last executing test programs: 1m10.521319739s ago: executing program 0 (id=980): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) close_range(r1, r2, 0x0) 1m10.429542189s ago: executing program 0 (id=996): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @rand_addr=' \x01\x00', @loopback}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) 1m10.26375536s ago: executing program 0 (id=999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0x72f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0xffff}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x860, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xf442, 0x7, 0x8, 0x1, 0xfff, 0xff, 0x1, 0x8000, 0x8, 0x9, 0x64, 0x7, 0x3cc1, 0x4000, 0x18, 0xffff, 0x0, 0x6, 0x8, 0xc2, 0x100, 0x181, 0x5, 0x0, 0x3, 0x7, 0x2, 0x1, 0x7, 0xfffffffd, 0x100, 0x6, 0x2, 0x40400, 0x9, 0x80000000, 0x4, 0xae6, 0x2, 0x1, 0x7, 0x1, 0x6, 0x2, 0x8001, 0x8, 0xe9, 0x6, 0x1000, 0x40, 0x9, 0xe, 0x6d, 0x45e, 0x0, 0x40, 0x1, 0x4, 0xc, 0x7, 0xd, 0x5, 0x8, 0x4d, 0x80000000, 0x0, 0x1a, 0xd2, 0x6, 0x0, 0xb, 0x3, 0x7, 0x9, 0x7, 0x8, 0x5, 0x7, 0x17a, 0x0, 0x5, 0x11f, 0x20, 0x139, 0x3, 0xef, 0x1, 0x1, 0x7, 0x6f6, 0x5, 0x5, 0xbc1, 0x2, 0x1, 0x0, 0x0, 0x3, 0xff, 0x9, 0x8, 0x2, 0x7, 0x2c71, 0x8, 0x5, 0x80, 0xd, 0x925, 0x8000, 0x0, 0x9, 0x3ff, 0x800, 0x5, 0x16, 0x10, 0x9, 0xffffff80, 0x7, 0x8, 0x9, 0xb98d, 0x0, 0x2, 0x6, 0x6, 0x10, 0x1, 0x8, 0x6, 0xc4ba, 0x6, 0xd, 0x9, 0x2, 0x6, 0xfffffffd, 0x70a, 0x3ff, 0x8, 0x8, 0xfffffffe, 0x0, 0x7, 0x9, 0x5, 0x6, 0x9, 0x0, 0x7fff, 0x9a6a, 0x5, 0x3, 0x7, 0x1, 0xfffffff9, 0x193c, 0x5, 0x9, 0x3, 0x2, 0x8, 0x3, 0x2, 0x1, 0x1, 0x3, 0x6, 0x1, 0x9, 0x4, 0x7ff, 0xffff, 0x7, 0x3fb7, 0x5, 0x5b, 0x8, 0x2, 0xb, 0x1, 0x1, 0xc, 0x7f, 0x9, 0x5, 0xc, 0xfffffff6, 0xfffffffd, 0x7, 0x8, 0xfffffffd, 0xf, 0x1, 0x9, 0x48f, 0x2, 0xa000000, 0x1, 0x9, 0x3, 0x4, 0x1, 0x9, 0x6, 0xfffffffc, 0x4, 0x7, 0x2, 0x8000, 0x1, 0x0, 0x7f, 0xb274000, 0x10001, 0x9, 0x1000, 0x0, 0x2b1d, 0x8, 0x3, 0x0, 0x2, 0x5, 0xab, 0x6, 0x2, 0x6, 0x7, 0x7, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x6, 0x6, 0x7fffffff, 0x1000, 0x8, 0x1, 0x10001, 0x8, 0x69ad, 0x1, 0x200, 0x7, 0x5, 0x401, 0x0, 0x6, 0x4, 0x6, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x8000, 0xad, 0x2, 0x8, 0x2, 0xd0, 0xf18, 0x4, 0x5, 0x4, 0x80000001, 0x8, 0x7, 0x1, 0x9, 0x8, 0x4, 0x1, 0x40, 0x1, 0x10000, 0x9, 0xe, 0x2, 0x6, 0x5, 0x5, 0x3, 0x2, 0x5, 0x2b28a1a9, 0x4, 0x7fff, 0x102, 0x10000, 0x0, 0xa, 0x1, 0x7fffffff, 0x80000000, 0x4, 0x6, 0x2, 0x57, 0x6, 0xe6ce, 0x2, 0x6, 0x1ff, 0x7, 0xfffffffc, 0x0, 0x10001, 0x5, 0x430, 0x2, 0x7, 0x8, 0xff, 0x6, 0xe, 0x0, 0x7, 0x5, 0xfff, 0xfffffe01, 0x2, 0x4, 0x9, 0x8, 0x80000000, 0x3, 0x7, 0x7, 0x3, 0x5, 0x2, 0x7ff, 0x81, 0x0, 0x62ec, 0x3, 0xc, 0x5, 0x0, 0x5, 0x3ff, 0x8, 0x0, 0x3, 0x1, 0x4aa, 0xfffffff8, 0x2, 0x7, 0x64d9, 0x6, 0x9, 0x0, 0x6, 0x3, 0x0, 0xfffffff8, 0x1, 0xeb, 0x1, 0xfffffffe, 0xfff, 0x9, 0x1f, 0x80, 0x8, 0x40, 0xff, 0x8, 0xffffffc0, 0x4, 0xf, 0x5, 0x521076c6, 0x9, 0x5, 0x8, 0x9fb5, 0xfffff045, 0xfff, 0x3, 0x8, 0x7fffffff, 0x6, 0x7, 0x3, 0xe, 0x0, 0x1, 0xa, 0x4, 0x10, 0x7f, 0x800, 0x1000, 0xfff, 0xe, 0xb, 0x7, 0xfffff533, 0xe, 0x1, 0x6, 0x100, 0x8, 0x9ca, 0xe798, 0x5, 0x2, 0xf238, 0xd, 0x400002, 0x9, 0x4, 0x7, 0x2, 0x8, 0x40, 0x176, 0x4, 0x8, 0xffffffff, 0x9, 0x4, 0x5, 0x4, 0xdb, 0x2fe3, 0x5, 0x7, 0x2, 0x3, 0x8, 0x4, 0x7, 0x5, 0x8, 0x2, 0x1, 0x7, 0x3, 0x7, 0x4, 0x0, 0x2, 0x2, 0x2dc5, 0x7, 0x4, 0x9, 0x7, 0x1, 0x101, 0x9e, 0x3, 0x1, 0x1, 0xfffffffe, 0xfffffff9, 0x6, 0x2, 0x1, 0x9, 0xfffeffff, 0xe, 0xfffff38a, 0x7, 0x0, 0x7, 0x2, 0xb, 0x1, 0x7, 0x2, 0x480000, 0x401, 0x6, 0x3, 0x7e, 0x6, 0x7fff, 0x101, 0x7f, 0x2, 0xffffffff, 0x0, 0x4, 0x80000001, 0xe6, 0x100, 0x141, 0x9, 0x10001, 0x3, 0x260, 0x7, 0x10008, 0x3, 0x0, 0x7, 0x0, 0x5, 0x7fffffff, 0x2, 0x4, 0x1, 0xe3a, 0x23a4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x5, 0x3, 0x6, 0x8, {0x4, 0x2, 0xa593, 0x60, 0x9, 0x6}, {0x3, 0x1, 0x5, 0x3, 0x851, 0x5}, 0x7f, 0x7, 0x7}}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0\x00'}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m10.17931019s ago: executing program 0 (id=992): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa95058, 0x0) syz_clone(0x24011, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 1m9.98468784s ago: executing program 0 (id=1002): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 1m9.707245591s ago: executing program 0 (id=1010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40006040, 0x0) 1m9.706983631s ago: executing program 32 (id=1010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40006040, 0x0) 1m4.742468544s ago: executing program 1 (id=1178): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) 1m4.556549894s ago: executing program 1 (id=1179): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x4}, {0xfffffffe}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1m4.556213035s ago: executing program 1 (id=1180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001"], 0xc4}}, 0x4008800) 1m4.555948695s ago: executing program 1 (id=1181): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 1m4.541293364s ago: executing program 1 (id=1182): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x80000000002, 0x1) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 1m4.288537875s ago: executing program 1 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000aa40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r2) 1m4.288315865s ago: executing program 33 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000aa40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r2) 28.478909537s ago: executing program 6 (id=2413): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r1) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 28.397967908s ago: executing program 6 (id=2418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0xffffffffffffffc7, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r3, 0x301, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x14}, @void, @val={0x1, 0x99, {0x2, 0x4}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4c890}, 0x44) 28.375593487s ago: executing program 6 (id=2420): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f00000004c0), 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 28.341947778s ago: executing program 6 (id=2421): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) 28.315997217s ago: executing program 6 (id=2425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x6}, 0x4) close(r2) 28.088267648s ago: executing program 6 (id=2431): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) link(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) syslog(0x2, &(0x7f0000001600)=""/10, 0xa) 28.088036468s ago: executing program 34 (id=2431): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) link(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) syslog(0x2, &(0x7f0000001600)=""/10, 0xa) 10.771597273s ago: executing program 5 (id=2971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 10.739998213s ago: executing program 5 (id=2973): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22"], 0xfdef) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<\"0|}!') 10.645910323s ago: executing program 5 (id=2976): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 10.520850303s ago: executing program 5 (id=2978): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db09da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec686949fa05f50bd052e7f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c834810000000000000000", @ANYRES32=0x0, @ANYRESHEX], 0x8, 0x2eb, &(0x7f00000004c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0x14, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cf6d61fd01335263bd9bffbcc2542ded71038259ea171ce1a320ef54ec32d71e14ef3dc177e9b48b009000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) utimensat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/../file0\x00', 0x0, 0x100) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xbd053, 0x0, 0x4, 0x0, &(0x7f00000008c0)) 10.278367124s ago: executing program 5 (id=2989): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.082243365s ago: executing program 5 (id=2996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = syz_io_uring_setup(0x3798, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x100003, 0xb8}, &(0x7f0000000500)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 10.064322624s ago: executing program 35 (id=2996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = syz_io_uring_setup(0x3798, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x100003, 0xb8}, &(0x7f0000000500)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4.468447749s ago: executing program 3 (id=3201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) 4.436618589s ago: executing program 3 (id=3203): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000004c0)={r2}, &(0x7f0000000100)=0x8) 4.410295829s ago: executing program 3 (id=3205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00006005bbbbbbbbbbbb007ddd0bbf008100000086dd6a5421bd00042f"], 0x42) syz_usb_disconnect(0xffffffffffffffff) 3.604559351s ago: executing program 3 (id=3237): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@resgid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r2, 0x10, 0x6, 0x105ff) 3.480541831s ago: executing program 4 (id=3240): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000a00), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) inotify_init1(0x80800) 3.479978691s ago: executing program 4 (id=3241): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 3.427193571s ago: executing program 4 (id=3243): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r0) 3.426925851s ago: executing program 4 (id=3244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xca) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 3.409937551s ago: executing program 4 (id=3245): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x4, 0x5, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1345, &(0x7f0000000940)={0x0, 0xdf07, 0x8, 0x3, 0x8105}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 3.360766722s ago: executing program 3 (id=3246): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, 0x0, &(0x7f0000000400)=""/198}, 0x20) 3.304895722s ago: executing program 3 (id=3247): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) stat(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3.279350352s ago: executing program 36 (id=3247): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) stat(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.003221515s ago: executing program 4 (id=3280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 1.962001555s ago: executing program 37 (id=3280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 1.367839957s ago: executing program 8 (id=3296): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 761.849718ms ago: executing program 2 (id=3311): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30044f1, &(0x7f0000000800)=ANY=[@ANYRES64, @ANYRES8, @ANYRES64, @ANYRES64], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 559.139989ms ago: executing program 7 (id=3312): r0 = socket(0x40000000015, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 506.187659ms ago: executing program 8 (id=3313): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r3, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x30, 0x1, @ib={0x1b, 0x3, 0x3, {"3f0909000001007100"}, 0x500e, 0x0, 0x10}}}, 0xa0) 499.829309ms ago: executing program 2 (id=3314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='neigh_create\x00', r0}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000001860000000000000000000a97600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r1, &(0x7f00000002c0)="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", 0xfc) 467.876909ms ago: executing program 8 (id=3315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0x5, 0x5, 0x1, 0x7}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 393.009949ms ago: executing program 7 (id=3316): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 392.446619ms ago: executing program 2 (id=3317): r0 = inotify_init() r1 = creat(&(0x7f0000000340)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x600000bd) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 334.705649ms ago: executing program 8 (id=3318): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200006, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 334.405409ms ago: executing program 7 (id=3319): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2bfffdffd}, 0xc) close(r2) 306.3704ms ago: executing program 7 (id=3320): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000140)=0x8e, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000180)=0x3ff, 0x4) recvmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005800)=""/16, 0x10}}], 0x1, 0x45833af92e4b39ff, 0x0) 306.091889ms ago: executing program 2 (id=3321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 210.79472ms ago: executing program 8 (id=3322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa20000000000000702000000ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 199.43387ms ago: executing program 2 (id=3323): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8aef}, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) close(r0) 174.14462ms ago: executing program 9 (id=3248): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 165.54127ms ago: executing program 2 (id=3324): r0 = syz_io_uring_setup(0x61a1, &(0x7f0000000480)={0x0, 0x9600, 0x0, 0x0, 0x2c3}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x5, 0x4, 0x0, 0x0, 0x14}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 123.85354ms ago: executing program 8 (id=3325): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x7f, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) clock_gettime(0x2, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 123.41964ms ago: executing program 7 (id=3326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b00000000060014"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 64.68607ms ago: executing program 9 (id=3327): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x476}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 64.36492ms ago: executing program 7 (id=3328): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 64.09ms ago: executing program 9 (id=3329): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) getrlimit(0x9, &(0x7f0000000040)) 48.09577ms ago: executing program 9 (id=3330): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 0s ago: executing program 9 (id=3331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) open(0x0, 0xe180, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): avc: denied { create } for pid=7710 comm="syz.4.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.597291][ T29] audit: type=1400 audit(1762450141.541:3139): avc: denied { ioctl } for pid=7710 comm="syz.4.1717" path="socket:[20544]" dev="sockfs" ino=20544 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.641449][ T29] audit: type=1326 audit(1762450141.611:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 74.664903][ T29] audit: type=1326 audit(1762450141.611:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 74.688361][ T29] audit: type=1326 audit(1762450141.611:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 74.711834][ T29] audit: type=1326 audit(1762450141.611:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 74.735247][ T29] audit: type=1326 audit(1762450141.611:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 75.459019][ T3564] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.484403][ T7733] macvtap0: refused to change device tx_queue_len [ 75.875368][ T7796] binfmt_misc: register: failed to install interpreter file ./file2 [ 75.897767][ T7798] pim6reg0: tun_chr_ioctl cmd 35108 [ 75.915787][ T7802] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 76.077521][ T7827] loop2: detected capacity change from 0 to 1024 [ 76.084608][ T7827] EXT4-fs: Ignoring removed orlov option [ 76.094094][ T7827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.330977][ T7851] loop6: detected capacity change from 0 to 2048 [ 76.379456][ T7851] loop6: p1 < > p4 [ 76.384600][ T7851] loop6: p4 size 8388608 extends beyond EOD, truncated [ 76.392436][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.425966][ T7859] gretap0: entered promiscuous mode [ 76.641286][ T7880] lo speed is unknown, defaulting to 1000 [ 76.821425][ T3407] usb 9-1: enqueue for inactive port 0 [ 76.838524][ T3407] usb 9-1: enqueue for inactive port 0 [ 76.928896][ T3407] vhci_hcd: vhci_device speed not set [ 77.042951][ T7930] loop3: detected capacity change from 0 to 1024 [ 77.087492][ T7930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.180223][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.834628][ T7958] rdma_rxe: rxe_newlink: failed to add lo [ 77.862977][ T7960] atomic_op ffff88810d28c528 conn xmit_atomic 0000000000000000 [ 77.999055][ T7972] loop6: detected capacity change from 0 to 512 [ 78.012055][ T7972] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.021710][ T7972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.028812][ T7972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.037384][ T7972] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.069991][ T7972] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.1816: Allocating blocks 41-42 which overlap fs metadata [ 78.088887][ T7972] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.1816: Allocating blocks 41-42 which overlap fs metadata [ 78.112462][ T7972] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1816: Failed to acquire dquot type 1 [ 78.128684][ T7972] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 78.143419][ T7972] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #12: comm syz.6.1816: corrupted inode contents [ 78.182457][ T7972] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #12: comm syz.6.1816: mark_inode_dirty error [ 78.209779][ T7972] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #12: comm syz.6.1816: corrupted inode contents [ 78.239039][ T7972] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.1816: mark_inode_dirty error [ 78.260242][ T7972] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #12: comm syz.6.1816: corrupted inode contents [ 78.282498][ T7972] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 78.291432][ T7972] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #12: comm syz.6.1816: corrupted inode contents [ 78.308981][ T7972] EXT4-fs error (device loop6): ext4_truncate:4637: inode #12: comm syz.6.1816: mark_inode_dirty error [ 78.329054][ T7972] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 78.345365][ T7972] EXT4-fs (loop6): 1 truncate cleaned up [ 78.351995][ T7972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.398220][ T7972] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1816: Failed to acquire dquot type 1 [ 78.461795][ T6218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.483195][ T7995] loop2: detected capacity change from 0 to 1024 [ 78.490386][ T7995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.497323][ T7995] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.507870][ T7999] __nla_validate_parse: 4 callbacks suppressed [ 78.507881][ T7999] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1828'. [ 78.537337][ T7995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.623784][ T8021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1837'. [ 78.719394][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.773444][ T8041] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 78.837241][ T8047] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 78.931319][ T8061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1857'. [ 78.940572][ T8061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1857'. [ 78.953800][ T8059] loop6: detected capacity change from 0 to 512 [ 78.973664][ T8061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1857'. [ 78.992019][ T8059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.995353][ T8061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1857'. [ 79.013599][ T8061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1857'. [ 79.023302][ T8061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1857'. [ 79.035641][ T8059] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.1856: No space for directory leaf checksum. Please run e2fsck -D. [ 79.051109][ T8059] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.1856: checksumming directory block 0 [ 79.069228][ T8068] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.076069][ T8061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1857'. [ 79.086003][ T8061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1857'. [ 79.122584][ T8059] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.1856: No space for directory leaf checksum. Please run e2fsck -D. [ 79.137925][ T8059] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.1856: checksumming directory block 0 [ 79.196660][ T6218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.214612][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 79.214626][ T29] audit: type=1400 audit(1762450146.181:3529): avc: denied { create } for pid=8088 comm="syz.5.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.255754][ T8087] loop4: detected capacity change from 0 to 512 [ 79.262373][ T29] audit: type=1400 audit(1762450146.191:3530): avc: denied { name_connect } for pid=8090 comm="syz.3.1870" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 79.284543][ T29] audit: type=1400 audit(1762450146.191:3531): avc: denied { getopt } for pid=8090 comm="syz.3.1870" lport=46536 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 79.308966][ T29] audit: type=1400 audit(1762450146.211:3532): avc: denied { setopt } for pid=8088 comm="syz.5.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.329440][ T29] audit: type=1400 audit(1762450146.281:3533): avc: denied { setopt } for pid=8097 comm="syz.3.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.368115][ T29] audit: type=1400 audit(1762450146.331:3534): avc: denied { bind } for pid=8101 comm="syz.3.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.387638][ T29] audit: type=1400 audit(1762450146.331:3535): avc: denied { write } for pid=8101 comm="syz.3.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.408849][ T8087] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.4.1868: corrupted xattr block 95: invalid header [ 79.445348][ T8087] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1868: bg 0: block 7: invalid block bitmap [ 79.445639][ T8087] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 79.445818][ T8087] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #11: comm syz.4.1868: corrupted xattr block 95: invalid header [ 79.445918][ T8087] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 79.445940][ T8087] EXT4-fs (loop4): 1 orphan inode deleted [ 79.446368][ T8087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.448923][ T29] audit: type=1400 audit(1762450146.411:3536): avc: denied { write } for pid=8086 comm="syz.4.1868" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.545601][ T29] audit: type=1400 audit(1762450146.511:3537): avc: denied { write } for pid=8107 comm="syz.3.1876" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 79.589292][ T8111] loop5: detected capacity change from 0 to 2048 [ 79.598555][ T29] audit: type=1400 audit(1762450146.551:3538): avc: denied { write } for pid=8113 comm="syz.3.1880" name="ip_vs_stats" dev="proc" ino=4026532811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 79.623182][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.634373][ T8111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.642967][ T8116] pim6reg: entered allmulticast mode [ 79.647054][ T8111] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.667227][ T8116] pim6reg: left allmulticast mode [ 79.681973][ T8111] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1878: bg 0: block 345: padding at end of block bitmap is not set [ 79.696619][ T8111] EXT4-fs (loop5): Remounting filesystem read-only [ 79.717861][ T5784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.741578][ T8126] rdma_op ffff88810d28dd80 conn xmit_rdma 0000000000000000 [ 80.021936][ T8174] SELinux: policydb version 1728 does not match my version range 15-35 [ 80.030518][ T8174] SELinux: failed to load policy [ 80.232282][ T8202] loop5: detected capacity change from 0 to 256 [ 80.255452][ T8202] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.296026][ T8202] FAT-fs (loop5): codepage cp950 not found [ 80.482042][ T8222] xt_hashlimit: size too large, truncated to 1048576 [ 80.952361][ T8252] loop2: detected capacity change from 0 to 512 [ 80.966714][ T8252] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 81.135605][ T8271] loop2: detected capacity change from 0 to 1024 [ 81.161746][ T8271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.202090][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.313589][ T8307] batadv_slave_1: entered promiscuous mode [ 81.320238][ T8306] batadv_slave_1: left promiscuous mode [ 81.351011][ T8309] syzkaller0: entered promiscuous mode [ 81.356468][ T8309] syzkaller0: entered allmulticast mode [ 81.512828][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.521513][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.608015][ T8342] tipc: Started in network mode [ 81.612926][ T8342] tipc: Node identity ac14140f, cluster identity 4711 [ 81.628561][ T8342] tipc: New replicast peer: 255.255.255.255 [ 81.634668][ T8342] tipc: Enabled bearer , priority 10 [ 81.730668][ T8346] lo speed is unknown, defaulting to 1000 [ 81.787910][ T8360] pimreg: entered allmulticast mode [ 81.821330][ T8360] pimreg: left allmulticast mode [ 82.213390][ T8390] loop3: detected capacity change from 0 to 8192 [ 82.749025][ T3377] tipc: Node number set to 2886997007 [ 82.781400][ T8430] lo: entered allmulticast mode [ 82.808059][ T8434] binfmt_misc: register: failed to install interpreter file ./file0 [ 82.999231][ T8459] xt_hashlimit: size too large, truncated to 1048576 [ 83.539388][ T8495] loop4: detected capacity change from 0 to 8192 [ 83.553215][ T8501] SELinux: failed to load policy [ 83.713552][ T8525] pim6reg0: tun_chr_ioctl cmd 35108 [ 84.447301][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 84.447315][ T29] audit: type=1326 audit(1762450151.411:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 84.491515][ T29] audit: type=1326 audit(1762450151.411:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 84.515056][ T29] audit: type=1326 audit(1762450151.411:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 84.538475][ T29] audit: type=1326 audit(1762450151.411:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 84.539873][ T8548] __nla_validate_parse: 19 callbacks suppressed [ 84.539957][ T8548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2065'. [ 84.562004][ T29] audit: type=1326 audit(1762450151.411:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 84.600598][ T29] audit: type=1326 audit(1762450151.451:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 84.652809][ T29] audit: type=1400 audit(1762450151.611:3839): avc: denied { read } for pid=8552 comm="syz.6.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.731905][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2069'. [ 84.741588][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2069'. [ 84.756319][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2069'. [ 84.765272][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2069'. [ 84.793847][ T29] audit: type=1400 audit(1762450151.761:3840): avc: denied { read } for pid=8562 comm="syz.6.2081" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.796455][ T8561] gretap0: entered promiscuous mode [ 84.818053][ T29] audit: type=1400 audit(1762450151.761:3841): avc: denied { open } for pid=8562 comm="syz.6.2081" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.847874][ T29] audit: type=1400 audit(1762450151.761:3842): avc: denied { ioctl } for pid=8562 comm="syz.6.2081" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.903858][ T8550] pim6reg1: entered promiscuous mode [ 84.909324][ T8550] pim6reg1: entered allmulticast mode [ 84.910578][ T8571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.259950][ T8624] pimreg: entered allmulticast mode [ 85.278991][ T8624] pimreg: left allmulticast mode [ 85.474459][ T8657] loop3: detected capacity change from 0 to 1024 [ 85.481592][ T8657] EXT4-fs: Ignoring removed orlov option [ 85.490612][ T8657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.665940][ T8692] loop2: detected capacity change from 0 to 512 [ 85.676633][ T8692] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.2.2108: corrupted xattr block 95: invalid header [ 85.703944][ T8692] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2108: bg 0: block 7: invalid block bitmap [ 85.720413][ T8692] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 85.738576][ T8692] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #11: comm syz.2.2108: corrupted xattr block 95: invalid header [ 85.752338][ T8692] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 85.761590][ T8692] EXT4-fs (loop2): 1 orphan inode deleted [ 85.768106][ T8692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.814788][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.914351][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.032736][ T8742] program syz.2.2107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.137294][ T8747] loop2: detected capacity change from 0 to 1024 [ 86.170723][ T8747] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.181755][ T8747] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.204077][ T8747] JBD2: no valid journal superblock found [ 86.209884][ T8747] EXT4-fs (loop2): Could not load journal inode [ 86.329893][ T8739] lo speed is unknown, defaulting to 1000 [ 86.438455][ T8770] loop6: detected capacity change from 0 to 164 [ 86.583588][ T8778] loop2: detected capacity change from 0 to 8192 [ 86.918456][ T8786] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2134'. [ 86.927510][ T8786] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2134'. [ 87.145064][ T8792] IPv6: Can't replace route, no match found [ 87.578752][ T8809] loop4: detected capacity change from 0 to 8192 [ 87.979132][ T8842] loop6: detected capacity change from 0 to 512 [ 88.068475][ T8853] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 88.211027][ T8842] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2149: bg 0: block 393: padding at end of block bitmap is not set [ 88.232101][ T8842] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 88.253068][ T8842] EXT4-fs (loop6): 2 truncates cleaned up [ 88.269813][ T8842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.300412][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.309244][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.340129][ T8875] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2166'. [ 88.398699][ T8883] loop3: detected capacity change from 0 to 512 [ 88.405390][ T8883] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.412032][ T8883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.424762][ T8883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.433220][ T8883] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.463185][ T8883] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2170: Allocating blocks 41-42 which overlap fs metadata [ 88.477192][ T8883] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2170: Allocating blocks 41-42 which overlap fs metadata [ 88.491038][ T8883] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2170: Failed to acquire dquot type 1 [ 88.503155][ T8883] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 88.517657][ T8883] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.2170: corrupted inode contents [ 88.529713][ T8883] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.2170: mark_inode_dirty error [ 88.541266][ T8883] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.2170: corrupted inode contents [ 88.553184][ T8883] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.2170: mark_inode_dirty error [ 88.564821][ T8883] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.2170: corrupted inode contents [ 88.576823][ T8883] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 88.586264][ T8883] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.2170: corrupted inode contents [ 88.598279][ T8883] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.2170: mark_inode_dirty error [ 88.609640][ T8883] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 88.618907][ T8883] EXT4-fs (loop3): 1 truncate cleaned up [ 88.625026][ T8883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.642269][ T8883] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2170: Failed to acquire dquot type 1 [ 88.661265][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.861938][ T8911] pim6reg1: entered promiscuous mode [ 88.867302][ T8911] pim6reg1: entered allmulticast mode [ 88.879903][ T6218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.973975][ T8923] loop4: detected capacity change from 0 to 1024 [ 88.981350][ T8923] EXT4-fs: Ignoring removed orlov option [ 88.990374][ T8926] loop2: detected capacity change from 0 to 164 [ 88.998628][ T8923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.025792][ T8931] batadv_slave_1: entered promiscuous mode [ 89.032423][ T8926] Unable to read rock-ridge attributes [ 89.041534][ T8926] Unable to read rock-ridge attributes [ 89.180824][ T8930] batadv_slave_1: left promiscuous mode [ 89.316210][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2202'. [ 89.330476][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.440913][ T8966] ALSA: seq fatal error: cannot create timer (-19) [ 89.508971][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 89.508986][ T29] audit: type=1326 audit(1762450156.471:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890a1af6c9 code=0x7ffc0000 [ 89.538601][ T29] audit: type=1326 audit(1762450156.471:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f890a1af6c9 code=0x7ffc0000 [ 89.562008][ T29] audit: type=1326 audit(1762450156.471:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890a1af6c9 code=0x7ffc0000 [ 89.585607][ T29] audit: type=1326 audit(1762450156.471:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f890a1af6c9 code=0x7ffc0000 [ 89.609025][ T29] audit: type=1326 audit(1762450156.471:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890a1af6c9 code=0x7ffc0000 [ 89.615110][ T8956] pim6reg1: entered promiscuous mode [ 89.637805][ T8956] pim6reg1: entered allmulticast mode [ 89.644899][ T29] audit: type=1400 audit(1762450156.611:3997): avc: denied { mount } for pid=8978 comm="syz.4.2213" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 89.667619][ T29] audit: type=1400 audit(1762450156.611:3998): avc: denied { search } for pid=8978 comm="syz.4.2213" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.689846][ T29] audit: type=1400 audit(1762450156.611:3999): avc: denied { search } for pid=8978 comm="syz.4.2213" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.690204][ T8981] loop3: detected capacity change from 0 to 2048 [ 89.728672][ T8981] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.735139][ T8981] EXT4-fs: Ignoring removed i_version option [ 89.736111][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2216'. [ 89.750090][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2216'. [ 89.751719][ T29] audit: type=1400 audit(1762450156.681:4000): avc: denied { relabelfrom } for pid=8982 comm="syz.6.2215" name="NETLINK" dev="sockfs" ino=23762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 89.759029][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2216'. [ 89.792217][ T29] audit: type=1400 audit(1762450156.691:4001): avc: denied { relabelto } for pid=8982 comm="syz.6.2215" name="NETLINK" dev="sockfs" ino=23762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_tcpdiag_socket permissive=1 [ 89.800322][ T8981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.845542][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2216'. [ 89.854527][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2216'. [ 89.863752][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2216'. [ 89.889463][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.897010][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2216'. [ 89.907464][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2216'. [ 89.916491][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2216'. [ 90.185061][ T9039] loop6: detected capacity change from 0 to 256 [ 90.216949][ T9039] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.242881][ T9039] FAT-fs (loop6): codepage cp950 not found [ 90.275489][ T9044] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.304807][ T9048] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2241'. [ 90.349370][ T9055] serio: Serial port ttyS3 [ 90.407668][ T9066] loop3: detected capacity change from 0 to 256 [ 90.414594][ T9066] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.436192][ T9066] FAT-fs (loop3): codepage cp950 not found [ 90.766558][ T9115] loop3: detected capacity change from 0 to 512 [ 90.784527][ T9115] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 90.879586][ T9124] lo speed is unknown, defaulting to 1000 [ 90.971310][ T9140] serio: Serial port ttyS3 [ 91.118784][ T9158] netlink: 'syz.5.2290': attribute type 3 has an invalid length. [ 91.144129][ T9160] siw: device registration error -23 [ 91.278077][ T9184] siw: device registration error -23 [ 91.335076][ T9196] loop5: detected capacity change from 0 to 1024 [ 91.341848][ T9196] EXT4-fs: Ignoring removed orlov option [ 91.348152][ T9193] pim6reg1: entered promiscuous mode [ 91.352960][ T9196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.353773][ T9193] pim6reg1: entered allmulticast mode [ 91.405202][ T9203] batadv_slave_1: entered promiscuous mode [ 91.546694][ T5784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.557879][ T9202] batadv_slave_1: left promiscuous mode [ 91.579739][ T9210] loop5: detected capacity change from 0 to 128 [ 91.635208][ T9220] program wޣ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.773660][ T9227] lo speed is unknown, defaulting to 1000 [ 91.878110][ T9225] pim6reg1: entered promiscuous mode [ 91.883521][ T9225] pim6reg1: entered allmulticast mode [ 92.018719][ T9255] $H: renamed from bond0 (while UP) [ 92.027796][ T9255] $H: entered promiscuous mode [ 92.033000][ T9255] bond_slave_0: entered promiscuous mode [ 92.038837][ T9255] bond_slave_1: entered promiscuous mode [ 92.178397][ T9280] loop3: detected capacity change from 0 to 128 [ 92.443935][ T9312] hub 6-0:1.0: USB hub found [ 92.448625][ T9312] hub 6-0:1.0: 8 ports detected [ 92.663697][ T9327] siw: device registration error -23 [ 92.685357][ T9332] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 92.696915][ T9332] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 93.090042][ T9350] loop4: detected capacity change from 0 to 128 [ 93.371264][ T9389] siw: device registration error -23 [ 93.603789][ T9398] lo speed is unknown, defaulting to 1000 [ 93.854170][ T9427] program syz.6.2411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.863890][ T9427] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 93.881508][ T9417] netlink: 'syz.4.2407': attribute type 27 has an invalid length. [ 94.047223][ T9438] lo speed is unknown, defaulting to 1000 [ 94.279011][ T6410] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.304250][ T9472] hub 6-0:1.0: USB hub found [ 94.309017][ T9472] hub 6-0:1.0: 8 ports detected [ 94.371945][ T6410] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.441958][ T6410] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.479990][ T9480] lo speed is unknown, defaulting to 1000 [ 94.506805][ T6410] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.594229][ T9480] chnl_net:caif_netlink_parms(): no params data found [ 94.619893][ T6410] bridge_slave_1: left allmulticast mode [ 94.625552][ T6410] bridge_slave_1: left promiscuous mode [ 94.631234][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.638808][ T6410] bridge_slave_0: left allmulticast mode [ 94.644461][ T6410] bridge_slave_0: left promiscuous mode [ 94.650169][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.692751][ T6410] bond1 (unregistering): (slave gretap1): Releasing active interface [ 94.740756][ T6410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.750129][ T6410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.759649][ T6410] bond0 (unregistering): Released all slaves [ 94.767882][ T6410] bond1 (unregistering): Released all slaves [ 94.788304][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.795362][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.802555][ T9480] bridge_slave_0: entered allmulticast mode [ 94.808764][ T9480] bridge_slave_0: entered promiscuous mode [ 94.815369][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.822508][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.829711][ T9480] bridge_slave_1: entered allmulticast mode [ 94.836085][ T9480] bridge_slave_1: entered promiscuous mode [ 94.852819][ T6410] hsr_slave_0: left promiscuous mode [ 94.858393][ T6410] hsr_slave_1: left promiscuous mode [ 94.864239][ T6410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.871752][ T6410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.879218][ T6410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.886623][ T6410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.896443][ T6410] veth1_macvtap: left promiscuous mode [ 94.901955][ T6410] veth0_macvtap: left promiscuous mode [ 94.907448][ T6410] veth1_vlan: left promiscuous mode [ 94.912931][ T6410] veth0_vlan: left promiscuous mode [ 95.013826][ T6410] team0 (unregistering): Port device team_slave_1 removed [ 95.025194][ T6410] team0 (unregistering): Port device team_slave_0 removed [ 95.049258][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 95.049273][ T29] audit: type=1400 audit(1762450162.021:4225): avc: denied { unlink } for pid=3320 comm="syz-executor" name="file0" dev="tmpfs" ino=2549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.081466][ T29] audit: type=1326 audit(1762450162.051:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.5.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 95.105824][ T9480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.117897][ T3377] infiniband syz1: ib_query_port failed (-19) [ 95.120547][ T9480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.148924][ T29] audit: type=1326 audit(1762450162.051:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.5.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 95.172399][ T29] audit: type=1326 audit(1762450162.061:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.5.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 95.195902][ T29] audit: type=1326 audit(1762450162.081:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.5.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 95.239878][ T9480] team0: Port device team_slave_0 added [ 95.248169][ T9480] team0: Port device team_slave_1 added [ 95.286250][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.293238][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.319177][ T9480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.369266][ T29] audit: type=1400 audit(1762450162.321:4230): avc: denied { connect } for pid=9534 comm="syz.4.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.373365][ T9533] loop5: detected capacity change from 0 to 164 [ 95.389614][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.402089][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.428072][ T9480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.455432][ T9480] hsr_slave_0: entered promiscuous mode [ 95.461814][ T9480] hsr_slave_1: entered promiscuous mode [ 95.467662][ T9480] debugfs: 'hsr0' already exists in 'hsr' [ 95.473438][ T9480] Cannot create hsr debugfs directory [ 95.541606][ T9480] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 95.550226][ T9480] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 95.558723][ T9480] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 95.567421][ T9480] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 95.614920][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.629821][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.639973][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.647014][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.657386][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.664446][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.745156][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.867740][ T9480] veth0_vlan: entered promiscuous mode [ 95.876581][ T9480] veth1_vlan: entered promiscuous mode [ 95.892350][ T9480] veth0_macvtap: entered promiscuous mode [ 95.900414][ T9480] veth1_macvtap: entered promiscuous mode [ 95.912205][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.933197][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.947233][ T6410] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.957571][ T6410] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.966720][ T6410] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.976728][ T6410] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.003840][ T29] audit: type=1400 audit(1762450162.971:4231): avc: denied { mounton } for pid=9480 comm="syz-executor" path="/root/syzkaller.tLnHbs/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 96.028428][ T29] audit: type=1400 audit(1762450162.971:4232): avc: denied { mount } for pid=9480 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.050639][ T29] audit: type=1400 audit(1762450162.971:4233): avc: denied { mounton } for pid=9480 comm="syz-executor" path="/root/syzkaller.tLnHbs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 96.079053][ T29] audit: type=1400 audit(1762450162.991:4234): avc: denied { mounton } for pid=9480 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 96.118672][ T9567] program syz.2.2464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.133508][ T9563] loop4: detected capacity change from 0 to 512 [ 96.160065][ T9563] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2465: inode has both inline data and extents flags [ 96.191088][ T9563] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2465: couldn't read orphan inode 15 (err -117) [ 96.203901][ T9563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.216882][ T9579] bridge: RTM_NEWNEIGH with invalid ether address [ 96.276499][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.315953][ T9592] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 96.356707][ T9598] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 97.034461][ T9624] loop4: detected capacity change from 0 to 1024 [ 97.050078][ T9624] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 97.058972][ T9624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.073738][ T9624] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2478: bg 0: block 88: padding at end of block bitmap is not set [ 97.096174][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.231167][ T9647] __nla_validate_parse: 7 callbacks suppressed [ 97.231182][ T9647] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2486'. [ 97.253814][ T9649] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 97.346853][ T9669] loop3: detected capacity change from 0 to 1024 [ 97.354096][ T9669] EXT4-fs: Ignoring removed orlov option [ 97.372979][ T9669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.386093][ T9674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9674 comm=syz.4.2491 [ 97.412368][ T9674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2491'. [ 97.685618][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.714009][ T9714] SELinux: Context is not valid (left unmapped). [ 98.012407][ T9776] loop2: detected capacity change from 0 to 512 [ 98.246178][ T9810] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 98.398451][ T9820] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 98.443321][ T9824] loop4: detected capacity change from 0 to 2048 [ 98.461293][ T9824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.475199][ T9824] EXT4-fs (loop4): shut down requested (0) [ 98.524974][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.809028][ T9861] loop3: detected capacity change from 0 to 164 [ 98.875124][ T9871] loop5: detected capacity change from 0 to 1024 [ 98.881963][ T9871] EXT4-fs: inline encryption not supported [ 98.890286][ T9871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.923668][ T5784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.160343][ T9893] loop3: detected capacity change from 0 to 1024 [ 99.175919][ T9893] EXT4-fs: inline encryption not supported [ 99.194972][ T9893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.233188][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.264999][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2546'. [ 99.489788][ T9916] loop9: detected capacity change from 0 to 7 [ 99.499056][ T9916] Buffer I/O error on dev loop9, logical block 0, async page read [ 99.507413][ T9916] Buffer I/O error on dev loop9, logical block 0, async page read [ 99.515271][ T9916] loop9: unable to read partition table [ 99.521938][ T9916] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 99.521938][ T9916] ) failed (rc=-5) [ 100.092089][ T9974] lo speed is unknown, defaulting to 1000 [ 100.275458][T10028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.283926][T10028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.415884][T10052] raw_sendmsg: syz.5.2585 forgot to set AF_INET. Fix it! [ 100.558835][T10086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.566156][T10086] IPv6: NLM_F_CREATE should be set when creating new route [ 100.584049][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 100.584064][ T29] audit: type=1326 audit(1762450167.541:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.5.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 100.613940][ T29] audit: type=1326 audit(1762450167.551:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.5.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 100.637582][ T29] audit: type=1326 audit(1762450167.551:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.5.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 100.661117][ T29] audit: type=1326 audit(1762450167.551:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.5.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 100.684682][ T29] audit: type=1326 audit(1762450167.551:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.5.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 100.708343][ T29] audit: type=1326 audit(1762450167.551:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.5.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 100.731862][ T29] audit: type=1326 audit(1762450167.551:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.5.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 100.755606][ T29] audit: type=1326 audit(1762450167.551:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.5.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 100.779145][ T29] audit: type=1326 audit(1762450167.551:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.5.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 100.802849][ T29] audit: type=1326 audit(1762450167.551:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.5.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0e95f6c9 code=0x7ffc0000 [ 100.904377][T10102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2598'. [ 100.913390][T10102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2598'. [ 100.949543][T10104] syzkaller0: entered allmulticast mode [ 100.970451][T10104] syzkaller0: entered promiscuous mode [ 100.992379][T10104] syzkaller0 (unregistering): left allmulticast mode [ 100.999126][T10104] syzkaller0 (unregistering): left promiscuous mode [ 101.010298][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2602'. [ 101.023163][T10112] loop5: detected capacity change from 0 to 164 [ 101.045841][T10112] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 101.082225][T10112] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 101.113346][T10117] loop2: detected capacity change from 0 to 1024 [ 101.124176][T10117] EXT4-fs: inline encryption not supported [ 101.149549][T10117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.239748][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.266751][T10131] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 101.434885][T10159] loop5: detected capacity change from 0 to 128 [ 101.467043][T10162] netlink: 'syz.4.2624': attribute type 3 has an invalid length. [ 101.485648][T10164] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2625'. [ 101.502774][T10159] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.516479][T10159] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.552720][ T5784] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.652309][T10199] bridge0: entered promiscuous mode [ 101.657728][T10199] macsec1: entered promiscuous mode [ 101.664622][T10199] bridge0: port 3(macsec1) entered blocking state [ 101.671150][T10199] bridge0: port 3(macsec1) entered disabled state [ 101.677758][T10199] macsec1: entered allmulticast mode [ 101.683184][T10199] bridge0: entered allmulticast mode [ 101.689419][T10199] macsec1: left allmulticast mode [ 101.694475][T10199] bridge0: left allmulticast mode [ 101.700735][T10199] bridge0: left promiscuous mode [ 101.712706][T10202] loop7: detected capacity change from 0 to 2048 [ 101.730960][T10202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.768230][T10207] loop5: detected capacity change from 0 to 1024 [ 101.774835][T10207] EXT4-fs: inline encryption not supported [ 101.790419][T10207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.791248][ T9480] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 101.818741][ T9480] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 101.844159][ T9480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.864363][ T5784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.902178][T10222] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.954220][T10232] loop7: detected capacity change from 0 to 1024 [ 101.961085][T10232] EXT4-fs: Ignoring removed orlov option [ 101.968707][T10232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.037512][T10233] lo speed is unknown, defaulting to 1000 [ 102.318501][T10254] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2662'. [ 102.346188][ T9480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.025354][T10400] loop2: detected capacity change from 0 to 512 [ 103.032351][T10400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.075337][T10400] EXT4-fs: Ignoring removed oldalloc option [ 103.101160][T10400] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.2666: Parent and EA inode have the same ino 15 [ 103.130800][T10400] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.2666: Parent and EA inode have the same ino 15 [ 103.155572][T10400] EXT4-fs (loop2): 1 orphan inode deleted [ 103.161970][T10400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.197477][T10416] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.219937][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.242014][T10401] lo speed is unknown, defaulting to 1000 [ 103.254122][T10416] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.284336][T10421] loop7: detected capacity change from 0 to 2048 [ 103.350131][T10421] Alternate GPT is invalid, using primary GPT. [ 103.356426][T10421] loop7: p1 p2 p3 [ 103.360178][T10421] loop7: partition table partially beyond EOD, truncated [ 103.367964][T10416] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.387505][T10431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2683'. [ 103.430778][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2686'. [ 103.462307][T10416] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.486593][T10435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.512642][T10439] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 103.546688][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2686'. [ 103.551880][ T6456] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.578006][T10435] bond0 (unregistering): (slave gretap2): Releasing backup interface [ 103.588207][T10435] bond0 (unregistering): Released all slaves [ 103.596371][T10448] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2691'. [ 103.618549][ T6456] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.627869][ T6456] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.658117][ T6456] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.676192][T10454] loop4: detected capacity change from 0 to 2048 [ 103.685715][T10456] loop3: detected capacity change from 0 to 512 [ 103.698660][T10460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.708059][T10460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.716081][T10456] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.738127][T10456] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2694: Invalid block bitmap block 0 in block_group 0 [ 103.759183][T10456] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 103.773071][T10456] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.2694: attempt to clear invalid blocks 983261 len 1 [ 103.788128][T10454] Alternate GPT is invalid, using primary GPT. [ 103.794710][T10454] loop4: p2 p3 p7 [ 103.798234][T10456] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.2694: Invalid inode table block 0 in block_group 0 [ 103.811519][T10456] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 103.824425][T10456] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 103.833914][T10456] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.2694: Invalid inode table block 0 in block_group 0 [ 103.861095][T10456] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 103.872553][T10456] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.2694: mark_inode_dirty error [ 103.888907][T10456] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 103.902213][T10456] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.2694: Invalid inode table block 0 in block_group 0 [ 103.915304][T10456] EXT4-fs (loop3): 1 truncate cleaned up [ 103.922675][T10456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.975571][T10480] netlink: 'syz.7.2704': attribute type 3 has an invalid length. [ 103.984540][T10456] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 104.015655][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.034703][T10477] lo speed is unknown, defaulting to 1000 [ 104.218421][T10503] loop3: detected capacity change from 0 to 512 [ 104.241138][T10503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.256649][T10503] ext4 filesystem being mounted at /565/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.269405][T10503] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2714: corrupted inode contents [ 104.288807][T10503] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2714: mark_inode_dirty error [ 104.300684][T10503] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2714: corrupted inode contents [ 104.317002][T10509] IPv6: Can't replace route, no match found [ 104.344914][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.468425][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2729'. [ 104.500326][T10540] loop5: detected capacity change from 0 to 2048 [ 104.506792][T10538] loop4: detected capacity change from 0 to 128 [ 104.519924][T10536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.562826][T10540] Alternate GPT is invalid, using primary GPT. [ 104.567014][T10536] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 104.569249][T10540] loop5: p2 p3 p7 [ 104.598494][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2729'. [ 104.612561][T10536] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 104.633182][T10536] bond1 (unregistering): Released all slaves [ 104.692894][ T6456] bio_check_eod: 438 callbacks suppressed [ 104.692909][ T6456] kworker/u8:62: attempt to access beyond end of device [ 104.692909][ T6456] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 104.712577][ T6456] kworker/u8:62: attempt to access beyond end of device [ 104.712577][ T6456] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 104.749244][ T6456] kworker/u8:62: attempt to access beyond end of device [ 104.749244][ T6456] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 104.768660][ T6456] kworker/u8:62: attempt to access beyond end of device [ 104.768660][ T6456] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 104.782443][ T6456] kworker/u8:62: attempt to access beyond end of device [ 104.782443][ T6456] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 104.811755][ T6456] kworker/u8:62: attempt to access beyond end of device [ 104.811755][ T6456] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 104.825431][ T6456] kworker/u8:62: attempt to access beyond end of device [ 104.825431][ T6456] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 104.839001][ T6456] kworker/u8:62: attempt to access beyond end of device [ 104.839001][ T6456] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 104.852703][ T6456] kworker/u8:62: attempt to access beyond end of device [ 104.852703][ T6456] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 104.866248][ T6456] kworker/u8:62: attempt to access beyond end of device [ 104.866248][ T6456] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 104.897665][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2737'. [ 104.906670][T10570] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2737'. [ 104.915713][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2737'. [ 104.982202][T10576] loop5: detected capacity change from 0 to 1024 [ 104.989618][T10576] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.004668][T10576] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #11: comm syz.5.2746: iget: bogus i_mode (1) [ 105.016047][T10576] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2746: couldn't read orphan inode 11 (err -117) [ 105.028580][T10576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.139740][ T5784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.177922][T10601] loop7: detected capacity change from 0 to 2048 [ 105.205257][T10604] loop4: detected capacity change from 0 to 1024 [ 105.212145][T10604] EXT4-fs: Ignoring removed orlov option [ 105.221571][T10604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.242678][T10613] syzkaller0: entered allmulticast mode [ 105.248481][T10613] syzkaller0: entered promiscuous mode [ 105.257402][T10601] Alternate GPT is invalid, using primary GPT. [ 105.263839][T10601] loop7: p2 p3 p7 [ 105.277801][T10613] syzkaller0 (unregistering): left allmulticast mode [ 105.284539][T10613] syzkaller0 (unregistering): left promiscuous mode [ 105.526227][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.628661][T10641] IPv6: Can't replace route, no match found [ 105.643129][T10644] loop3: detected capacity change from 0 to 1024 [ 105.661341][T10644] EXT4-fs: Ignoring removed orlov option [ 105.681950][T10644] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 105.707224][T10650] loop2: detected capacity change from 0 to 512 [ 105.716681][T10653] loop5: detected capacity change from 0 to 2048 [ 105.727318][T10644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.740593][T10650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.753321][T10650] ext4 filesystem being mounted at /550/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.770022][T10653] Alternate GPT is invalid, using primary GPT. [ 105.771728][T10650] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2781: corrupted inode contents [ 105.776319][T10653] loop5: p1 p2 p3 [ 105.788582][T10644] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 105.791699][T10653] loop5: partition table partially beyond EOD, truncated [ 105.804009][T10644] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.804009][T10644] [ 105.804024][T10644] EXT4-fs (loop3): Total free blocks count 0 [ 105.804035][T10644] EXT4-fs (loop3): Free/Dirty block details [ 105.804056][T10644] EXT4-fs (loop3): free_blocks=0 [ 105.804067][T10644] EXT4-fs (loop3): dirty_blocks=0 [ 105.804085][T10644] EXT4-fs (loop3): Block reservation details [ 105.804096][T10644] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 105.821069][T10650] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.2781: mark_inode_dirty error [ 105.867752][T10650] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2781: corrupted inode contents [ 105.902510][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.915459][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.045795][T10688] loop7: detected capacity change from 0 to 512 [ 106.059710][T10688] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 106.076544][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 106.076556][ T29] audit: type=1400 audit(1762450173.041:4500): avc: denied { bind } for pid=10692 comm="syz.3.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.087139][T10688] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2806: Invalid block bitmap block 0 in block_group 0 [ 106.120118][T10690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.133822][T10688] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 106.141896][ T29] audit: type=1400 audit(1762450173.041:4501): avc: denied { name_bind } for pid=10692 comm="syz.3.2797" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 106.163350][ T29] audit: type=1400 audit(1762450173.041:4502): avc: denied { node_bind } for pid=10692 comm="syz.3.2797" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 106.184479][ T29] audit: type=1400 audit(1762450173.041:4503): avc: denied { setopt } for pid=10692 comm="syz.3.2797" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.205183][ T29] audit: type=1326 audit(1762450173.091:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 106.228692][ T29] audit: type=1326 audit(1762450173.091:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 106.252216][ T29] audit: type=1326 audit(1762450173.091:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 106.275976][ T29] audit: type=1326 audit(1762450173.091:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 106.299524][ T29] audit: type=1326 audit(1762450173.091:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 106.323015][ T29] audit: type=1326 audit(1762450173.091:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6084cbf6c9 code=0x7ffc0000 [ 106.328504][T10690] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 106.355491][T10688] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.2806: attempt to clear invalid blocks 983261 len 1 [ 106.372445][T10688] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.2806: Invalid inode table block 0 in block_group 0 [ 106.396354][T10697] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 106.415250][T10688] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 106.426226][T10697] bond1 (unregistering): Released all slaves [ 106.445307][T10688] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 106.454477][T10688] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.2806: Invalid inode table block 0 in block_group 0 [ 106.478285][T10708] loop2: detected capacity change from 0 to 128 [ 106.490257][T10688] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 106.527982][T10688] EXT4-fs error (device loop7): ext4_truncate:4637: inode #11: comm syz.7.2806: mark_inode_dirty error [ 106.558966][T10688] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 106.580500][T10688] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.2806: Invalid inode table block 0 in block_group 0 [ 106.595599][T10710] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 106.620680][T10688] EXT4-fs (loop7): 1 truncate cleaned up [ 106.638980][T10688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.661810][T10710] bond1 (unregistering): Released all slaves [ 106.683713][T10688] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.722656][ T9480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.968746][T10748] loop7: detected capacity change from 0 to 1024 [ 106.990455][T10748] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.003108][T10748] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #11: comm syz.7.2817: iget: bogus i_mode (1) [ 107.019021][T10748] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2817: couldn't read orphan inode 11 (err -117) [ 107.037363][T10757] loop5: detected capacity change from 0 to 1024 [ 107.083609][T10748] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.148155][T10754] loop4: detected capacity change from 0 to 512 [ 107.162073][T10757] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 107.178711][T10757] System zones: 0-1, 3-8 [ 107.200968][T10757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.210265][T10754] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.213854][T10757] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.309632][ T5784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.324343][ T9480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.329848][T10754] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2819: Invalid block bitmap block 0 in block_group 0 [ 107.349194][T10754] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 107.362353][T10754] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.2819: attempt to clear invalid blocks 983261 len 1 [ 107.395040][T10775] loop5: detected capacity change from 0 to 1156 [ 107.420846][T10754] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.2819: Invalid inode table block 0 in block_group 0 [ 107.446895][T10783] loop7: detected capacity change from 0 to 128 [ 107.454647][T10754] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 107.464567][T10754] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 107.490213][T10754] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.2819: Invalid inode table block 0 in block_group 0 [ 107.508668][T10754] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 107.532831][T10754] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.2819: mark_inode_dirty error [ 107.564222][T10754] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 107.565714][T10789] loop5: detected capacity change from 0 to 2048 [ 107.609652][T10754] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.2819: Invalid inode table block 0 in block_group 0 [ 107.612084][T10789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.624611][T10754] EXT4-fs (loop4): 1 truncate cleaned up [ 107.642422][T10754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.797288][T10754] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 107.833483][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.844055][T10838] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.853891][T10838] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.899190][T10849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10849 comm=syz.7.2832 [ 107.912357][T10849] netlink: 'syz.7.2832': attribute type 1 has an invalid length. [ 107.921701][T10838] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.931488][T10838] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.957725][T10849] bond1: (slave bridge1): making interface the new active one [ 107.965694][T10849] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 107.990372][T10838] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.000177][T10838] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.028032][ T5784] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 108.054265][T10862] __nla_validate_parse: 4 callbacks suppressed [ 108.054278][T10862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2836'. [ 108.069761][ T5784] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 108.098693][T10838] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.108509][T10838] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.143510][ T5784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.176161][ T7010] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.184399][ T7010] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.210385][ T7010] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.218604][ T7010] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.227044][ T7010] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.235322][ T7010] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.243735][ T7010] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.252093][ T7010] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.337276][T10894] loop4: detected capacity change from 0 to 1024 [ 108.418836][T10901] loop3: detected capacity change from 0 to 1024 [ 108.427568][T10894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 108.427652][T10901] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.464664][T10908] loop5: detected capacity change from 0 to 1024 [ 108.471880][T10901] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #11: comm syz.3.2853: iget: bogus i_mode (1) [ 108.484413][T10907] syzkaller1: entered promiscuous mode [ 108.489914][T10907] syzkaller1: entered allmulticast mode [ 108.495565][T10894] System zones: 0-1, 3-8 [ 108.505218][T10894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.518412][T10908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.525239][T10901] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2853: couldn't read orphan inode 11 (err -117) [ 108.527712][T10894] ext4 filesystem being mounted at /603/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.582266][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.592307][T10908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.627773][T10901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.651729][T10917] loop7: detected capacity change from 0 to 256 [ 108.693433][ T5784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.908151][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.982847][T10945] loop2: detected capacity change from 0 to 2048 [ 109.001579][T10951] loop7: detected capacity change from 0 to 1024 [ 109.004502][T10945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.008297][T10951] EXT4-fs: Ignoring removed orlov option [ 109.029317][T10951] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 109.065557][T10955] loop5: detected capacity change from 0 to 1024 [ 109.091252][T10955] EXT4-fs: Ignoring removed orlov option [ 109.106891][T10951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.130884][T10955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.237783][T10951] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 109.250281][T10951] EXT4-fs (loop7): This should not happen!! Data will be lost [ 109.250281][T10951] [ 109.251138][ T3320] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 109.259995][T10951] EXT4-fs (loop7): Total free blocks count 0 [ 109.280451][T10951] EXT4-fs (loop7): Free/Dirty block details [ 109.286340][T10951] EXT4-fs (loop7): free_blocks=0 [ 109.291300][T10951] EXT4-fs (loop7): dirty_blocks=0 [ 109.296459][T10951] EXT4-fs (loop7): Block reservation details [ 109.302471][T10951] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 109.318457][ T3320] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 109.334256][T10977] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 109.368677][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.389740][T10983] smc: net device bond0 applied user defined pnetid SYZ0 [ 109.393643][ T9480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.413543][T10983] smc: net device bond0 erased user defined pnetid SYZ0 [ 109.464121][T10987] loop2: detected capacity change from 0 to 2048 [ 109.484505][ T5784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.495112][T10987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.507215][T10987] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.533530][ T6410] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:18: bg 0: block 345: padding at end of block bitmap is not set [ 109.551194][T10995] vhci_hcd: invalid port number 255 [ 109.557796][ T6410] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 64 with error 117 [ 109.570352][ T6410] EXT4-fs (loop2): This should not happen!! Data will be lost [ 109.570352][ T6410] [ 109.582843][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.615748][T11001] vhci_hcd: invalid port number 65 [ 109.620983][T11001] vhci_hcd: invalid port number 65 [ 109.659327][T11007] loop2: detected capacity change from 0 to 2048 [ 109.667740][T11011] SELinux: failed to load policy [ 109.710342][T11007] Alternate GPT is invalid, using primary GPT. [ 109.716651][T11007] loop2: p1 p2 p3 [ 109.720442][T11007] loop2: partition table partially beyond EOD, truncated [ 109.766226][T11029] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 109.971760][T11043] SELinux: failed to load policy [ 110.025663][T11051] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 110.051958][T11054] netlink: 'syz.5.2919': attribute type 1 has an invalid length. [ 110.067913][T11055] syzkaller0: entered promiscuous mode [ 110.073499][T11055] syzkaller0: entered allmulticast mode [ 110.087560][T11054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.103473][T11054] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 110.178394][T11066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.187075][T11066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.386905][T11074] loop4: detected capacity change from 0 to 2048 [ 110.410376][T11074] Alternate GPT is invalid, using primary GPT. [ 110.416670][T11074] loop4: p1 p2 p3 [ 110.420584][T11074] loop4: partition table partially beyond EOD, truncated [ 110.499069][T11078] SELinux: failed to load policy [ 110.618353][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812d933400: rx timeout, send abort [ 110.766859][T11100] netlink: 'syz.2.2940': attribute type 1 has an invalid length. [ 110.792124][T11100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.811009][T11100] bond0: option tlb_dynamic_lb: unable to set because the bond device is up [ 110.899331][ T6410] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.967619][T11133] loop2: detected capacity change from 0 to 512 [ 110.974523][T11133] EXT4-fs: Ignoring removed orlov option [ 110.993114][T11133] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 111.002394][T11133] System zones: 1-12 [ 111.008241][T11142] smc: net device bond0 applied user defined pnetid SYZ0 [ 111.016937][T11142] smc: net device bond0 erased user defined pnetid SYZ0 [ 111.025375][T11133] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.2952: corrupted in-inode xattr: e_value size too large [ 111.040206][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2958'. [ 111.044614][T11133] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2952: couldn't read orphan inode 15 (err -117) [ 111.062890][T11133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.084155][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 111.084170][ T29] audit: type=1400 audit(1762450178.051:4674): avc: denied { add_name } for pid=11132 comm="syz.2.2952" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.086996][T11133] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2952: bg 0: block 424: padding at end of block bitmap is not set [ 111.090468][ T29] audit: type=1400 audit(1762450178.051:4675): avc: denied { create } for pid=11132 comm="syz.2.2952" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.132456][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812d933400: abort rx timeout. Force session deactivation [ 111.204903][ T29] audit: type=1400 audit(1762450178.051:4676): avc: denied { write open } for pid=11132 comm="syz.2.2952" path="/586/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.216212][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.270707][ T29] audit: type=1400 audit(1762450178.161:4677): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.310549][T11148] loop3: detected capacity change from 0 to 512 [ 111.321674][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2959'. [ 111.332868][T11148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.345663][T11150] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2959'. [ 111.350294][T11156] vlan3: entered allmulticast mode [ 111.357226][ T29] audit: type=1400 audit(1762450178.331:4678): avc: denied { remount } for pid=11147 comm="syz.3.2960" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.379611][T11148] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.399335][ T29] audit: type=1400 audit(1762450178.371:4679): avc: denied { execute } for pid=11147 comm="syz.3.2960" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.421878][ T29] audit: type=1400 audit(1762450178.371:4680): avc: denied { read open } for pid=11147 comm="syz.3.2960" path="/602/file0/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.458370][T11148] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 111.478563][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.512016][T11162] netlink: 'syz.7.2964': attribute type 3 has an invalid length. [ 111.589933][T11175] loop2: detected capacity change from 0 to 128 [ 111.602262][T11177] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 111.608570][T11175] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.635120][T11175] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.664170][ T29] audit: type=1400 audit(1762450178.631:4681): avc: denied { mount } for pid=11174 comm="syz.2.2980" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 111.739091][ T67] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.764058][ T29] audit: type=1400 audit(1762450178.661:4682): avc: denied { read write } for pid=11179 comm="syz.7.2972" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.789111][ T29] audit: type=1400 audit(1762450178.661:4683): avc: denied { open } for pid=11179 comm="syz.7.2972" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.879581][T11194] loop5: detected capacity change from 0 to 128 [ 111.916509][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2983'. [ 111.928993][T11194] loop5: detected capacity change from 128 to 0 [ 111.936492][T11194] FAT-fs (loop5): Directory bread(block 33) failed [ 111.944092][T11194] FAT-fs (loop5): Directory bread(block 34) failed [ 111.976332][T11194] FAT-fs (loop5): Directory bread(block 35) failed [ 111.983101][T11194] FAT-fs (loop5): Directory bread(block 36) failed [ 111.990541][T11194] FAT-fs (loop5): Directory bread(block 37) failed [ 111.997146][T11194] FAT-fs (loop5): Directory bread(block 38) failed [ 112.004200][T11194] FAT-fs (loop5): Directory bread(block 39) failed [ 112.007852][T11214] loop2: detected capacity change from 0 to 128 [ 112.010745][T11194] FAT-fs (loop5): Directory bread(block 40) failed [ 112.023575][T11211] loop3: detected capacity change from 0 to 128 [ 112.024129][T11212] FAT-fs (loop5): Directory bread(block 33) failed [ 112.030461][T11211] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.037197][T11214] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.048367][T11212] FAT-fs (loop5): Directory bread(block 34) failed [ 112.060418][T11214] ext4 filesystem being mounted at /597/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.098523][T11211] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.138948][ T7010] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.162404][T11219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2991'. [ 112.171481][ T67] FAT-fs (loop5): bread failed in fat_clusters_flush [ 112.178248][ T6894] FAT-fs (loop5): unable to read boot sector to mark fs as dirty [ 112.239529][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.273009][T11224] loop3: detected capacity change from 0 to 2048 [ 112.291210][ T67] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.301662][T11224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.340441][ T67] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.376623][T11240] loop2: detected capacity change from 0 to 128 [ 112.390162][T11240] bio_check_eod: 323 callbacks suppressed [ 112.390174][T11240] syz.2.3000: attempt to access beyond end of device [ 112.390174][T11240] loop2: rw=2049, sector=145, nr_sectors = 21 limit=128 [ 112.410492][ T67] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.426405][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.470164][ T67] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.515955][T11242] lo speed is unknown, defaulting to 1000 [ 112.575344][ T67] bridge_slave_1: left allmulticast mode [ 112.581028][ T67] bridge_slave_1: left promiscuous mode [ 112.586739][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.594683][ T67] bridge_slave_0: left promiscuous mode [ 112.600394][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.657565][T11271] netlink: 'syz.2.3009': attribute type 10 has an invalid length. [ 112.665449][T11271] netlink: 'syz.2.3009': attribute type 11 has an invalid length. [ 112.673378][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3009'. [ 112.720871][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.730527][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.740313][ T67] bond0 (unregistering): Released all slaves [ 112.748771][ T67] bond1 (unregistering): Released all slaves [ 112.782419][T11273] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.802191][T11280] tipc: New replicast peer: 255.255.255.83 [ 112.808134][T11280] tipc: Enabled bearer , priority 10 [ 112.816183][T11242] chnl_net:caif_netlink_parms(): no params data found [ 112.842433][ T67] hsr_slave_0: left promiscuous mode [ 112.850829][ T67] hsr_slave_1: left promiscuous mode [ 112.857514][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.864976][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.873346][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.880772][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.892051][ T67] veth1_macvtap: left promiscuous mode [ 112.897572][ T67] veth0_macvtap: left promiscuous mode [ 112.903177][ T67] veth1_vlan: left promiscuous mode [ 112.908407][ T67] veth0_vlan: left promiscuous mode [ 112.965072][ T67] team0 (unregistering): Port device team_slave_1 removed [ 112.974798][ T67] team0 (unregistering): Port device team_slave_0 removed [ 112.988914][ T6179] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.028919][ T3400] infiniband syz1: ib_query_port failed (-19) [ 113.039984][T11273] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.092867][T11242] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.100054][T11242] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.107214][T11242] bridge_slave_0: entered allmulticast mode [ 113.114868][T11242] bridge_slave_0: entered promiscuous mode [ 113.123663][T11273] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.134832][T11242] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.141916][T11242] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.149233][T11242] bridge_slave_1: entered allmulticast mode [ 113.155627][T11242] bridge_slave_1: entered promiscuous mode [ 113.181055][T11242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.191349][T11242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.208290][T11273] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.253758][T11242] team0: Port device team_slave_0 added [ 113.264456][T11242] team0: Port device team_slave_1 added [ 113.276737][T11316] loop2: detected capacity change from 0 to 164 [ 113.284709][T11316] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 113.302563][T11242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.303319][T11316] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 113.309563][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.309593][T11242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.360295][T11242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.367235][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.393197][T11242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.408542][ T6452] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.423605][ T6452] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.443679][ T6452] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.465001][ T6452] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.483561][T11326] loop2: detected capacity change from 0 to 512 [ 113.510349][T11242] hsr_slave_0: entered promiscuous mode [ 113.516483][T11242] hsr_slave_1: entered promiscuous mode [ 113.542032][T11326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.554884][T11242] debugfs: 'hsr0' already exists in 'hsr' [ 113.560635][T11242] Cannot create hsr debugfs directory [ 113.616047][T11326] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 113.660258][T11326] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 113.683519][T11242] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 113.716518][T11242] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 113.730946][T11242] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 113.753598][T11242] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 113.809366][T11355] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3042'. [ 113.838754][T11359] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3043'. [ 113.883655][T11242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.901227][T11242] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.913023][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.920081][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.928641][T11369] loop4: detected capacity change from 0 to 512 [ 113.945079][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.952136][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.983150][T11369] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 114.012661][T11369] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 114.046273][T11242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.073807][T11387] loop3: detected capacity change from 0 to 2048 [ 114.174734][T11387] loop3: p2 p3 p7 [ 114.220515][T11242] veth0_vlan: entered promiscuous mode [ 114.231860][T11242] veth1_vlan: entered promiscuous mode [ 114.248138][T11242] veth0_macvtap: entered promiscuous mode [ 114.256426][T11242] veth1_macvtap: entered promiscuous mode [ 114.267806][T11242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.281356][T11242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.295423][ T6452] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.313499][ T67] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.327412][ T67] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.344565][ T67] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.372329][T11423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.383825][T11423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.445066][T11433] random: crng reseeded on system resumption [ 114.473889][T11434] syzkaller0: entered promiscuous mode [ 114.479397][T11434] syzkaller0: entered allmulticast mode [ 114.593936][T11436] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3068'. [ 114.633147][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3082'. [ 114.656598][ T3407] IPVS: starting estimator thread 0... [ 114.732280][T11453] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.748952][T11448] IPVS: using max 2544 ests per chain, 127200 per kthread [ 114.824076][T11453] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.875822][T11453] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.942478][T11453] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.952753][T11472] loop8: detected capacity change from 0 to 512 [ 114.962781][T11472] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.975010][T11472] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 114.985987][T11472] System zones: 1-2, 4-12, 8-8 [ 114.991225][T11472] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3084: iget: bad i_size value: 38620345925642 [ 115.005378][T11472] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3084: couldn't read orphan inode 15 (err -117) [ 115.035731][ T6452] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.087162][ T6452] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.125037][ T6452] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.140671][T11480] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3084: bg 0: block 5: invalid block bitmap [ 115.169197][T11480] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 115.172520][ T6452] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.181748][T11480] EXT4-fs (loop8): This should not happen!! Data will be lost [ 115.181748][T11480] [ 115.181767][T11480] EXT4-fs (loop8): Total free blocks count 0 [ 115.181781][T11480] EXT4-fs (loop8): Free/Dirty block details [ 115.181794][T11480] EXT4-fs (loop8): free_blocks=0 [ 115.181808][T11480] EXT4-fs (loop8): dirty_blocks=4444 [ 115.181822][T11480] EXT4-fs (loop8): Block reservation details [ 115.181833][T11480] EXT4-fs (loop8): i_reserved_data_blocks=4444 [ 115.319280][ T67] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 115.332027][ T67] EXT4-fs (loop8): This should not happen!! Data will be lost [ 115.332027][ T67] [ 115.506076][T11529] loop8: detected capacity change from 0 to 1024 [ 115.513180][T11529] EXT4-fs (loop8): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 115.523311][T11508] Falling back ldisc for ttyS3. [ 115.529404][T11529] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 115.543142][T11529] EXT4-fs (loop8): orphan cleanup on readonly fs [ 115.569555][T11529] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.3110: Invalid inode table block 0 in block_group 0 [ 115.586448][T11529] EXT4-fs (loop8): Remounting filesystem read-only [ 115.594903][T11529] EXT4-fs (loop8): 1 truncate cleaned up [ 115.606960][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3114'. [ 115.622650][T11537] loop2: detected capacity change from 0 to 2048 [ 115.684925][T11537] loop2: p2 p3 p7 [ 115.692032][T11554] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3121'. [ 115.753595][T11559] wg2: entered promiscuous mode [ 115.758600][T11563] loop7: detected capacity change from 0 to 512 [ 115.765060][T11559] wg2: entered allmulticast mode [ 115.770420][T11563] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.805035][T11569] hub 9-0:1.0: USB hub found [ 115.810113][T11569] hub 9-0:1.0: 8 ports detected [ 115.817478][T11573] tipc: Started in network mode [ 115.822470][T11573] tipc: Node identity ac14140f, cluster identity 4711 [ 115.830306][T11573] tipc: New replicast peer: 255.255.255.255 [ 115.836387][T11573] tipc: Enabled bearer , priority 10 [ 115.890251][T11580] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.912599][T11585] loop7: detected capacity change from 0 to 512 [ 115.919463][T11585] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 115.931278][T11585] EXT4-fs (loop7): 1 truncate cleaned up [ 116.027802][T11596] loop2: detected capacity change from 0 to 2048 [ 116.149203][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 116.149216][ T29] audit: type=1400 audit(1762450183.121:4808): avc: denied { map } for pid=11595 comm="syz.2.3146" path="/630/file2/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.185701][T11602] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.202066][T11602] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 116.214639][T11602] EXT4-fs (loop2): This should not happen!! Data will be lost [ 116.214639][T11602] [ 116.224271][T11602] EXT4-fs (loop2): Total free blocks count 0 [ 116.230260][T11602] EXT4-fs (loop2): Free/Dirty block details [ 116.236126][T11602] EXT4-fs (loop2): free_blocks=2415919104 [ 116.241838][T11602] EXT4-fs (loop2): dirty_blocks=3312 [ 116.247177][T11602] EXT4-fs (loop2): Block reservation details [ 116.253159][T11602] EXT4-fs (loop2): i_reserved_data_blocks=207 [ 116.263003][T11614] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3143'. [ 116.331325][ T67] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 152 with max blocks 2 with error 28 [ 116.343819][ T67] EXT4-fs (loop2): This should not happen!! Data will be lost [ 116.343819][ T67] [ 116.388319][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3149'. [ 116.409557][T11625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.424618][T11625] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 116.440683][ T29] audit: type=1400 audit(1762450183.411:4809): avc: denied { shutdown } for pid=11631 comm="syz.2.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.468110][T11634] xt_connbytes: Forcing CT accounting to be enabled [ 116.475889][T11634] Cannot find set identified by id 0 to match [ 116.476091][ T29] audit: type=1400 audit(1762450183.431:4810): avc: denied { name_connect } for pid=11631 comm="syz.2.3152" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 116.504301][ T29] audit: type=1400 audit(1762450183.431:4811): avc: denied { write } for pid=11631 comm="syz.2.3152" lport=33421 faddr=fe80::27 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 116.527917][ T29] audit: type=1400 audit(1762450183.431:4812): avc: denied { getopt } for pid=11631 comm="syz.2.3152" lport=33421 faddr=fe80::27 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 116.562473][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3155'. [ 116.708953][T11653] Falling back ldisc for ttyS3. [ 116.838913][ T4672] tipc: Node number set to 2886997007 [ 116.863195][T11666] loop2: detected capacity change from 0 to 512 [ 116.879479][ T29] audit: type=1400 audit(1762450183.841:4813): avc: denied { append } for pid=11667 comm="syz.4.3166" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.880372][T11666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.931414][T11666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 116.939912][T11666] System zones: 1-2, 4-12, 8-8 [ 116.945016][T11666] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3165: iget: bad i_size value: 38620345925642 [ 116.958089][T11666] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3165: couldn't read orphan inode 15 (err -117) [ 117.066280][T11678] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3165: bg 0: block 5: invalid block bitmap [ 117.080119][T11678] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1012 with error 28 [ 117.092576][T11678] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.092576][T11678] [ 117.102280][T11678] EXT4-fs (loop2): Total free blocks count 0 [ 117.108249][T11678] EXT4-fs (loop2): Free/Dirty block details [ 117.114895][T11678] EXT4-fs (loop2): free_blocks=0 [ 117.119885][T11678] EXT4-fs (loop2): dirty_blocks=1044 [ 117.125167][T11678] EXT4-fs (loop2): Block reservation details [ 117.131163][T11678] EXT4-fs (loop2): i_reserved_data_blocks=1044 [ 117.216603][ T67] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1012 with max blocks 32 with error 28 [ 117.229880][ T67] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.229880][ T67] [ 117.247691][ T29] audit: type=1400 audit(1762450184.211:4814): avc: denied { mount } for pid=11679 comm="syz.7.3172" name="/" dev="ramfs" ino=33144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 117.300938][T11684] geneve2: entered promiscuous mode [ 117.306194][T11684] geneve2: entered allmulticast mode [ 117.466783][T11698] loop3: detected capacity change from 0 to 512 [ 117.475393][T11698] ext4 filesystem being mounted at /635/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.489053][ T29] audit: type=1400 audit(1762450184.451:4815): avc: denied { append } for pid=11697 comm="syz.3.3181" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.513369][ T4672] Process accounting resumed [ 117.568610][T11706] lo speed is unknown, defaulting to 1000 [ 117.577045][T11580] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.784885][ T29] audit: type=1400 audit(1762450184.751:4816): avc: denied { bind } for pid=11727 comm="syz.4.3193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.824831][T11734] loop4: detected capacity change from 0 to 128 [ 117.865838][T11737] syzkaller0: entered promiscuous mode [ 117.866568][T11734] ext4 filesystem being mounted at /685/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.871334][T11737] syzkaller0: entered allmulticast mode [ 118.023392][ T29] audit: type=1400 audit(1762450184.991:4817): avc: denied { write } for pid=11759 comm="syz.7.3206" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.059711][T11764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3208'. [ 118.072128][T11580] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.112321][T11580] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.170231][ T7010] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.204117][T11777] syzkaller0: entered promiscuous mode [ 118.209684][T11777] syzkaller0: entered allmulticast mode [ 118.216069][ T7010] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.261885][ T67] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.271714][ T67] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.802343][T11831] loop3: detected capacity change from 0 to 1024 [ 118.809667][T11831] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.048684][ T6452] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.059288][ T6452] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.122126][ T6452] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.132412][ T6452] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.205059][ T6452] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.214987][ T6452] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.281129][ T6452] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.290941][ T6452] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.374232][T11853] lo speed is unknown, defaulting to 1000 [ 119.416443][ T6452] bridge_slave_1: left allmulticast mode [ 119.422852][ T6452] bridge_slave_1: left promiscuous mode [ 119.428519][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.438220][ T6452] bridge_slave_0: left promiscuous mode [ 119.443926][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.513236][ T6452] bond1 (unregistering): (slave gretap1): Releasing active interface [ 119.602066][ T6452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.612017][ T6452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.621503][ T6452] bond0 (unregistering): Released all slaves [ 119.630577][ T6452] bond1 (unregistering): Released all slaves [ 119.695263][ T6452] hsr_slave_0: left promiscuous mode [ 119.703138][T11891] loop7: detected capacity change from 0 to 512 [ 119.710510][ T6452] hsr_slave_1: left promiscuous mode [ 119.716156][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.723630][ T6452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.732597][T11891] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.744106][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.751615][ T6452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.762266][ T6452] veth1_macvtap: left promiscuous mode [ 119.767782][ T6452] veth0_macvtap: left promiscuous mode [ 119.774710][ T6452] veth1_vlan: left promiscuous mode [ 119.780890][ T6452] veth0_vlan: left promiscuous mode [ 119.791759][ T3407] Process accounting resumed [ 119.866964][ T6452] team0 (unregistering): Port device team_slave_1 removed [ 119.880218][ T6452] team0 (unregistering): Port device team_slave_0 removed [ 119.924860][T11853] chnl_net:caif_netlink_parms(): no params data found [ 119.982766][T11853] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.989894][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.997048][T11853] bridge_slave_0: entered allmulticast mode [ 120.003862][T11853] bridge_slave_0: entered promiscuous mode [ 120.013256][T11853] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.020408][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.027835][T11853] bridge_slave_1: entered allmulticast mode [ 120.034431][T11853] bridge_slave_1: entered promiscuous mode [ 120.050231][T11853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.060265][T11853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.080188][T11853] team0: Port device team_slave_0 added [ 120.087018][T11853] team0: Port device team_slave_1 added [ 120.106684][T11853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.110589][T11922] loop2: detected capacity change from 0 to 512 [ 120.113675][T11853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.122774][T11922] ext4 filesystem being mounted at /665/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.145798][T11853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.146445][T11853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.173701][T11853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.199751][T11853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.214537][ T3421] Process accounting resumed [ 120.216936][T11925] __nla_validate_parse: 2 callbacks suppressed [ 120.216950][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3281'. [ 120.234308][T11925] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3281'. [ 120.234327][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3281'. [ 120.252389][T11925] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3281'. [ 120.261474][T11925] netlink: 'syz.7.3281': attribute type 6 has an invalid length. [ 120.302533][T11853] hsr_slave_0: entered promiscuous mode [ 120.309587][T11929] binfmt_misc: register: failed to install interpreter file ./file2 [ 120.318178][T11853] hsr_slave_1: entered promiscuous mode [ 120.324427][T11853] debugfs: 'hsr0' already exists in 'hsr' [ 120.330189][T11853] Cannot create hsr debugfs directory [ 120.446923][ T6452] IPVS: stop unused estimator thread 0... [ 120.459503][T11853] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 120.468322][T11853] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 120.478990][T11943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.512838][T11853] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 120.526354][T11853] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 120.564032][T11853] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.571214][T11853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.578557][T11853] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.585686][T11853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.652032][T11853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.669108][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.676992][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.694070][T11853] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.709662][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.716712][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.726184][T11947] lo speed is unknown, defaulting to 1000 [ 120.737520][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.744648][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.948142][ T6452] bridge_slave_1: left allmulticast mode [ 120.953894][ T6452] bridge_slave_1: left promiscuous mode [ 120.960432][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.974047][ T6452] bridge_slave_0: left promiscuous mode [ 120.979803][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.998404][ T6452] bond1 (unregistering): (slave ip6erspan0): Releasing backup interface [ 121.017537][ T6452] bond0 (unregistering): (slave gretap1): Releasing active interface [ 121.151871][T12002] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 121.159395][T12002] vhci_hcd: invalid port number 96 [ 121.164531][T12002] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 121.187022][T12004] loop2: detected capacity change from 0 to 1024 [ 121.194092][T12004] EXT4-fs: Ignoring removed orlov option [ 121.210610][T12009] loop9: detected capacity change from 0 to 7 [ 121.216784][T12009] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.224897][T12009] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.232764][T12009] loop9: unable to read partition table [ 121.238466][T12009] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 121.238466][T12009] ) failed (rc=-5) [ 121.260804][ T6452] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.270507][ T6452] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.279625][ T6452] $H (unregistering): Released all slaves [ 121.288033][ T6452] bond0 (unregistering): Released all slaves [ 121.296683][ T6452] bond1 (unregistering): Released all slaves [ 121.308657][T11947] chnl_net:caif_netlink_parms(): no params data found [ 121.321926][T11853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.345437][ T6452] hsr_slave_0: left promiscuous mode [ 121.357597][ T6452] hsr_slave_1: left promiscuous mode [ 121.402320][ T6452] team0 (unregistering): Port device team_slave_1 removed [ 121.412898][ T6452] team0 (unregistering): Port device team_slave_0 removed [ 121.464462][T12024] loop7: detected capacity change from 0 to 1024 [ 121.474590][T12024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.481815][T11947] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.488886][T11947] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.498665][T11947] bridge_slave_0: entered allmulticast mode [ 121.505382][T11947] bridge_slave_0: entered promiscuous mode [ 121.512156][T11947] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.519266][T11947] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.526444][T11947] bridge_slave_1: entered allmulticast mode [ 121.546623][T11947] bridge_slave_1: entered promiscuous mode [ 121.555817][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 121.555829][ T29] audit: type=1400 audit(1762450188.521:4896): avc: denied { ioctl } for pid=12029 comm="syz.2.3310" path="socket:[35566]" dev="sockfs" ino=35566 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.624106][T11947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.639807][T11947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.664844][T12039] loop2: detected capacity change from 0 to 256 [ 121.675926][ T29] audit: type=1400 audit(1762450188.641:4897): avc: denied { remount } for pid=12037 comm="syz.2.3311" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 121.702070][T11947] team0: Port device team_slave_0 added [ 121.709745][T11947] team0: Port device team_slave_1 added [ 121.737965][T11947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.745612][T11947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.772161][T11947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.788629][T11947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.795633][T11947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.821701][T11947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.839247][T11853] veth0_vlan: entered promiscuous mode [ 121.861742][T11947] hsr_slave_0: entered promiscuous mode [ 121.876456][T11947] hsr_slave_1: entered promiscuous mode [ 121.882792][T11947] debugfs: 'hsr0' already exists in 'hsr' [ 121.888628][T11947] Cannot create hsr debugfs directory [ 121.896556][T11853] veth1_vlan: entered promiscuous mode [ 121.907094][ T29] audit: type=1400 audit(1762450188.871:4898): avc: denied { setopt } for pid=12045 comm="syz.7.3312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.933711][T11853] veth0_macvtap: entered promiscuous mode [ 121.941422][T11853] veth1_macvtap: entered promiscuous mode [ 121.956341][T12049] netlink: 'syz.2.3314': attribute type 12 has an invalid length. [ 121.964916][T12051] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3315'. [ 121.973898][T12051] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3315'. [ 121.985987][T11853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.038521][T11853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.046766][ T29] audit: type=1400 audit(1762450189.001:4899): avc: denied { create } for pid=12057 comm="syz.7.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 122.068199][ T29] audit: type=1400 audit(1762450189.001:4900): avc: denied { bind } for pid=12057 comm="syz.7.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 122.100981][ T6458] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.110148][ T6435] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.120238][ T6452] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.142370][ T6452] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.164626][T11947] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.174416][T11947] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.236531][T11947] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.246347][T11947] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.296548][T12076] loop8: detected capacity change from 0 to 2048 [ 122.302986][ T29] audit: type=1400 audit(1762450189.261:4901): avc: denied { write } for pid=12079 comm="syz.9.3327" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 122.363691][T12076] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.363967][T11947] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.383874][T11947] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.400339][ T29] audit: type=1400 audit(1762450189.371:4902): avc: denied { connect } for pid=12081 comm="syz.7.3328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.423291][ T29] audit: type=1326 audit(1762450189.391:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12091 comm="syz.9.3331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0cfd6f6c9 code=0x0 [ 122.448045][T12094] ================================================================== [ 122.456122][T12094] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 122.463313][T12094] [ 122.465624][T12094] read-write to 0xffff88811b0cdd88 of 8 bytes by task 12076 on cpu 0: [ 122.473769][T12094] __xa_set_mark+0xd2/0x1a0 [ 122.478268][T12094] __folio_mark_dirty+0x384/0x4a0 [ 122.483294][T12094] mark_buffer_dirty+0x11e/0x210 [ 122.488238][T12094] folio_zero_new_buffers+0x28c/0x2e0 [ 122.493617][T12094] block_write_end+0x200/0x210 [ 122.498395][T12094] ext4_da_write_end+0x1d3/0x800 [ 122.503341][T12094] generic_perform_write+0x312/0x490 [ 122.508619][T12094] ext4_buffered_write_iter+0x1ee/0x3c0 [ 122.514157][T12094] ext4_file_write_iter+0x387/0xf60 [ 122.519343][T12094] vfs_write+0x52a/0x960 [ 122.523576][T12094] ksys_write+0xda/0x1a0 [ 122.527811][T12094] __x64_sys_write+0x40/0x50 [ 122.532397][T12094] x64_sys_call+0x2802/0x3000 [ 122.537066][T12094] do_syscall_64+0xd2/0x200 [ 122.541557][T12094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.547438][T12094] [ 122.549749][T12094] read to 0xffff88811b0cdd88 of 8 bytes by task 12094 on cpu 1: [ 122.557367][T12094] xas_find_marked+0x218/0x620 [ 122.562119][T12094] find_get_entry+0x5d/0x380 [ 122.566707][T12094] filemap_get_folios_tag+0x13b/0x210 [ 122.572078][T12094] mpage_prepare_extent_to_map+0x320/0xc00 [ 122.577876][T12094] ext4_do_writepages+0xa05/0x2750 [ 122.582976][T12094] ext4_writepages+0x176/0x300 [ 122.587732][T12094] do_writepages+0x1c6/0x310 [ 122.592311][T12094] __filemap_fdatawrite_range+0xfb/0x140 [ 122.597935][T12094] generic_fadvise+0x312/0x430 [ 122.602700][T12094] __x64_sys_fadvise64+0xcb/0x110 [ 122.607709][T12094] x64_sys_call+0x29c5/0x3000 [ 122.612379][T12094] do_syscall_64+0xd2/0x200 [ 122.616869][T12094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.622749][T12094] [ 122.625059][T12094] value changed: 0x0000000fffffffff -> 0x0000003fffffffff [ 122.632147][T12094] [ 122.634452][T12094] Reported by Kernel Concurrency Sanitizer on: [ 122.640596][T12094] CPU: 1 UID: 0 PID: 12094 Comm: syz.8.3325 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.650392][T12094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 122.660432][T12094] ================================================================== [ 122.679040][ T29] audit: type=1400 audit(1762450189.471:4904): avc: denied { write } for pid=3301 comm="syz-executor" path="pipe:[2500]" dev="pipefs" ino=2500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 122.681445][T12095] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3325: bg 0: block 345: padding at end of block bitmap is not set [ 122.717561][T12095] EXT4-fs (loop8): Remounting filesystem read-only [ 122.758119][T11947] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.767959][T11947] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.010478][ T6458] bridge_slave_1: left allmulticast mode [ 123.016222][ T6458] bridge_slave_1: left promiscuous mode [ 123.022489][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.030930][ T6458] bridge_slave_0: left allmulticast mode [ 123.036575][ T6458] bridge_slave_0: left promiscuous mode [ 123.042233][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.120985][ T6458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.130764][ T6458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.140527][ T6458] bond0 (unregistering): Released all slaves [ 123.193930][ T6458] hsr_slave_0: left promiscuous mode [ 123.199621][ T6458] hsr_slave_1: left promiscuous mode [ 123.205104][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.212503][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.240874][ T6458] team0 (unregistering): Port device team_slave_1 removed [ 123.252376][ T6458] team0 (unregistering): Port device team_slave_0 removed [ 123.670495][ T6458] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.740862][ T6458] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.789963][ T6458] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.830092][ T6458] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.900198][ T6458] bridge_slave_1: left allmulticast mode [ 123.905827][ T6458] bridge_slave_1: left promiscuous mode [ 123.911481][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.919070][ T6458] bridge_slave_0: left allmulticast mode [ 123.924688][ T6458] bridge_slave_0: left promiscuous mode [ 123.930721][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.010667][ T6458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.020623][ T6458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.029911][ T6458] bond0 (unregistering): Released all slaves [ 124.099925][ T6458] tipc: Disabling bearer [ 124.105141][ T6458] tipc: Left network mode [ 124.112616][ T6458] hsr_slave_0: left promiscuous mode [ 124.118184][ T6458] hsr_slave_1: left promiscuous mode [ 124.123793][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.131180][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.138557][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.146276][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.155985][ T6458] veth1_macvtap: left promiscuous mode [ 124.161501][ T6458] veth0_macvtap: left promiscuous mode [ 124.167040][ T6458] veth1_vlan: left promiscuous mode [ 124.172288][ T6458] veth0_vlan: left promiscuous mode [ 124.224335][ T6458] team0 (unregistering): Port device team_slave_1 removed [ 124.234091][ T6458] team0 (unregistering): Port device team_slave_0 removed [ 124.622080][ T6458] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.051225][ T6458] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.111492][ T6458] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.191081][ T6458] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.281376][ T6458] bridge_slave_1: left allmulticast mode [ 125.287102][ T6458] bridge_slave_1: left promiscuous mode [ 125.292720][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.300493][ T6458] bridge_slave_0: left allmulticast mode [ 125.306115][ T6458] bridge_slave_0: left promiscuous mode [ 125.311760][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.390952][ T6458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.400687][ T6458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.409946][ T6458] bond0 (unregistering): Released all slaves [ 125.462779][ T6458] hsr_slave_0: left promiscuous mode [ 125.468334][ T6458] hsr_slave_1: left promiscuous mode [ 125.473794][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.481244][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.488653][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.496410][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.506395][ T6458] veth1_macvtap: left promiscuous mode [ 125.511860][ T6458] veth0_macvtap: left promiscuous mode [ 125.517325][ T6458] veth1_vlan: left promiscuous mode [ 125.523027][ T6458] veth0_vlan: left promiscuous mode [ 125.573520][ T6458] team0 (unregistering): Port device team_slave_1 removed [ 125.583159][ T6458] team0 (unregistering): Port device team_slave_0 removed [ 130.178942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog