last executing test programs: 2m30.778530549s ago: executing program 32 (id=151): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.174698657s ago: executing program 33 (id=1091): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 1m23.118355393s ago: executing program 1 (id=1410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(0x0, 0xc9028ba210c11f8b) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@noload}, {@oldalloc}, {@resuid}]}, 0x2, 0x470, &(0x7f0000000dc0)="$eJzs209sFNUfAPDvTLuFH//an+IfELVKjI1/WlpQOXjRqPGA0UQPeKxtIYRCDa0JECLVGLyYGBL1ajyaePDszYtRTyZeNfFoSIhyAfVSM7Mz7XbplpZud2v380kG3tt52/e+++bNvJm3G0DH6s/+SSJ2RMQvEdFbzS4u0F/978a1C2N/XbswlsTc3Ot/JHm569cujJVFy/dtLzIDaUT6QVJUstj0ufMnRycnJ84U+aGZU28PTZ87/+SJU6PHJ45PnB45fPjQweFnnh55qilxZnFd3/vu1L49L795+ZWxo5ff+uGrrL07iv21cTRLfxb4n3O5+n2PNLuyNttZk06629gQVqUrIrLuquTjvze6YqHzeuPF99vaOGBdZdemLY13z84Bm1gS7W4B0B7lhT67/y23Fk09NoSrz1VvgLK4bxRbdU93pEWZSt39bTP1R8TR2b8/z7ZYp+cQAAC1Phr79Eg8sdT8Lz19d025XcUaSl9E/D8i7oiIOyNid0TcFRFZ2Xsi4t5V1l+/NHTz/Ce9cluBrVA2/3s24qUbN83/ytlf9HUVuZ15/JXk2InJiQPFZzIQlS1ZfniZOr594eePG+2rnf9lW1Z/ORcs2nGlu+4B3fjozGg+KW2Cq+9F7O2uru0tjj+ZXwlIImJPROxd3Z/eVSZOPPblvkaFbh3/MpqwzjT3RcSj1bXN2aiLv5Qsvz45tDUmJw4MlUfFzX786dJrjepfU/xNkPX/tljU//VF+pLa9drp1ddx6dcPG97T3O7x35O8kZ+PeorXzo7OzJwZjuhJjuT5Ra+PLLy3zJ8drczHP7B/qeM/zc9xUfT/fRGRHcT3R8QDEfFg0faHIuLhiNi/TPzfP99430bo//FYevwX6vp/9Ymuk99906j+lfX/oTw1ULySn/9uYaUNXMtnBwAAAP8Vaf4d+CQdnE+n6eBg9Tv8u2NbOjk1PfP4sal3To9XvyvfF5W0fNLVW/M8dDiZLf5iNT9SPCsu9x8snht/0vW/PD84NjU53ubYodNtbzD+M793tbt1wLpbah1tpKcNDQFarn78p4uzF19t+M7f1qdBQMv4vTZ0rluM/4XpwD/r3xagtVz/oXMtjP/P5lMX68pYC4DNyfUfOteKx781Qdh0XP+hcxn/0JHW8rv+liUqW6uN3SjtkZg+dz7SDdEMiXVKLHGy+Dpt9ekJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzf4NAAD//7Rs7dg=") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x61, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), 0x0, 0x0, 0xf5, 0x8, 0x0, 0x0}}, 0x10) 1m22.858210138s ago: executing program 1 (id=1418): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m22.769833009s ago: executing program 1 (id=1425): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 1m22.505730564s ago: executing program 1 (id=1428): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) 1m22.343671088s ago: executing program 1 (id=1432): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(0x0, 0xc9028ba210c11f8b) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@noload}, {@oldalloc}, {@resuid}]}, 0x2, 0x470, &(0x7f0000000dc0)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x61, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), 0x0, 0x0, 0xf5, 0x8, 0x0, 0x0}}, 0x10) 1m22.105280393s ago: executing program 3 (id=1435): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 1m22.045097974s ago: executing program 3 (id=1436): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x0, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1m21.954981935s ago: executing program 1 (id=1437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000180)) tkill(r2, 0x7) 1m21.954625965s ago: executing program 34 (id=1437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000180)) tkill(r2, 0x7) 1m21.932438216s ago: executing program 3 (id=1439): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) 1m21.869029247s ago: executing program 3 (id=1441): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 1m21.447106286s ago: executing program 3 (id=1444): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(r1) 1m21.054746143s ago: executing program 3 (id=1447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) 1m21.006440824s ago: executing program 35 (id=1447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) 1m19.575100552s ago: executing program 5 (id=1466): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) nanosleep(0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munlockall() getdents64(r0, &(0x7f0000000140)=""/47, 0x24) 1m19.463248385s ago: executing program 5 (id=1468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m19.303033798s ago: executing program 5 (id=1469): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000000}, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x3}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 1m18.741769638s ago: executing program 5 (id=1475): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 1m17.883465425s ago: executing program 5 (id=1493): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0x80b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m17.296184527s ago: executing program 5 (id=1489): r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xd, @local}, 0x1c) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2cb, &(0x7f0000000cc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={&(0x7f0000002500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) 1m17.207874349s ago: executing program 36 (id=1489): r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xd, @local}, 0x1c) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2cb, &(0x7f0000000cc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={&(0x7f0000002500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) 33.667006707s ago: executing program 9 (id=2207): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x603f) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 33.322361353s ago: executing program 9 (id=2213): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 33.259139285s ago: executing program 9 (id=2217): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 33.117345948s ago: executing program 9 (id=2219): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000000340)='./file2\x00', 0x1c5902, 0x128) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x82201, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfae21000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 32.354460822s ago: executing program 9 (id=2224): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 32.119131507s ago: executing program 9 (id=2229): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r2, &(0x7f0000000340)=""/71, 0x47) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f00000002c0)='./control\x00') 32.084604018s ago: executing program 37 (id=2229): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r2, &(0x7f0000000340)=""/71, 0x47) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f00000002c0)='./control\x00') 8.476116733s ago: executing program 8 (id=2775): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000400), &(0x7f0000000500)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 8.349247356s ago: executing program 8 (id=2779): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 8.266643417s ago: executing program 8 (id=2782): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x1000}], 0x1, 0x0, 0x0, 0x0) r4 = dup2(r1, r2) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0xfffffdcc}, 0x1, 0x0, 0x0, 0x804}, 0x44800) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 7.990442232s ago: executing program 8 (id=2786): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0}, 0x28) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000500)='./bus/../file0\x00', 0x400100, 0xfd) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_clone(0x2000, &(0x7f0000000100)="850ab4561dce189e75b2bb9bce", 0xd, 0x0, &(0x7f0000000180), &(0x7f0000000340)) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 7.833318976s ago: executing program 8 (id=2788): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x6, 0x5, 0x1, 0x8, 0x3, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x7, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xa, 0x6, 0x6, 0x5, 0x8, 0xa, 0xf, 0xc], 0x3, [0xb, 0x101, 0xad1e, 0x2, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0x2, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.550832841s ago: executing program 8 (id=2794): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) 7.532971681s ago: executing program 38 (id=2794): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) 3.604402229s ago: executing program 7 (id=2833): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f00000007c0)='./file1\x00', 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000280)='./file1\x00', 0x14dc7e, 0x1) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000400)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) io_submit(r2, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 3.378749303s ago: executing program 7 (id=2839): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 3.258543726s ago: executing program 7 (id=2840): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x3, @remote, 0x9}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x200204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 3.197126537s ago: executing program 7 (id=2843): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 3.135673088s ago: executing program 2 (id=2845): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[]) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) 3.126054138s ago: executing program 7 (id=2846): mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000001dc0)={0x7000, 0x85, 0x20000}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x9, '\x00', r2, r1, 0x0, 0x3, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xfff1}, {0x1}}}, 0x24}}, 0x0) 2.109106968s ago: executing program 2 (id=2855): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.063862789s ago: executing program 2 (id=2868): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000a40)={0x60, 0x2, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffff9, &(0x7f0000000440)=[{0x2, 0x8001, 0x4}], 0x1, 0x7fff, 0x24, 0x8, 0x10, 0x3}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 1.803944905s ago: executing program 4 (id=2859): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) 1.058918639s ago: executing program 6 (id=2869): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000017c0)={r4, r1, 0x25, 0x2, @void}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val, {0x8100, 0x1, 0x0, 0x3}}, {@ipv4={0x8100, @igmp={{0x5, 0x4, 0x1, 0x2, 0x1c, 0x66, 0x0, 0x2, 0x2, 0x0, @multicast1, @broadcast}, {0x1f, 0x5, 0x0, @empty}}}}}, 0x0) 1.02522066s ago: executing program 6 (id=2870): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f00000004c0)={[{@dots}, {@fat=@errors_continue}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@nodots}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@discard}, {@fat=@nfs_stale_rw}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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") mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file3\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40000c8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) munlockall() 1.01319461s ago: executing program 2 (id=2871): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000007bb6c71bef00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002100000000000004"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0xfffffffffffffffd]}, 0x8) gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 969.46569ms ago: executing program 6 (id=2872): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file1\x00', 0x80) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 919.556302ms ago: executing program 4 (id=2873): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x7fff, 0x0, 0x8000008c1f, 0x800000000, 0x0, 0xbc, 0x400, 0x6, 0xffffffffffffffff, 0x0, 0x81, 0x80000000000, 0x7125, 0x1, 0x102, 0x200, 0xfffffffffffffffc, 0x8000000000001, 0x3, 0x4, 0x1, 0xffff, 0x7, 0x8, 0x3, 0x80000000000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 902.323612ms ago: executing program 6 (id=2874): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x2) 827.090614ms ago: executing program 6 (id=2875): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_io_uring_setup(0x499, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r0, r1, 0x0) 788.400525ms ago: executing program 0 (id=2876): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0xe, &(0x7f0000000000)={0x40003a, 0x8, 0x4}) 693.711676ms ago: executing program 6 (id=2877): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x3000000, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000040)={0x3ff, 0x7e7, 0x0, 0x9, 0x1, 0x0, 0x7ffffffb, 0x83f8}, 0x0, 0x0) 600.758538ms ago: executing program 0 (id=2878): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4d6, &(0x7f0000000a40)="$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") r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x77da, &(0x7f0000000100)={0x0, 0xdb5e, 0x40, 0x0, 0x12f}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 566.348559ms ago: executing program 4 (id=2879): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x6) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) 528.392489ms ago: executing program 0 (id=2880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 480.1538ms ago: executing program 4 (id=2881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 415.073102ms ago: executing program 4 (id=2882): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a407800", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000008"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001400b59500000800000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000000000567766fd2e82441b836c59bd5975a2be5004ed2e332ee96012f87b2a4b4849b10076758cbc4c56532aa9d74ef6a79cd7a24fe1"], 0x2c}}, 0x0) 390.276662ms ago: executing program 0 (id=2883): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r4, r4, 0x0) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) 367.716063ms ago: executing program 0 (id=2884): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde3, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2001}, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 237.965595ms ago: executing program 4 (id=2885): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffd000) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) 140.736567ms ago: executing program 0 (id=2886): socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x80000) io_setup(0xdda, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="2401000012000501"], 0x124}}, 0x4000800) 139.821697ms ago: executing program 2 (id=2896): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x80}, 0x18) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 833.98µs ago: executing program 7 (id=2887): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 0s ago: executing program 2 (id=2888): syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) kernel console output (not intermixed with test programs): node dirty (err -117) [ 134.004952][ T8444] EXT4-fs (loop6): 1 orphan inode deleted [ 134.013576][ T8444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.016725][ T8453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.026270][ T4903] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.053098][ T4903] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:15: Failed to release dquot type 0 [ 134.066508][ T8455] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.080423][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1715'. [ 134.095156][ T8444] netlink: 'syz.6.1710': attribute type 3 has an invalid length. [ 134.104398][ T8453] bond1 (unregistering): Released all slaves [ 134.123968][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.137476][ T6493] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 134.151087][ T6493] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 134.151910][ T8455] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.160831][ T6493] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 134.238671][ T8455] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.277766][ T8472] loop6: detected capacity change from 0 to 512 [ 134.297223][ T8472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.312746][ T8455] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.337704][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.389702][ T4942] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.406903][ T4942] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.436339][ T4942] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.447133][ T8483] loop6: detected capacity change from 0 to 1024 [ 134.454682][ T4942] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.476465][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 134.476483][ T29] audit: type=1326 audit(134.462:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 134.526741][ T29] audit: type=1326 audit(134.502:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a9e1bd590 code=0x7ffc0000 [ 134.549253][ T29] audit: type=1326 audit(134.502:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 134.571655][ T29] audit: type=1326 audit(134.502:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 134.594276][ T29] audit: type=1326 audit(134.502:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 134.616793][ T29] audit: type=1326 audit(134.502:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 134.646961][ T8483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.699008][ T8483] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1726: Allocating blocks 385-513 which overlap fs metadata [ 134.739924][ T8483] EXT4-fs (loop6): pa ffff888106aa9d20: logic 16, phys. 129, len 24 [ 134.748152][ T8483] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 134.771460][ T8483] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 134.783897][ T8483] EXT4-fs (loop6): This should not happen!! Data will be lost [ 134.783897][ T8483] [ 134.794347][ T8483] EXT4-fs (loop6): Total free blocks count 0 [ 134.800590][ T8483] EXT4-fs (loop6): Free/Dirty block details [ 134.806688][ T8483] EXT4-fs (loop6): free_blocks=128 [ 134.811812][ T8483] EXT4-fs (loop6): dirty_blocks=0 [ 134.816980][ T8483] EXT4-fs (loop6): Block reservation details [ 134.823166][ T8483] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 134.902569][ T8500] netlink: 'syz.6.1731': attribute type 1 has an invalid length. [ 134.917569][ T8500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.932224][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1731'. [ 134.944137][ T8500] bond1 (unregistering): Released all slaves [ 135.012753][ T8508] loop9: detected capacity change from 0 to 512 [ 135.028049][ T8508] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.073003][ T7767] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.137039][ T29] audit: type=1326 audit(135.122:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.9.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ace61ec29 code=0x7ffc0000 [ 135.160309][ T29] audit: type=1326 audit(135.122:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.9.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ace61ec29 code=0x7ffc0000 [ 135.183559][ T29] audit: type=1326 audit(135.122:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.9.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ace61ec29 code=0x7ffc0000 [ 135.207024][ T29] audit: type=1326 audit(135.122:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.9.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ace61ec29 code=0x7ffc0000 [ 135.618776][ T8528] loop8: detected capacity change from 0 to 764 [ 135.704991][ T8528] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 136.067609][ T8534] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.092291][ T8536] syzkaller0: entered allmulticast mode [ 136.118849][ T8536] syzkaller0: entered promiscuous mode [ 136.138548][ T8536] syzkaller0 (unregistering): left allmulticast mode [ 136.145402][ T8536] syzkaller0 (unregistering): left promiscuous mode [ 136.218659][ T8534] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.367624][ T8534] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.468540][ T8534] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.531972][ T4933] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.543733][ T4933] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.556382][ T4903] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.567955][ T4933] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.631140][ T8546] netlink: 'syz.7.1745': attribute type 1 has an invalid length. [ 136.640660][ T8543] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.682740][ T8546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.704477][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1745'. [ 136.752887][ T8551] bond1 (unregistering): Released all slaves [ 136.769763][ T8543] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.827974][ T8543] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.883514][ T8543] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.971784][ T8571] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.016996][ T8571] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.060557][ T8577] loop8: detected capacity change from 0 to 128 [ 137.116013][ T8571] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.176744][ T8571] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.256830][ T4942] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.269931][ T4942] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.303401][ T4933] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.317564][ T4933] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.424208][ T8589] loop9: detected capacity change from 0 to 8192 [ 137.431139][ T8589] vfat: Unknown parameter 'Ö†”ñ{¥â~¡ÎŹ?­ÏàÞ [ 137.431139][ T8589] é¾2sÿsÃKV• [ 137.431139][ T8589] 5¿¥Æž;S>“œ³¾Ú{q‘Ë' [ 137.463902][ T8591] netlink: 'syz.2.1766': attribute type 1 has an invalid length. [ 137.477875][ T8591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.491314][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'. [ 137.503299][ T8591] bond1 (unregistering): Released all slaves [ 138.099769][ T8601] loop9: detected capacity change from 0 to 1024 [ 138.126296][ T8601] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 138.137313][ T8601] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 138.151488][ T8601] JBD2: no valid journal superblock found [ 138.157472][ T8601] EXT4-fs (loop9): Could not load journal inode [ 138.185070][ T8599] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 138.199897][ T8612] loop7: detected capacity change from 0 to 512 [ 138.238987][ T8612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.323824][ T7549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.421112][ T8630] lo speed is unknown, defaulting to 1000 [ 138.448559][ T8635] loop7: detected capacity change from 0 to 1024 [ 138.475248][ T8635] EXT4-fs: Ignoring removed orlov option [ 138.497865][ T8635] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 138.531206][ T8635] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.689873][ T7549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.719147][ T8633] Set syz1 is full, maxelem 65536 reached [ 138.773220][ T4943] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.786436][ T4943] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.796843][ T8648] loop7: detected capacity change from 0 to 164 [ 138.802295][ T4943] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.812821][ T4943] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.822177][ T8648] rock: directory entry would overflow storage [ 138.828448][ T8648] rock: sig=0x4f50, size=4, remaining=3 [ 138.834106][ T8648] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 139.030980][ T8666] loop7: detected capacity change from 0 to 764 [ 139.038705][ T8666] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 139.290398][ T8671] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.347266][ T8671] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.406607][ T8671] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.446635][ T8671] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.493876][ T29] kauditd_printk_skb: 514 callbacks suppressed [ 139.493931][ T29] audit: type=1326 audit(139.472:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.8.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b5ca05be7 code=0x7ffc0000 [ 139.523162][ T29] audit: type=1326 audit(139.472:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.8.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b5c9aae09 code=0x7ffc0000 [ 139.546048][ T29] audit: type=1326 audit(139.472:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.8.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f4b5ca0ec29 code=0x7ffc0000 [ 139.569268][ T29] audit: type=1326 audit(139.482:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.8.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b5ca05be7 code=0x7ffc0000 [ 139.592388][ T29] audit: type=1326 audit(139.482:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.8.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b5c9aae09 code=0x7ffc0000 [ 139.615247][ T29] audit: type=1326 audit(139.482:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.8.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f4b5ca0ec29 code=0x7ffc0000 [ 139.638421][ T29] audit: type=1326 audit(139.492:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.8.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b5ca05be7 code=0x7ffc0000 [ 139.661344][ T29] audit: type=1326 audit(139.492:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.8.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b5c9aae09 code=0x7ffc0000 [ 139.684252][ T29] audit: type=1326 audit(139.492:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.8.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f4b5ca0ec29 code=0x7ffc0000 [ 139.707195][ T29] audit: type=1326 audit(139.502:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.8.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b5ca05be7 code=0x7ffc0000 [ 143.231234][ T4942] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.242386][ T4942] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.254288][ T4943] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.266214][ T4943] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.453159][ T8702] netlink: 14 bytes leftover after parsing attributes in process `gtp'. [ 143.466707][ T8702] hsr_slave_0: left promiscuous mode [ 143.474013][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1808'. [ 143.485557][ T8702] hsr_slave_1: left promiscuous mode [ 143.511624][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1808'. [ 143.687328][ T8715] loop7: detected capacity change from 0 to 2048 [ 143.737886][ T8715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 143.940631][ T8727] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 143.971525][ T8727] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 750 with error 28 [ 143.984205][ T8727] EXT4-fs (loop7): This should not happen!! Data will be lost [ 143.984205][ T8727] [ 143.994115][ T8727] EXT4-fs (loop7): Total free blocks count 0 [ 144.000263][ T8727] EXT4-fs (loop7): Free/Dirty block details [ 144.006290][ T8727] EXT4-fs (loop7): free_blocks=2415919104 [ 144.012025][ T8727] EXT4-fs (loop7): dirty_blocks=752 [ 144.017286][ T8727] EXT4-fs (loop7): Block reservation details [ 144.023301][ T8727] EXT4-fs (loop7): i_reserved_data_blocks=47 [ 144.085097][ T8736] bridge: RTM_NEWNEIGH with invalid ether address [ 144.159373][ T4942] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 144.936001][ T8762] loop8: detected capacity change from 0 to 128 [ 145.208008][ T8771] bridge: RTM_NEWNEIGH with invalid ether address [ 145.389126][ T8783] loop8: detected capacity change from 0 to 512 [ 145.486717][ T8783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.490149][ T8789] loop7: detected capacity change from 0 to 512 [ 145.530624][ T8789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.631647][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 145.667444][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'. [ 145.757432][ T7549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.768329][ T7588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.930993][ T8806] loop9: detected capacity change from 0 to 128 [ 145.961584][ T8809] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.006468][ T8809] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.066525][ T8809] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.126387][ T8809] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.171679][ T4943] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.183241][ T4903] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.194681][ T4903] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.206149][ T4903] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.806376][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 147.806468][ T29] audit: type=1400 audit(147.792:3606): avc: denied { append } for pid=8814 comm="syz.7.1852" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 147.836760][ T8817] loop9: detected capacity change from 0 to 1024 [ 147.841888][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1852'. [ 147.847960][ T8817] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 147.873494][ T8817] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 147.882338][ T8822] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1853'. [ 147.891617][ T8817] EXT4-fs (loop9): failed to initialize system zone (-117) [ 147.899085][ T8822] 0ªî{X¹¦: renamed from gretap0 [ 147.904238][ T8817] EXT4-fs (loop9): mount failed [ 147.905223][ T29] audit: type=1400 audit(147.872:3607): avc: denied { validate_trans } for pid=8814 comm="syz.7.1852" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 147.913149][ T8822] 0ªî{X¹¦: entered allmulticast mode [ 147.992719][ T29] audit: type=1326 audit(147.972:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.9.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ace61ec29 code=0x7ffc0000 [ 148.017798][ T8822] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 148.035502][ T29] audit: type=1326 audit(147.972:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.9.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ace61ec29 code=0x7ffc0000 [ 148.058578][ T29] audit: type=1326 audit(147.972:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.9.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f1ace61ec29 code=0x7ffc0000 [ 148.081727][ T29] audit: type=1326 audit(147.972:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.9.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ace61ec29 code=0x7ffc0000 [ 148.104636][ T29] audit: type=1326 audit(147.972:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.9.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ace61ec29 code=0x7ffc0000 [ 148.127555][ T29] audit: type=1326 audit(147.972:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.9.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f1ace61ec29 code=0x7ffc0000 [ 148.150512][ T29] audit: type=1326 audit(147.972:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.9.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ace61ec29 code=0x7ffc0000 [ 148.173736][ T29] audit: type=1326 audit(147.972:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.9.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ace61ec29 code=0x7ffc0000 [ 148.229100][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1858'. [ 148.283288][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1862'. [ 148.294392][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1862'. [ 148.321543][ T8846] netlink: 'syz.9.1864': attribute type 1 has an invalid length. [ 148.347347][ T8846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.375401][ T8846] bond1 (unregistering): Released all slaves [ 148.413128][ T8855] blk_print_req_error: 259 callbacks suppressed [ 148.413145][ T8855] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.450845][ T8855] FAT-fs (loop15): unable to read boot sector [ 148.509853][ T8863] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 148.516420][ T8863] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 148.524171][ T8863] vhci_hcd vhci_hcd.0: Device attached [ 148.570294][ T8865] vhci_hcd: connection closed [ 148.570950][ T4943] vhci_hcd: stop threads [ 148.579982][ T4943] vhci_hcd: release socket [ 148.584502][ T4943] vhci_hcd: disconnect device [ 148.597833][ T8870] loop7: detected capacity change from 0 to 1024 [ 148.609243][ T8870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.629156][ T8870] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 148.658474][ T8870] System zones: 0-1, 3-36 [ 148.678326][ T8870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.710156][ T7549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.935255][ T8887] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.968434][ T8892] I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.979338][ T8892] FAT-fs (loop17): unable to read boot sector [ 148.988503][ T8887] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.017334][ T8895] netlink: 'syz.8.1882': attribute type 1 has an invalid length. [ 149.031848][ T8895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.042980][ T8887] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.058785][ T8895] __nla_validate_parse: 1 callbacks suppressed [ 149.058803][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1882'. [ 149.097272][ T8895] bond1 (unregistering): Released all slaves [ 149.138170][ T8887] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.217406][ T8902] loop9: detected capacity change from 0 to 1024 [ 149.231347][ T8902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.253271][ T8904] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1885'. [ 149.270181][ T8902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 149.298716][ T8902] System zones: 0-1, 3-36 [ 149.306527][ T8909] loop6: detected capacity change from 0 to 512 [ 149.316284][ T4942] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.329244][ T8902] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.349605][ T8909] EXT4-fs: Ignoring removed nobh option [ 149.360706][ T8909] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 149.372770][ T4942] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.391377][ T4942] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.400496][ T8909] EXT4-fs (loop6): 1 truncate cleaned up [ 149.407864][ T7767] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.417533][ T8909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.424895][ T4942] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.477821][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.494532][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1891'. [ 149.521567][ T8919] syzkaller0: entered promiscuous mode [ 149.527345][ T8919] syzkaller0: entered allmulticast mode [ 149.565274][ T3611] IPVS: starting estimator thread 0... [ 149.620082][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1896'. [ 149.665138][ T8924] IPVS: using max 2352 ests per chain, 117600 per kthread [ 149.680449][ T8932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8932 comm=syz.8.1898 [ 149.859387][ T8947] syz_tun: entered allmulticast mode [ 149.879092][ T8946] syz_tun: left allmulticast mode [ 149.935445][ T8953] loop9: detected capacity change from 0 to 512 [ 149.958416][ T8953] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.139213][ T7767] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.391333][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1911'. [ 150.402310][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1911'. [ 150.603449][ T8983] syz_tun: entered allmulticast mode [ 150.630054][ T8982] syz_tun: left allmulticast mode [ 150.721598][ T8992] loop8: detected capacity change from 0 to 164 [ 150.738478][ T8992] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 150.753844][ T8992] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 150.765583][ T8992] Symlink component flag not implemented [ 150.771340][ T8992] Symlink component flag not implemented [ 150.771568][ T8997] loop9: detected capacity change from 0 to 128 [ 150.777782][ T8992] Symlink component flag not implemented (7) [ 150.790118][ T8992] Symlink component flag not implemented (116) [ 151.789816][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1944'. [ 151.893659][ T9031] loop6: detected capacity change from 0 to 164 [ 151.907510][ T9031] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 151.917202][ T9031] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 151.933236][ T9031] Symlink component flag not implemented [ 151.939144][ T9031] Symlink component flag not implemented [ 151.950283][ T9031] Symlink component flag not implemented (7) [ 151.956491][ T9031] Symlink component flag not implemented (116) [ 152.071372][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1942'. [ 152.205987][ T9056] ALSA: seq fatal error: cannot create timer (-19) [ 152.706228][ T9066] loop9: detected capacity change from 0 to 164 [ 152.713590][ T9066] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 152.732395][ T9066] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 152.751397][ T9066] Symlink component flag not implemented [ 152.757148][ T9066] Symlink component flag not implemented [ 152.763263][ T9064] loop6: detected capacity change from 0 to 8192 [ 152.764219][ T9066] Symlink component flag not implemented (7) [ 152.775943][ T9066] Symlink component flag not implemented (116) [ 152.814895][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 152.814914][ T29] audit: type=1326 audit(152.792:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.6.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 152.844362][ T29] audit: type=1326 audit(152.792:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.6.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 152.867566][ T29] audit: type=1326 audit(152.792:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.6.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 152.890422][ T29] audit: type=1326 audit(152.792:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.6.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 152.913336][ T29] audit: type=1326 audit(152.792:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.6.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 152.936265][ T29] audit: type=1326 audit(152.792:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.6.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 152.959164][ T29] audit: type=1326 audit(152.792:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.6.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 152.982685][ T29] audit: type=1326 audit(152.792:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.6.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 153.006000][ T29] audit: type=1326 audit(152.792:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.6.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 153.028953][ T29] audit: type=1326 audit(152.792:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.6.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 153.054014][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1958'. [ 153.130595][ T9080] netlink: 'syz.2.1962': attribute type 7 has an invalid length. [ 153.138414][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1962'. [ 153.201360][ T9086] loop6: detected capacity change from 0 to 512 [ 153.240612][ T9086] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1964: bg 0: block 5: invalid block bitmap [ 153.255866][ T9086] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 153.265571][ T9086] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1964: invalid indirect mapped block 3 (level 2) [ 153.279174][ T9086] EXT4-fs (loop6): 2 truncates cleaned up [ 153.285755][ T9086] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.312682][ T9086] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.376977][ T9086] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.437264][ T9086] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.536859][ T9086] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.576714][ T9108] loop9: detected capacity change from 0 to 1024 [ 153.586019][ T9108] EXT4-fs: Mount option(s) incompatible with ext2 [ 153.659572][ T9114] netlink: 'syz.9.1976': attribute type 7 has an invalid length. [ 153.874373][ T9121] lo speed is unknown, defaulting to 1000 [ 154.099584][ T9132] __nla_validate_parse: 2 callbacks suppressed [ 154.099598][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1993'. [ 154.116799][ T9133] loop8: detected capacity change from 0 to 512 [ 154.124516][ T9133] EXT4-fs: Ignoring removed nobh option [ 154.132157][ T9133] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.213322][ T7588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.293362][ T9145] rdma_rxe: rxe_newlink: failed to add bridge0 [ 154.343763][ T9148] syzkaller0: entered promiscuous mode [ 154.349390][ T9148] syzkaller0: entered allmulticast mode [ 154.624964][ T3400] page_pool_release_retry() stalled pool shutdown: id 56, 1 inflight 60 sec [ 154.731517][ T9161] veth0: entered promiscuous mode [ 154.740263][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1996'. [ 154.867184][ T9167] loop7: detected capacity change from 0 to 512 [ 154.875741][ T9167] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.884750][ T9167] EXT4-fs (loop7): failed to initialize system zone (-117) [ 154.892350][ T9167] EXT4-fs (loop7): mount failed [ 154.938302][ T9170] random: crng reseeded on system resumption [ 155.040371][ T9179] atomic_op ffff888148c3f528 conn xmit_atomic 0000000000000000 [ 155.174981][ T9186] siw: device registration error -23 [ 155.381382][ T9203] loop7: detected capacity change from 0 to 1024 [ 155.390503][ T9203] EXT4-fs: Mount option(s) incompatible with ext2 [ 155.490424][ T9208] loop9: detected capacity change from 0 to 512 [ 155.502763][ T9208] EXT4-fs: Ignoring removed nobh option [ 155.519767][ T9199] lo speed is unknown, defaulting to 1000 [ 155.532612][ T9208] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.626196][ T9221] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2021'. [ 155.648148][ T7767] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.882644][ T9235] loop8: detected capacity change from 0 to 1024 [ 155.901868][ T9223] Set syz1 is full, maxelem 65536 reached [ 155.903509][ T9235] EXT4-fs: Mount option(s) incompatible with ext2 [ 155.960487][ T9237] netlink: 184 bytes leftover after parsing attributes in process `syz.9.2027'. [ 155.970854][ T9237] xt_socket: unknown flags 0xd0 [ 156.060263][ T9246] loop7: detected capacity change from 0 to 1024 [ 156.076428][ T9246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.123978][ T9246] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2031: Allocating blocks 449-513 which overlap fs metadata [ 156.211761][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2032'. [ 156.220910][ T9245] EXT4-fs (loop7): pa ffff8881056fe620: logic 48, phys. 177, len 21 [ 156.229053][ T9245] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 156.262401][ T7549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.292757][ T9258] loop7: detected capacity change from 0 to 512 [ 156.300766][ T9258] EXT4-fs: Ignoring removed nobh option [ 156.308872][ T9258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.397229][ T7549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.778258][ T9282] lo speed is unknown, defaulting to 1000 [ 157.147708][ T9317] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2059'. [ 157.157709][ T9317] xt_socket: unknown flags 0xd0 [ 157.388496][ T9321] siw: device registration error -23 [ 157.458812][ T9329] IPVS: Error joining to the multicast group [ 157.652082][ T9341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.661313][ T9341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.026209][ T9347] loop9: detected capacity change from 0 to 2048 [ 158.084124][ T4943] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.095505][ T9347] Alternate GPT is invalid, using primary GPT. [ 158.099750][ T4942] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.101959][ T9347] loop9: p2 p3 p7 [ 158.114772][ T4942] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.133235][ T4942] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.161987][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.513684][ T9388] loop8: detected capacity change from 0 to 1024 [ 158.535640][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 158.535658][ T29] audit: type=1400 audit(158.522:3764): avc: denied { setopt } for pid=9385 comm="syz.7.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.567074][ T9388] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.593476][ T9363] lo speed is unknown, defaulting to 1000 [ 158.694861][ T7588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.857989][ T9420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2099'. [ 158.867432][ T9420] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2099'. [ 159.087103][ T9433] loop6: detected capacity change from 0 to 1024 [ 159.097866][ T9433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.150440][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.172542][ T29] audit: type=1326 audit(159.152:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.6.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 159.184164][ T9438] loop6: detected capacity change from 0 to 2048 [ 159.195405][ T29] audit: type=1326 audit(159.152:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.6.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 159.225940][ T29] audit: type=1326 audit(159.152:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.6.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 159.249306][ T29] audit: type=1326 audit(159.152:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.6.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0674e1ec63 code=0x7ffc0000 [ 159.274597][ T29] audit: type=1326 audit(159.162:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.6.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0674e1d6df code=0x7ffc0000 [ 159.300714][ T29] audit: type=1326 audit(159.162:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.6.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0674e1ecb7 code=0x7ffc0000 [ 159.324337][ T29] audit: type=1326 audit(159.162:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.6.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0674e1d590 code=0x7ffc0000 [ 159.348126][ T29] audit: type=1326 audit(159.162:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.6.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0674e1e82b code=0x7ffc0000 [ 159.354622][ T9442] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 159.370952][ T29] audit: type=1326 audit(159.182:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.6.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0674e1d88a code=0x7ffc0000 [ 159.406406][ T9438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.429843][ T9444] bridge: RTM_NEWNEIGH with invalid ether address [ 159.463787][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.474475][ T9448] netlink: 'syz.7.2110': attribute type 21 has an invalid length. [ 159.482402][ T9448] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2110'. [ 159.610570][ T9460] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2113'. [ 159.620082][ T9460] netlink: 212 bytes leftover after parsing attributes in process `syz.8.2113'. [ 159.692937][ T9464] netlink: 'syz.8.2116': attribute type 4 has an invalid length. [ 159.700897][ T9464] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2116'. [ 159.722268][ T9464] .`: renamed from bond0 (while UP) [ 159.732998][ T9466] loop6: detected capacity change from 0 to 512 [ 159.789902][ T9454] lo speed is unknown, defaulting to 1000 [ 159.880339][ T9466] loop6: detected capacity change from 0 to 8192 [ 159.918504][ T9476] uprobe: syz.9.2122:9476 failed to unregister, leaking uprobe [ 159.934976][ T9476] uprobe: syz.9.2122:9476 failed to unregister, leaking uprobe [ 160.008588][ T9481] loop9: detected capacity change from 0 to 512 [ 160.034203][ T9481] EXT4-fs (loop9): blocks per group (34) and clusters per group (32768) inconsistent [ 160.119350][ T3397] IPVS: starting estimator thread 0... [ 160.164730][ T9482] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 160.172439][ T9482] FAT-fs (loop6): Filesystem has been set read-only [ 160.192373][ T9485] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 160.214880][ T9489] IPVS: using max 2064 ests per chain, 103200 per kthread [ 160.736316][ T9525] 9pnet: p9_errstr2errno: server reported unknown error [ 160.945650][ T9536] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2145'. [ 161.193568][ T9553] lo speed is unknown, defaulting to 1000 [ 161.233366][ T9557] pim6reg1: entered promiscuous mode [ 161.238877][ T9557] pim6reg1: entered allmulticast mode [ 161.252063][ T9559] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2153'. [ 161.328538][ T9564] loop8: detected capacity change from 0 to 2048 [ 161.387433][ T9564] Alternate GPT is invalid, using primary GPT. [ 161.393982][ T9564] loop8: p2 p3 p7 [ 161.665315][ T9575] lo speed is unknown, defaulting to 1000 [ 161.685244][ T9578] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 161.693946][ T9578] vhci_hcd: invalid port number 96 [ 161.699261][ T9578] vhci_hcd: default hub control req: 0017 vfffc i0060 l0 [ 161.747101][ T9583] bond0: (slave dummy0): Releasing backup interface [ 161.768466][ T9583] bond0: (slave bond_slave_0): Releasing backup interface [ 161.787208][ T9583] bond0: (slave bond_slave_1): Releasing backup interface [ 161.801113][ T9583] team0: Port device team_slave_0 removed [ 161.811595][ T9583] team0: Port device team_slave_1 removed [ 161.822954][ T9585] netlink: 'syz.2.2163': attribute type 10 has an invalid length. [ 161.831081][ T9585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2163'. [ 161.842252][ T9585] veth1_vlan: left promiscuous mode [ 161.851490][ T9585] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 161.985969][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2165'. [ 162.099698][ T9596] loop6: detected capacity change from 0 to 2048 [ 162.128334][ T9358] Alternate GPT is invalid, using primary GPT. [ 162.134852][ T9358] loop6: p2 p3 p7 [ 162.146651][ T9596] Alternate GPT is invalid, using primary GPT. [ 162.153087][ T9596] loop6: p2 p3 p7 [ 162.374367][ T9616] loop8: detected capacity change from 0 to 128 [ 162.397408][ T9616] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 162.406433][ T9616] FAT-fs (loop8): Filesystem has been set read-only [ 162.413451][ T9616] bio_check_eod: 18 callbacks suppressed [ 162.413468][ T9616] syz.8.2176: attempt to access beyond end of device [ 162.413468][ T9616] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 162.437953][ T9616] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 162.446050][ T9616] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 162.457653][ T9616] syz.8.2176: attempt to access beyond end of device [ 162.457653][ T9616] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 162.480642][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2180'. [ 162.492154][ T9616] syz.8.2176: attempt to access beyond end of device [ 162.492154][ T9616] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 163.221113][ T9638] loop6: detected capacity change from 0 to 1024 [ 163.228718][ T9638] ext3: Unknown parameter 'noacl' [ 163.294236][ T9644] 9pnet: p9_errstr2errno: server reported unknown error [ 163.319658][ T9641] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.376540][ T9641] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.468598][ T9641] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.505927][ T9662] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 163.528436][ T9641] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.612171][ T4900] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.631193][ T4900] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.644102][ T4900] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.653166][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 163.653183][ T29] audit: type=1326 audit(163.642:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9640 comm="syz.7.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a988ec29 code=0x7ffc0000 [ 163.666855][ T4900] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.703972][ T29] audit: type=1326 audit(163.672:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9640 comm="syz.7.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a988ec29 code=0x7ffc0000 [ 163.769432][ T29] audit: type=1326 audit(163.752:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9669 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 163.793023][ T29] audit: type=1326 audit(163.752:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9669 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 163.857537][ T29] audit: type=1326 audit(163.752:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9669 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 163.880567][ T29] audit: type=1326 audit(163.752:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9669 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 163.904018][ T29] audit: type=1326 audit(163.752:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9669 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 163.926951][ T29] audit: type=1326 audit(163.802:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9669 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 163.950235][ T29] audit: type=1326 audit(163.802:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9669 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 163.973178][ T29] audit: type=1326 audit(163.802:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9669 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 164.227421][ T9694] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 164.318483][ T9697] bridge_slave_0: left allmulticast mode [ 164.324385][ T9697] bridge_slave_0: left promiscuous mode [ 164.330201][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.349349][ T9697] bridge_slave_1: left allmulticast mode [ 164.355195][ T9697] bridge_slave_1: left promiscuous mode [ 164.360922][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.377250][ T9697] bond0: (slave bond_slave_0): Releasing backup interface [ 164.392042][ T9697] bond0: (slave bond_slave_1): Releasing backup interface [ 164.408267][ T9697] team0: Port device team_slave_1 removed [ 164.408408][ T9702] netlink: 'syz.9.2207': attribute type 10 has an invalid length. [ 164.416153][ T9697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.422056][ T9702] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2207'. [ 164.429451][ T9697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.449559][ T9697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.457125][ T9697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.492678][ T9702] batman_adv: batadv0: Adding interface: veth1_vlan [ 164.499549][ T9702] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.532677][ T9705] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2210'. [ 164.533553][ T9702] batman_adv: batadv0: Interface activated: veth1_vlan [ 164.643768][ T9708] siw: device registration error -23 [ 164.717141][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2217'. [ 164.727522][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2217'. [ 164.744267][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2217'. [ 164.754145][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2217'. [ 164.853108][ T9725] loop9: detected capacity change from 0 to 128 [ 164.888280][ T9725] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 164.896392][ T9725] FAT-fs (loop9): Filesystem has been set read-only [ 164.912873][ T9725] syz.9.2219: attempt to access beyond end of device [ 164.912873][ T9725] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 164.929589][ T9725] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 164.937724][ T9725] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 165.443669][ T9734] bridge0: entered promiscuous mode [ 165.449139][ T9734] macvtap1: entered allmulticast mode [ 165.454577][ T9734] bridge0: entered allmulticast mode [ 165.461291][ T9734] bridge0: port 1(macvtap1) entered blocking state [ 165.467929][ T9734] bridge0: port 1(macvtap1) entered disabled state [ 165.571570][ T9717] Set syz1 is full, maxelem 65536 reached [ 165.583084][ T9734] bridge0: left allmulticast mode [ 165.588378][ T9734] bridge0: left promiscuous mode [ 165.611713][ T9740] smc: net device bond0 applied user defined pnetid SYZ0 [ 165.621364][ T9740] smc: net device bond0 erased user defined pnetid SYZ0 [ 166.131195][ T9760] lo speed is unknown, defaulting to 1000 [ 166.234946][ T9760] chnl_net:caif_netlink_parms(): no params data found [ 166.303405][ T9760] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.310618][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.319952][ T9760] bridge_slave_0: entered allmulticast mode [ 166.326586][ T9760] bridge_slave_0: entered promiscuous mode [ 166.333744][ T9760] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.341103][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.349967][ T9760] bridge_slave_1: entered allmulticast mode [ 166.356766][ T9760] bridge_slave_1: entered promiscuous mode [ 166.378445][ T9760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.389468][ T9760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.412548][ T9760] team0: Port device team_slave_0 added [ 166.420017][ T9760] team0: Port device team_slave_1 added [ 166.437647][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.444625][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.471058][ T9760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.482636][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.489724][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.515679][ T9760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.554546][ T9760] hsr_slave_0: entered promiscuous mode [ 166.562226][ T9760] hsr_slave_1: entered promiscuous mode [ 166.569160][ T9760] debugfs: 'hsr0' already exists in 'hsr' [ 166.575005][ T9760] Cannot create hsr debugfs directory [ 166.843871][ T9760] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.853645][ T9760] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.868642][ T9760] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.878160][ T9760] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.938815][ T9825] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2251'. [ 166.942910][ T9760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.965977][ T9825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.976802][ T9825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.987698][ T9825] bond0 (unregistering): Released all slaves [ 167.005070][ T9760] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.016483][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.023588][ T4900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.036909][ T4896] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.044068][ T4896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.126120][ T9760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.202526][ T9760] veth0_vlan: entered promiscuous mode [ 167.210984][ T9760] veth1_vlan: entered promiscuous mode [ 167.228728][ T9760] veth0_macvtap: entered promiscuous mode [ 167.237143][ T9760] veth1_macvtap: entered promiscuous mode [ 167.248673][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.258656][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.272216][ T4896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.284283][ T4896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.296521][ T4896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.305770][ T4896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.530150][ T9859] loop6: detected capacity change from 0 to 1024 [ 167.557554][ T9859] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.572592][ T9859] EXT4-fs: inline encryption not supported [ 167.603290][ T9859] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.626720][ T9859] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2260: bad orphan inode 11 [ 167.656251][ T9859] ext4_test_bit(bit=10, block=4) = 1 [ 167.661869][ T9859] is_bad_inode(inode)=0 [ 167.666163][ T9859] NEXT_ORPHAN(inode)=3254779904 [ 167.671032][ T9859] max_ino=32 [ 167.674349][ T9859] i_nlink=0 [ 167.682705][ T9859] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2260: lblock 2 mapped to illegal pblock 2 (length 1) [ 167.702537][ T9859] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2260: lblock 0 mapped to illegal pblock 48 (length 1) [ 167.719909][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2263'. [ 167.731616][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2263'. [ 167.743203][ T9859] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2260: Failed to acquire dquot type 0 [ 167.758054][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2263'. [ 167.766344][ T9859] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 167.767703][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2263'. [ 167.786621][ T9859] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2260: mark_inode_dirty error [ 167.798610][ T9859] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 167.810138][ T9859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.848797][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.858362][ T6493] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 167.871807][ T6493] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 167.882047][ T6493] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 167.957871][ T9880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9880 comm=syz.2.2267 [ 168.509916][ T9889] lo speed is unknown, defaulting to 1000 [ 168.932999][ T9917] loop6: detected capacity change from 0 to 512 [ 169.003863][ T9917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.047340][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 169.047357][ T29] audit: type=1400 audit(169.032:3956): avc: denied { create } for pid=9916 comm="syz.6.2282" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 169.112964][ T9927] loop8: detected capacity change from 0 to 512 [ 169.123050][ T9927] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.130619][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.142644][ T9927] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 169.154558][ T9927] EXT4-fs (loop8): 1 truncate cleaned up [ 169.166657][ T9927] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.272779][ T29] audit: type=1400 audit(169.252:3957): avc: denied { add_name } for pid=9926 comm="syz.8.2285" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 169.312877][ T29] audit: type=1400 audit(169.282:3958): avc: denied { rename } for pid=9926 comm="syz.8.2285" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.352565][ T7588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.454815][ T29] audit: type=1400 audit(169.432:3959): avc: denied { write } for pid=9946 comm="syz.6.2292" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.933774][ T9959] lo speed is unknown, defaulting to 1000 [ 170.062936][ T29] audit: type=1326 audit(170.042:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.0.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 170.086073][ T29] audit: type=1326 audit(170.042:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.0.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 170.218641][ T29] audit: type=1326 audit(170.042:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.0.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 170.241897][ T29] audit: type=1326 audit(170.042:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.0.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 170.264972][ T29] audit: type=1326 audit(170.042:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.0.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 170.288204][ T29] audit: type=1326 audit(170.042:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.0.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 170.797978][T10024] netlink: 'syz.7.2333': attribute type 10 has an invalid length. [ 170.812462][T10024] team0: Port device dummy0 added [ 170.822607][T10024] netlink: 'syz.7.2333': attribute type 10 has an invalid length. [ 170.831045][T10024] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 170.842003][T10024] team0: Failed to send options change via netlink (err -105) [ 170.849611][T10024] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 170.858912][T10024] team0: Port device dummy0 removed [ 171.163694][T10045] loop6: detected capacity change from 0 to 1024 [ 171.175486][T10045] EXT4-fs: Ignoring removed nobh option [ 171.181421][T10045] EXT4-fs: Ignoring removed bh option [ 171.186998][T10045] EXT4-fs: Ignoring removed nobh option [ 171.221343][T10045] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.278891][T10055] __nla_validate_parse: 2 callbacks suppressed [ 171.278949][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2335'. [ 171.292621][T10045] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 171.386481][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.531463][T10065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10065 comm=syz.6.2340 [ 171.801971][T10083] tls_set_device_offload: netdev not found [ 172.059905][T10103] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.132599][T10108] loop8: detected capacity change from 0 to 2048 [ 172.141743][T10103] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.178999][T10108] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.208960][T10103] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.276921][T10103] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.350499][T10118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10118 comm=syz.2.2362 [ 172.380003][ T4933] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.390713][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2362'. [ 172.404756][ T4933] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.424015][ T4933] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.432820][ T4933] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.977288][ T7588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.054009][T10150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10150 comm=syz.8.2375 [ 173.074641][T10152] ref_ctr increment failed for inode: 0xb0c offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88810a68cac0 [ 173.098913][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2375'. [ 173.113863][T10152] ref_ctr increment failed for inode: 0xb0c offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810a68cac0 [ 173.147266][T10151] uprobe: syz.2.2386:10151 failed to unregister, leaking uprobe [ 173.160454][T10138] lo speed is unknown, defaulting to 1000 [ 173.215251][T10151] uprobe: syz.2.2386:10151 failed to unregister, leaking uprobe [ 173.250282][T10155] lo speed is unknown, defaulting to 1000 [ 173.453413][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2382'. [ 173.490287][T10169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.503992][T10169] vlan2: entered allmulticast mode [ 173.509296][T10169] bond1: entered allmulticast mode [ 173.664103][T10177] lo speed is unknown, defaulting to 1000 [ 174.073087][T10204] tipc: Enabling of bearer rejected, failed to enable media [ 174.088350][T10208] loop8: detected capacity change from 0 to 128 [ 174.198113][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 174.198130][ T29] audit: type=1400 audit(174.182:4204): avc: denied { getopt } for pid=10220 comm="syz.2.2402" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.374182][ T29] audit: type=1400 audit(174.352:4205): avc: denied { read open } for pid=10243 comm="syz.8.2407" path="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.400546][T10248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2409'. [ 174.436648][ T29] audit: type=1326 audit(174.422:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.7.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a988ec29 code=0x7ffc0000 [ 174.459654][ T29] audit: type=1326 audit(174.422:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.7.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a988ec29 code=0x7ffc0000 [ 174.484387][T10252] netlink: 'syz.8.2410': attribute type 10 has an invalid length. [ 174.491732][ T29] audit: type=1326 audit(174.472:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.7.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f37a988ec29 code=0x7ffc0000 [ 174.497376][T10252] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2410'. [ 174.520077][ T29] audit: type=1326 audit(174.472:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.7.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a988ec29 code=0x7ffc0000 [ 174.520175][ T29] audit: type=1326 audit(174.472:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.7.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a988ec29 code=0x7ffc0000 [ 174.540240][ T29] audit: type=1326 audit(174.522:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.7.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37a988ec29 code=0x7ffc0000 [ 174.599654][ T29] audit: type=1326 audit(174.522:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.7.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a988ec29 code=0x7ffc0000 [ 174.622792][ T29] audit: type=1326 audit(174.522:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.7.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a988ec29 code=0x7ffc0000 [ 174.650056][T10252] dummy0: entered promiscuous mode [ 174.663270][T10252] bridge0: port 3(dummy0) entered blocking state [ 174.672624][T10252] bridge0: port 3(dummy0) entered disabled state [ 174.680032][T10252] dummy0: entered allmulticast mode [ 174.689735][T10252] bridge0: port 3(dummy0) entered blocking state [ 174.696704][T10252] bridge0: port 3(dummy0) entered forwarding state [ 174.709636][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'. [ 174.718699][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'. [ 174.872263][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2417'. [ 174.953929][T10282] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 175.657916][T10327] loop6: detected capacity change from 0 to 1024 [ 175.691695][T10327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.739337][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.821223][T10344] loop8: detected capacity change from 0 to 256 [ 175.845906][T10348] ÿÿÿÿÿÿ: renamed from vlan1 [ 175.870664][T10350] loop6: detected capacity change from 0 to 512 [ 175.896849][T10350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.921248][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.830383][T10400] loop6: detected capacity change from 0 to 512 [ 176.837251][T10396] tipc: Started in network mode [ 176.842402][T10396] tipc: Node identity ac14140f, cluster identity 4711 [ 176.852211][T10400] EXT4-fs: Ignoring removed oldalloc option [ 176.864993][T10396] tipc: New replicast peer: 255.255.255.83 [ 176.870956][T10396] tipc: Enabled bearer , priority 10 [ 176.890111][T10400] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.2469: Parent and EA inode have the same ino 15 [ 176.914783][T10400] EXT4-fs (loop6): Remounting filesystem read-only [ 176.933125][T10400] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -30) [ 176.967100][T10400] EXT4-fs (loop6): 1 orphan inode deleted [ 176.999284][T10400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.035417][T10400] __nla_validate_parse: 3 callbacks suppressed [ 177.035437][T10400] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2469'. [ 177.069493][T10415] vlan2: entered allmulticast mode [ 177.078079][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.344575][T10441] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2487'. [ 177.383854][T10443] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2488'. [ 177.411090][T10447] netlink: 2 bytes leftover after parsing attributes in process `syz.8.2489'. [ 177.423614][T10447] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10447 comm=syz.8.2489 [ 177.442258][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2491'. [ 177.451386][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2491'. [ 177.719631][T10477] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.757335][T10477] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.777573][T10483] loop6: detected capacity change from 0 to 128 [ 177.816686][T10477] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.821748][T10483] syz.6.2505: attempt to access beyond end of device [ 177.821748][T10483] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 177.876679][T10477] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.924752][ T5263] tipc: Node number set to 2886997007 [ 177.946547][ T4922] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.965729][ T4922] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.982509][ T4922] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.993285][ T4922] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.506438][T10527] loop6: detected capacity change from 0 to 512 [ 178.513186][T10527] EXT4-fs: Ignoring removed i_version option [ 178.519317][T10527] EXT4-fs: Ignoring removed bh option [ 178.543169][T10527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.612036][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.708076][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2529'. [ 178.729676][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2529'. [ 178.838164][T10544] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 178.857670][T10544] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2531'. [ 178.866895][T10544] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2531'. [ 179.040869][T10559] lo speed is unknown, defaulting to 1000 [ 179.108261][T10566] 9pnet_fd: Insufficient options for proto=fd [ 179.164485][T10574] loop8: detected capacity change from 0 to 512 [ 179.187184][T10574] EXT4-fs: Ignoring removed oldalloc option [ 179.238025][T10574] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.2544: Parent and EA inode have the same ino 15 [ 179.278177][T10574] EXT4-fs (loop8): Remounting filesystem read-only [ 179.309264][T10574] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -30) [ 179.373266][T10588] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.397322][T10574] EXT4-fs (loop8): 1 orphan inode deleted [ 179.418765][T10574] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.479755][T10588] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.519532][ T7588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.552071][T10599] loop8: detected capacity change from 0 to 128 [ 179.563813][T10588] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.591607][T10599] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.636207][T10602] netem: change failed [ 179.647460][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 179.647474][ T29] audit: type=1400 audit(179.632:4643): avc: denied { rename } for pid=10597 comm="syz.8.2551" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 179.712027][T10588] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.744654][ T7588] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.756784][ T29] audit: type=1400 audit(179.712:4644): avc: denied { create } for pid=10597 comm="syz.8.2551" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 179.777508][ T29] audit: type=1400 audit(179.712:4645): avc: denied { rename } for pid=10597 comm="syz.8.2551" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 179.820643][ T29] audit: type=1400 audit(179.712:4646): avc: denied { unlink } for pid=10597 comm="syz.8.2551" name="file0" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 179.896368][ T4943] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.909154][ T4943] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.923812][ T4943] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.944523][ T4943] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.108973][T10624] netlink: 'syz.0.2562': attribute type 1 has an invalid length. [ 180.123795][T10624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.157196][T10624] bond1 (unregistering): Released all slaves [ 180.182896][T10627] wg2: entered promiscuous mode [ 180.188000][T10627] wg2: entered allmulticast mode [ 180.244277][T10637] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 180.260921][ T29] audit: type=1400 audit(180.222:4647): avc: denied { relabelfrom } for pid=10636 comm="syz.7.2570" name="NETLINK" dev="sockfs" ino=35916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 180.285060][ T29] audit: type=1400 audit(180.242:4648): avc: denied { relabelto } for pid=10636 comm="syz.7.2570" name="NETLINK" dev="sockfs" ino=35916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0" [ 180.418011][T10652] netlink: 'syz.8.2574': attribute type 17 has an invalid length. [ 180.461848][ T29] audit: type=1326 audit(180.442:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.6.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 180.487967][ T29] audit: type=1326 audit(180.442:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.6.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 180.500097][ T3611] Process accounting resumed [ 180.569294][ T29] audit: type=1326 audit(180.472:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.6.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 180.592668][ T29] audit: type=1326 audit(180.472:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.6.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674e1ec29 code=0x7ffc0000 [ 180.662706][T10662] netlink: 'syz.0.2580': attribute type 10 has an invalid length. [ 180.680193][T10662] dummy0: entered promiscuous mode [ 180.698365][T10662] bridge0: port 3(dummy0) entered blocking state [ 180.706915][T10662] bridge0: port 3(dummy0) entered disabled state [ 180.717083][T10662] dummy0: entered allmulticast mode [ 180.740104][T10668] loop6: detected capacity change from 0 to 512 [ 180.754654][T10662] bridge0: port 3(dummy0) entered blocking state [ 180.762346][T10662] bridge0: port 3(dummy0) entered forwarding state [ 180.790386][T10668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.816783][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.889439][T10679] netlink: 'syz.0.2585': attribute type 13 has an invalid length. [ 180.924144][T10679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.966935][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.975627][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.390356][T10701] loop8: detected capacity change from 0 to 512 [ 181.398033][T10701] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.410799][T10701] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 181.423890][T10703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10703 comm=syz.6.2596 [ 181.431781][T10701] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 181.444673][T10701] System zones: 1-12 [ 181.449942][T10701] EXT4-fs (loop8): 1 truncate cleaned up [ 181.456335][T10701] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.614642][T10713] loop6: detected capacity change from 0 to 2048 [ 181.642836][T10713] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.800816][T10722] lo speed is unknown, defaulting to 1000 [ 182.200270][T10733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.234582][ T7588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.257929][T10733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.300129][T10733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.310823][T10740] loop8: detected capacity change from 0 to 512 [ 182.319498][T10739] netlink: 'syz.7.2609': attribute type 4 has an invalid length. [ 182.338339][T10740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.344187][T10739] netlink: 'syz.7.2609': attribute type 4 has an invalid length. [ 182.368702][T10733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.392375][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.404044][ T7588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.458732][T10748] loop8: detected capacity change from 0 to 1024 [ 182.474624][ T4931] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.494795][ T4917] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.505740][ T4917] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.514006][ T4917] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.515817][T10748] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 182.562753][T10748] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 3: comm syz.8.2611: lblock 3 mapped to illegal pblock 3 (length 3) [ 182.588175][T10748] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 182.600581][T10748] EXT4-fs (loop8): This should not happen!! Data will be lost [ 182.600581][T10748] [ 182.633114][ T7588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 182.667371][T10760] pimreg: entered allmulticast mode [ 182.703345][T10760] __nla_validate_parse: 9 callbacks suppressed [ 182.703362][T10760] netlink: 4436 bytes leftover after parsing attributes in process `,&#^%'. [ 182.721352][T10760] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 182.815335][T10774] netlink: 'syz.8.2617': attribute type 1 has an invalid length. [ 182.939664][T10783] block device autoloading is deprecated and will be removed. [ 183.037770][T10790] loop0: detected capacity change from 0 to 512 [ 183.072856][T10793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2623'. [ 183.097547][T10790] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 183.124855][T10790] EXT4-fs (loop0): mount failed [ 183.175315][T10803] netlink: 'syz.6.2631': attribute type 2 has an invalid length. [ 183.183131][T10803] netlink: 'syz.6.2631': attribute type 1 has an invalid length. [ 183.191068][T10803] netlink: 'syz.6.2631': attribute type 2 has an invalid length. [ 183.298425][T10803] loop6: detected capacity change from 0 to 8192 [ 183.881235][T10813] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2634'. [ 183.894180][T10813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.901512][T10813] IPv6: NLM_F_CREATE should be set when creating new route [ 183.908747][T10813] IPv6: NLM_F_CREATE should be set when creating new route [ 184.151992][T10834] netlink: 36 bytes leftover after parsing attributes in process `GPL'. [ 184.172557][T10834] netlink: 12 bytes leftover after parsing attributes in process `GPL'. [ 184.189570][T10836] loop6: detected capacity change from 0 to 164 [ 184.217574][T10838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2644'. [ 184.241643][T10836] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 184.258003][T10836] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 184.272084][T10836] Symlink component flag not implemented [ 184.277926][T10836] Symlink component flag not implemented [ 184.285632][T10836] Symlink component flag not implemented (7) [ 184.291659][T10836] Symlink component flag not implemented (116) [ 184.672429][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 184.672447][ T29] audit: type=1326 audit(184.652:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 184.734517][ T29] audit: type=1326 audit(184.682:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 184.757780][ T29] audit: type=1326 audit(184.682:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 184.781588][ T29] audit: type=1326 audit(184.682:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 184.804936][ T29] audit: type=1326 audit(184.682:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 184.827879][ T29] audit: type=1326 audit(184.682:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 184.851174][ T29] audit: type=1326 audit(184.682:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 184.874094][ T29] audit: type=1326 audit(184.682:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 184.897135][ T29] audit: type=1326 audit(184.682:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 184.920306][ T29] audit: type=1326 audit(184.682:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9e1bec29 code=0x7ffc0000 [ 185.059402][T10886] netlink: 12 bytes leftover after parsing attributes in process `GPL'. [ 185.092115][T10886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.102907][T10889] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.115961][T10886] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 185.128861][T10886] bond0 (unregistering): Released all slaves [ 185.157561][T10889] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.224165][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2671'. [ 185.236378][T10889] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.269461][T10900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.284360][T10900] vlan1: entered allmulticast mode [ 185.289830][T10900] bond0: entered allmulticast mode [ 185.350244][T10889] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.419109][ T4917] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.439726][ T4917] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.448691][ T4917] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.458514][ T4917] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.528454][T10932] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2685'. [ 185.598884][T10935] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.645308][T10935] vlan1: entered allmulticast mode [ 185.650524][T10935] bond3: entered allmulticast mode [ 185.869002][T10944] validate_nla: 1 callbacks suppressed [ 185.869159][T10944] netlink: 'syz.2.2689': attribute type 10 has an invalid length. [ 185.875134][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119bfce00: rx timeout, send abort [ 185.892869][T10944] dummy0: entered promiscuous mode [ 185.892865][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119bfce00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 185.914244][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811787b800: rx timeout, send abort [ 185.922853][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811787b800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 185.963545][T10944] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 185.995490][T10922] tipc: Enabling of bearer rejected, already enabled [ 186.142161][T10948] lo speed is unknown, defaulting to 1000 [ 186.363751][T10967] dummy0: entered allmulticast mode [ 186.382630][T10967] dummy0: left allmulticast mode [ 186.438791][T10972] batadv1: entered promiscuous mode [ 186.444054][T10972] batadv1: entered allmulticast mode [ 186.703452][T11001] loop8: detected capacity change from 0 to 512 [ 186.718814][T11001] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 186.747762][ T7588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 186.771939][T11010] loop8: detected capacity change from 0 to 128 [ 186.779349][T11010] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.792672][T11010] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.869573][ T4957] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.029881][T11025] loop8: detected capacity change from 0 to 4096 [ 187.040796][T11025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.060884][T11025] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.358883][T11054] loop6: detected capacity change from 0 to 128 [ 187.371460][T11054] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 187.393268][T11054] System zones: 1-3, 19-19, 35-36 [ 187.403659][T11054] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 187.447904][ T6493] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.539855][ T7588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.666794][T11069] netlink: 'syz.6.2738': attribute type 1 has an invalid length. [ 187.796523][T11080] __nla_validate_parse: 5 callbacks suppressed [ 187.796540][T11080] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2743'. [ 187.818066][T11080] batadv1: entered promiscuous mode [ 187.823534][T11080] batadv1: entered allmulticast mode [ 187.953730][T11085] loop6: detected capacity change from 0 to 4096 [ 187.963635][T11085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.974303][T11085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.034324][T11095] loop8: detected capacity change from 0 to 1024 [ 188.049957][T11095] EXT4-fs: inline encryption not supported [ 188.086925][T11095] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.169608][ T7588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.286685][T11110] loop0: detected capacity change from 0 to 512 [ 188.316779][T11110] EXT4-fs (loop0): orphan cleanup on readonly fs [ 188.333198][T11110] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.2754: bad orphan inode 13 [ 188.365744][T11110] ext4_test_bit(bit=12, block=18) = 1 [ 188.371270][T11110] is_bad_inode(inode)=0 [ 188.375507][T11110] NEXT_ORPHAN(inode)=2130706432 [ 188.380362][T11110] max_ino=32 [ 188.383599][T11110] i_nlink=1 [ 188.407999][T11110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.453201][T11110] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 188.491756][T11110] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2754: bg 0: block 248: padding at end of block bitmap is not set [ 188.536703][T11110] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2754: Failed to acquire dquot type 1 [ 188.550233][T11120] netlink: 36 bytes leftover after parsing attributes in process `GPL'. [ 188.571364][T11110] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 188.601017][T11120] netlink: 12 bytes leftover after parsing attributes in process `GPL'. [ 188.683098][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.702194][ T9760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.747208][T11134] netlink: 87 bytes leftover after parsing attributes in process `syz.6.2761'. [ 188.757913][T11132] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.772819][T11136] loop0: detected capacity change from 0 to 512 [ 188.781990][T11136] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.788669][T11136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.799777][T11136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.808317][T11136] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.821700][T11132] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.831999][T11138] loop6: detected capacity change from 0 to 512 [ 188.835966][T11136] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.2763: Allocating blocks 41-42 which overlap fs metadata [ 188.854284][T11136] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.2763: Allocating blocks 41-42 which overlap fs metadata [ 188.866753][T11138] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2765: Failed to acquire dquot type 1 [ 188.870790][T11136] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2763: Failed to acquire dquot type 1 [ 188.880500][T11138] EXT4-fs (loop6): 1 truncate cleaned up [ 188.893674][T11136] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 188.897428][T11138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.911640][T11136] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.2763: corrupted inode contents [ 188.937306][T11132] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.949320][T11136] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #12: comm syz.0.2763: mark_inode_dirty error [ 188.961369][T11136] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.2763: corrupted inode contents [ 188.973541][T11136] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2763: mark_inode_dirty error [ 188.985433][T11136] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.2763: corrupted inode contents [ 188.998509][T11136] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 189.008527][T11132] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.009928][T11136] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.2763: corrupted inode contents [ 189.031011][T11136] EXT4-fs error (device loop0): ext4_truncate:4666: inode #12: comm syz.0.2763: mark_inode_dirty error [ 189.032687][ T6493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.043416][T11136] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 189.060998][T11136] EXT4-fs (loop0): 1 truncate cleaned up [ 189.068240][T11136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.084501][ T4957] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.113632][ T4957] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.122802][ T4957] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.132944][T11136] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 189.133064][ T4957] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.169875][ T9760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.557889][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2777'. [ 189.586568][T11172] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2777'. [ 189.695611][T11180] loop0: detected capacity change from 0 to 512 [ 189.717823][T11180] EXT4-fs: Ignoring removed bh option [ 189.740922][T11180] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.750093][T11180] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 189.787295][T11180] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 189.796979][T11180] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 189.816065][T11180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.842111][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 189.842127][ T29] audit: type=1326 audit(189.822:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.0.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 189.844790][T11180] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2780: bg 0: block 353: padding at end of block bitmap is not set [ 189.856423][ T29] audit: type=1326 audit(189.822:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.0.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 189.908900][ T29] audit: type=1326 audit(189.822:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.0.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 189.932142][ T29] audit: type=1326 audit(189.822:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.0.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 189.955281][ T29] audit: type=1326 audit(189.822:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.0.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 189.978346][ T29] audit: type=1326 audit(189.822:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.0.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 190.001199][ T29] audit: type=1326 audit(189.822:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.0.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 190.024330][ T29] audit: type=1326 audit(189.822:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.0.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 190.047519][ T29] audit: type=1326 audit(189.822:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.0.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 190.070510][ T29] audit: type=1326 audit(189.822:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.0.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 190.114619][ T9760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.337519][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2791'. [ 190.369119][T11207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.393775][ T4917] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.405111][T11211] bridge: RTM_NEWNEIGH with invalid ether address [ 190.425907][T11207] vlan2: entered allmulticast mode [ 190.431201][T11207] bond1: entered allmulticast mode [ 190.462715][ T4917] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.560698][ T5263] Process accounting resumed [ 190.586728][ T4917] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.627826][T11225] netlink: 'syz.2.2799': attribute type 1 has an invalid length. [ 190.635832][T11225] netlink: 'syz.2.2799': attribute type 4 has an invalid length. [ 190.643745][T11225] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2799'. [ 190.668950][T11225] netlink: 'syz.2.2799': attribute type 1 has an invalid length. [ 190.677041][T11225] netlink: 'syz.2.2799': attribute type 4 has an invalid length. [ 190.685001][T11225] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2799'. [ 190.729657][ T4917] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.760975][T11216] lo speed is unknown, defaulting to 1000 [ 190.878557][ T4917] bridge0: port 3(dummy0) entered disabled state [ 190.886812][ T4917] bridge_slave_1: left allmulticast mode [ 190.892514][ T4917] bridge_slave_1: left promiscuous mode [ 190.898444][ T4917] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.933711][ T4917] bridge_slave_0: left allmulticast mode [ 190.939543][ T4917] bridge_slave_0: left promiscuous mode [ 190.945266][ T4917] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.148497][ T4917] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.166352][ T4917] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.187677][ T4917] .` (unregistering): Released all slaves [ 191.203463][ T4917] bond0 (unregistering): Released all slaves [ 191.287730][ T4917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.295320][ T4917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.323377][ T4917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.331025][ T4917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.389359][ T4917] veth1_macvtap: left promiscuous mode [ 191.409397][ T4917] veth0_macvtap: left promiscuous mode [ 191.429649][ T4917] veth1_vlan: left promiscuous mode [ 191.449521][ T4917] veth0_vlan: left promiscuous mode [ 191.609116][ T4917] team0 (unregistering): Port device team_slave_1 removed [ 191.624755][ T4917] team0 (unregistering): Port device team_slave_0 removed [ 191.666569][T11216] chnl_net:caif_netlink_parms(): no params data found [ 191.753697][T11248] tipc: Started in network mode [ 191.758792][T11248] tipc: Node identity ac14140f, cluster identity 4711 [ 191.777932][T11248] tipc: New replicast peer: 255.255.255.83 [ 191.783856][T11248] tipc: Enabled bearer , priority 10 [ 191.789931][T11216] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.797339][T11216] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.816799][T11216] bridge_slave_0: entered allmulticast mode [ 191.833752][T11216] bridge_slave_0: entered promiscuous mode [ 191.870544][T11216] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.877939][T11216] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.924968][T11216] bridge_slave_1: entered allmulticast mode [ 191.946571][T11216] bridge_slave_1: entered promiscuous mode [ 192.011143][T11216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.027094][T11216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.070624][T11216] team0: Port device team_slave_0 added [ 192.078942][T11216] team0: Port device team_slave_1 added [ 192.129565][T11216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.136618][T11216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.162748][T11216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.174862][T11216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.181907][T11216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.208506][T11216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.319167][T11216] hsr_slave_0: entered promiscuous mode [ 192.337082][T11216] hsr_slave_1: entered promiscuous mode [ 192.343055][T11216] debugfs: 'hsr0' already exists in 'hsr' [ 192.348981][T11216] Cannot create hsr debugfs directory [ 192.782034][T11216] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.811898][T11216] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.839412][T11216] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.864081][T11216] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.906415][ T3407] tipc: Node number set to 2886997007 [ 192.974440][T11216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.021090][T11216] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.054970][ T4917] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.062262][ T4917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.116271][ T4917] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.123514][ T4917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.315403][T11294] vlan1: entered allmulticast mode [ 193.349698][T11297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2817'. [ 193.379885][T11216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.537468][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2819'. [ 193.658583][T11317] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.678611][T11320] loop0: detected capacity change from 0 to 512 [ 193.706209][T11320] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.718562][T11317] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.739365][T11320] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.758511][T11320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 193.779635][T11320] System zones: 1-12 [ 193.787181][T11317] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.803621][T11320] EXT4-fs (loop0): 1 truncate cleaned up [ 193.818922][T11320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.848748][T11216] veth0_vlan: entered promiscuous mode [ 193.867252][T11317] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.910932][T11216] veth1_vlan: entered promiscuous mode [ 193.975055][ T9760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.990262][T11216] veth0_macvtap: entered promiscuous mode [ 194.012005][ T4914] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.038220][ T4914] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.047129][ T4953] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.060131][T11216] veth1_macvtap: entered promiscuous mode [ 194.076785][ T4953] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.102669][T11216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.116102][T11216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.129228][ T4933] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.147285][ T4933] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.162353][ T4933] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.191273][ T4933] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.241095][ T5264] Process accounting resumed [ 194.297816][T11350] netlink: 12 bytes leftover after parsing attributes in process `GPL'. [ 194.355071][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2830'. [ 194.400840][T11350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.419946][T11362] loop4: detected capacity change from 0 to 512 [ 194.420935][T11357] bond2 (unregistering): Released all slaves [ 194.444760][T11362] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2835: Failed to acquire dquot type 1 [ 194.457567][T11362] EXT4-fs (loop4): 1 truncate cleaned up [ 194.463177][T11366] lo: entered allmulticast mode [ 194.463908][T11362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.472366][T11366] tunl0: entered allmulticast mode [ 194.499144][T11366] gre0: entered allmulticast mode [ 194.516026][T11366] gretap0: entered allmulticast mode [ 194.523903][T11366] erspan0: entered allmulticast mode [ 194.535069][T11216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.541562][T11366] ip_vti0: entered allmulticast mode [ 194.567830][T11366] ip6_vti0: entered allmulticast mode [ 194.600941][T11366] sit0: entered allmulticast mode [ 194.618905][T11366] ip6tnl0: entered allmulticast mode [ 194.628083][ T2994] udevd[2994]: worker [9358] terminated by signal 33 (Unknown signal 33) [ 194.637253][T11366] ip6gre0: entered allmulticast mode [ 194.644977][T11366] syz_tun: entered allmulticast mode [ 194.658723][ T2994] udevd[2994]: worker [9358] failed while handling '/devices/virtual/block/loop4' [ 194.668876][T11366] ip6gretap0: entered allmulticast mode [ 194.679032][T11378] netlink: 'syz.4.2837': attribute type 10 has an invalid length. [ 194.687343][T11378] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2837'. [ 194.691101][T11366] bridge0: port 3(dummy0) entered disabled state [ 194.704208][T11366] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.711618][T11366] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.726385][T11366] bridge0: entered allmulticast mode [ 194.733877][T11366] vcan0: entered allmulticast mode [ 194.740664][T11366] bond0: entered allmulticast mode [ 194.746044][T11366] bond_slave_0: entered allmulticast mode [ 194.752209][T11366] bond_slave_1: entered allmulticast mode [ 194.764078][T11366] team0: entered allmulticast mode [ 194.769454][T11366] team_slave_0: entered allmulticast mode [ 194.775498][T11366] team_slave_1: entered allmulticast mode [ 194.791055][T11366] nlmon0: entered allmulticast mode [ 194.803552][T11366] caif0: entered allmulticast mode [ 194.814604][T11366] batadv0: entered allmulticast mode [ 194.822728][T11366] vxcan0: entered allmulticast mode [ 194.831234][T11366] vxcan1: entered allmulticast mode [ 194.837573][T11366] veth0: entered allmulticast mode [ 194.844368][T11366] veth1: entered allmulticast mode [ 194.851789][T11366] wg0: entered allmulticast mode [ 194.858258][T11366] wg1: entered allmulticast mode [ 194.864443][T11366] wg2: entered allmulticast mode [ 194.871112][T11366] veth0_to_bridge: entered allmulticast mode [ 194.880338][T11366] veth1_to_bridge: entered allmulticast mode [ 194.889713][T11366] veth0_to_bond: entered allmulticast mode [ 194.896268][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2846'. [ 194.907625][T11366] veth1_to_bond: entered allmulticast mode [ 194.915991][T11366] veth0_to_team: entered allmulticast mode [ 194.924520][T11366] veth1_to_team: entered allmulticast mode [ 194.933097][T11366] veth0_to_batadv: entered allmulticast mode [ 194.941056][T11366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.949478][T11366] batadv_slave_0: entered allmulticast mode [ 194.959848][T11366] veth1_to_batadv: entered allmulticast mode [ 194.967372][T11366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.975107][T11366] batadv_slave_1: entered allmulticast mode [ 194.982394][T11366] xfrm0: entered allmulticast mode [ 194.989156][T11366] veth0_to_hsr: entered allmulticast mode [ 194.996339][T11366] hsr_slave_0: entered allmulticast mode [ 195.002750][T11366] veth1_to_hsr: entered allmulticast mode [ 195.009962][T11366] hsr_slave_1: entered allmulticast mode [ 195.017447][T11366] hsr0: entered allmulticast mode [ 195.023739][T11366] veth1_virt_wifi: entered allmulticast mode [ 195.031436][T11366] veth0_virt_wifi: entered allmulticast mode [ 195.039019][T11366] veth1_vlan: entered allmulticast mode [ 195.046402][T11366] veth0_vlan: entered allmulticast mode [ 195.055747][T11366] vlan0: entered allmulticast mode [ 195.061042][T11366] vlan1: entered allmulticast mode [ 195.066748][T11366] macvlan0: entered allmulticast mode [ 195.073397][T11366] macvlan1: entered allmulticast mode [ 195.079982][T11366] ipvlan0: entered allmulticast mode [ 195.085676][T11366] ipvlan1: entered allmulticast mode [ 195.091206][T11366] veth1_macvtap: entered allmulticast mode [ 195.098238][T11366] veth0_macvtap: entered allmulticast mode [ 195.105734][T11366] macvtap0: entered allmulticast mode [ 195.112061][T11366] macsec0: entered allmulticast mode [ 195.119015][T11366] geneve0: entered allmulticast mode [ 195.126531][T11366] geneve1: entered allmulticast mode [ 195.132795][T11366] netdevsim netdevsim0 eth0: entered allmulticast mode [ 195.140051][T11366] netdevsim netdevsim0 eth1: entered allmulticast mode [ 195.147076][T11366] netdevsim netdevsim0 eth2: entered allmulticast mode [ 195.154160][T11366] netdevsim netdevsim0 eth3: entered allmulticast mode [ 195.161869][T11366] veth2: entered allmulticast mode [ 195.167095][T11366] veth3: entered allmulticast mode [ 195.172577][T11366] bridge1: entered allmulticast mode [ 195.179013][T11366] veth4: entered allmulticast mode [ 195.184335][T11366] veth5: entered allmulticast mode [ 195.199547][T11378] dummy0: entered promiscuous mode [ 195.215338][T11378] bridge0: port 3(dummy0) entered blocking state [ 195.221771][T11378] bridge0: port 3(dummy0) entered disabled state [ 195.228748][T11378] dummy0: entered allmulticast mode [ 195.235579][T11378] bridge0: port 3(dummy0) entered blocking state [ 195.242330][T11378] bridge0: port 3(dummy0) entered forwarding state [ 195.270120][ T4917] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.291161][T11397] @0Ù: renamed from bond_slave_1 (while UP) [ 195.303591][ T4917] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.324105][ T4917] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.333207][ T4917] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.349609][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 195.349685][ T29] audit: type=1326 audit(195.332:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.0.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 195.357089][T11401] netlink: 'syz.0.2850': attribute type 13 has an invalid length. [ 195.379033][ T29] audit: type=1326 audit(195.332:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.0.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 195.392722][T11399] lo speed is unknown, defaulting to 1000 [ 195.410545][ T29] audit: type=1326 audit(195.332:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.0.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 195.444576][ T29] audit: type=1326 audit(195.332:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.0.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 195.467807][ T29] audit: type=1326 audit(195.332:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.0.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 195.490771][ T29] audit: type=1326 audit(195.332:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.0.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 195.513841][ T29] audit: type=1326 audit(195.332:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.0.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 195.537051][ T29] audit: type=1326 audit(195.332:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.0.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 195.560113][ T29] audit: type=1326 audit(195.332:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.0.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 195.583733][ T29] audit: type=1326 audit(195.332:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.0.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9339ec29 code=0x7ffc0000 [ 195.611586][T11407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2852'. [ 195.620764][T11407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2852'. [ 195.635320][T11408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2852'. [ 195.644436][T11408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2852'. [ 195.679196][T11410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11410 comm=syz.4.2853 [ 195.896030][T11423] loop4: detected capacity change from 0 to 1024 [ 195.917604][T11423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.993363][T11430] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 196.050425][T11216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.081179][T11433] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.121738][T11435] 8021q: VLANs not supported on wg2 [ 196.160113][T11433] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.229628][T11433] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.276898][T11433] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.347382][ T4917] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.371621][ T4931] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.384448][ T4931] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.392970][ T4931] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.758728][T11451] loop0: detected capacity change from 0 to 4096 [ 196.772747][T11451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.808278][T11451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.945740][T11463] loop6: detected capacity change from 0 to 512 [ 197.082397][T11469] dummy0: left allmulticast mode [ 197.087690][T11469] bridge0: port 3(dummy0) entered disabled state [ 197.100989][T11469] bridge_slave_0: left allmulticast mode [ 197.106897][T11469] bridge_slave_0: left promiscuous mode [ 197.112669][T11469] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.129323][T11469] bridge_slave_1: left allmulticast mode [ 197.135219][T11469] bridge_slave_1: left promiscuous mode [ 197.141078][T11469] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.155944][T11469] bond0: (slave bond_slave_0): Releasing backup interface [ 197.166864][T11469] bond0: (slave 4@0Ù): Releasing backup interface [ 197.185390][T11469] team0: Port device team_slave_0 removed [ 197.197603][T11469] team0: Port device team_slave_1 removed [ 197.200268][ T9760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.205373][T11469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.219994][T11469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.234490][T11469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.242042][T11469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.308884][T11480] loop0: detected capacity change from 0 to 512 [ 197.337197][T11480] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.2878: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 197.356949][T11480] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.2878: Bad quota inode: 3, type: 0 [ 197.374907][T11480] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 197.394123][T11480] EXT4-fs (loop0): mount failed [ 197.443214][T11486] pim6reg1: entered promiscuous mode [ 197.448711][T11486] pim6reg1: entered allmulticast mode [ 197.841436][T11503] veth0: entered promiscuous mode [ 197.855874][T11503] veth0 (unregistering): left promiscuous mode [ 197.954412][T11505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.984807][ C1] ================================================================== [ 197.993177][ C1] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 198.000200][ C1] [ 198.002519][ C1] read-write to 0xffff888237c29d64 of 4 bytes by task 3611 on cpu 0: [ 198.010591][ C1] wq_worker_running+0x95/0x120 [ 198.015448][ C1] schedule_timeout+0xb7/0x170 [ 198.020214][ C1] msleep+0x50/0x90 [ 198.024023][ C1] nsim_fib_event_work+0x1ebc/0x21a0 [ 198.029312][ C1] process_scheduled_works+0x4cb/0x9d0 [ 198.034777][ C1] worker_thread+0x582/0x770 [ 198.039635][ C1] kthread+0x489/0x510 [ 198.044152][ C1] ret_from_fork+0x11f/0x1b0 [ 198.048837][ C1] ret_from_fork_asm+0x1a/0x30 [ 198.053632][ C1] [ 198.055953][ C1] read to 0xffff888237c29d64 of 4 bytes by interrupt on cpu 1: [ 198.063838][ C1] kick_pool+0x49/0x2d0 [ 198.068010][ C1] __queue_work+0x8cb/0xb50 [ 198.072516][ C1] queue_work_on+0xd1/0x160 [ 198.077015][ C1] wg_packet_send_staged_packets+0x83d/0xab0 [ 198.083018][ C1] wg_packet_send_keepalive+0xeb/0x100 [ 198.088562][ C1] wg_expired_send_persistent_keepalive+0x3c/0x50 [ 198.095086][ C1] call_timer_fn+0x38/0x2c0 [ 198.099589][ C1] __run_timer_base+0x415/0x610 [ 198.104532][ C1] run_timer_softirq+0x31/0x70 [ 198.109304][ C1] handle_softirqs+0xb7/0x290 [ 198.113983][ C1] __irq_exit_rcu+0x3a/0xc0 [ 198.118483][ C1] sysvec_apic_timer_interrupt+0x74/0x80 [ 198.124140][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.130120][ C1] its_return_thunk+0x0/0x10 [ 198.134717][ C1] __rcu_read_lock+0x25/0x50 [ 198.139316][ C1] is_module_address+0xd/0x30 [ 198.144123][ C1] register_net_sysctl_sz+0x9e/0x1c0 [ 198.149438][ C1] __addrconf_sysctl_register+0x240/0x340 [ 198.155258][ C1] addrconf_init_net+0x315/0x450 [ 198.160219][ C1] ops_init+0x22a/0x2e0 [ 198.164383][ C1] setup_net+0x82/0x200 [ 198.168557][ C1] copy_net_ns+0x266/0x390 [ 198.172990][ C1] create_new_namespaces+0x20e/0x3d0 [ 198.178290][ C1] copy_namespaces+0x1ad/0x210 [ 198.183096][ C1] copy_process+0xd32/0x2000 [ 198.187689][ C1] kernel_clone+0x16c/0x5c0 [ 198.192331][ C1] __x64_sys_clone+0xe6/0x120 [ 198.197026][ C1] x64_sys_call+0x119c/0x2ff0 [ 198.201709][ C1] do_syscall_64+0xd2/0x200 [ 198.206237][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.212148][ C1] [ 198.214479][ C1] value changed: 0x00000000 -> 0x00000001 [ 198.220191][ C1] [ 198.222508][ C1] Reported by Kernel Concurrency Sanitizer on: [ 198.228660][ C1] CPU: 1 UID: 0 PID: 11508 Comm: syz.2.2888 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.238472][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 198.248620][ C1] ================================================================== [ 198.261105][T11505] vlan1: entered allmulticast mode [ 198.266321][T11505] bond1: entered allmulticast mode [ 198.356354][T11497] lo speed is unknown, defaulting to 1000 [ 198.399165][T11508] lo speed is unknown, defaulting to 1000 [ 198.405724][T11501] __nla_validate_parse: 7 callbacks suppressed [ 198.405744][T11501] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2886'. [ 198.998507][ T4935] dummy0: left promiscuous mode [ 199.003522][ T4935] bridge0: port 3(dummy0) entered disabled state [ 199.012630][ T4935] bridge_slave_1: left promiscuous mode [ 199.018513][ T4935] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.035805][ T4935] bridge_slave_0: left promiscuous mode [ 199.041627][ T4935] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.176726][ T4935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.186154][ T4935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.195711][ T4935] bond0 (unregistering): Released all slaves [ 199.204005][ T4935] bond1 (unregistering): Released all slaves [ 199.260202][ T4935] hsr_slave_0: left promiscuous mode [ 199.266148][ T4935] hsr_slave_1: left promiscuous mode [ 199.271985][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.279480][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.315245][ T4935] team0 (unregistering): Port device team_slave_1 removed [ 199.325473][ T4935] team0 (unregistering): Port device team_slave_0 removed [ 199.628829][ T4935] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.667642][ T4935] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.717390][ T4935] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.797448][ T4935] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.853497][ T4935] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.886222][ T4935] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.926755][ T4935] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.976324][ T4935] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.052113][ T4935] bridge_slave_1: left allmulticast mode [ 200.057845][ T4935] bridge_slave_1: left promiscuous mode [ 200.063563][ T4935] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.071670][ T4935] bridge_slave_0: left allmulticast mode [ 200.077416][ T4935] bridge_slave_0: left promiscuous mode [ 200.083120][ T4935] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.196427][ T4935] bond0 (unregistering): Released all slaves [ 200.456653][ T4935] bond0 (unregistering): Released all slaves [ 200.465124][ T4935] bond1 (unregistering): Released all slaves [ 200.497905][ T4935] tipc: Disabling bearer [ 200.502933][ T4935] tipc: Left network mode [ 200.511908][ T4935] hsr_slave_0: left promiscuous mode [ 200.517669][ T4935] hsr_slave_1: left promiscuous mode [ 200.526368][ T4935] hsr_slave_0: left promiscuous mode [ 200.532002][ T4935] hsr_slave_1: left promiscuous mode [ 200.537692][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.545288][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.553049][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.560546][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.573125][ T4935] veth1_macvtap: left promiscuous mode [ 200.578854][ T4935] veth0_macvtap: left promiscuous mode [ 200.584550][ T4935] veth1_vlan: left promiscuous mode [ 200.589933][ T4935] veth0_vlan: left promiscuous mode [ 200.595721][ T4935] veth1_macvtap: left promiscuous mode [ 200.601264][ T4935] veth0_macvtap: left promiscuous mode [ 200.607047][ T4935] veth1_vlan: left promiscuous mode [ 200.612285][ T4935] veth0_vlan: left promiscuous mode [ 200.757018][ T4935] team0 (unregistering): Port device team_slave_1 removed [ 200.767217][ T4935] team0 (unregistering): Port device team_slave_0 removed [ 201.767199][ T4953] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.816887][ T4953] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.876425][ T4953] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.926421][ T4953] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.246467][ T4953] bond0 (unregistering): Released all slaves [ 202.254894][ T4953] bond1 (unregistering): Released all slaves [ 202.326796][ T4953] tipc: Disabling bearer [ 202.331848][ T4953] tipc: Left network mode [ 202.341207][ T4953] veth1_macvtap: left promiscuous mode [ 202.346849][ T4953] veth0_macvtap: left promiscuous mode [ 202.352358][ T4953] veth1_vlan: left promiscuous mode [ 202.357795][ T4953] veth0_vlan: left promiscuous mode [ 202.445420][ T3611] infiniband syz1: ib_query_port failed (-19)