m1.888487537s ago: executing program 34 (id=331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) 4m1.043223953s ago: executing program 35 (id=353): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 3m38.899806534s ago: executing program 36 (id=978): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='_', 0x1}], 0x1, 0x7ffd, 0xffffffff, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) sendfile(r0, r1, 0x0, 0x100001) 3m27.046456059s ago: executing program 37 (id=1390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 2m41.50228165s ago: executing program 38 (id=3281): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xa) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2m35.28855848s ago: executing program 39 (id=3318): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) 2m27.094654141s ago: executing program 40 (id=3522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_read_part_table(0x602, &(0x7f0000000c00)="$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") 2m10.490670988s ago: executing program 41 (id=4039): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554bc070626792d394df5adf7355fa5f8deb9db3da042d8803f5c0ca3642f22e4c896b5f1d4e16556e57cc2f36b50a00000063cf95", 0x84, 0x11, 0x0, 0x0) 2m6.068614456s ago: executing program 42 (id=4207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000005304c66b"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050) 1m49.967821829s ago: executing program 43 (id=4883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000208060001080006040002aaaaaaaaaa00f5b75eb8725f79d8aa00ac"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m48.751256516s ago: executing program 44 (id=4905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1m48.434807168s ago: executing program 45 (id=4911): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m47.563215024s ago: executing program 46 (id=4924): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0x26fd, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x2, 0x40}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 1m46.246670392s ago: executing program 47 (id=4931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000015"], 0x2c}}, 0x0) 1m43.322599881s ago: executing program 48 (id=4939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 1m26.25449912s ago: executing program 49 (id=5312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = mq_open(&(0x7f0000000000)=']\\\x00', 0x40, 0xb003a5a1abbeaaec, 0x0) mq_notify(r2, 0x0) 1m22.599496473s ago: executing program 50 (id=5399): setresgid(0x0, 0xee01, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYRES16, @ANYBLOB="2c2b8f688a63e7770600"], 0x6, 0x2aa, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 53.21798344s ago: executing program 51 (id=6083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000000000005000000ef"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chdir(0x0) open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) 52.954750802s ago: executing program 52 (id=6091): mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') 34.892324097s ago: executing program 53 (id=6716): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000ac0)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd573", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000bc0)="f3fd9b6721ac03155b2dd43e82b5d4e59850f3382f2708670374b7ce24c43c484b80ff21174f5a2bd858ef7915054e86070d3bccfeb9ce6ea1d63ff12e9007d2055dfaa5fc879c69a17fd8a158d53e4127372753a0aef1d8adbef91565cc17dd6e4a93c2193732382be04848d69980", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000780)="7de3d85265f1097a41a6850bd9a985e8f2a859ed17d73929074bee909e58754391c422d5fd5097692b96dd6f9cc6b44ac87a64246bbb7a1c13", 0x39}, {&(0x7f0000000cc0)="4cdd7354987ac7b89f8f00bfaf5bcc90633feedcf0dd871b99503be15f98f8103d8763b81d9bbd172382fe106e4b4be632ad522e53744ab1a327f0bd523b480f3a84302cf808539105bcef0098b2546409ebfb8214d846ac0ca2f6cdbcbc4fa1", 0x60}, {&(0x7f0000001cc0)="97b1b9656a92c767a1deb91f4e469d48391a71f480cfdf666fd04a3151307d7791f0a76936082bc5990e96d4973522ae8a844ff7989d40d181465efe1730898e747702f2", 0x44}], 0x3}}], 0x4, 0x0) 34.097538452s ago: executing program 5 (id=6727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@o_path={&(0x7f0000000340)='./file0\x00', r1}, 0x18) 34.097411842s ago: executing program 5 (id=6728): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xb804, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0xa0000001}) epoll_pwait2(r2, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 33.919673623s ago: executing program 5 (id=6734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 33.854767344s ago: executing program 5 (id=6736): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYRES64], 0x3, 0x377, &(0x7f00000002c0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x101002, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x80000}, 0x20) 33.597099505s ago: executing program 5 (id=6742): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 33.057039689s ago: executing program 5 (id=6764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0xc8, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x7f}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000002300)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00082c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa112011"], 0xfdef) 33.009433549s ago: executing program 54 (id=6764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0xc8, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x7f}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000002300)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00082c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa112011"], 0xfdef) 21.048534036s ago: executing program 6 (id=7164): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df846ba39e38efc8aec53ef3336edc8b34345245ccb129039638ada63a724ef5a396879010187d3ce7b84dd94f77100f4f8c17cd3fa7c86bfd86df0591ab397de730befc33843cfd1c85cb8b50e796f64b76d3e3cb2c6f9d7b6822e32be3d26250d6", 0x81}], 0x1, 0x0) 20.829832097s ago: executing program 8 (id=7179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x9100}, @void, @eth={@empty, @random="d26b98d19dd8", @val, {@ipv6={0x86dd, @tcp={0x5, 0x6, "363ce7", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x28}}}}}}}}, 0x56) 20.712622328s ago: executing program 8 (id=7194): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac14140005000a000000000005000800000000000500130001"], 0x50}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 20.641065138s ago: executing program 8 (id=7185): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0xa000200d}) epoll_pwait2(r2, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 20.617131248s ago: executing program 8 (id=7189): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 20.447014349s ago: executing program 8 (id=7198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 20.203006041s ago: executing program 6 (id=7209): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) getpid() write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20.146918391s ago: executing program 6 (id=7211): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x33, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "9d0078eeac"}}}}}}, 0x0) 20.106011301s ago: executing program 6 (id=7213): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 19.974963422s ago: executing program 6 (id=7216): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x4004, @fd, 0x8, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 19.810287863s ago: executing program 6 (id=7220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 19.810181293s ago: executing program 55 (id=7220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 19.347940096s ago: executing program 8 (id=7225): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x800, @loopback, 0x5b5}, 0x1c) 19.347833916s ago: executing program 56 (id=7225): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x800, @loopback, 0x5b5}, 0x1c) 17.474501168s ago: executing program 3 (id=7238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xe}]}) 17.381828689s ago: executing program 3 (id=7242): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r3}}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 17.29608507s ago: executing program 3 (id=7234): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) getpid() write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17.22599904s ago: executing program 3 (id=7235): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYRES64], 0x3, 0x377, &(0x7f00000002c0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x101002, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x80000}, 0x20) 16.665516743s ago: executing program 3 (id=7243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b37000000000000000005000000080003"], 0x38}}, 0x0) 15.471676211s ago: executing program 3 (id=7254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001e20000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000700)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800084}, 0xfffffffffffffea9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0x2000000c) 15.471545371s ago: executing program 57 (id=7254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001e20000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000700)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800084}, 0xfffffffffffffea9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0x2000000c) 15.137259303s ago: executing program 1 (id=7274): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.083866293s ago: executing program 1 (id=7277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x0, 0x0, 0x2e, 0x0, "6248bc9c8095fdfb8d639d954a0649542709e9baf27860bd22292b501f2c28d45a71ec3fa8539e7223c278d70126314aca030d71da9dcb99d1d087f250685685db59cf6de9c2a0496da59a4fcf3d9ceb"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x2, 0x0, @mcast1}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217f992169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb090100b88b0bd564fd44893a"}, 0xd8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 15.070736973s ago: executing program 1 (id=7279): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 14.965904364s ago: executing program 1 (id=7284): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) r1 = open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0) fallocate(r1, 0x3, 0x11, 0x2c55) 14.694734036s ago: executing program 1 (id=7288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)=r2}, 0x20) 14.346690518s ago: executing program 1 (id=7291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df846ba39e38efc8aec53ef3336edc8b34345245ccb129039638ada63a724ef5a396879010187d3ce7b84dd94f77100f4f8c17cd3fa7c86bfd86df0591ab397de730befc33843cfd1c85cb8b50e796f64b76d3e3cb2c6f9d7b6822e32be3d26250d6", 0x81}], 0x1, 0x0) 14.346522788s ago: executing program 58 (id=7291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df846ba39e38efc8aec53ef3336edc8b34345245ccb129039638ada63a724ef5a396879010187d3ce7b84dd94f77100f4f8c17cd3fa7c86bfd86df0591ab397de730befc33843cfd1c85cb8b50e796f64b76d3e3cb2c6f9d7b6822e32be3d26250d6", 0x81}], 0x1, 0x0) 1.062580323s ago: executing program 7 (id=7822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff20"], 0x28}}, 0x0) 1.053988563s ago: executing program 7 (id=7824): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) 989.737654ms ago: executing program 4 (id=7828): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r2}, 0x38) 942.511154ms ago: executing program 4 (id=7829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x9}) 867.526274ms ago: executing program 4 (id=7835): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_emit_ethernet(0x1f7, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1c1, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x35, "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"}]}}}}}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="c02102"], 0xfce1) 812.473554ms ago: executing program 4 (id=7839): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="d8000000140081044e81f782db44b904021f080219000000040060a118000200e000000a09000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c046100a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbeffa447ef4a6fbd3824305240c", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x1100, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 811.937525ms ago: executing program 7 (id=7847): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d0000008500000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x7}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 715.521525ms ago: executing program 9 (id=7843): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001440)=@newtaction={0x850, 0x31, 0x1, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8b]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) 652.983715ms ago: executing program 9 (id=7845): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x29) close_range(r2, 0xffffffffffffffff, 0x0) 401.079587ms ago: executing program 2 (id=7848): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) 364.265447ms ago: executing program 9 (id=7850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 363.510037ms ago: executing program 4 (id=7851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)) close(r2) 310.837078ms ago: executing program 2 (id=7852): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x20000085) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000001040)=0x80000004, 0x4) listen(r0, 0x0) 310.584838ms ago: executing program 7 (id=7853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f00000001c0), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001500)=ANY=[@ANYBLOB="38010000100033060000000000000000fffbff05000000000000000000000000e000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000032000000ac1414bb000000000000000000000000f2ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) 310.451448ms ago: executing program 2 (id=7854): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x800000000000000}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 298.724818ms ago: executing program 9 (id=7856): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x5dc, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) 298.555428ms ago: executing program 7 (id=7857): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x1, 0x1}}, 0x2e) 280.216728ms ago: executing program 7 (id=7858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x40001000, 0x0) 279.913258ms ago: executing program 4 (id=7859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) 255.712488ms ago: executing program 9 (id=7860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x9}) 220.090399ms ago: executing program 2 (id=7861): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 204.431208ms ago: executing program 0 (id=7862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000800), &(0x7f0000000280)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = msgget(0x1, 0x2b0) msgsnd(r2, &(0x7f0000000240)={0x1}, 0x8, 0x800) 203.750799ms ago: executing program 9 (id=7872): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x7}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 179.742818ms ago: executing program 2 (id=7863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000000)=0x5, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0) 179.116699ms ago: executing program 0 (id=7864): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), 0x0}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fbdfd09172c182c60400000014000500000000000000000000000000000000010800020005000000140006"], 0x4c}}, 0x0) 165.494718ms ago: executing program 2 (id=7865): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000314010008070000000000000900020073797a310020000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 74.759849ms ago: executing program 0 (id=7866): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 74.585549ms ago: executing program 0 (id=7867): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 29.02924ms ago: executing program 0 (id=7868): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001300)="fe", 0x1}, {&(0x7f0000001340)="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", 0x1000}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00'}, 0x10) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 0s ago: executing program 0 (id=7869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001440)=@newtaction={0x850, 0x31, 0x1, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8b]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) kernel console output (not intermixed with test programs): tering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.870217][T22751] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 250.916638][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.982945][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.066100][T22752] chnl_net:caif_netlink_parms(): no params data found [ 251.087701][ T155] netdevsim netdevsim0 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.103020][T22766] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6720'. [ 251.128001][ T155] netdevsim netdevsim0 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.158489][ T155] netdevsim netdevsim0 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.190487][ T155] netdevsim netdevsim0 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.198842][ T3391] tipc: Node number set to 2886997162 [ 251.212175][T22752] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.219306][T22752] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.226684][T22752] bridge_slave_0: entered allmulticast mode [ 251.233456][T22752] bridge_slave_0: entered promiscuous mode [ 251.240445][ T155] bridge_slave_1: left allmulticast mode [ 251.246157][ T155] bridge_slave_1: left promiscuous mode [ 251.251912][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.260733][ T155] bridge_slave_0: left allmulticast mode [ 251.266426][ T155] bridge_slave_0: left promiscuous mode [ 251.272279][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.342788][ T155] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 251.391956][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.404206][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.415714][ T155] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 251.426452][ T155] bond0 (unregistering): Released all slaves [ 251.435068][T22752] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.442297][T22752] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.449670][T22752] bridge_slave_1: entered allmulticast mode [ 251.456634][T22752] bridge_slave_1: entered promiscuous mode [ 251.481665][ T155] hsr_slave_0: left promiscuous mode [ 251.487541][ T155] hsr_slave_1: left promiscuous mode [ 251.496037][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.503614][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.520471][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.528038][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.556519][ T155] veth1_macvtap: left promiscuous mode [ 251.562160][ T155] veth0_macvtap: left promiscuous mode [ 251.567726][ T155] veth1_vlan: left promiscuous mode [ 251.573142][ T155] veth0_vlan: left promiscuous mode [ 251.710446][ T155] team0 (unregistering): Port device team_slave_1 removed [ 251.722237][ T155] team0 (unregistering): Port device team_slave_0 removed [ 251.769365][T22752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.782111][T22752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.827900][T22806] loop5: detected capacity change from 0 to 256 [ 251.847206][T22806] FAT-fs (loop5): Directory bread(block 64) failed [ 251.854920][T22752] team0: Port device team_slave_0 added [ 251.861081][T22806] FAT-fs (loop5): Directory bread(block 65) failed [ 251.867833][T22806] FAT-fs (loop5): Directory bread(block 66) failed [ 251.875841][T22752] team0: Port device team_slave_1 added [ 251.886289][T22806] FAT-fs (loop5): Directory bread(block 67) failed [ 251.893180][T22806] FAT-fs (loop5): Directory bread(block 68) failed [ 251.905285][T22806] FAT-fs (loop5): Directory bread(block 69) failed [ 251.912954][T22752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.920072][T22752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.946087][T22752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.946242][T22806] FAT-fs (loop5): Directory bread(block 70) failed [ 251.957709][T22752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.970636][T22752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.978145][T22806] FAT-fs (loop5): Directory bread(block 71) failed [ 251.996773][T22752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.014899][T22806] FAT-fs (loop5): Directory bread(block 72) failed [ 252.021654][T22806] FAT-fs (loop5): Directory bread(block 73) failed [ 252.046024][T22752] hsr_slave_0: entered promiscuous mode [ 252.057142][T22752] hsr_slave_1: entered promiscuous mode [ 252.065274][T22752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.082092][T22752] Cannot create hsr debugfs directory [ 252.094547][T22817] loop1: detected capacity change from 0 to 512 [ 252.103933][T22817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.108721][T19045] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 252.117709][T22817] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.124112][T19045] FAT-fs (loop5): Filesystem has been set read-only [ 252.173799][T17697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.226866][ T155] IPVS: stop unused estimator thread 0... [ 252.287736][T22752] netdevsim netdevsim8 eth28 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.307717][T22837] loop6: detected capacity change from 0 to 1024 [ 252.350909][T22752] netdevsim netdevsim8 eth27 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.430165][T22752] netdevsim netdevsim8 eth26 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.481130][T22752] netdevsim netdevsim8 eth25 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.496558][T22854] syz.6.6758[22854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.496662][T22854] syz.6.6758[22854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.508622][T22854] syz.6.6758[22854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.575930][T22752] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 252.603440][ T155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.614567][T22752] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 252.623527][T22752] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 252.632735][T22752] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 252.662056][ T155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.701521][T22752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.712777][ T155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.727884][T22868] loop6: detected capacity change from 0 to 2048 [ 252.743112][T22868] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.758893][T22752] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.771740][ T155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.786756][T22868] EXT4-fs error (device loop6): ext4_search_dir:1505: inode #2: block 16: comm syz.6.6766: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 252.823117][T21257] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.828003][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.839204][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.860064][ T155] netdevsim netdevsim5 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.873573][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.880833][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.891450][ T155] netdevsim netdevsim5 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.900461][T22879] atomic_op ffff888115afb128 conn xmit_atomic 0000000000000000 [ 252.905937][ T155] netdevsim netdevsim5 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.922422][ T155] netdevsim netdevsim5 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.936492][ T155] bridge_slave_1: left allmulticast mode [ 252.942329][ T155] bridge_slave_1: left promiscuous mode [ 252.948006][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.982025][ T155] bridge_slave_0: left allmulticast mode [ 252.987777][ T155] bridge_slave_0: left promiscuous mode [ 252.993525][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.072069][T22899] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6775'. [ 253.132065][ T155] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 253.172299][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.187070][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.200225][ T155] bond0 (unregistering): Released all slaves [ 253.209355][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 253.209372][ T29] audit: type=1400 audit(2000000039.950:12241): avc: denied { create } for pid=22911 comm="syz.4.6781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.236655][ T29] audit: type=1400 audit(2000000039.950:12242): avc: denied { write } for pid=22911 comm="syz.4.6781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.239156][T22752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.267711][T22752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.279431][ T29] audit: type=1400 audit(2000000039.950:12243): avc: denied { read } for pid=22911 comm="syz.4.6781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.300068][ T29] audit: type=1400 audit(2000000040.020:12244): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 253.322510][ T29] audit: type=1400 audit(2000000040.020:12245): avc: denied { search } for pid=2998 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.344436][ T29] audit: type=1400 audit(2000000040.020:12246): avc: denied { open } for pid=2998 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 253.367250][ T29] audit: type=1400 audit(2000000040.020:12247): avc: denied { getattr } for pid=2998 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 253.392338][T22890] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6771'. [ 253.410109][ T29] audit: type=1400 audit(2000000040.150:12248): avc: denied { module_request } for pid=22889 comm="syz.6.6771" kmod="net-cls-matchal" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 253.439169][ T155] hsr_slave_0: left promiscuous mode [ 253.446411][ T155] hsr_slave_1: left promiscuous mode [ 253.456853][ T155] veth1_vlan: left promiscuous mode [ 253.462256][ T155] veth0_vlan: left promiscuous mode [ 253.467894][ T29] audit: type=1400 audit(2000000040.200:12249): avc: denied { read write } for pid=17697 comm="syz-executor" name="loop1" dev="devtmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 253.491376][ T29] audit: type=1400 audit(2000000040.200:12250): avc: denied { open } for pid=17697 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 253.638858][ T155] team0 (unregistering): Port device team_slave_1 removed [ 253.655962][ T155] team0 (unregistering): Port device team_slave_0 removed [ 253.753551][T22924] veth2: entered allmulticast mode [ 253.791102][T22929] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6786'. [ 253.821091][T22752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.872519][T22871] chnl_net:caif_netlink_parms(): no params data found [ 253.957779][T22871] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.965098][T22871] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.972684][T22871] bridge_slave_0: entered allmulticast mode [ 253.983581][T22871] bridge_slave_0: entered promiscuous mode [ 254.002359][T22871] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.009517][T22871] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.017605][T22871] bridge_slave_1: entered allmulticast mode [ 254.024500][T22871] bridge_slave_1: entered promiscuous mode [ 254.057181][T22871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.090829][T22871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.115374][T22871] team0: Port device team_slave_0 added [ 254.123339][T22871] team0: Port device team_slave_1 added [ 254.144594][T22871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.151610][T22871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.177689][T22871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.189239][T22871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.196204][T22871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.222274][T22871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.262991][T22752] veth0_vlan: entered promiscuous mode [ 254.273751][T22871] hsr_slave_0: entered promiscuous mode [ 254.280377][T22871] hsr_slave_1: entered promiscuous mode [ 254.286636][T22871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.294237][T22871] Cannot create hsr debugfs directory [ 254.301097][T22752] veth1_vlan: entered promiscuous mode [ 254.341176][T22752] veth0_macvtap: entered promiscuous mode [ 254.352241][T22752] veth1_macvtap: entered promiscuous mode [ 254.368881][T22951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6789'. [ 254.382170][T22953] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6788'. [ 254.408906][T22752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.419438][T22752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.429375][T22752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.439842][T22752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.449732][T22752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.460276][T22752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.464563][T22955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22955 comm=syz.6.6796 [ 254.470127][T22752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.470149][T22752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.470162][T22752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.470175][T22752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.504460][T22752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.532120][T22957] can0: slcan on ttyS3. [ 254.535554][T22752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.546884][T22752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.556763][T22752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.567534][T22752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.577425][T22752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.587888][T22752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.597768][T22752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.608220][T22752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.618095][T22752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.628584][T22752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.639883][T22752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.653673][T22955] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6796'. [ 254.668526][T22955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.683574][T22958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.690821][T22958] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 254.703048][T22958] bond1: (slave vti0): Error -95 calling set_mac_address [ 254.723165][T22752] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.731966][T22752] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.740812][T22752] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.749753][T22752] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.761755][T22871] netdevsim netdevsim3 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.798299][T22959] can0 (unregistered): slcan off ttyS3. [ 254.809316][T22964] loop6: detected capacity change from 0 to 128 [ 254.858440][T22871] netdevsim netdevsim3 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.903971][T22979] loop6: detected capacity change from 0 to 2048 [ 254.912739][T22871] netdevsim netdevsim3 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.941508][T22979] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.963505][T22979] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 254.981743][T22871] netdevsim netdevsim3 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.991029][T22979] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 255.002056][T22992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22992 comm=syz.1.6802 [ 255.003864][T22979] EXT4-fs (loop6): This should not happen!! Data will be lost [ 255.003864][T22979] [ 255.026218][T22979] EXT4-fs (loop6): Total free blocks count 0 [ 255.032535][T22979] EXT4-fs (loop6): Free/Dirty block details [ 255.038525][T22979] EXT4-fs (loop6): free_blocks=2415919104 [ 255.044257][T22979] EXT4-fs (loop6): dirty_blocks=32 [ 255.049469][T22979] EXT4-fs (loop6): Block reservation details [ 255.055467][T22979] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 255.062205][T22992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6802'. [ 255.063035][T22993] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 255.095984][T22992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.118653][T22995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.125783][T22995] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 255.138291][T22995] bond0: (slave vti0): Error -95 calling set_mac_address [ 255.156237][T22998] can0: slcan on ttyS3. [ 255.172801][T22871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.181874][T22871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.194023][T22871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.204118][T22871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.238488][T23001] can0 (unregistered): slcan off ttyS3. [ 255.255277][T23005] loop1: detected capacity change from 0 to 512 [ 255.272369][T23005] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6805: invalid indirect mapped block 256 (level 2) [ 255.274684][T22871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.300226][T22871] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.312355][T16381] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.319474][T16381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.339458][T23005] EXT4-fs (loop1): 2 truncates cleaned up [ 255.346563][T23005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.357959][T16381] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.367098][T16381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.382226][T23005] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.6805: bg 0: block 5: invalid block bitmap [ 255.392117][T23014] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 255.406430][T23014] SELinux: failed to load policy [ 255.415179][T23016] loop8: detected capacity change from 0 to 128 [ 255.448609][T17697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.492887][T23025] loop1: detected capacity change from 0 to 512 [ 255.511514][T23025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.527834][T23025] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.538156][T23024] loop8: detected capacity change from 0 to 2048 [ 255.554147][T22871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.558489][T23024] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.574491][T17697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.596489][T23024] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 255.612149][T23024] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 255.624629][T23024] EXT4-fs (loop8): This should not happen!! Data will be lost [ 255.624629][T23024] [ 255.634349][T23024] EXT4-fs (loop8): Total free blocks count 0 [ 255.640453][T23024] EXT4-fs (loop8): Free/Dirty block details [ 255.646385][T23024] EXT4-fs (loop8): free_blocks=2415919104 [ 255.652164][T23024] EXT4-fs (loop8): dirty_blocks=32 [ 255.657385][T23024] EXT4-fs (loop8): Block reservation details [ 255.663583][T23024] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 255.674886][T23024] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 255.710447][T22871] veth0_vlan: entered promiscuous mode [ 255.721253][T22871] veth1_vlan: entered promiscuous mode [ 255.748857][T22871] veth0_macvtap: entered promiscuous mode [ 255.755242][T23043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23043 comm=syz.4.6816 [ 255.770814][T23045] loop6: detected capacity change from 0 to 512 [ 255.773343][T22871] veth1_macvtap: entered promiscuous mode [ 255.784587][T23043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6816'. [ 255.794915][T23045] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.6817: corrupted in-inode xattr: invalid ea_ino [ 255.812645][T23048] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 255.816049][T23043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.820982][T23048] SELinux: failed to load policy [ 255.827251][T23045] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.6817: couldn't read orphan inode 15 (err -117) [ 255.835328][T23045] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.870905][T22871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.881546][T22871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.891463][T22871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.902050][T22871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.911915][T22871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.922375][T22871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.932267][T22871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.942719][T22871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.952688][T22871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.963315][T22871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.973264][T22871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.983750][T22871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.994633][T22871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.005501][T23045] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 256.023496][T23050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.031089][T21257] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.031413][T23050] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 256.055047][T23050] bond1: (slave vti0): Error -95 calling set_mac_address [ 256.075060][T22871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.085679][T22871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.095691][T22871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.105505][T23054] loop8: detected capacity change from 0 to 4096 [ 256.106314][T22871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.106331][T22871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.106406][T22871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.106429][T22871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.124864][T23054] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.133079][T22871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.133099][T22871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.162354][T23054] EXT4-fs (loop8): shut down requested (0) [ 256.165937][T22871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.201878][T22871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.212418][T22871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.225087][T22871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.236221][T23056] can0: slcan on ttyS3. [ 256.244435][T22871] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.253419][T22871] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.262307][T22871] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.271101][T22871] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.280958][T22752] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.328414][T23059] can0 (unregistered): slcan off ttyS3. [ 256.461759][T23068] loop1: detected capacity change from 0 to 4096 [ 256.473229][T23068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.487926][T23088] netlink: 'syz.8.6833': attribute type 9 has an invalid length. [ 256.495158][T23068] EXT4-fs (loop1): shut down requested (0) [ 256.500260][T23088] bond0: entered promiscuous mode [ 256.506779][T23088] bond_slave_0: entered promiscuous mode [ 256.512683][T23088] bond_slave_1: entered promiscuous mode [ 256.519487][T23088] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 256.529836][T23088] bond0: left promiscuous mode [ 256.534754][T23088] bond_slave_0: left promiscuous mode [ 256.540404][T23088] bond_slave_1: left promiscuous mode [ 256.550529][T17697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.565926][T23084] netlink: 'syz.3.6831': attribute type 21 has an invalid length. [ 256.575317][T23084] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6831'. [ 256.586473][T23091] : renamed from bond0 (while UP) [ 256.646729][T23099] can0: slcan on ttyS3. [ 256.653751][T23102] loop8: detected capacity change from 0 to 512 [ 256.674170][T23102] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.6841: invalid indirect mapped block 256 (level 2) [ 256.690272][T23102] EXT4-fs (loop8): 2 truncates cleaned up [ 256.696453][T23102] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.718240][T23099] can0 (unregistered): slcan off ttyS3. [ 256.735155][T23102] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.6841: bg 0: block 5: invalid block bitmap [ 256.788387][T22752] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.828535][T23119] netlink: 'syz.4.6850': attribute type 9 has an invalid length. [ 256.846534][T23119] bond0: entered promiscuous mode [ 256.851697][T23119] ip6gretap1: entered promiscuous mode [ 256.862399][T23119] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 256.869981][T23119] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 256.893464][T23119] bond0: left promiscuous mode [ 256.898400][T23119] ip6gretap1: left promiscuous mode [ 256.908807][T23132] loop6: detected capacity change from 0 to 256 [ 256.917026][T23126] : renamed from bond0 [ 256.997192][T23141] can0: slcan on ttyS3. [ 257.008167][T23143] sd 0:0:1:0: device reset [ 257.050043][T23141] can0 (unregistered): slcan off ttyS3. [ 257.067071][T23155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.075716][T23155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.104258][T23160] loop3: detected capacity change from 0 to 512 [ 257.112982][T23160] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.6867: corrupted in-inode xattr: invalid ea_ino [ 257.127969][T23160] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.6867: couldn't read orphan inode 15 (err -117) [ 257.141081][T23160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.179794][T22871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.214590][T23170] loop3: detected capacity change from 0 to 256 [ 257.222680][T23164] netlink: 'syz.6.6869': attribute type 9 has an invalid length. [ 257.286309][T23178] syz.3.6873[23178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.286552][T23178] syz.3.6873[23178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.298561][T23178] syz.3.6873[23178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.311824][T23178] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6873'. [ 257.424753][T23192] can0: slcan on ttyS3. [ 257.458310][T23192] can0 (unregistered): slcan off ttyS3. [ 257.791843][T23242] loop6: detected capacity change from 0 to 2048 [ 257.967943][ T3389] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 257.975467][ T3389] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 257.990061][T23272] loop1: detected capacity change from 0 to 512 [ 257.996858][T23272] EXT4-fs: Ignoring removed orlov option [ 258.010040][ T3389] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 258.021121][T23272] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 258.042846][T23272] EXT4-fs (loop1): 1 orphan inode deleted [ 258.048855][T23272] EXT4-fs (loop1): 1 truncate cleaned up [ 258.079157][T23272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.151859][T23272] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 258.178826][T23290] vhci_hcd: invalid port number 61 [ 258.188187][T23294] : renamed from bond0 (while UP) [ 258.196127][T17697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.217534][T23297] loop6: detected capacity change from 0 to 1024 [ 258.250234][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 258.250249][ T29] audit: type=1400 audit(2000000000.100:12535): avc: denied { create } for pid=23300 comm="syz.3.6931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.252825][T23297] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.256579][ T29] audit: type=1400 audit(2000000000.110:12536): avc: denied { setopt } for pid=23300 comm="syz.3.6931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.292216][T23297] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 258.306840][ T29] audit: type=1400 audit(2000000000.110:12537): avc: denied { read } for pid=23300 comm="syz.3.6931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.311187][T23302] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 258.319339][T23297] EXT4-fs (loop6): This should not happen!! Data will be lost [ 258.319339][T23297] [ 258.342928][ T29] audit: type=1400 audit(2000000000.140:12538): avc: denied { create } for pid=23301 comm="syz.1.6932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 258.346710][T23297] EXT4-fs (loop6): Total free blocks count 0 [ 258.356381][ T29] audit: type=1400 audit(2000000000.140:12539): avc: denied { read write } for pid=23296 comm="syz.6.6930" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 258.356412][ T29] audit: type=1400 audit(2000000000.140:12540): avc: denied { open } for pid=23296 comm="syz.6.6930" path="/162/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 258.376499][T23297] EXT4-fs (loop6): Free/Dirty block details [ 258.376517][T23297] EXT4-fs (loop6): free_blocks=0 [ 258.382551][ T29] audit: type=1400 audit(2000000000.140:12541): avc: denied { ioctl } for pid=23296 comm="syz.6.6930" path="/162/file1/file1" dev="loop6" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 258.430046][T23309] syz.1.6934[23309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.434955][T23297] EXT4-fs (loop6): dirty_blocks=0 [ 258.481766][ T29] audit: type=1400 audit(2000000000.250:12542): avc: denied { write } for pid=2998 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.481832][T23297] EXT4-fs (loop6): Block reservation details [ 258.481851][T23297] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 258.484854][T23309] syz.1.6934[23309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.503495][ T29] audit: type=1400 audit(2000000000.250:12543): avc: denied { remove_name } for pid=2998 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.521110][T23307] atomic_op ffff888113589d28 conn xmit_atomic 0000000000000000 [ 258.526910][ T29] audit: type=1400 audit(2000000000.250:12544): avc: denied { rename } for pid=2998 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 258.570343][T23309] syz.1.6934[23309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.936951][T23365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6958'. [ 258.999984][T23373] netlink: 'syz.3.6960': attribute type 153 has an invalid length. [ 259.144093][T23391] bridge0: port 3(vlan2) entered blocking state [ 259.150611][T23391] bridge0: port 3(vlan2) entered disabled state [ 259.157334][T23391] vlan2: entered allmulticast mode [ 259.169884][T23391] vlan2: left allmulticast mode [ 259.280695][T23412] sd 0:0:1:0: device reset [ 259.365576][T23426] loop8: detected capacity change from 0 to 1024 [ 259.373067][T23426] EXT4-fs: Ignoring removed orlov option [ 259.378915][T23426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.602877][T23449] sd 0:0:1:0: device reset [ 260.010737][T23489] sd 0:0:1:0: device reset [ 260.020832][T23492] loop8: detected capacity change from 0 to 1024 [ 260.027662][T23492] EXT4-fs: Ignoring removed orlov option [ 260.033562][T23492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.054521][T23496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7026'. [ 260.079419][T23492] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #14: comm syz.8.7023: attempt to clear invalid blocks 1886221359 len 1 [ 260.176022][T23511] devtmpfs: Unknown parameter 'posixacl' [ 260.309350][T23536] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7035'. [ 260.350783][T23545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23545 comm=syz.8.7039 [ 260.351073][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7037'. [ 260.395584][T23545] netlink: 'syz.8.7039': attribute type 1 has an invalid length. [ 260.408307][T23545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.423808][T23547] bond1: (slave ip6gretap1): making interface the new active one [ 260.433135][T23547] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 260.478384][T23553] sd 0:0:1:0: device reset [ 260.518343][T23557] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7053'. [ 260.859418][T23575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7050'. [ 260.868475][T23575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7050'. [ 260.882187][T23575] bond_slave_0: entered promiscuous mode [ 260.889051][T23575] bond_slave_0: left promiscuous mode [ 260.941059][T23581] loop3: detected capacity change from 0 to 8192 [ 260.968914][T23586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7054'. [ 260.997686][T23589] netlink: zone id is out of range [ 261.002987][T23589] netlink: zone id is out of range [ 261.008155][T23589] netlink: zone id is out of range [ 261.080793][T23600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7061'. [ 261.205226][T23611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7065'. [ 261.214889][T23611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7065'. [ 261.273487][T23621] IPv6: Can't replace route, no match found [ 261.718330][T23650] loop6: detected capacity change from 0 to 8192 [ 261.858554][T23658] netlink: 'syz.3.7083': attribute type 10 has an invalid length. [ 261.871143][T23658] team0: Device hsr_slave_0 failed to register rx_handler [ 262.031492][T23680] loop8: detected capacity change from 0 to 1024 [ 262.091234][T23689] syz.6.7099[23689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.091320][T23689] syz.6.7099[23689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.105485][T23689] syz.6.7099[23689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.165144][T23695] hub 2-0:1.0: USB hub found [ 262.192082][T23695] hub 2-0:1.0: 8 ports detected [ 262.193662][T23707] syz.8.7107[23707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.249807][T23711] loop8: detected capacity change from 0 to 8192 [ 262.337087][T23721] netlink: 'syz.6.7111': attribute type 10 has an invalid length. [ 262.379808][T23721] team0: Device hsr_slave_0 failed to register rx_handler [ 262.701317][T23760] netlink: 'syz.8.7131': attribute type 10 has an invalid length. [ 262.714947][T23760] team0: Device hsr_slave_0 failed to register rx_handler [ 262.777785][ T6665] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 262.780208][T23768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.785375][ T6665] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 262.793851][T23768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.813564][ T6665] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 263.273015][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 263.273033][ T29] audit: type=1400 audit(2000000005.130:12981): avc: denied { sys_module } for pid=23777 comm="syz.4.7138" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 263.274709][T23778] loop8: detected capacity change from 0 to 512 [ 263.279268][ T29] audit: type=1400 audit(2000000005.130:12982): avc: denied { module_request } for pid=23777 comm="syz.4.7138" kmod="tty-ldisc-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 263.343992][ T29] audit: type=1400 audit(2000000005.170:12983): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 263.366229][ T29] audit: type=1400 audit(2000000005.170:12984): avc: denied { search } for pid=2998 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.387938][ T29] audit: type=1400 audit(2000000005.170:12985): avc: denied { append } for pid=2998 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 263.395822][T23778] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.410511][ T29] audit: type=1400 audit(2000000005.170:12986): avc: denied { open } for pid=2998 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 263.410560][ T29] audit: type=1400 audit(2000000005.170:12987): avc: denied { getattr } for pid=2998 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 263.466777][ T29] audit: type=1400 audit(2000000005.170:12988): avc: denied { mounton } for pid=23776 comm="syz.8.7139" path="/74/file0" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 263.489685][ T29] audit: type=1326 audit(2000000005.250:12989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.3.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a0b5e759 code=0x7ffc0000 [ 263.513534][ T29] audit: type=1326 audit(2000000005.250:12990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.3.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a0b5e759 code=0x7ffc0000 [ 263.540736][T23778] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 263.599944][T23792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23792 comm=syz.6.7144 [ 263.613981][T23792] netlink: 'syz.6.7144': attribute type 1 has an invalid length. [ 263.642329][T23792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.681882][T23798] bond0: (slave ip6gretap1): making interface the new active one [ 263.714671][T23798] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 264.712381][T23849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23849 comm=syz.3.7165 [ 264.727788][T23849] netlink: 'syz.3.7165': attribute type 1 has an invalid length. [ 264.744986][T23849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.767627][T23849] bond0: (slave ip6gretap1): making interface the new active one [ 264.776571][T23849] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 264.829995][T23863] vhci_hcd: invalid port number 157 [ 264.835253][T23863] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 264.952078][T23873] hub 2-0:1.0: USB hub found [ 264.956891][T23873] hub 2-0:1.0: 8 ports detected [ 265.104222][T23893] loop8: detected capacity change from 0 to 128 [ 265.125591][T23893] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 265.228476][T23893] loop8: detected capacity change from 128 to 64 [ 265.235385][T23910] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5809: Out of memory [ 265.244999][T23910] EXT4-fs error (device loop8): __ext4_unlink:3274: inode #2: comm syz.8.7189: mark_inode_dirty error [ 265.265290][T22752] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5809: Out of memory [ 265.274622][T22752] EXT4-fs error (device loop8): ext4_dirty_inode:6013: inode #2: comm syz-executor: mark_inode_dirty error [ 265.452310][T23928] syzkaller0: entered promiscuous mode [ 265.458162][T23928] syzkaller0: entered allmulticast mode [ 265.613230][T23940] loop6: detected capacity change from 0 to 128 [ 265.621794][T23940] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 265.698131][T23940] loop6: detected capacity change from 128 to 64 [ 265.705800][T23940] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5809: Out of memory [ 265.715150][T23940] EXT4-fs error (device loop6): __ext4_unlink:3274: inode #2: comm syz.6.7213: mark_inode_dirty error [ 265.737947][T21257] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5809: Out of memory [ 265.751379][T21257] EXT4-fs error (device loop6): ext4_dirty_inode:6013: inode #2: comm syz-executor: mark_inode_dirty error [ 266.043769][T23953] chnl_net:caif_netlink_parms(): no params data found [ 266.080594][T23953] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.087678][T23953] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.095061][T23953] bridge_slave_0: entered allmulticast mode [ 266.101774][T23953] bridge_slave_0: entered promiscuous mode [ 266.109097][T23953] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.116259][T23953] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.123748][T23953] bridge_slave_1: entered allmulticast mode [ 266.130443][T23953] bridge_slave_1: entered promiscuous mode [ 266.152556][T23953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.165285][T23953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.187190][T23953] team0: Port device team_slave_0 added [ 266.194279][T23953] team0: Port device team_slave_1 added [ 266.211805][T23953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.218886][T23953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.244895][T23953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.256254][T23953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.263308][T23953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.289508][T23953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.319443][T23953] hsr_slave_0: entered promiscuous mode [ 266.326517][T23953] hsr_slave_1: entered promiscuous mode [ 266.333913][T23953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.341563][T23953] Cannot create hsr debugfs directory [ 266.372030][ T28] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.426247][ T28] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.445390][T23953] netdevsim netdevsim7 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.463572][ T28] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.510107][T23953] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.564141][ T28] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.577505][T23975] chnl_net:caif_netlink_parms(): no params data found [ 266.601278][T23953] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.639034][T23975] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.646173][T23975] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.653826][T23975] bridge_slave_0: entered allmulticast mode [ 266.660508][T23975] bridge_slave_0: entered promiscuous mode [ 266.667804][T23975] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.674968][T23975] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.682381][T23975] bridge_slave_1: entered allmulticast mode [ 266.688924][T23975] bridge_slave_1: entered promiscuous mode [ 266.702647][T23953] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.720579][T23975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.732572][ T28] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.744001][ T28] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.754021][T23975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.772504][ T28] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.787896][T23975] team0: Port device team_slave_0 added [ 266.796713][ T28] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.806060][T23975] team0: Port device team_slave_1 added [ 266.820223][ T28] bridge_slave_1: left allmulticast mode [ 266.826005][ T28] bridge_slave_1: left promiscuous mode [ 266.831800][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.839504][ T28] bridge_slave_0: left allmulticast mode [ 266.845372][ T28] bridge_slave_0: left promiscuous mode [ 266.851167][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.916850][ T28] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 266.981347][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.992480][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.003006][ T28] bond0 (unregistering): Released all slaves [ 267.012025][ T28] bond1 (unregistering): Released all slaves [ 267.041069][T23975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.048161][T23975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.074152][T23975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.085697][T23975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.092755][T23975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.118818][T23975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.135654][ T28] hsr_slave_0: left promiscuous mode [ 267.141537][ T28] hsr_slave_1: left promiscuous mode [ 267.147357][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.154836][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.162548][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.169997][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.179487][ T28] veth1_vlan: left promiscuous mode [ 267.184759][ T28] veth0_vlan: left promiscuous mode [ 267.272894][ T28] team0 (unregistering): Port device team_slave_1 removed [ 267.284769][ T28] team0 (unregistering): Port device team_slave_0 removed [ 267.327274][T23953] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 267.337238][T23953] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 267.351908][T23953] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 267.367468][T23975] hsr_slave_0: entered promiscuous mode [ 267.373943][T23975] hsr_slave_1: entered promiscuous mode [ 267.379951][T23975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.387509][T23975] Cannot create hsr debugfs directory [ 267.393130][T23953] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 267.458677][T23975] netdevsim netdevsim2 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.481467][T23953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.495289][T23953] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.505067][T16381] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.512256][T16381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.523466][T16381] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.530735][T16381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.574886][T23975] netdevsim netdevsim2 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.610200][T23953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.621238][T23975] netdevsim netdevsim2 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.690185][T23975] netdevsim netdevsim2 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.739375][T23953] veth0_vlan: entered promiscuous mode [ 267.747997][T23953] veth1_vlan: entered promiscuous mode [ 267.766264][T23953] veth0_macvtap: entered promiscuous mode [ 267.776111][T23953] veth1_macvtap: entered promiscuous mode [ 267.793855][T23975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.802962][T23975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.812413][T23975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.822260][T23975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.831533][T23953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.842229][T23953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.852090][T23953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.862527][T23953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.872465][T23953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.882912][T23953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.892803][T23953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.903338][T23953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.913208][T23953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.923758][T23953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.933613][T23953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.944115][T23953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.955239][T23953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.967301][T23953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.977963][T23953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.988039][T23953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.998602][T23953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.008569][T23953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.019084][T23953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.028956][T23953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.039613][T23953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.049483][T23953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.060028][T23953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.069899][T23953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.080343][T23953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.091518][T23953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.103831][T23953] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.112712][T23953] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.121612][T23953] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.130399][T23953] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.178802][T23975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.191610][T23975] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.201591][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.208750][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.223165][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.230274][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.287087][T23975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.366169][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 268.366188][ T29] audit: type=1400 audit(2000000010.220:13280): avc: denied { ioctl } for pid=24023 comm="syz.4.7232" path="socket:[72230]" dev="sockfs" ino=72230 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 268.394425][T24034] loop7: detected capacity change from 0 to 2048 [ 268.415434][T23975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.426443][ T29] audit: type=1400 audit(2000000010.290:13281): avc: denied { setopt } for pid=24038 comm="syz.4.7247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 268.489754][T24034] EXT4-fs error (device loop7): ext4_search_dir:1505: inode #2: block 16: comm syz.7.7233: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 268.518283][ T29] audit: type=1400 audit(2000000010.360:13282): avc: denied { bind } for pid=24050 comm="syz.4.7236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 268.521030][T24052] loop3: detected capacity change from 0 to 256 [ 268.538002][ T29] audit: type=1400 audit(2000000010.360:13283): avc: denied { name_bind } for pid=24050 comm="syz.4.7236" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 268.565336][ T29] audit: type=1400 audit(2000000010.360:13284): avc: denied { node_bind } for pid=24050 comm="syz.4.7236" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 268.587771][ T29] audit: type=1400 audit(2000000010.370:13285): avc: denied { write } for pid=24050 comm="syz.4.7236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 268.591138][T24052] FAT-fs (loop3): Directory bread(block 64) failed [ 268.609479][T23975] veth0_vlan: entered promiscuous mode [ 268.626261][T23975] veth1_vlan: entered promiscuous mode [ 268.627500][T24052] FAT-fs (loop3): Directory bread(block 65) failed [ 268.638939][ T29] audit: type=1400 audit(2000000010.480:13286): avc: denied { read write } for pid=24033 comm="syz.7.7233" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 268.662113][ T29] audit: type=1400 audit(2000000010.480:13287): avc: denied { open } for pid=24033 comm="syz.7.7233" path="/2/file0/file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 268.685463][ T29] audit: type=1326 audit(2000000010.480:13288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24053 comm="syz.4.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73fe5be759 code=0x7ffc0000 [ 268.687183][T23975] veth0_macvtap: entered promiscuous mode [ 268.709470][ T29] audit: type=1326 audit(2000000010.480:13289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24053 comm="syz.4.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73fe5be759 code=0x7ffc0000 [ 268.715140][T24052] FAT-fs (loop3): Directory bread(block 66) failed [ 268.753080][T23975] veth1_macvtap: entered promiscuous mode [ 268.758602][T24052] FAT-fs (loop3): Directory bread(block 67) failed [ 268.764084][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.775858][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.783539][T24052] FAT-fs (loop3): Directory bread(block 68) failed [ 268.786159][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.803007][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.807811][T24052] FAT-fs (loop3): Directory bread(block 69) failed [ 268.812921][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.812940][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.833535][T24052] FAT-fs (loop3): Directory bread(block 70) failed [ 268.840118][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.840136][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.840151][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.840167][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.840187][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.870431][T24052] FAT-fs (loop3): Directory bread(block 71) failed [ 268.877568][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.907444][T24052] FAT-fs (loop3): Directory bread(block 72) failed [ 268.914340][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.914358][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.915676][T23975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.945942][T24052] FAT-fs (loop3): Directory bread(block 73) failed [ 268.959587][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.961455][T23953] EXT4-fs unmount: 15 callbacks suppressed [ 268.961473][T23953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.970056][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.970079][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.005558][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.015523][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.026111][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.035970][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.041749][T22871] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 269.046841][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.054188][T22871] FAT-fs (loop3): Filesystem has been set read-only [ 269.070924][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.081407][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.091297][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.102432][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.112435][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.122899][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.134731][T23975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.153784][T23975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.162832][T23975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.171753][T23975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.180702][T23975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.312480][T24071] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 270.265020][T24085] __nla_validate_parse: 7 callbacks suppressed [ 270.265037][T24085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7257'. [ 270.293150][T24084] hub 8-0:1.0: USB hub found [ 270.305774][T24084] hub 8-0:1.0: 8 ports detected [ 270.414598][T24106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7264'. [ 270.423558][T24106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7264'. [ 270.444512][T24106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7264'. [ 270.582199][T24090] chnl_net:caif_netlink_parms(): no params data found [ 270.593681][T24128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24128 comm=syz.2.7273 [ 270.635252][T24139] bpf_get_probe_write_proto: 2 callbacks suppressed [ 270.635272][T24139] syz.2.7278[24139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.642042][T24139] syz.2.7278[24139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.653722][T24139] syz.2.7278[24139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.670454][T24141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7279'. [ 270.691031][T24141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7279'. [ 270.712641][T24141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7279'. [ 270.720841][T24146] loop2: detected capacity change from 0 to 2048 [ 270.756757][T24090] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.764033][T24154] loop1: detected capacity change from 0 to 512 [ 270.766158][T24154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.770438][T24090] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.790539][T24090] bridge_slave_0: entered allmulticast mode [ 270.797175][T24090] bridge_slave_0: entered promiscuous mode [ 270.804633][T24090] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.811858][T24090] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.819229][T24090] bridge_slave_1: entered allmulticast mode [ 270.825738][T24090] bridge_slave_1: entered promiscuous mode [ 270.849730][T24146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.875556][T24090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.887022][T24090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.906618][T24146] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.7281: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 270.925203][T24154] loop1: detected capacity change from 512 to 64 [ 270.945523][T24154] bio_check_eod: 6952 callbacks suppressed [ 270.945542][T24154] syz.1.7284: attempt to access beyond end of device [ 270.945542][T24154] loop1: rw=0, sector=70, nr_sectors = 2 limit=64 [ 270.966664][T24090] team0: Port device team_slave_0 added [ 270.974653][T24090] team0: Port device team_slave_1 added [ 270.976998][T17697] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0) [ 270.994283][T17697] EXT4-fs error (device loop1): ext4_lookup:1813: inode #14: comm syz-executor: unexpected EA_INODE flag [ 271.026489][T23975] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.037926][T24090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.038208][T17697] EXT4-fs error (device loop1): ext4_lookup:1813: inode #14: comm syz-executor: unexpected EA_INODE flag [ 271.044989][T24090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.082376][T24090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.107332][T20975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.126078][T24090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.133197][T24090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.159264][T24090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.198006][T24090] hsr_slave_0: entered promiscuous mode [ 271.206030][T24090] hsr_slave_1: entered promiscuous mode [ 271.212380][T24090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.220217][T24090] Cannot create hsr debugfs directory [ 271.288976][T24090] netdevsim netdevsim9 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.330420][T24090] netdevsim netdevsim9 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.390505][T24090] netdevsim netdevsim9 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.440803][T24090] netdevsim netdevsim9 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.514826][T24090] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 271.530541][T24090] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 271.543976][T24090] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 271.559852][T24090] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 271.603215][T24190] loop4: detected capacity change from 0 to 512 [ 271.611186][T24190] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 271.630913][T24190] EXT4-fs (loop4): invalid journal inode [ 271.637570][T24190] EXT4-fs (loop4): can't get journal size [ 271.654047][T24190] EXT4-fs (loop4): 1 truncate cleaned up [ 271.654406][T24090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.660843][T24190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.673316][T24179] chnl_net:caif_netlink_parms(): no params data found [ 271.687939][T24190] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 271.695415][T24090] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.714444][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.721578][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.730486][T21275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.757389][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.764613][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.809320][T24090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.819870][T24090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.865788][T24179] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.872908][T24179] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.880539][T24200] vhci_hcd: invalid port number 61 [ 271.900671][T24179] bridge_slave_0: entered allmulticast mode [ 271.903824][T24206] loop4: detected capacity change from 0 to 128 [ 271.907173][T24179] bridge_slave_0: entered promiscuous mode [ 271.922852][T24179] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.930137][T24179] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.939595][T24179] bridge_slave_1: entered allmulticast mode [ 271.946287][T24179] bridge_slave_1: entered promiscuous mode [ 271.989813][T24179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.028327][T24214] block device autoloading is deprecated and will be removed. [ 272.036064][T24214] syz.4.7304: attempt to access beyond end of device [ 272.036064][T24214] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 272.508390][T24090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.525016][T24179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.579795][T24179] team0: Port device team_slave_0 added [ 272.595102][T24179] team0: Port device team_slave_1 added [ 272.615539][T24179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.622782][T24179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.648717][T24179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.676317][T24179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.683491][T24179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.709582][T24179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.805111][T24179] hsr_slave_0: entered promiscuous mode [ 272.821428][T24179] hsr_slave_1: entered promiscuous mode [ 272.827805][T24179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.844236][T24179] Cannot create hsr debugfs directory [ 272.962845][T24252] geneve0: entered allmulticast mode [ 272.990378][T24179] netdevsim netdevsim0 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.014567][T24090] veth0_vlan: entered promiscuous mode [ 273.024202][T24090] veth1_vlan: entered promiscuous mode [ 273.047139][T24179] netdevsim netdevsim0 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.065919][T24090] veth0_macvtap: entered promiscuous mode [ 273.085645][T24090] veth1_macvtap: entered promiscuous mode [ 273.109683][T24179] netdevsim netdevsim0 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.144264][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.154834][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.164808][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.175294][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.185324][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.195843][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.205785][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.216374][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.226215][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.236771][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.246768][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.257253][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.267117][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.277581][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.287469][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.298196][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.309606][T24090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.330602][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.341566][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.351807][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.364799][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.374792][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.385409][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.395501][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.406089][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.416185][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.427251][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.437599][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.448388][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.458506][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.469160][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.479099][T24090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.489656][T24090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.512212][T24090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.521100][T24090] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.529949][T24090] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.538855][T24090] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.547590][T24090] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.563759][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 273.563774][ T29] audit: type=1400 audit(2000000015.420:13436): avc: denied { mounton } for pid=24267 comm="syz.4.7322" path="/274/file0" dev="tmpfs" ino=1432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 273.564915][T24179] netdevsim netdevsim0 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.570453][T24268] tmpfs: Unknown parameter 'mp' [ 273.633055][ T29] audit: type=1400 audit(2000000015.490:13437): avc: denied { mounton } for pid=24090 comm="syz-executor" path="/root/syzkaller.a8pn8X/syz-tmp" dev="sda1" ino=2003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 273.657762][ T29] audit: type=1400 audit(2000000015.490:13438): avc: denied { mount } for pid=24090 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 273.694907][ T29] audit: type=1400 audit(2000000015.490:13439): avc: denied { mounton } for pid=24090 comm="syz-executor" path="/root/syzkaller.a8pn8X/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 273.716636][T24179] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.721983][ T29] audit: type=1400 audit(2000000015.490:13440): avc: denied { mounton } for pid=24090 comm="syz-executor" path="/root/syzkaller.a8pn8X/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=73974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 273.756444][ T29] audit: type=1400 audit(2000000015.540:13441): avc: denied { mounton } for pid=24090 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 273.792485][T24179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.803921][T24179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.811706][ T29] audit: type=1326 audit(2000000015.670:13442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24276 comm="syz.7.7325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f65e759 code=0x7ffc0000 [ 273.813501][T24179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.835800][ T29] audit: type=1326 audit(2000000015.670:13443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24276 comm="syz.7.7325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f862f65e759 code=0x7ffc0000 [ 273.865962][ T29] audit: type=1326 audit(2000000015.670:13444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24276 comm="syz.7.7325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f65e759 code=0x7ffc0000 [ 273.889709][ T29] audit: type=1326 audit(2000000015.670:13445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24276 comm="syz.7.7325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f65e759 code=0x7ffc0000 [ 273.920309][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7326'. [ 273.991872][T24179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.021844][T24179] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.033798][T16381] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.040961][T16381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.053514][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.060719][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.103924][T24179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.114488][T24179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.188088][T24179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.333842][T24179] veth0_vlan: entered promiscuous mode [ 274.343471][T24179] veth1_vlan: entered promiscuous mode [ 274.361219][T24179] veth0_macvtap: entered promiscuous mode [ 274.372794][T24179] veth1_macvtap: entered promiscuous mode [ 274.390498][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.400981][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.410852][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.421329][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.431254][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.441783][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.451826][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.462615][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.472474][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.482938][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.492914][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.503509][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.513603][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.524150][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.534286][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.544999][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.554881][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.565351][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.576654][T24179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.585369][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.595913][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.606087][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.616720][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.626743][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.637509][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.647374][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.657926][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.667870][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.678555][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.688407][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.699020][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.708932][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.719383][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.729314][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.739765][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.749601][T24179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.760367][T24179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.771463][T24179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.802038][T24179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.810890][T24179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.819716][T24179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.828592][T24179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.838570][T24335] netlink: 'syz.9.7346': attribute type 3 has an invalid length. [ 274.862657][T24339] macsec1: entered allmulticast mode [ 274.872883][T24341] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7349'. [ 274.969442][T16375] bridge_slave_1: left allmulticast mode [ 274.975210][T16375] bridge_slave_1: left promiscuous mode [ 274.980495][T24356] loop9: detected capacity change from 0 to 1024 [ 274.981044][T16375] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.987873][T24356] EXT4-fs: test_dummy_encryption option not supported [ 275.004883][T16375] bridge_slave_0: left allmulticast mode [ 275.010700][T16375] bridge_slave_0: left promiscuous mode [ 275.016432][T16375] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.079394][T24361] loop0: detected capacity change from 0 to 1024 [ 275.097573][T16375] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 275.107918][T24361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.126076][T24361] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #14: comm syz.0.7356: attempt to clear invalid blocks 1886221359 len 1 [ 275.170042][T24179] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.211239][T16375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.237862][T16375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.264460][T16375] bond0 (unregistering): Released all slaves [ 275.275799][T16375] bond1 (unregistering): Released all slaves [ 275.320647][T16375] tipc: Left network mode [ 275.328581][T16375] hsr_slave_1: left promiscuous mode [ 275.342123][T16375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.349658][T16375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.371349][T16375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.378960][T16375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.402941][T16375] veth1_macvtap: left promiscuous mode [ 275.408520][T16375] veth0_macvtap: left promiscuous mode [ 275.414340][T16375] veth1_vlan: left promiscuous mode [ 275.419998][T16375] veth0_vlan: left promiscuous mode [ 275.471521][T24409] loop4: detected capacity change from 0 to 512 [ 275.480804][T24409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.491197][T24409] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 275.500469][T24409] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 275.509525][T24409] EXT4-fs (loop4): 1 truncate cleaned up [ 275.515783][T24409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.538374][T24409] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 4: comm syz.4.7377: lblock 0 mapped to illegal pblock 4 (length 1) [ 275.559228][T16375] team0 (unregistering): Port device team_slave_1 removed [ 275.571820][T16375] team0 (unregistering): Port device team_slave_0 removed [ 275.572909][T24409] EXT4-fs (loop4): Remounting filesystem read-only [ 275.600597][T24415] xt_TPROXY: Can be used only with -p tcp or -p udp [ 275.614442][T21275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.066251][T24486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7411'. [ 276.144076][T24497] loop7: detected capacity change from 0 to 512 [ 276.163055][T24504] netlink: 212 bytes leftover after parsing attributes in process `syz.2.7419'. [ 276.184065][T24497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.201850][T24497] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.240314][T24517] loop9: detected capacity change from 0 to 512 [ 276.255222][T24517] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.258008][T24518] loop0: detected capacity change from 0 to 2048 [ 276.271217][T24520] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 276.279512][T24520] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 276.307553][T24517] EXT4-fs (loop9): orphan cleanup on readonly fs [ 276.307773][T23953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.314802][T24517] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #3: comm syz.9.7423: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 276.350993][T24524] loop4: detected capacity change from 0 to 2048 [ 276.360564][T24517] EXT4-fs error (device loop9): ext4_quota_enable:7087: comm syz.9.7423: Bad quota inode: 3, type: 0 [ 276.372426][T24517] EXT4-fs warning (device loop9): ext4_enable_quotas:7128: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 276.387214][T24517] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 276.389672][T24524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.394293][T24517] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.427430][T24517] syz.9.7423[24517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.427528][T24517] syz.9.7423[24517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.442056][T24517] syz.9.7423[24517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.504653][T24090] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.517689][T24540] loop7: detected capacity change from 0 to 256 [ 276.575538][T21275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.824381][T24586] syz.7.7454[24586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.824512][T24586] syz.7.7454[24586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.852415][T24586] syz.7.7454[24586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.918545][T24594] netlink: 'syz.9.7457': attribute type 4 has an invalid length. [ 276.937840][T24594] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.7457'. [ 277.279542][T24644] ªªªªªª: renamed from syzkaller0 [ 277.458434][T24668] syz.7.7488[24668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.458546][T24668] syz.7.7488[24668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.475545][T24668] syz.7.7488[24668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.492273][T24668] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7488'. [ 277.525373][T24672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 277.590752][T24683] loop0: detected capacity change from 0 to 164 [ 277.598496][T24683] Unable to read rock-ridge attributes [ 277.606018][T24683] Unable to read rock-ridge attributes [ 277.758686][T24709] ebt_among: dst integrity fail: 101 [ 277.826310][T24722] loop9: detected capacity change from 0 to 512 [ 277.839799][T24722] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 277.853309][T24722] EXT4-fs (loop9): 1 truncate cleaned up [ 277.859833][T24722] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.887242][T24090] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.939098][T24736] netlink: 'syz.9.7520': attribute type 4 has an invalid length. [ 277.946988][T24736] netlink: 152 bytes leftover after parsing attributes in process `syz.9.7520'. [ 278.030877][T24751] loop0: detected capacity change from 0 to 1024 [ 278.037710][T24751] EXT4-fs: Ignoring removed oldalloc option [ 278.043804][T24751] ext4: Unknown parameter 'smackfsdef' [ 278.113295][T24759] loop0: detected capacity change from 0 to 512 [ 278.122145][T24759] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 278.131028][T24759] EXT4-fs (loop0): invalid journal inode [ 278.136717][T24759] EXT4-fs (loop0): can't get journal size [ 278.147296][T24759] EXT4-fs (loop0): 1 truncate cleaned up [ 278.153948][T24759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.173573][T24759] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 278.196685][T24179] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.253835][T24770] netlink: 'syz.4.7534': attribute type 4 has an invalid length. [ 278.261674][T24770] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7534'. [ 278.308789][T24774] vhci_hcd: invalid port number 61 [ 278.423688][T24793] loop9: detected capacity change from 0 to 512 [ 278.435003][T24792] loop0: detected capacity change from 0 to 2048 [ 278.435710][T24793] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 278.453657][T24793] EXT4-fs (loop9): invalid journal inode [ 278.459537][T24793] EXT4-fs (loop9): can't get journal size [ 278.467730][T24793] EXT4-fs (loop9): 1 truncate cleaned up [ 278.476940][T24793] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.493243][T24792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.510962][T24793] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 278.531492][T24090] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.554700][T24179] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.582392][T24807] netlink: 'syz.0.7550': attribute type 4 has an invalid length. [ 278.586190][T24803] loop9: detected capacity change from 0 to 256 [ 278.590219][T24807] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7550'. [ 278.652864][T24809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7552'. [ 278.711857][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 278.711871][ T29] audit: type=1326 audit(2000000020.570:13686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24824 comm="syz.7.7558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f862f65e759 code=0x0 [ 278.809293][T24834] loop9: detected capacity change from 0 to 128 [ 278.910800][T24851] syz.9.7568[24851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.917955][T24851] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7568'. [ 278.976319][T24856] loop4: detected capacity change from 0 to 256 [ 279.012887][T24862] netlink: 'syz.0.7574': attribute type 4 has an invalid length. [ 279.020751][T24862] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.7574'. [ 279.087954][ T29] audit: type=1326 audit(2000000020.940:13687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24874 comm="syz.2.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0321dde759 code=0x7ffc0000 [ 279.112015][ T29] audit: type=1326 audit(2000000020.940:13688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24874 comm="syz.2.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0321dde759 code=0x7ffc0000 [ 279.136678][ T29] audit: type=1326 audit(2000000020.960:13689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24874 comm="syz.2.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0321dde759 code=0x7ffc0000 [ 279.160518][ T29] audit: type=1326 audit(2000000020.960:13690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24874 comm="syz.2.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0321dde759 code=0x7ffc0000 [ 279.184271][ T29] audit: type=1326 audit(2000000020.960:13691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24874 comm="syz.2.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0321dde759 code=0x7ffc0000 [ 279.208624][ T29] audit: type=1326 audit(2000000020.960:13692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24874 comm="syz.2.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0321dde759 code=0x7ffc0000 [ 279.232422][ T29] audit: type=1326 audit(2000000020.960:13693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24874 comm="syz.2.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0321dde759 code=0x7ffc0000 [ 279.256104][ T29] audit: type=1326 audit(2000000020.960:13694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24874 comm="syz.2.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0321dde759 code=0x7ffc0000 [ 279.280222][ T29] audit: type=1326 audit(2000000020.960:13695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24874 comm="syz.2.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0321dde759 code=0x7ffc0000 [ 279.386377][T24894] geneve0: entered allmulticast mode [ 279.532244][T24912] ebt_among: dst integrity fail: 101 [ 279.589335][T24921] tmpfs: Unknown parameter 'mp' [ 279.599443][T24918] ªªªªªª: renamed from syzkaller0 [ 279.635037][T24930] loop0: detected capacity change from 0 to 256 [ 280.015735][T24981] ªªªªªª: renamed from syzkaller0 [ 280.070617][T24990] loop7: detected capacity change from 0 to 256 [ 280.133992][T25002] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.193265][T25014] loop9: detected capacity change from 0 to 512 [ 280.213045][T25014] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.229650][T25014] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.276196][T24090] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.397137][T25044] loop7: detected capacity change from 0 to 2048 [ 280.534232][T25064] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 280.542762][T25064] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 281.033672][T25132] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 281.042041][T25132] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 281.055046][T25136] loop9: detected capacity change from 0 to 2048 [ 281.081486][T25138] xt_TPROXY: Can be used only with -p tcp or -p udp [ 281.168992][T25152] random: crng reseeded on system resumption [ 281.946090][T25182] loop7: detected capacity change from 0 to 512 [ 281.962156][T25182] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.972007][T25182] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 281.980315][T25182] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 281.993161][T25182] EXT4-fs (loop7): 1 truncate cleaned up [ 281.999145][T25182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.016877][T25182] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #2: block 4: comm syz.7.7717: lblock 0 mapped to illegal pblock 4 (length 1) [ 282.041161][T25182] EXT4-fs (loop7): Remounting filesystem read-only [ 282.076358][T23953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.093923][T25196] loop9: detected capacity change from 0 to 512 [ 282.107405][T25196] EXT4-fs: Ignoring removed oldalloc option [ 282.145954][T25196] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.7721: Parent and EA inode have the same ino 15 [ 282.153176][T25201] loop7: detected capacity change from 0 to 512 [ 282.167431][T25201] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.191678][T25196] EXT4-fs (loop9): Remounting filesystem read-only [ 282.202812][T25201] EXT4-fs (loop7): orphan cleanup on readonly fs [ 282.212810][T25201] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #3: comm syz.7.7722: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 282.216917][T25196] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -5) [ 282.239293][T25196] EXT4-fs (loop9): 1 orphan inode deleted [ 282.245980][T25196] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.258585][T25201] EXT4-fs error (device loop7): ext4_quota_enable:7087: comm syz.7.7722: Bad quota inode: 3, type: 0 [ 282.259980][T25196] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 282.277525][T25201] EXT4-fs warning (device loop7): ext4_enable_quotas:7128: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 282.288867][T25196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.292260][T25201] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 282.310712][T25201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.334201][T25201] bpf_get_probe_write_proto: 5 callbacks suppressed [ 282.334218][T25201] syz.7.7722[25201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.341152][T25201] syz.7.7722[25201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.353599][T25201] syz.7.7722[25201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.432042][T25222] netlink: 'syz.4.7731': attribute type 3 has an invalid length. [ 282.495315][T23953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.520927][T25229] macsec1: entered allmulticast mode [ 282.543340][T25230] xt_TPROXY: Can be used only with -p tcp or -p udp [ 282.726129][T25256] syz.4.7746[25256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.726281][T25256] syz.4.7746[25256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.739102][T25256] syz.4.7746[25256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.846460][T25274] netlink: 'syz.7.7755': attribute type 2 has an invalid length. [ 282.865871][T25274] netlink: 'syz.7.7755': attribute type 8 has an invalid length. [ 282.873668][T25274] __nla_validate_parse: 3 callbacks suppressed [ 282.873680][T25274] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7755'. [ 282.897279][T25274] netlink: 'syz.7.7755': attribute type 39 has an invalid length. [ 283.065213][T25299] pim6reg1: entered promiscuous mode [ 283.070677][T25299] pim6reg1: entered allmulticast mode [ 283.165504][T25305] syz.0.7769[25305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.165594][T25305] syz.0.7769[25305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.187800][T25305] syz.0.7769[25305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.204032][T25309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7770'. [ 283.206998][T25312] loop7: detected capacity change from 0 to 1024 [ 283.232031][T25312] EXT4-fs: Ignoring removed oldalloc option [ 283.238332][T25312] ext4: Unknown parameter 'smackfsdef' [ 283.267868][T25316] loop7: detected capacity change from 0 to 128 [ 283.291934][T25316] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.328114][T25316] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 283.364582][T23953] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.391816][T25329] macsec1: entered allmulticast mode [ 283.403086][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.410628][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.423417][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.430969][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.438478][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.445955][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.453416][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.460909][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.468358][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.475822][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.483256][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.490783][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.498251][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.505679][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.513199][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.520626][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.528113][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.535569][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.543080][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.550562][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.558078][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.565528][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.573702][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.581328][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.588785][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.596261][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.603721][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.611153][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.618575][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.626091][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.633505][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.640953][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.648515][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.656010][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.663454][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.670975][ T6665] hid-generic 0007:0000:0000.000E: unknown main item tag 0x0 [ 283.679012][ T6665] hid-generic 0007:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 283.719020][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 283.719038][ T29] audit: type=1400 audit(2000000025.580:13865): avc: denied { lock } for pid=25335 comm="syz.9.7782" path="socket:[77102]" dev="sockfs" ino=77102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 283.807466][T25347] loop9: detected capacity change from 0 to 1024 [ 283.817248][T25347] EXT4-fs: Ignoring removed oldalloc option [ 283.824888][T25347] ext4: Unknown parameter 'smackfsdef' [ 283.855171][T25350] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7786'. [ 283.865678][T25343] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7786'. [ 283.892805][T25356] loop9: detected capacity change from 0 to 2048 [ 283.910122][T25356] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.912107][ T29] audit: type=1400 audit(2000000025.770:13866): avc: denied { connect } for pid=25352 comm="syz.4.7789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 283.942146][ T29] audit: type=1400 audit(2000000025.770:13867): avc: denied { name_connect } for pid=25352 comm="syz.4.7789" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 283.970221][ T29] audit: type=1400 audit(2000000025.830:13868): avc: denied { write } for pid=25352 comm="syz.4.7789" laddr=fe80::f lport=36198 faddr=fe80::bb fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 283.997915][T24090] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.026061][T25367] loop7: detected capacity change from 0 to 2048 [ 284.056387][ T29] audit: type=1326 audit(2000000025.910:13869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25374 comm="syz.9.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab888e759 code=0x7ffc0000 [ 284.087808][ T29] audit: type=1326 audit(2000000025.910:13870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25374 comm="syz.9.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab888e759 code=0x7ffc0000 [ 284.111566][ T29] audit: type=1326 audit(2000000025.910:13871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25374 comm="syz.9.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f9ab888e759 code=0x7ffc0000 [ 284.135233][ T29] audit: type=1326 audit(2000000025.910:13872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25374 comm="syz.9.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab888e759 code=0x7ffc0000 [ 284.159179][ T29] audit: type=1326 audit(2000000025.910:13873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25374 comm="syz.9.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab888e759 code=0x7ffc0000 [ 284.346707][ T29] audit: type=1400 audit(2000000026.200:13874): avc: denied { connect } for pid=25385 comm="syz.7.7803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 284.433862][T25399] loop7: detected capacity change from 0 to 2048 [ 284.453225][T25399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.499676][T23953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.580392][T25421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7820'. [ 284.589719][T25421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7820'. [ 284.626355][T25424] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7821'. [ 284.633513][T25426] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7822'. [ 284.675379][T25432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7823'. [ 284.744027][T25437] bridge: RTM_NEWNEIGH bridge1 with NTF_USE is not supported [ 284.904135][T25464] netlink: 'syz.4.7839': attribute type 2 has an invalid length. [ 284.912081][T25464] netlink: 'syz.4.7839': attribute type 8 has an invalid length. [ 284.919967][T25464] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7839'. [ 284.939203][T25464] netlink: 'syz.4.7839': attribute type 39 has an invalid length. [ 284.960281][T25469] x_tables: unsorted underflow at hook 1 [ 284.960643][T25467] pim6reg1: entered promiscuous mode [ 284.971617][T25467] pim6reg1: entered allmulticast mode [ 285.022489][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.030182][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.037883][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.045530][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.052998][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.060646][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.068321][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.075762][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.083477][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.090952][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.098809][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.106240][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.113873][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.121358][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.128870][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.136345][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.143783][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.151214][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.158753][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.166190][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.173822][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.181442][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.188975][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.196440][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.203874][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.211357][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.218845][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.226326][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.233768][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.241329][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.248768][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.256172][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.263750][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.271228][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.278683][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.286280][ T6665] hid-generic 0007:0000:0000.000F: unknown main item tag 0x0 [ 285.294736][ T6665] hid-generic 0007:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 285.471043][T25507] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25507 comm=syz.4.7859 [ 285.535446][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.543099][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.560359][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.560948][T25520] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 285.567948][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.582628][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.590191][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.597597][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.605180][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.612732][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.620221][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.627805][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.635397][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.642848][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.650315][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.657756][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.665429][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.672869][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.680341][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.687756][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.695241][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.702723][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.710400][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.717894][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.725388][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.732894][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.740830][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.748811][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.756259][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.763685][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.771124][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.778545][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.786027][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.793458][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.793521][ T3005] ================================================================== [ 285.793564][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.800930][ T3005] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 285.809026][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.816337][ T3005] [ 285.816346][ T3005] write to 0xffffffff866a8de8 of 8 bytes by task 6665 on cpu 1: [ 285.823499][ T6665] hid-generic 0007:0000:0000.0010: unknown main item tag 0x0 [ 285.830702][ T3005] prb_reserve+0x740/0xb60 [ 285.830734][ T3005] vprintk_store+0x53f/0x810 [ 285.830766][ T3005] vprintk_emit+0x15e/0x680 [ 285.830799][ T3005] dev_vprintk_emit+0x1df/0x210 [ 285.834676][ T6665] hid-generic 0007:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 285.840727][ T3005] dev_printk_emit+0x82/0xb0 [ 285.840764][ T3005] __dev_printk+0xf6/0x110 [ 285.840788][ T3005] _dev_warn+0x99/0xc0 [ 285.840812][ T3005] hid_parser_main+0x622/0x680 [ 285.840834][ T3005] hid_open_report+0x4e6/0x800 [ 285.898755][ T3005] hid_generic_probe+0x33/0x70 [ 285.903530][ T3005] hid_device_probe+0x220/0x370 [ 285.908408][ T3005] really_probe+0x1cf/0x5d0 [ 285.912920][ T3005] __driver_probe_device+0x12d/0x200 [ 285.918211][ T3005] driver_probe_device+0x38/0x2f0 [ 285.923265][ T3005] __device_attach_driver+0x216/0x320 [ 285.928736][ T3005] bus_for_each_drv+0x1cd/0x240 [ 285.933601][ T3005] __device_attach+0x1c7/0x290 [ 285.938370][ T3005] device_initial_probe+0x1a/0x20 [ 285.943410][ T3005] bus_probe_device+0x141/0x1d0 [ 285.948273][ T3005] device_add+0x5e2/0x790 [ 285.952631][ T3005] hid_add_device+0x26e/0x2f0 [ 285.957318][ T3005] uhid_device_add_worker+0x2b/0xa0 [ 285.962542][ T3005] process_scheduled_works+0x483/0x9a0 [ 285.968016][ T3005] worker_thread+0x51d/0x6f0 [ 285.972650][ T3005] kthread+0x1d1/0x210 [ 285.976805][ T3005] ret_from_fork+0x4b/0x60 [ 285.981229][ T3005] ret_from_fork_asm+0x1a/0x30 [ 285.985999][ T3005] [ 285.988334][ T3005] read to 0xffffffff866a8de8 of 8 bytes by task 3005 on cpu 0: [ 285.995870][ T3005] _prb_read_valid+0x3bb/0xba0 [ 286.000637][ T3005] prb_read_valid+0x3d/0x60 [ 286.005157][ T3005] syslog_print+0x26f/0x760 [ 286.009676][ T3005] do_syslog+0x397/0x7e0 [ 286.013937][ T3005] __x64_sys_syslog+0x43/0x50 [ 286.018638][ T3005] x64_sys_call+0x1677/0x2d60 [ 286.023342][ T3005] do_syscall_64+0xc9/0x1c0 [ 286.027897][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.033802][ T3005] [ 286.036143][ T3005] value changed: 0x00000000000003c3 -> 0x0000000000000000 [ 286.043245][ T3005] [ 286.045565][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 286.051722][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: klogd Tainted: G W 6.12.0-syzkaller-00171-g23acd177540d #0 [ 286.063196][ T3005] Tainted: [W]=WARN [ 286.067125][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 286.077186][ T3005] ==================================================================