last executing test programs: 3m11.866792927s ago: executing program 32 (id=280): r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x80000000, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 1m12.690864641s ago: executing program 33 (id=6028): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008"], 0xe8}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001100050003000000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="02020000022001000c001a8008"], 0x2c}}, 0x880) 1m5.657516256s ago: executing program 34 (id=6341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 44.181382396s ago: executing program 35 (id=6613): socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x507, &(0x7f0000002700)="$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") 40.457757829s ago: executing program 8 (id=7006): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b", 0x33}], 0x1}, 0x20000880) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 40.421802503s ago: executing program 8 (id=7007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 40.378250537s ago: executing program 8 (id=7010): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 40.350839819s ago: executing program 8 (id=7012): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8002}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 40.240801531s ago: executing program 36 (id=7016): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x20) poll(&(0x7f0000000040)=[{r1, 0x29}], 0x1, 0x400) shutdown(r1, 0x0) 39.860047609s ago: executing program 37 (id=7019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x4, @perf_bp={0x0, 0x8}, 0x10a010, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 39.858869019s ago: executing program 8 (id=7020): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x10001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180), &(0x7f0000000200)=0x8) 39.667023438s ago: executing program 38 (id=7022): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty}, {0xa, 0x4e20, 0x101, @mcast2, 0x7}, 0xffffffffffffffff, 0x6}}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 38.587741666s ago: executing program 8 (id=7025): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r2) 38.587575136s ago: executing program 39 (id=7025): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r2) 18.932285654s ago: executing program 9 (id=7544): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_io_uring_setup(0x6f52, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f00000004c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r0, 0x1c39, 0x106a, 0x22, 0x0, 0x0) 18.904682507s ago: executing program 9 (id=7546): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_usb_disconnect(0xffffffffffffffff) lsm_set_self_attr(0x64, 0x0, 0x0, 0x20) 18.862108131s ago: executing program 6 (id=7550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 18.831735574s ago: executing program 6 (id=7553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) 18.811330706s ago: executing program 6 (id=7555): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)) 18.791732308s ago: executing program 6 (id=7558): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x90}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) 18.337328714s ago: executing program 2 (id=7583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7fff}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x44}}, 0x20004002) 18.336992434s ago: executing program 5 (id=7584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x4001, 0x3, 0x3a0, 0x230, 0x700001b, 0x148, 0x2000000, 0x148, 0x308, 0x206, 0x240, 0x308, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 18.307345667s ago: executing program 2 (id=7585): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@grpquota}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000001200)="$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") r0 = inotify_init() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) inotify_add_watch(r0, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x2) 18.237821604s ago: executing program 5 (id=7587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 18.183170469s ago: executing program 9 (id=7590): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 18.168599591s ago: executing program 2 (id=7591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) fcntl$notify(r2, 0x402, 0x8000003d) 18.167872031s ago: executing program 5 (id=7592): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x10040) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 18.104218237s ago: executing program 5 (id=7593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0xc004000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8004) 18.103828217s ago: executing program 2 (id=7594): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0x4000000000000000) 18.049754913s ago: executing program 9 (id=7596): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 18.036541774s ago: executing program 5 (id=7597): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$null(0xffffffffffffff9c, &(0x7f0000001900), 0xa0041, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 17.909054517s ago: executing program 6 (id=7599): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x20000000002}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0xfffd, 0x5}, 0x4) close(r2) 17.863091491s ago: executing program 9 (id=7600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) 17.661337081s ago: executing program 6 (id=7601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x200204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b0009008015b3fffeffe829020700ff1a04f03a98000000ffffffffffefffffffffffe7ee0004000000000000020c00", 0x58}], 0x1) 17.661106921s ago: executing program 40 (id=7601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x200204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b0009008015b3fffeffe829020700ff1a04f03a98000000ffffffffffefffffffffffe7ee0004000000000000020c00", 0x58}], 0x1) 17.622839005s ago: executing program 9 (id=7603): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0x5, 0x4) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/108, 0x6c}], 0x1) 17.622590795s ago: executing program 41 (id=7603): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0x5, 0x4) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/108, 0x6c}], 0x1) 16.847440353s ago: executing program 2 (id=7604): syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2800) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x8002, 0xfffffffffffffff7, 0x5, 0xfffffffffffffffd, 0x0, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x100040000, 0x7, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x15, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x0, 0x4, 0x9, 0x6, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x1000000000014, 0x5bc, 0x1, 0xa2, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0x0, 0xd, 0x22, 0xfffffffffffffffe, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x7, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x3, 0x7, 0x9, 0x1001, 0x16d, 0x6, 0x68e, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2200000003, 0x4, 0x7, 0x6, 0x5, 0x8, 0x805, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.846536183s ago: executing program 5 (id=7606): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 16.846430293s ago: executing program 42 (id=7606): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 16.27747659s ago: executing program 2 (id=7607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 16.27725031s ago: executing program 43 (id=7607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 503.9425ms ago: executing program 3 (id=8136): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) umount2(&(0x7f00000000c0)='./file0\x00', 0xa) 483.385312ms ago: executing program 4 (id=8138): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) 473.192652ms ago: executing program 3 (id=8139): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 454.081305ms ago: executing program 4 (id=8141): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000, 0x10001, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x1000, 0x74a9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x5, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0xc0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4cc, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xfffffffb, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x104, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x44800) 384.995452ms ago: executing program 0 (id=8143): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 366.769733ms ago: executing program 3 (id=8144): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') creat(&(0x7f0000000080)='./file0\x00', 0x6a) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 365.587083ms ago: executing program 0 (id=8156): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 365.113053ms ago: executing program 4 (id=8146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400400, 0x0, {{}, {0x0, 0x400b}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x48041}, 0x0) 332.759607ms ago: executing program 4 (id=8148): socket$nl_netfilter(0x10, 0x3, 0xc) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x4c0000001, 0x3) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 286.629522ms ago: executing program 7 (id=8152): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = getpgrp(0xffffffffffffffff) kcmp(r2, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 286.055942ms ago: executing program 0 (id=8154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 266.515143ms ago: executing program 0 (id=8157): bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r1, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 251.425195ms ago: executing program 4 (id=8158): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0xffffffff, @empty, 0x8005b}}, 0x105, 0xac, 0xf06, 0x0, 0x8d, 0x4, 0x1}, 0x9c) 241.432766ms ago: executing program 7 (id=8160): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000, 0x10001, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x1000, 0x74a9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x5, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0xc0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4cc, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xfffffffb, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x104, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x44800) 203.806669ms ago: executing program 1 (id=8161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 203.2889ms ago: executing program 7 (id=8162): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 183.120422ms ago: executing program 7 (id=8163): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 161.691754ms ago: executing program 1 (id=8164): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{') 160.478094ms ago: executing program 0 (id=8165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 146.925955ms ago: executing program 1 (id=8166): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0x297a, 0x40, 0x80003, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480), 0x66) 97.15321ms ago: executing program 1 (id=8167): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 96.8504ms ago: executing program 3 (id=8168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 59.051064ms ago: executing program 3 (id=8169): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = getpgrp(0xffffffffffffffff) kcmp(r2, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 58.781524ms ago: executing program 7 (id=8170): socket$nl_netfilter(0x10, 0x3, 0xc) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x4c0000001, 0x3) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 58.306004ms ago: executing program 1 (id=8171): bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r1, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 13.615049ms ago: executing program 1 (id=8172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0xd0) 12.472459ms ago: executing program 0 (id=8182): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 3.57039ms ago: executing program 4 (id=8173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) 942.08µs ago: executing program 3 (id=8174): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 0s ago: executing program 7 (id=8184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x228000, 0x1000, 0x0, 0x4}, 0x20) kernel console output (not intermixed with test programs): 74.220409][T19346] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6802'. [ 174.247578][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6802'. [ 174.256799][T19346] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6802'. [ 174.265928][T19346] netlink: 84 bytes leftover after parsing attributes in process `syz.7.6802'. [ 174.309449][ T5075] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.395755][T19364] loop0: detected capacity change from 0 to 512 [ 174.422070][T19364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.434747][T19364] ext4 filesystem being mounted at /1323/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.472183][T19364] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.6812: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 174.492661][T19364] EXT4-fs (loop0): Remounting filesystem read-only [ 174.510164][ T5075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.553299][T19376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.601461][T19382] loop7: detected capacity change from 0 to 128 [ 174.611634][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6819'. [ 174.632337][T19382] EXT4-fs: Ignoring removed nobh option [ 174.648925][T19382] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.668011][T19382] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.760178][T18243] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.802605][T19403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.814985][T19404] loop7: detected capacity change from 0 to 1024 [ 174.819988][T19401] loop4: detected capacity change from 0 to 512 [ 174.821830][T19403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.836009][T19404] EXT4-fs: inline encryption not supported [ 174.857364][T19404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.899437][T19401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.913340][T19401] ext4 filesystem being mounted at /1487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.952374][T19401] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.6826: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 174.953965][T19412] SELinux: Context system_u:object_r:restorecond_exec_t:s0 is not valid (left unmapped). [ 175.000666][T18243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.012873][T19401] EXT4-fs (loop4): Remounting filesystem read-only [ 175.042464][T19417] loop7: detected capacity change from 0 to 1024 [ 175.050540][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.061131][T19417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.123356][T18243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.124480][T19426] loop4: detected capacity change from 0 to 128 [ 175.138843][T19426] EXT4-fs: Ignoring removed nobh option [ 175.149202][T19426] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.171638][T19426] ext4 filesystem being mounted at /1490/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.272498][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.308135][T19436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.316802][T19436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.579997][T19451] loop6: detected capacity change from 0 to 512 [ 175.591014][T19451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.603724][T19451] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.637740][T19451] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.6845: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 175.657823][T19451] EXT4-fs (loop6): Remounting filesystem read-only [ 175.674905][T17515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.702617][T19455] loop6: detected capacity change from 0 to 764 [ 175.709906][T19455] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 175.720544][T19455] Symlink component flag not implemented [ 175.726595][T19455] Symlink component flag not implemented (7) [ 175.754621][T19457] bridge0: entered promiscuous mode [ 175.759933][T19457] macsec1: entered promiscuous mode [ 175.766309][T19457] bridge0: port 3(macsec1) entered blocking state [ 175.772786][T19457] bridge0: port 3(macsec1) entered disabled state [ 175.779389][T19457] macsec1: entered allmulticast mode [ 175.784756][T19457] bridge0: entered allmulticast mode [ 175.790580][T19457] macsec1: left allmulticast mode [ 175.795597][T19457] bridge0: left allmulticast mode [ 175.801143][T19457] bridge0: left promiscuous mode [ 175.964953][T19476] ip6gretap0: entered promiscuous mode [ 175.984275][T19476] ip6gretap0: left promiscuous mode [ 183.945662][T19552] __nla_validate_parse: 13 callbacks suppressed [ 183.945679][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6899'. [ 183.985484][T19555] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6891'. [ 183.989343][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 183.989356][ T29] audit: type=1400 audit(1763125776.407:8040): avc: denied { mounton } for pid=19558 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 184.048040][T19563] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6896'. [ 184.060641][ T29] audit: type=1400 audit(1763125776.487:8041): avc: denied { connect } for pid=19564 comm="syz.7.6897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.081893][ T29] audit: type=1400 audit(1763125776.487:8042): avc: denied { setopt } for pid=19564 comm="syz.7.6897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.135467][T19571] loop6: detected capacity change from 0 to 128 [ 184.155605][ T29] audit: type=1326 audit(1763125776.527:8043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.0.6898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f739498f6c9 code=0x0 [ 184.178596][ T29] audit: type=1400 audit(1763125776.557:8044): avc: denied { create } for pid=19575 comm="syz.7.6902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.198667][ T29] audit: type=1400 audit(1763125776.567:8045): avc: denied { bind } for pid=19575 comm="syz.7.6902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.218490][ T29] audit: type=1400 audit(1763125776.577:8046): avc: denied { setopt } for pid=19575 comm="syz.7.6902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.238464][ T29] audit: type=1400 audit(1763125776.577:8047): avc: denied { write } for pid=19575 comm="syz.7.6902" path="socket:[56247]" dev="sockfs" ino=56247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.269075][ T29] audit: type=1400 audit(1763125776.677:8048): avc: denied { mount } for pid=19570 comm="syz.6.6901" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 184.304704][T19558] lo speed is unknown, defaulting to 1000 [ 184.310687][T19584] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 184.318498][T19584] FAT-fs (loop6): Filesystem has been set read-only [ 184.344629][T19584] syz.6.6901: attempt to access beyond end of device [ 184.344629][T19584] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 184.358605][T19584] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 184.366427][T19584] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 184.376091][T19584] syz.6.6901: attempt to access beyond end of device [ 184.376091][T19584] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 184.391254][T19584] syz.6.6901: attempt to access beyond end of device [ 184.391254][T19584] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 184.391379][ T29] audit: type=1400 audit(1763125776.817:8049): avc: denied { listen } for pid=19587 comm="syz.7.6905" lport=34449 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 184.405324][T19584] syz.6.6901: attempt to access beyond end of device [ 184.405324][T19584] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 184.443894][T19584] syz.6.6901: attempt to access beyond end of device [ 184.443894][T19584] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 184.468636][T19584] syz.6.6901: attempt to access beyond end of device [ 184.468636][T19584] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 184.482172][T19584] syz.6.6901: attempt to access beyond end of device [ 184.482172][T19584] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 184.496679][T19584] syz.6.6901: attempt to access beyond end of device [ 184.496679][T19584] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 184.510896][T19584] syz.6.6901: attempt to access beyond end of device [ 184.510896][T19584] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 184.543015][T19584] syz.6.6901: attempt to access beyond end of device [ 184.543015][T19584] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 184.544189][T19558] chnl_net:caif_netlink_parms(): no params data found [ 184.578055][T19590] loop7: detected capacity change from 0 to 512 [ 184.607876][T19590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.620862][T19590] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.634915][T19590] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.6906: bg 0: block 18: invalid block bitmap [ 184.653390][T19558] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.660487][T19558] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.683280][T19558] bridge_slave_0: entered allmulticast mode [ 184.705063][T19610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6911'. [ 184.717629][T18243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.727091][T19558] bridge_slave_0: entered promiscuous mode [ 184.741815][T19558] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.748896][T19558] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.763935][T19558] bridge_slave_1: entered allmulticast mode [ 184.769237][T19612] loop7: detected capacity change from 0 to 1024 [ 184.772943][T19558] bridge_slave_1: entered promiscuous mode [ 184.802052][T19558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.828531][T19558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.840114][T19612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.863874][T19558] team0: Port device team_slave_0 added [ 184.879305][T19558] team0: Port device team_slave_1 added [ 184.892927][T19612] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: comm syz.7.6912: inode #7: comm syz.7.6912: iget: illegal inode # [ 184.943354][T19612] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.6912: error while reading EA inode 7 err=-117 [ 184.983337][T19558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.990414][T19558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.016527][T19558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.042177][T19558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.049201][T19558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.075239][T19558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.108064][T18243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.144806][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6919'. [ 185.147136][T19558] hsr_slave_0: entered promiscuous mode [ 185.160845][T19558] hsr_slave_1: entered promiscuous mode [ 185.167978][T19558] debugfs: 'hsr0' already exists in 'hsr' [ 185.173835][T19558] Cannot create hsr debugfs directory [ 185.335473][T19558] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 185.347626][T19558] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 185.369585][T19558] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 185.401543][T19558] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 185.434195][T19660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6931'. [ 185.514449][T19558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.543579][T19558] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.558843][T13594] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.565914][T13594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.606328][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.613392][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.684930][T19681] loop0: detected capacity change from 0 to 128 [ 185.758618][T19558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.914080][T19705] loop0: detected capacity change from 0 to 2048 [ 185.932778][T19705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 186.058979][T19558] veth0_vlan: entered promiscuous mode [ 186.082090][T19558] veth1_vlan: entered promiscuous mode [ 186.101311][T19558] veth0_macvtap: entered promiscuous mode [ 186.108372][T19558] veth1_macvtap: entered promiscuous mode [ 186.119890][T19558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.139525][T19558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.153438][T13588] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.170061][T13588] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.178757][T13588] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.218708][T19737] loop7: detected capacity change from 0 to 164 [ 186.225447][T13588] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.286692][T19749] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6961'. [ 186.455883][T19705] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 186.480540][T19765] loop6: detected capacity change from 0 to 8192 [ 186.489607][T19705] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 186.502337][T19705] EXT4-fs (loop0): This should not happen!! Data will be lost [ 186.502337][T19705] [ 186.512076][T19705] EXT4-fs (loop0): Total free blocks count 0 [ 186.518046][T19705] EXT4-fs (loop0): Free/Dirty block details [ 186.524074][T19705] EXT4-fs (loop0): free_blocks=2415919104 [ 186.529817][T19705] EXT4-fs (loop0): dirty_blocks=8208 [ 186.535110][T19705] EXT4-fs (loop0): Block reservation details [ 186.541097][T19705] EXT4-fs (loop0): i_reserved_data_blocks=513 [ 186.559966][T19765] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.626118][T19722] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 187.262530][ T3409] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.269984][ T3409] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.277350][ T3409] hid-generic 0000:0000:0000.000A: unknown main item tag 0x2 [ 187.284735][ T3409] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.292196][ T3409] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.299594][ T3409] hid-generic 0000:0000:0000.000A: unknown main item tag 0x2 [ 187.306992][ T3409] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.314399][ T3409] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.321830][ T3409] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.329246][ T3409] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.337357][ T3409] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 187.422747][T19823] xt_hashlimit: max too large, truncated to 1048576 [ 187.495553][T19832] loop8: detected capacity change from 0 to 128 [ 187.636031][T19852] C: renamed from team_slave_0 (while UP) [ 187.643322][T19852] netlink: 164 bytes leftover after parsing attributes in process `syz.8.7006'. [ 187.675558][T19856] loop0: detected capacity change from 0 to 512 [ 187.675756][T19854] IPv6: Can't replace route, no match found [ 187.689409][T19856] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 187.702210][T19856] EXT4-fs (loop0): invalid journal inode [ 187.708290][T19856] EXT4-fs (loop0): can't get journal size [ 187.715611][T19856] EXT4-fs (loop0): 1 truncate cleaned up [ 188.310931][T13623] bond0 (unregistering): Released all slaves [ 188.381375][T13623] tipc: Disabling bearer [ 188.391375][T13623] tipc: Left network mode [ 188.436070][T13623] hsr_slave_0: left promiscuous mode [ 188.442009][T13623] hsr_slave_1: left promiscuous mode [ 188.450896][T13623] pimreg (unregistering): left allmulticast mode [ 188.501079][T13623] lo (unregistering): left allmulticast mode [ 188.691374][T13623] IPVS: stop unused estimator thread 0... [ 188.741965][T13623] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.791515][T13623] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.851018][T13623] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.891171][T13623] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.950584][T13623] bridge_slave_1: left allmulticast mode [ 188.956281][T13623] bridge_slave_1: left promiscuous mode [ 188.961921][T13623] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.969529][T13623] bridge_slave_0: left allmulticast mode [ 188.975142][T13623] bridge_slave_0: left promiscuous mode [ 188.980891][T13623] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.077299][T13623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.096239][T13623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.106035][T13623] bond0 (unregistering): Released all slaves [ 189.114509][T19897] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7023'. [ 189.125162][T19904] netlink: 'syz.6.7023': attribute type 12 has an invalid length. [ 189.132989][T19904] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7023'. [ 189.196320][T19900] lo speed is unknown, defaulting to 1000 [ 189.211729][T13623] hsr_slave_0: left promiscuous mode [ 189.217309][T13623] hsr_slave_1: left promiscuous mode [ 189.223887][T13623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.231306][T13623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.238850][T13623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.246355][T13623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.256146][T13623] veth1_macvtap: left promiscuous mode [ 189.261614][T13623] veth0_macvtap: left promiscuous mode [ 189.267141][T13623] veth1_vlan: left promiscuous mode [ 189.272464][T13623] veth0_vlan: left promiscuous mode [ 189.325518][T13623] team0 (unregistering): Port device team_slave_1 removed [ 189.334617][T13623] team0 (unregistering): Port device team_slave_0 removed [ 189.370001][T19898] lo speed is unknown, defaulting to 1000 [ 189.450038][T19900] chnl_net:caif_netlink_parms(): no params data found [ 189.505620][T19900] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.512759][T19900] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.520262][T19900] bridge_slave_0: entered allmulticast mode [ 189.521721][T19925] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7024'. [ 189.526740][T19900] bridge_slave_0: entered promiscuous mode [ 189.573766][T19900] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.580987][T19900] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.594395][T19900] bridge_slave_1: entered allmulticast mode [ 189.601180][T19900] bridge_slave_1: entered promiscuous mode [ 189.627465][T19898] chnl_net:caif_netlink_parms(): no params data found [ 189.655790][T19900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.666091][T19900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.705883][T19900] team0: Port device team_slave_0 added [ 189.712476][T19900] team0: Port device team_slave_1 added [ 189.723559][T19898] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.730724][T19898] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.738698][T19898] bridge_slave_0: entered allmulticast mode [ 189.745250][T19898] bridge_slave_0: entered promiscuous mode [ 189.763658][T19898] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.770712][T19898] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.777761][T19898] bridge_slave_1: entered allmulticast mode [ 189.784208][T19898] bridge_slave_1: entered promiscuous mode [ 189.790531][T19900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.797456][T19900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.823343][T19900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.834007][T19927] lo speed is unknown, defaulting to 1000 [ 189.834411][T19900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.846665][T19900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.872718][T19900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.892533][T13623] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.913237][T19898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.928415][T19931] lo speed is unknown, defaulting to 1000 [ 189.938843][T19898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.955487][T13623] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.983754][T19900] hsr_slave_0: entered promiscuous mode [ 189.991082][T19900] hsr_slave_1: entered promiscuous mode [ 190.004312][T19898] team0: Port device team_slave_0 added [ 190.016740][T19898] team0: Port device team_slave_1 added [ 190.034965][T13623] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.066681][T19898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.073638][T19898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.099563][T19898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.119930][T13623] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.131075][T19898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.138068][T19898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.163954][T19898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.232836][T19898] hsr_slave_0: entered promiscuous mode [ 190.238798][T19898] hsr_slave_1: entered promiscuous mode [ 190.244627][T19898] debugfs: 'hsr0' already exists in 'hsr' [ 190.250388][T19898] Cannot create hsr debugfs directory [ 190.285633][T19900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.329494][T13623] bridge_slave_1: left allmulticast mode [ 190.335138][T13623] bridge_slave_1: left promiscuous mode [ 190.340836][T13623] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.349984][T13623] bridge_slave_0: left allmulticast mode [ 190.355677][T13623] bridge_slave_0: left promiscuous mode [ 190.361291][T13623] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.421875][T13623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.431817][T13623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.441138][T13623] bond0 (unregistering): Released all slaves [ 190.461957][T19900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.481057][T19927] chnl_net:caif_netlink_parms(): no params data found [ 190.507047][T19931] chnl_net:caif_netlink_parms(): no params data found [ 190.561488][T19900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.573968][T13623] hsr_slave_0: left promiscuous mode [ 190.579616][T13623] hsr_slave_1: left promiscuous mode [ 190.585105][T13623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.592468][T13623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.599847][T13623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.607210][T13623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.617788][T13623] veth1_macvtap: left promiscuous mode [ 190.624005][T13623] veth0_macvtap: left promiscuous mode [ 190.630307][T13623] veth1_vlan: left promiscuous mode [ 190.635538][T13623] veth0_vlan: left promiscuous mode [ 190.702315][T13623] team0 (unregistering): Port device team_slave_1 removed [ 190.711989][T13623] team0 (unregistering): Port device C removed [ 190.757831][T19900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.802805][T19931] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.809988][T19931] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.829194][T19931] bridge_slave_0: entered allmulticast mode [ 190.835663][T19931] bridge_slave_0: entered promiscuous mode [ 190.842362][T19927] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.849458][T19927] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.856580][T19927] bridge_slave_0: entered allmulticast mode [ 190.863017][T19927] bridge_slave_0: entered promiscuous mode [ 190.869597][T19931] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.876648][T19931] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.883787][T19931] bridge_slave_1: entered allmulticast mode [ 190.890326][T19931] bridge_slave_1: entered promiscuous mode [ 190.896486][T19927] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.903706][T19927] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.910835][T19927] bridge_slave_1: entered allmulticast mode [ 190.917418][T19927] bridge_slave_1: entered promiscuous mode [ 190.946130][T19931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.956986][T19927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.968731][T19931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.990679][T19927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.000916][T19931] team0: Port device team_slave_0 added [ 191.007268][T19931] team0: Port device team_slave_1 added [ 191.029949][T19927] team0: Port device team_slave_0 added [ 191.036880][T19927] team0: Port device team_slave_1 added [ 191.062195][T19931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.066014][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 191.066028][ T29] audit: type=1400 audit(191.044:8118): avc: denied { bind } for pid=19984 comm="syz.6.7038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 191.069186][T19931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.069213][T19931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.069875][T19927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.076589][T19985] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7038'. [ 191.095175][T19927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.173438][T19927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.184782][T19927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.191785][T19927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.217674][T19927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.228736][T19931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.235772][T19931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.261726][T19931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.298706][T19927] hsr_slave_0: entered promiscuous mode [ 191.304814][T19927] hsr_slave_1: entered promiscuous mode [ 191.310740][T19927] debugfs: 'hsr0' already exists in 'hsr' [ 191.316445][T19927] Cannot create hsr debugfs directory [ 191.333477][T19931] hsr_slave_0: entered promiscuous mode [ 191.339744][T19931] hsr_slave_1: entered promiscuous mode [ 191.345895][T19931] debugfs: 'hsr0' already exists in 'hsr' [ 191.351639][T19931] Cannot create hsr debugfs directory [ 191.435053][ T29] audit: type=1400 audit(191.414:8119): avc: denied { create } for pid=19997 comm="syz.6.7042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 191.451957][T19998] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7042'. [ 191.463003][T19998] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7042'. [ 191.472587][T19998] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 191.501525][T19898] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.513436][T19898] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.527926][T19898] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.536886][T19898] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.551300][T19900] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.560785][T19900] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.569841][T19900] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.579824][T19900] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.634470][T19900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.644770][T19898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.663080][T19900] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.671215][T19898] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.681118][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.688202][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.696597][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.703629][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.716389][T13623] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.723459][T13623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.733730][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.740783][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.771793][T19900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.782235][T19900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.811628][T19898] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.822006][T19898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.850379][T19927] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.871069][T19927] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.880984][T19931] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 191.891419][T19927] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.901088][T19931] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 191.910083][T19931] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 191.918477][T19931] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 191.928221][T19927] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.944933][T19900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.965202][T19898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.032621][T19927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.076519][T19900] veth0_vlan: entered promiscuous mode [ 192.086590][T19927] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.095608][T19931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.116773][T19898] veth0_vlan: entered promiscuous mode [ 192.126723][T19900] veth1_vlan: entered promiscuous mode [ 192.132395][T20050] loop6: detected capacity change from 0 to 1024 [ 192.137508][T19898] veth1_vlan: entered promiscuous mode [ 192.138946][T20050] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.148234][T19931] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.160377][T13626] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.167439][T13626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.176046][T13626] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.181027][T20050] EXT4-fs mount: 2 callbacks suppressed [ 192.181040][T20050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.183091][T13626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.200098][T20050] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 192.215711][T19898] veth0_macvtap: entered promiscuous mode [ 192.231951][T19900] veth0_macvtap: entered promiscuous mode [ 192.243475][T13626] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.250522][T13626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.260580][T17515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.261299][T13626] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.276613][T13626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.287423][T20055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7047'. [ 192.296429][T19927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.306811][T19927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.333310][T19900] veth1_macvtap: entered promiscuous mode [ 192.346677][T19898] veth1_macvtap: entered promiscuous mode [ 192.373221][T19898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.383977][T19931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.394345][T19931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.409698][T19900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.424837][T19898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.435086][T19900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.442467][T20062] loop6: detected capacity change from 0 to 128 [ 192.467934][T13626] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.504079][T13588] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.520329][T19927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.527674][T20068] bio_check_eod: 16155 callbacks suppressed [ 192.527685][T20068] syz.6.7048: attempt to access beyond end of device [ 192.527685][T20068] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 192.555633][T13588] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.572473][T20068] syz.6.7048: attempt to access beyond end of device [ 192.572473][T20068] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 192.576245][ T29] audit: type=1326 audit(192.554:8120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.2.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c1cef6c9 code=0x7ffc0000 [ 192.585829][T20068] syz.6.7048: attempt to access beyond end of device [ 192.585829][T20068] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 192.608501][ T29] audit: type=1326 audit(192.554:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.2.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82c1cef6c9 code=0x7ffc0000 [ 192.621751][T20068] syz.6.7048: attempt to access beyond end of device [ 192.621751][T20068] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 192.644419][ T29] audit: type=1326 audit(192.554:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.2.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c1cef6c9 code=0x7ffc0000 [ 192.680639][ T29] audit: type=1326 audit(192.554:8123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.2.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c1cef6c9 code=0x7ffc0000 [ 192.688503][T19931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.703565][ T29] audit: type=1326 audit(192.554:8124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.2.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82c1cef6c9 code=0x7ffc0000 [ 192.734859][T20068] syz.6.7048: attempt to access beyond end of device [ 192.734859][T20068] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 192.737528][ T29] audit: type=1326 audit(192.644:8125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.2.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c1cef6c9 code=0x7ffc0000 [ 192.771017][ T29] audit: type=1326 audit(192.644:8126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.2.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c1cef6c9 code=0x7ffc0000 [ 192.793972][ T29] audit: type=1326 audit(192.644:8127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20073 comm="syz.2.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82c1cef6c9 code=0x7ffc0000 [ 192.793964][T20068] syz.6.7048: attempt to access beyond end of device [ 192.793964][T20068] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 192.830708][T13588] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.868838][T13588] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.881671][T13588] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.891129][T13588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.916063][T13588] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.939187][T20068] syz.6.7048: attempt to access beyond end of device [ 192.939187][T20068] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 192.979095][T20068] syz.6.7048: attempt to access beyond end of device [ 192.979095][T20068] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 192.997726][T20068] syz.6.7048: attempt to access beyond end of device [ 192.997726][T20068] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 193.002879][T19927] veth0_vlan: entered promiscuous mode [ 193.016369][T20068] syz.6.7048: attempt to access beyond end of device [ 193.016369][T20068] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 193.045494][T19927] veth1_vlan: entered promiscuous mode [ 193.052669][T20095] loop2: detected capacity change from 0 to 2048 [ 193.078577][T19927] veth0_macvtap: entered promiscuous mode [ 193.102577][T20095] loop2: p1 < > p4 [ 193.106893][T20095] loop2: p4 size 8388608 extends beyond EOD, truncated [ 193.111057][T19927] veth1_macvtap: entered promiscuous mode [ 193.158564][T19927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.193730][T19927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.225956][T19931] veth0_vlan: entered promiscuous mode [ 193.255901][T13615] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.272144][T19931] veth1_vlan: entered promiscuous mode [ 193.289916][T19931] veth0_macvtap: entered promiscuous mode [ 193.304125][T13615] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.337453][T13615] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.346679][T19931] veth1_macvtap: entered promiscuous mode [ 193.364560][T20117] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20117 comm=syz.5.7026 [ 193.377115][T20117] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20117 comm=syz.5.7026 [ 193.380489][T19931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.396898][T13615] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.429894][T20119] lo speed is unknown, defaulting to 1000 [ 193.433454][T20121] netlink: 'syz.6.7058': attribute type 3 has an invalid length. [ 193.437973][T19931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.483885][T13617] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.524192][T13617] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.536952][T20126] loop5: detected capacity change from 0 to 128 [ 193.555378][ T31] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.577229][T20122] loop2: detected capacity change from 0 to 8192 [ 193.592547][ T31] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.834383][T20154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7072'. [ 193.859197][T20156] IPv6: Can't replace route, no match found [ 194.231238][T20206] loop2: detected capacity change from 0 to 512 [ 194.240960][T20206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.267701][T19898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.288368][T20213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7096'. [ 194.297871][T20213] IPVS: Error connecting to the multicast addr [ 194.351099][T20221] lo speed is unknown, defaulting to 1000 [ 194.647992][T20241] netlink: 'syz.6.7109': attribute type 1 has an invalid length. [ 194.716309][T20251] loop6: detected capacity change from 0 to 512 [ 194.724191][T20251] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 194.735698][T20251] EXT4-fs (loop6): 1 truncate cleaned up [ 194.742336][T20251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.783651][T20258] loop1: detected capacity change from 0 to 1024 [ 194.791076][T20258] journal_path: Non-blockdev passed as './file0' [ 194.797426][T20258] EXT4-fs: error: could not find journal device path [ 194.809699][T17515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.822150][T20262] loop2: detected capacity change from 0 to 4096 [ 194.828847][T20262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.854398][T20262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.152235][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7135'. [ 195.161231][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7135'. [ 195.384857][T19898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.482123][T20323] lo speed is unknown, defaulting to 1000 [ 195.864342][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7153'. [ 195.873276][T20345] netlink: 'syz.2.7153': attribute type 2 has an invalid length. [ 195.910843][T20349] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7155'. [ 196.045513][T20357] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 196.129692][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 196.129708][ T29] audit: type=1326 audit(196.114:8245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20374 comm="syz.5.7167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ee7cf6c9 code=0x7ffc0000 [ 196.179874][ T29] audit: type=1326 audit(196.114:8246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20374 comm="syz.5.7167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ee7cf6c9 code=0x7ffc0000 [ 196.202836][ T29] audit: type=1326 audit(196.114:8247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20374 comm="syz.5.7167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f63ee7cf6c9 code=0x7ffc0000 [ 196.225743][ T29] audit: type=1326 audit(196.114:8248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20374 comm="syz.5.7167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ee7cf6c9 code=0x7ffc0000 [ 196.250194][ T29] audit: type=1326 audit(196.164:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20374 comm="syz.5.7167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ee7cf6c9 code=0x7ffc0000 [ 196.279351][T20386] netdevsim netdevsim5: Direct firmware load for r failed with error -2 [ 196.287811][T20377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7169'. [ 196.292678][ T29] audit: type=1400 audit(196.274:8250): avc: denied { write } for pid=20388 comm="syz.6.7174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 196.296796][T20377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7169'. [ 196.380856][ T29] audit: type=1400 audit(196.364:8251): avc: denied { mounton } for pid=20395 comm="syz.1.7178" path="/proc/50/task" dev="proc" ino=61099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 196.407772][ T29] audit: type=1400 audit(196.384:8252): avc: denied { setopt } for pid=20390 comm="syz.6.7175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.439267][T20401] loop2: detected capacity change from 0 to 256 [ 196.445332][ T29] audit: type=1400 audit(196.414:8253): avc: denied { relabelfrom } for pid=20398 comm="syz.5.7179" name="" dev="pipefs" ino=61109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 196.564012][ T29] audit: type=1326 audit(196.544:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20422 comm="syz.6.7189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2078faf6c9 code=0x7ffc0000 [ 196.619308][T20416] lo speed is unknown, defaulting to 1000 [ 196.709874][T20441] loop6: detected capacity change from 0 to 1024 [ 196.728354][T20441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.764052][T20451] loop1: detected capacity change from 0 to 512 [ 196.784582][T17515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 196.798876][T20451] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.7200: bad orphan inode 13 [ 196.811201][T20451] ext4_test_bit(bit=12, block=4) = 1 [ 196.816499][T20451] is_bad_inode(inode)=0 [ 196.820778][T20451] NEXT_ORPHAN(inode)=0 [ 196.824837][T20451] max_ino=32 [ 196.828018][T20451] i_nlink=1 [ 196.831873][T20451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.848875][T20451] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.7200: Unrecognised inode hash code 20 [ 196.860365][T20451] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.7200: Corrupt directory, running e2fsck is recommended [ 196.941805][T20462] netlink: 'syz.2.7206': attribute type 4 has an invalid length. [ 196.954229][T20462] netlink: 'syz.2.7206': attribute type 4 has an invalid length. [ 196.970222][T19900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.015080][T20469] loop2: detected capacity change from 0 to 164 [ 197.033602][T20473] loop1: detected capacity change from 0 to 128 [ 197.043612][T20473] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 197.051485][T20473] FAT-fs (loop1): Filesystem has been set read-only [ 197.058349][T20473] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 197.066415][T20473] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 197.165751][T20479] ip6erspan0: entered promiscuous mode [ 197.220777][T20481] loop9: detected capacity change from 0 to 128 [ 197.237545][T20481] Buffer I/O error on dev loop9, logical block 2078, async page read [ 197.257756][T20481] Buffer I/O error on dev loop9, logical block 2078, async page read [ 197.274690][T20481] Buffer I/O error on dev loop9, logical block 2078, async page read [ 197.289045][T20481] Buffer I/O error on dev loop9, logical block 2078, async page read [ 197.297218][T20481] Buffer I/O error on dev loop9, logical block 2078, async page read [ 197.317500][T20481] Buffer I/O error on dev loop9, logical block 2078, async page read [ 197.329033][T20481] Buffer I/O error on dev loop9, logical block 2078, async page read [ 197.337186][T20481] Buffer I/O error on dev loop9, logical block 2078, async page read [ 197.355607][T20481] Buffer I/O error on dev loop9, logical block 2078, async page read [ 197.369066][T20481] Buffer I/O error on dev loop9, logical block 2078, async page read [ 197.385544][T20499] program syz.2.7223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.397602][T20497] loop5: detected capacity change from 0 to 2048 [ 197.405145][T20499] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 197.415015][T20497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 197.435049][T20497] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 197.457951][T20497] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 13 with max blocks 1 with error 28 [ 197.461306][T20503] loop2: detected capacity change from 0 to 256 [ 197.470369][T20497] EXT4-fs (loop5): This should not happen!! Data will be lost [ 197.470369][T20497] [ 197.486232][T20497] EXT4-fs (loop5): Total free blocks count 0 [ 197.492225][T20497] EXT4-fs (loop5): Free/Dirty block details [ 197.498106][T20497] EXT4-fs (loop5): free_blocks=2415919104 [ 197.503864][T20497] EXT4-fs (loop5): dirty_blocks=16 [ 197.508968][T20497] EXT4-fs (loop5): Block reservation details [ 197.514956][T20497] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 197.519257][T20503] FAT-fs (loop2): codepage cp950 not found [ 197.527044][T20504] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 14 with error 28 [ 197.539315][T20481] bio_check_eod: 11352 callbacks suppressed [ 197.539340][T20481] syz.9.7214: attempt to access beyond end of device [ 197.539340][T20481] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 197.539449][T20481] syz.9.7214: attempt to access beyond end of device [ 197.539449][T20481] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 197.539486][T20481] syz.9.7214: attempt to access beyond end of device [ 197.539486][T20481] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 197.539594][T20481] syz.9.7214: attempt to access beyond end of device [ 197.539594][T20481] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 197.539629][T20481] syz.9.7214: attempt to access beyond end of device [ 197.539629][T20481] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 197.539742][T20481] syz.9.7214: attempt to access beyond end of device [ 197.539742][T20481] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 197.539776][T20481] syz.9.7214: attempt to access beyond end of device [ 197.539776][T20481] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 197.539811][T20481] syz.9.7214: attempt to access beyond end of device [ 197.539811][T20481] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 197.546679][T20473] syz.1.7210: attempt to access beyond end of device [ 197.546679][T20473] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.572196][T20481] syz.9.7214: attempt to access beyond end of device [ 197.572196][T20481] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 198.004054][T20539] loop6: detected capacity change from 0 to 128 [ 198.270546][T20535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.359207][T20535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.137271][T20567] netlink: 'syz.6.7254': attribute type 1 has an invalid length. [ 199.146592][ T3409] hid_parser_main: 30 callbacks suppressed [ 199.146608][ T3409] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 199.159908][ T3409] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 199.164910][T20567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.167285][ T3409] hid-generic 0000:0000:0000.000B: unknown main item tag 0x2 [ 199.181251][ T3409] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 199.188671][ T3409] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 199.189518][T20567] bond1: (slave geneve2): making interface the new active one [ 199.196067][ T3409] hid-generic 0000:0000:0000.000B: unknown main item tag 0x2 [ 199.205006][T20567] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 199.210896][ T3409] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 199.226814][ T3409] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 199.234241][ T3409] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 199.241651][ T3409] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 199.286555][ T3409] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 199.301318][T13603] Bluetooth: hci0: Frame reassembly failed (-84) [ 199.335332][T20585] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7263'. [ 199.344419][ C1] vcan0: j1939_tp_rxtimer: 0xffff888116d47a00: rx timeout, send abort [ 199.346858][T20587] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7264'. [ 199.361909][T20585] IPVS: Error connecting to the multicast addr [ 199.371464][T20587] netlink: 'syz.5.7264': attribute type 12 has an invalid length. [ 199.379532][T20587] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7264'. [ 199.747208][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7285'. [ 199.756197][T20641] netlink: 'syz.6.7285': attribute type 2 has an invalid length. [ 199.796302][T20646] loop6: detected capacity change from 0 to 4096 [ 199.802931][T20646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.811566][T20646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.816824][T20649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7288'. [ 199.833154][T20649] IPVS: Error connecting to the multicast addr [ 199.836062][ C1] vcan0: j1939_tp_rxtimer: 0xffff888116d46e00: rx timeout, send abort [ 199.847586][ C1] vcan0: j1939_tp_rxtimer: 0xffff888116d47a00: abort rx timeout. Force session deactivation [ 199.998855][T17515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.019728][T20660] netlink: 'syz.6.7290': attribute type 4 has an invalid length. [ 200.031527][T20660] netlink: 'syz.6.7290': attribute type 4 has an invalid length. [ 200.143305][T20668] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 200.347554][ C1] vcan0: j1939_tp_rxtimer: 0xffff888116d46e00: abort rx timeout. Force session deactivation [ 200.365959][T20676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.374458][T20676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.413112][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7300'. [ 200.422049][T20681] netlink: 'syz.5.7300': attribute type 2 has an invalid length. [ 200.898898][T20689] netdevsim netdevsim6: Direct firmware load for r failed with error -2 [ 200.911218][T20687] loop5: detected capacity change from 0 to 4096 [ 200.918233][T20687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.926307][T20687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.056484][T20694] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7317'. [ 201.105009][T20698] lo speed is unknown, defaulting to 1000 [ 201.105822][T19927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.132732][ C1] vcan0: j1939_tp_rxtimer: 0xffff888101244c00: rx timeout, send abort [ 201.157102][T20703] netlink: 'syz.5.7307': attribute type 4 has an invalid length. [ 201.177091][T20703] netlink: 'syz.5.7307': attribute type 4 has an invalid length. [ 201.216867][T20710] lo speed is unknown, defaulting to 1000 [ 201.230766][T20705] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 201.379101][ T3627] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 201.379266][ T5481] Bluetooth: hci0: command 0x1003 tx timeout [ 201.476217][T20738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7322'. [ 201.569224][T20741] loop1: detected capacity change from 0 to 128 [ 201.637920][T20744] lo speed is unknown, defaulting to 1000 [ 201.640964][ C1] vcan0: j1939_tp_rxtimer: 0xffff888101244c00: abort rx timeout. Force session deactivation [ 201.694503][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 201.694518][ T29] audit: type=1326 audit(201.671:8359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.9.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9aa5f6c9 code=0x7ffc0000 [ 201.723756][ T29] audit: type=1326 audit(201.671:8360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.9.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9aa5f6c9 code=0x7ffc0000 [ 201.758870][ T29] audit: type=1326 audit(201.731:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.9.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f2f9aa5f6c9 code=0x7ffc0000 [ 201.781873][ T29] audit: type=1326 audit(201.731:8362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.9.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9aa5f6c9 code=0x7ffc0000 [ 201.804779][ T29] audit: type=1326 audit(201.731:8363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.9.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9aa5f6c9 code=0x7ffc0000 [ 201.854741][T20750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7328'. [ 201.913949][T20753] loop9: detected capacity change from 0 to 512 [ 201.947278][T20753] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.7331: bad orphan inode 13 [ 201.996927][T19671] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.003768][T20753] ext4_test_bit(bit=12, block=4) = 1 [ 202.009084][T20753] is_bad_inode(inode)=0 [ 202.013231][T20753] NEXT_ORPHAN(inode)=0 [ 202.017317][T20753] max_ino=32 [ 202.020538][T20753] i_nlink=1 [ 202.073436][T20753] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.094882][T20753] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.7331: Unrecognised inode hash code 20 [ 202.106397][T20753] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.7331: Corrupt directory, running e2fsck is recommended [ 202.139435][T19931] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.213555][T20770] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7337'. [ 202.216024][T20768] lo speed is unknown, defaulting to 1000 [ 202.350532][T20775] IPv6: Can't replace route, no match found [ 202.487069][T20782] loop9: detected capacity change from 0 to 512 [ 202.500265][ T29] audit: type=1400 audit(202.481:8364): avc: denied { mounton } for pid=20781 comm="syz.9.7342" path="/41/bus" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.500278][T20782] EXT4-fs: dax option not supported [ 202.542261][ T29] audit: type=1400 audit(202.521:8365): avc: denied { unmount } for pid=19931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 202.602449][ T29] audit: type=1326 audit(202.581:8366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20785 comm="syz.9.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9aa5f6c9 code=0x7ffc0000 [ 202.625358][ T29] audit: type=1326 audit(202.581:8367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20785 comm="syz.9.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9aa5f6c9 code=0x7ffc0000 [ 202.666371][ T29] audit: type=1326 audit(202.581:8368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20785 comm="syz.9.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f2f9aa5f6c9 code=0x7ffc0000 [ 202.722519][T19671] Bluetooth: hci1: Frame reassembly failed (-84) [ 202.738942][T20790] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 203.540022][T20826] loop6: detected capacity change from 0 to 512 [ 203.546588][T20826] EXT4-fs: dax option not supported [ 203.629897][T20838] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 204.019126][ T3627] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.502180][T13603] Bluetooth: hci0: Frame reassembly failed (-84) [ 204.739048][ T5481] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 205.266350][T20904] loop9: detected capacity change from 0 to 256 [ 205.418616][T20913] __nla_validate_parse: 2 callbacks suppressed [ 205.418629][T20913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7403'. [ 205.451925][T20913] bond_slave_0: entered promiscuous mode [ 205.457564][T20913] bond_slave_1: entered promiscuous mode [ 205.465722][T20913] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 205.475950][T20913] bond_slave_0: left promiscuous mode [ 205.481364][T20913] bond_slave_1: left promiscuous mode [ 205.727483][T20939] loop5: detected capacity change from 0 to 256 [ 205.784322][T20942] netlink: 'syz.9.7415': attribute type 21 has an invalid length. [ 205.792175][T20942] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7415'. [ 205.804132][T20942] netlink: 'syz.9.7415': attribute type 4 has an invalid length. [ 205.811952][T20942] netlink: 'syz.9.7415': attribute type 3 has an invalid length. [ 205.819704][T20942] netlink: 3 bytes leftover after parsing attributes in process `syz.9.7415'. [ 205.880172][T20949] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7419'. [ 206.579056][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 206.585080][ T3627] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 206.613008][T20963] loop9: detected capacity change from 0 to 2048 [ 206.648568][T20963] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.663329][T20971] loop2: detected capacity change from 0 to 512 [ 206.690026][T20971] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 206.705102][T20971] EXT4-fs (loop2): orphan cleanup on readonly fs [ 206.720006][T19931] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.739963][T20971] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.7429: corrupted inode contents [ 206.755911][T20983] lo speed is unknown, defaulting to 1000 [ 206.774191][T20971] EXT4-fs (loop2): Remounting filesystem read-only [ 206.805667][T20971] EXT4-fs (loop2): 1 truncate cleaned up [ 206.811430][T13621] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 206.822087][T13621] __quota_error: 5 callbacks suppressed [ 206.822165][T13621] Quota error (device loop2): write_blk: dquota write failed [ 206.835101][T13621] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 206.845074][T13621] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 206.855598][T13621] Quota error (device loop2): write_blk: dquota write failed [ 206.862973][T13621] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 206.919995][T13621] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 206.930238][T13621] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 206.949813][T13621] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 206.951718][T20993] tls_set_device_offload_rx: netdev not found [ 207.020258][T20971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.070020][T19898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.092428][ T29] audit: type=1326 audit(207.071:8374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21003 comm="syz.9.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9aa5f6c9 code=0x7ffc0000 [ 207.115356][ T29] audit: type=1326 audit(207.071:8375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21003 comm="syz.9.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9aa5f6c9 code=0x7ffc0000 [ 207.144295][ T29] audit: type=1326 audit(207.121:8376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21003 comm="syz.9.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f9aa5f6c9 code=0x7ffc0000 [ 207.189192][ T29] audit: type=1326 audit(207.161:8377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21003 comm="syz.9.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9aa5f6c9 code=0x7ffc0000 [ 207.229940][T21015] netlink: 188 bytes leftover after parsing attributes in process `syz.6.7447'. [ 207.240174][T21010] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7446'. [ 207.363990][T21025] lo speed is unknown, defaulting to 1000 [ 207.401516][T21035] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7456'. [ 207.492683][T21043] netlink: 'syz.6.7460': attribute type 1 has an invalid length. [ 207.513955][T21045] loop2: detected capacity change from 0 to 256 [ 207.586119][T21052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7464'. [ 208.006652][T21105] netlink: 'syz.6.7487': attribute type 16 has an invalid length. [ 208.014584][T21105] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7487'. [ 208.097123][T21113] SELinux: ebitmap: truncated map [ 208.103366][T21113] SELinux: failed to load policy [ 208.208451][T21128] netlink: 'syz.9.7499': attribute type 3 has an invalid length. [ 208.346896][T21141] netlink: 332 bytes leftover after parsing attributes in process `syz.1.7505'. [ 208.586654][T21163] loop9: detected capacity change from 0 to 1024 [ 208.600703][T21163] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.913203][T19931] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.156221][T21229] hsr_slave_1 (unregistering): left promiscuous mode [ 209.416401][T21281] blktrace: Concurrent blktraces are not allowed on loop4 [ 209.472010][T21295] loop2: detected capacity change from 0 to 512 [ 209.478941][T21295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.501825][T21295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 209.596174][T19898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 209.753266][T21320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.793475][T21322] loop2: detected capacity change from 0 to 2048 [ 209.815716][T21322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.830626][T21322] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.7585: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 209.847527][T21322] EXT4-fs (loop2): Remounting filesystem read-only [ 209.910698][T21333] pim6reg: entered allmulticast mode [ 209.917363][T19898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.940451][T21333] pim6reg: left allmulticast mode [ 209.950715][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 209.991168][T21341] program syz.1.7595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.002336][T21341] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 210.384634][T13638] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.472114][T13638] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.531113][T13638] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.581229][T13638] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.661382][T13638] bridge_slave_1: left allmulticast mode [ 210.667066][T13638] bridge_slave_1: left promiscuous mode [ 210.672803][T13638] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.680698][T13638] bridge_slave_0: left allmulticast mode [ 210.686315][T13638] bridge_slave_0: left promiscuous mode [ 210.691972][T13638] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.732294][T13638] bond1 (unregistering): (slave geneve2): Releasing active interface [ 210.770842][T13638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.780795][T13638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.790233][T13638] bond0 (unregistering): Released all slaves [ 210.798234][T13638] bond1 (unregistering): Released all slaves [ 210.841941][T13638] tipc: Left network mode [ 210.880501][T13638] hsr_slave_0: left promiscuous mode [ 210.886202][T13638] hsr_slave_1: left promiscuous mode [ 210.891994][T13638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.899573][T13638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.910270][T13638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.917680][T13638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.935153][T13638] veth1_macvtap: left promiscuous mode [ 210.941464][T13638] veth0_macvtap: left promiscuous mode [ 210.947005][T13638] veth1_vlan: left promiscuous mode [ 210.952347][T13638] veth0_vlan: left promiscuous mode [ 211.004758][T13638] team0 (unregistering): Port device team_slave_1 removed [ 211.013974][T13638] team0 (unregistering): Port device team_slave_0 removed [ 211.317389][T21373] lo speed is unknown, defaulting to 1000 [ 211.382779][T13638] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.421845][T21373] chnl_net:caif_netlink_parms(): no params data found [ 211.453095][T13638] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.468352][T21373] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.475435][T21373] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.482706][T21373] bridge_slave_0: entered allmulticast mode [ 211.489321][T21373] bridge_slave_0: entered promiscuous mode [ 211.497644][T13638] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.508772][T21373] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.515896][T21373] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.523284][T21373] bridge_slave_1: entered allmulticast mode [ 211.529690][T21373] bridge_slave_1: entered promiscuous mode [ 211.544935][T21373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.555495][T21373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.571712][T13638] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.587719][T21373] team0: Port device team_slave_0 added [ 211.594203][T21373] team0: Port device team_slave_1 added [ 211.608440][T21373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.615434][T21373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.641336][T21373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.652455][T21373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.659475][T21373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.685458][T21373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.712278][T21373] hsr_slave_0: entered promiscuous mode [ 211.718217][T21373] hsr_slave_1: entered promiscuous mode [ 211.724062][T21373] debugfs: 'hsr0' already exists in 'hsr' [ 211.729851][T21373] Cannot create hsr debugfs directory [ 211.775483][T13638] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.863861][T13638] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.903613][T13638] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.917444][T21373] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.927825][T21373] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.948154][T13638] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.976260][T21393] lo speed is unknown, defaulting to 1000 [ 211.984332][T21373] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.994613][T21373] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.005790][T21390] lo speed is unknown, defaulting to 1000 [ 212.035848][T21402] lo speed is unknown, defaulting to 1000 [ 212.073263][T13638] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.105682][T21373] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.115974][T21373] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.146423][T13638] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.173308][T21373] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.183604][T21373] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.223838][T13638] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.262858][T21393] chnl_net:caif_netlink_parms(): no params data found [ 212.288446][T13638] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.342914][T21390] chnl_net:caif_netlink_parms(): no params data found [ 212.380417][T21373] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.388605][T21393] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.395659][T21393] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.402904][T21393] bridge_slave_0: entered allmulticast mode [ 212.409194][T21393] bridge_slave_0: entered promiscuous mode [ 212.420837][T21402] chnl_net:caif_netlink_parms(): no params data found [ 212.443282][T21373] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.451698][T21393] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.458742][T21393] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.465967][T21393] bridge_slave_1: entered allmulticast mode [ 212.472430][T21393] bridge_slave_1: entered promiscuous mode [ 212.487731][T21373] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.505701][T21373] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.529544][T21393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.548054][T21402] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.555229][T21402] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.562353][T21402] bridge_slave_0: entered allmulticast mode [ 212.568853][T21402] bridge_slave_0: entered promiscuous mode [ 212.576843][T21393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.594076][T21402] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.601163][T21402] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.608269][T21402] bridge_slave_1: entered allmulticast mode [ 212.614705][T21402] bridge_slave_1: entered promiscuous mode [ 212.626545][T21390] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.633669][T21390] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.640814][T21390] bridge_slave_0: entered allmulticast mode [ 212.647177][T21390] bridge_slave_0: entered promiscuous mode [ 212.669363][T21393] team0: Port device team_slave_0 added [ 212.675838][T21393] team0: Port device team_slave_1 added [ 212.688016][T13638] bridge_slave_1: left allmulticast mode [ 212.693788][T13638] bridge_slave_1: left promiscuous mode [ 212.699495][T13638] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.707175][T13638] bridge_slave_0: left allmulticast mode [ 212.712821][T13638] bridge_slave_0: left promiscuous mode [ 212.718457][T13638] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.726748][T13638] bridge_slave_1: left allmulticast mode [ 212.732456][T13638] bridge_slave_1: left promiscuous mode [ 212.738018][T13638] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.745778][T13638] bridge_slave_0: left allmulticast mode [ 212.751508][T13638] bridge_slave_0: left promiscuous mode [ 212.757254][T13638] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.765369][T13638] bridge_slave_1: left allmulticast mode [ 212.771006][T13638] bridge_slave_1: left promiscuous mode [ 212.776612][T13638] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.784267][T13638] bridge_slave_0: left allmulticast mode [ 212.789914][T13638] bridge_slave_0: left promiscuous mode [ 212.795545][T13638] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.901439][T13638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.910920][T13638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.920207][T13638] bond0 (unregistering): Released all slaves [ 212.928280][T13638] bond1 (unregistering): Released all slaves [ 212.936290][T13638] bond2 (unregistering): Released all slaves [ 213.001416][T13638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.010860][T13638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.020021][T13638] bond0 (unregistering): Released all slaves [ 213.100918][T13638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.110622][T13638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.120127][T13638] bond0 (unregistering): Released all slaves [ 213.127714][T21390] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.134853][T21390] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.142095][T21390] bridge_slave_1: entered allmulticast mode [ 213.148467][T21390] bridge_slave_1: entered promiscuous mode [ 213.160388][T21402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.184769][T21402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.200033][T21393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.206965][T21393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.232904][T21393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.243980][T21393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.251061][T21393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.276979][T21393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.289886][T21390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.312258][T21402] team0: Port device team_slave_0 added [ 213.324105][T21390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.334850][T21402] team0: Port device team_slave_1 added [ 213.376735][T21402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.383774][T21402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.409715][T21402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.426376][T13638] hsr_slave_0: left promiscuous mode [ 213.431958][T13638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.439332][T13638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.446713][T13638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.454112][T13638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.463059][T13638] hsr_slave_0: left promiscuous mode [ 213.468629][T13638] hsr_slave_1: left promiscuous mode [ 213.474286][T13638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.481703][T13638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.489154][T13638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.496567][T13638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.505403][T13638] hsr_slave_0: left promiscuous mode [ 213.510927][T13638] hsr_slave_1: left promiscuous mode [ 213.516421][T13638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.523826][T13638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.531352][T13638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.538706][T13638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.552912][T13638] veth1_macvtap: left promiscuous mode [ 213.558478][T13638] veth0_macvtap: left promiscuous mode [ 213.564014][T13638] veth1_vlan: left promiscuous mode [ 213.569291][T13638] veth0_vlan: left promiscuous mode [ 213.574792][T13638] veth1_macvtap: left promiscuous mode [ 213.580299][T13638] veth0_macvtap: left promiscuous mode [ 213.585762][T13638] veth1_vlan: left promiscuous mode [ 213.591182][T13638] veth0_vlan: left promiscuous mode [ 213.596678][T13638] veth1_macvtap: left promiscuous mode [ 213.602139][T13638] veth0_macvtap: left promiscuous mode [ 213.607631][T13638] veth1_vlan: left promiscuous mode [ 213.612837][T13638] veth0_vlan: left promiscuous mode [ 213.718728][T13638] team0 (unregistering): Port device team_slave_1 removed [ 213.729014][T13638] team0 (unregistering): Port device team_slave_0 removed [ 213.775420][T13638] team0 (unregistering): Port device team_slave_1 removed [ 213.784360][T13638] team0 (unregistering): Port device team_slave_0 removed [ 213.829538][T13638] team0 (unregistering): Port device team_slave_1 removed [ 213.838582][T13638] team0 (unregistering): Port device team_slave_0 removed [ 213.870273][T21393] hsr_slave_0: entered promiscuous mode [ 213.876227][T21393] hsr_slave_1: entered promiscuous mode [ 213.882074][T21393] debugfs: 'hsr0' already exists in 'hsr' [ 213.887791][T21393] Cannot create hsr debugfs directory [ 213.894256][T21402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.901215][T21402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.927118][T21402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.938549][T21390] team0: Port device team_slave_0 added [ 213.945204][T21390] team0: Port device team_slave_1 added [ 213.980215][T21390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.987141][T21390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.013092][T21390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.026774][T21390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.033738][T21390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.059639][T21390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.088660][T21402] hsr_slave_0: entered promiscuous mode [ 214.094734][T21402] hsr_slave_1: entered promiscuous mode [ 214.100514][T21402] debugfs: 'hsr0' already exists in 'hsr' [ 214.106211][T21402] Cannot create hsr debugfs directory [ 214.132207][T21390] hsr_slave_0: entered promiscuous mode [ 214.138186][T21390] hsr_slave_1: entered promiscuous mode [ 214.143935][T21390] debugfs: 'hsr0' already exists in 'hsr' [ 214.149686][T21390] Cannot create hsr debugfs directory [ 214.175846][T21373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.246339][T21373] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.267729][T13603] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.274808][T13603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.286727][T19671] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.293788][T19671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.347271][T21373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.401031][T21373] veth0_vlan: entered promiscuous mode [ 214.408248][T21373] veth1_vlan: entered promiscuous mode [ 214.423368][T21373] veth0_macvtap: entered promiscuous mode [ 214.430545][T21373] veth1_macvtap: entered promiscuous mode [ 214.440620][T21373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.451187][T21373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.462296][T13599] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.474780][T13599] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.485157][T13599] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.499540][T13599] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.520095][T21402] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.531410][T21393] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.549822][T21393] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.563690][T21393] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.574062][T21457] program syz.3.7609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.575719][T21393] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.593488][T21402] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.602021][T21457] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 214.614566][T21461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.624292][T21461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.659137][T21393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.670348][T21393] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.680444][T13621] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.687588][T13621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.698363][T21402] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.711536][T13621] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.718673][T13621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.741007][T21402] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.753971][T21393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.764709][T21475] loop3: detected capacity change from 0 to 1024 [ 214.780878][T21475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 214.806752][T21475] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.7616: lblock 3 mapped to illegal pblock 3 (length 3) [ 214.817612][T21393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.828476][T21475] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 214.840831][T21475] EXT4-fs (loop3): This should not happen!! Data will be lost [ 214.840831][T21475] [ 214.863783][T13621] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm kworker/u8:41: lblock 0 mapped to illegal pblock 0 (length 3) [ 214.878493][T13621] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 214.890947][T13621] EXT4-fs (loop3): This should not happen!! Data will be lost [ 214.890947][T13621] [ 214.901892][T13621] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:41: lblock 8 mapped to illegal pblock 8 (length 8) [ 214.916676][T13621] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 214.929066][T13621] EXT4-fs (loop3): This should not happen!! Data will be lost [ 214.929066][T13621] [ 214.935797][T21402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.946803][T21373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 214.964428][T21402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.978709][T21393] veth0_vlan: entered promiscuous mode [ 214.987632][T21402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.001466][T21393] veth1_vlan: entered promiscuous mode [ 215.007537][T21402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.034752][T21393] veth0_macvtap: entered promiscuous mode [ 215.046832][T21393] veth1_macvtap: entered promiscuous mode [ 215.063385][T21393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.075065][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 215.075077][ T29] audit: type=1326 audit(215.051:8532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5acf6c9 code=0x7ffc0000 [ 215.075653][T21393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.104188][ T29] audit: type=1326 audit(215.071:8533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5acf6c9 code=0x7ffc0000 [ 215.119085][T21402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.134361][ T29] audit: type=1326 audit(215.071:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83c5acf6c9 code=0x7ffc0000 [ 215.145346][T21402] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.163703][ T29] audit: type=1326 audit(215.071:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5acf6c9 code=0x7ffc0000 [ 215.180424][T21402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.193108][ T29] audit: type=1326 audit(215.071:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5acf6c9 code=0x7ffc0000 [ 215.193142][ T29] audit: type=1326 audit(215.071:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83c5acf6c9 code=0x7ffc0000 [ 215.193165][ T29] audit: type=1326 audit(215.071:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5acf6c9 code=0x7ffc0000 [ 215.203492][T21402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.282743][ T29] audit: type=1326 audit(215.071:8539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5acf6c9 code=0x7ffc0000 [ 215.305636][ T29] audit: type=1326 audit(215.071:8540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83c5acf6c9 code=0x7ffc0000 [ 215.316465][T21402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.339101][ T29] audit: type=1326 audit(215.231:8541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5acf6c9 code=0x7ffc0000 [ 215.370617][T13621] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.377725][T13621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.388640][T13621] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.395779][T13621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.425736][T13621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.434990][T13621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.456105][T13621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.494296][T13621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.517021][T21390] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 215.538242][T21538] __nla_validate_parse: 4 callbacks suppressed [ 215.538257][T21538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7631'. [ 215.540671][T21390] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 215.582486][T21390] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 215.592108][T21390] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 215.626850][T21402] veth0_vlan: entered promiscuous mode [ 215.651690][T21402] veth1_vlan: entered promiscuous mode [ 215.676597][T21402] veth0_macvtap: entered promiscuous mode [ 215.687606][T21402] veth1_macvtap: entered promiscuous mode [ 215.715297][T21402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.726831][T21390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.737835][T21402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.748288][T21390] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.769347][T13621] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.778132][T13621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.787627][T13621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.798759][T13621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.809051][T13605] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.816191][T13605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.825013][T13605] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.832089][T13605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.866078][T21402] block device autoloading is deprecated and will be removed. [ 215.908450][T21571] loop0: detected capacity change from 0 to 2048 [ 215.911486][T21390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.934534][T21571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.960525][T21402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.036646][T21390] veth0_vlan: entered promiscuous mode [ 216.044303][T21390] veth1_vlan: entered promiscuous mode [ 216.059547][T21390] veth0_macvtap: entered promiscuous mode [ 216.067009][T21390] veth1_macvtap: entered promiscuous mode [ 216.079832][T21390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.093049][T21390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.105929][T13605] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.122014][T13605] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.137547][T13605] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.146525][T13605] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.189088][T21602] tipc: Started in network mode [ 216.194004][T21602] tipc: Node identity 5, cluster identity 4711 [ 216.200290][T21602] tipc: Node number set to 5 [ 216.224959][T21608] netlink: 'syz.7.7647': attribute type 3 has an invalid length. [ 216.232908][T21608] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7647'. [ 216.391871][T21616] loop0: detected capacity change from 0 to 764 [ 216.399559][T21616] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 216.413560][T21616] Symlink component flag not implemented [ 216.423338][T21616] Symlink component flag not implemented (7) [ 216.451377][T21618] loop0: detected capacity change from 0 to 512 [ 216.457872][T21618] EXT4-fs: Ignoring removed nobh option [ 216.470481][T21618] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.7652: corrupted inode contents [ 216.482831][T21618] EXT4-fs (loop0): Remounting filesystem read-only [ 216.489926][T21618] EXT4-fs (loop0): 1 truncate cleaned up [ 216.496010][T21618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.518503][T21618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.552278][T21630] loop4: detected capacity change from 0 to 1024 [ 216.571756][T21630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.593039][T21630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.622566][T21640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7661'. [ 216.650590][T21642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7662'. [ 216.667515][T21646] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 216.708823][T21393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.782866][T21667] x_tables: duplicate underflow at hook 1 [ 216.840946][T21670] loop0: detected capacity change from 0 to 1024 [ 216.867746][T21670] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 216.914672][T21670] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.925624][T21670] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 216.990891][T21686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7683'. [ 216.999882][T21686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7683'. [ 217.020292][T21670] JBD2: no valid journal superblock found [ 217.026061][T21670] EXT4-fs (loop0): Could not load journal inode [ 217.173463][T21695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7687'. [ 217.324226][T21723] pimreg: entered allmulticast mode [ 217.332494][T21723] pimreg: left allmulticast mode [ 217.358767][T21733] sd 0:0:1:0: device reset [ 217.425304][T21744] sock: sock_timestamping_bind_phc: sock not bind to device [ 217.561672][T21766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7719'. [ 217.670819][T21783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7724'. [ 217.760242][T21795] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 217.767881][T21795] SELinux: failed to load policy [ 217.793760][T21801] loop4: detected capacity change from 0 to 1024 [ 217.827339][T21801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.862811][T21393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.071125][T21855] loop1: detected capacity change from 0 to 1764 [ 218.110010][T21865] loop3: detected capacity change from 0 to 512 [ 218.121758][T21865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.128615][T21869] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 218.142406][T21869] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 218.166765][T21865] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.175708][T21865] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 218.204241][T21373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.231688][T21876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7765'. [ 218.345376][T21894] loop7: detected capacity change from 0 to 512 [ 218.361033][T21894] EXT4-fs (loop7): 1 orphan inode deleted [ 218.367204][T21894] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.379894][T13603] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:23: Failed to release dquot type 1 [ 218.400686][T21390] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.528529][T21915] loop3: detected capacity change from 0 to 128 [ 218.684150][ T9057] hid_parser_main: 30 callbacks suppressed [ 218.684161][ T9057] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 218.697393][ T9057] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 218.704790][ T9057] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 218.712169][ T9057] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 218.719575][ T9057] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 218.726926][ T9057] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 218.734284][ T9057] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 218.741747][ T9057] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 218.749116][ T9057] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 218.756466][ T9057] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 218.764330][ T9057] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 218.931234][T21942] loop7: detected capacity change from 0 to 512 [ 218.940400][T21942] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.970980][T21390] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.992945][T21950] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 219.033704][T21956] loop0: detected capacity change from 0 to 512 [ 219.050986][T21956] EXT4-fs (loop0): 1 orphan inode deleted [ 219.057130][T21956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.070638][T19671] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:68: Failed to release dquot type 1 [ 219.095528][T21402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.108555][T21962] loop7: detected capacity change from 0 to 512 [ 219.122644][T21962] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.167414][T21962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.177067][T21962] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 219.192441][T21390] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.262830][T21983] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 219.416181][T21996] bond_slave_0: entered promiscuous mode [ 219.421897][T21996] bond_slave_1: entered promiscuous mode [ 219.428909][T21996] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 219.437379][T21996] bond_slave_0: left promiscuous mode [ 219.442789][T21996] bond_slave_1: left promiscuous mode [ 219.451726][T21999] loop7: detected capacity change from 0 to 128 [ 219.646540][T22030] loop0: detected capacity change from 0 to 512 [ 219.672301][T22030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.692674][T22030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.702044][T22030] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 219.713139][T22034] bond_slave_0: entered promiscuous mode [ 219.718785][T22034] bond_slave_1: entered promiscuous mode [ 219.725080][T21402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.738489][T22034] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 219.746975][T22034] bond_slave_0: left promiscuous mode [ 219.752387][T22034] bond_slave_1: left promiscuous mode [ 219.875719][T22050] tls_set_device_offload_rx: netdev not found [ 219.899921][T22052] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 219.907795][T22052] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 220.052939][T22066] loop0: detected capacity change from 0 to 2048 [ 220.070217][T22066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.102819][T21402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.146130][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 220.146141][ T29] audit: type=1326 audit(476.124:8724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 220.191964][ T29] audit: type=1326 audit(476.154:8725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 220.214925][ T29] audit: type=1326 audit(476.154:8726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 220.238143][ T29] audit: type=1326 audit(476.164:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 220.261156][ T29] audit: type=1326 audit(476.164:8728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 220.284215][ T29] audit: type=1326 audit(476.164:8729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 220.322321][T22090] loop0: detected capacity change from 0 to 512 [ 220.351338][T22090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.384703][T21402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.443307][ T29] audit: type=1326 audit(476.414:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.0.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b312f6c9 code=0x7ffc0000 [ 220.466294][ T29] audit: type=1326 audit(476.414:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.0.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7ff3b312f6c9 code=0x7ffc0000 [ 220.489193][ T29] audit: type=1326 audit(476.414:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.0.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b312f6c9 code=0x7ffc0000 [ 220.591061][T22120] loop1: detected capacity change from 0 to 2048 [ 220.600318][T22120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.624125][T19900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.624601][T22125] netlink: 'syz.3.7877': attribute type 1 has an invalid length. [ 220.662903][ T29] audit: type=1326 audit(476.644:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22127 comm="syz.3.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5acf6c9 code=0x7ffc0000 [ 220.703550][T22131] __nla_validate_parse: 5 callbacks suppressed [ 220.703565][T22131] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7879'. [ 220.927851][T22148] tls_set_device_offload_rx: netdev not found [ 220.931587][T22146] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7896'. [ 221.068962][T22168] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7897'. [ 221.170548][T22182] tls_set_device_offload_rx: netdev not found [ 221.328001][T22199] lo speed is unknown, defaulting to 1000 [ 221.341955][T22203] netlink: 'syz.1.7914': attribute type 3 has an invalid length. [ 221.485046][T22218] loop3: detected capacity change from 0 to 256 [ 221.683004][T22226] netlink: 332 bytes leftover after parsing attributes in process `syz.7.7923'. [ 221.730973][T22232] netlink: 'syz.4.7925': attribute type 1 has an invalid length. [ 222.069395][T22278] loop0: detected capacity change from 0 to 256 [ 222.077730][T22277] lo speed is unknown, defaulting to 1000 [ 222.390982][T22308] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7962'. [ 222.706413][T22334] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7970'. [ 222.760445][T22345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7979'. [ 222.776577][T22345] hsr_slave_1 (unregistering): left promiscuous mode [ 223.069209][T22388] loop0: detected capacity change from 0 to 1024 [ 223.102541][T22388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.221593][T22406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8005'. [ 223.265766][T22406] hsr_slave_1 (unregistering): left promiscuous mode [ 223.301079][T22409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8006'. [ 223.495032][ T3394] kernel write not supported for file bpf-prog (pid: 3394 comm: kworker/0:3) [ 223.580957][T21402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.760470][T22465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.811191][T22467] loop3: detected capacity change from 0 to 2048 [ 223.850995][T22467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.855291][T22474] loop7: detected capacity change from 0 to 1024 [ 223.880173][T22467] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.8031: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 223.905596][T22467] EXT4-fs (loop3): Remounting filesystem read-only [ 223.920865][T22474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.949382][T21373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.367954][T21390] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.625878][T22537] loop4: detected capacity change from 0 to 512 [ 224.632932][T22537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.651697][T22537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 224.720702][T22541] loop1: detected capacity change from 0 to 1024 [ 224.763267][T22541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.798397][T21393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 225.115208][T22555] pim6reg: entered allmulticast mode [ 225.123682][T22555] pim6reg: left allmulticast mode [ 225.274211][T19900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.303004][ T3394] kernel write not supported for file bpf-prog (pid: 3394 comm: kworker/0:3) [ 225.521748][T22580] pim6reg: entered allmulticast mode [ 225.529771][T22580] pim6reg: left allmulticast mode [ 225.595086][T22587] loop0: detected capacity change from 0 to 2048 [ 225.612417][T22586] loop3: detected capacity change from 0 to 512 [ 225.620252][T22586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.631994][T22587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.711613][T22587] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.8076: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 225.728438][T22587] EXT4-fs (loop0): Remounting filesystem read-only [ 225.728756][T22586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 225.747952][T21402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.791550][T22595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8078'. [ 225.834088][T22595] hsr_slave_1 (unregistering): left promiscuous mode [ 225.870933][T21373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 225.976492][T22616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8099'. [ 225.988508][T22614] loop4: detected capacity change from 0 to 2048 [ 226.001291][T22616] hsr_slave_1 (unregistering): left promiscuous mode [ 226.020810][T22614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.071761][T22614] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.8089: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 226.109590][T22614] EXT4-fs (loop4): Remounting filesystem read-only [ 226.127189][T21393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.331043][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 226.331105][ T29] audit: type=1326 audit(482.314:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.1.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 226.360597][ T29] audit: type=1326 audit(482.314:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.1.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 226.383507][ T29] audit: type=1326 audit(482.314:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.1.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 226.406484][ T29] audit: type=1326 audit(482.314:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.1.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 226.429484][ T29] audit: type=1326 audit(482.314:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.1.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 226.431179][T22643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.452571][ T29] audit: type=1326 audit(482.314:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.1.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 226.475777][T22643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.483930][ T29] audit: type=1326 audit(482.314:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.1.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 226.514448][ T29] audit: type=1326 audit(482.314:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.1.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 226.537427][ T29] audit: type=1326 audit(482.414:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.1.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 226.560451][ T29] audit: type=1326 audit(482.414:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.1.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe49df6c9 code=0x7ffc0000 [ 227.027474][T22659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8107'. [ 227.050672][T22659] hsr_slave_1 (unregistering): left promiscuous mode [ 227.185466][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8114'. [ 227.256404][T22683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8130'. [ 227.286716][T22691] tipc: Started in network mode [ 227.291651][T22691] tipc: Node identity 5, cluster identity 4711 [ 227.297791][T22691] tipc: Node number set to 5 [ 227.330210][T22694] netlink: 'syz.3.8123': attribute type 3 has an invalid length. [ 227.337951][T22694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8123'. [ 227.442286][T22705] loop4: detected capacity change from 0 to 764 [ 227.450301][T22705] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 227.467426][T22705] Symlink component flag not implemented [ 227.479138][T22705] Symlink component flag not implemented (7) [ 227.645457][T22722] loop3: detected capacity change from 0 to 2048 [ 227.660494][T22726] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 227.675620][T22722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.728112][T21373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.769376][T22748] tipc: Started in network mode [ 227.774308][T22748] tipc: Node identity 5, cluster identity 4711 [ 227.780518][T22748] tipc: Node number set to 5 [ 227.850547][T22764] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 227.914713][T22772] loop7: detected capacity change from 0 to 2048 [ 227.928259][T22776] x_tables: duplicate underflow at hook 1 [ 227.942802][T22772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.994481][T21390] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.096971][T22794] tipc: Started in network mode [ 228.102524][T22794] tipc: Node identity 5, cluster identity 4711 [ 228.109176][T22794] tipc: Node number set to 5 [ 228.114167][T11587] ================================================================== [ 228.122235][T11587] BUG: KCSAN: data-race in __mod_timer / __mod_timer [ 228.128892][T11587] [ 228.131195][T11587] write to 0xffff88810f725150 of 8 bytes by task 21506 on cpu 0: [ 228.138888][T11587] __mod_timer+0x5a1/0x840 [ 228.143288][T11587] mod_timer+0x1f/0x30 [ 228.147341][T11587] wg_timers_any_authenticated_packet_traversal+0xd0/0x100 [ 228.154528][T11587] wg_packet_rx_poll+0x7f5/0x1160 [ 228.159542][T11587] __napi_poll+0x66/0x310 [ 228.163855][T11587] napi_threaded_poll_loop+0x185/0x530 [ 228.169296][T11587] napi_threaded_poll+0xda/0x160 [ 228.174214][T11587] kthread+0x489/0x510 [ 228.178272][T11587] ret_from_fork+0x122/0x1b0 [ 228.182844][T11587] ret_from_fork_asm+0x1a/0x30 [ 228.187594][T11587] [ 228.189896][T11587] read to 0xffff88810f725150 of 8 bytes by task 11587 on cpu 1: [ 228.197504][T11587] __mod_timer+0x69/0x840 [ 228.201815][T11587] mod_timer+0x1f/0x30 [ 228.205862][T11587] wg_timers_any_authenticated_packet_traversal+0xd0/0x100 [ 228.213046][T11587] wg_packet_tx_worker+0xeb/0x330 [ 228.218060][T11587] process_scheduled_works+0x4ce/0x9d0 [ 228.223508][T11587] worker_thread+0x582/0x770 [ 228.228078][T11587] kthread+0x489/0x510 [ 228.232131][T11587] ret_from_fork+0x122/0x1b0 [ 228.236703][T11587] ret_from_fork_asm+0x1a/0x30 [ 228.241451][T11587] [ 228.243752][T11587] value changed: 0x00000000ffffe7fc -> 0x00000000ffffeb2d [ 228.250833][T11587] [ 228.253136][T11587] Reported by Kernel Concurrency Sanitizer on: [ 228.259278][T11587] CPU: 1 UID: 0 PID: 11587 Comm: kworker/1:14 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 228.270807][T11587] Tainted: [W]=WARN [ 228.274585][T11587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.284618][T11587] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 228.290681][T11587] ==================================================================