last executing test programs: 1m40.194056281s ago: executing program 2 (id=559): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x18, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x7, 0xfe, [@dev]}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m39.875408925s ago: executing program 2 (id=569): r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m39.817253186s ago: executing program 2 (id=571): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) write(r0, &(0x7f00000002c0)="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", 0xfc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x6}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1m39.724835037s ago: executing program 2 (id=575): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0xa04016, &(0x7f0000000340)={[{@usrquota}, {@nojournal_checksum}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2, 0x0, &(0x7f0000000000)) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m39.414032332s ago: executing program 2 (id=578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200040014000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x6c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1m38.733159372s ago: executing program 2 (id=593): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1m38.698737872s ago: executing program 32 (id=593): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1m6.510850102s ago: executing program 1 (id=1263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000cc0)=[{&(0x7f00000000c0)="14", 0x1}, {&(0x7f0000000500)="bf1f86611434f128", 0x8}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 1m6.204679306s ago: executing program 1 (id=1268): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0002000080e7000008000a00", @ANYRES32=r3, @ANYBLOB="140012800b00010067656e6576650000040002"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x6) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0) 1m6.013696039s ago: executing program 1 (id=1275): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[], 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1m5.164860342s ago: executing program 1 (id=1294): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1127057, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x129c51, 0x0) 1m5.123671352s ago: executing program 1 (id=1296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) 1m4.821806187s ago: executing program 1 (id=1309): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 1m4.821140217s ago: executing program 33 (id=1309): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 1m2.199932806s ago: executing program 0 (id=1340): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000d80)=[{&(0x7f0000000200)="19f8cd8d33b93c5d78041b1bb794bc", 0xf}, {&(0x7f0000000300)="e2ede35c13fe14963ccacca78ec63eba813883fc9d559d5b5a7ae3fc8d90a0e381c099800f9477af1b753415950553f5648c7aa1d8b7f6", 0x37}], 0x2) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 1m2.177025866s ago: executing program 0 (id=1341): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0xb, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) 1m1.821431142s ago: executing program 4 (id=1350): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffeb}, 0x90) r0 = syz_io_uring_setup(0x32e9, &(0x7f0000000b80)={0x0, 0x873f, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x50, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m1.762048952s ago: executing program 4 (id=1352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="0002020100"], 0x18) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) keyctl$read(0xb, 0x0, 0x0, 0x0) 1m1.638278114s ago: executing program 4 (id=1354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5, 0x4}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m1.23391332s ago: executing program 0 (id=1358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x61980}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000001300)="921ef023", 0x4, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 1m1.204763341s ago: executing program 0 (id=1359): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1127057, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x129c51, 0x0) 1m1.184047811s ago: executing program 0 (id=1360): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab000000000000000032"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m0.759246677s ago: executing program 4 (id=1371): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1127057, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x129c51, 0x0) 1m0.679353058s ago: executing program 4 (id=1372): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1m0.294221894s ago: executing program 4 (id=1375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x43}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 1m0.294051574s ago: executing program 34 (id=1375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x43}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 58.674148408s ago: executing program 0 (id=1404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 58.673961868s ago: executing program 35 (id=1404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.029592579s ago: executing program 8 (id=2684): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) socket$inet6(0xa, 0x3, 0x81) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100014004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 4.837405152s ago: executing program 5 (id=2687): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xffffffffffffffa8}, 0x18) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0xa4000021) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) 4.29638167s ago: executing program 5 (id=2699): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x80ffff) 3.905221336s ago: executing program 8 (id=2705): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000020000000000000000000000085000000d000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.881239877s ago: executing program 8 (id=2697): r0 = syz_io_uring_setup(0x837, &(0x7f0000000a40)={0x0, 0x4c87, 0x1000, 0x0, 0x322}, &(0x7f0000000680)=0x0, &(0x7f0000000ac0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) io_uring_enter(r0, 0x3516, 0x8000000, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, r4) sendmsg$FOU_CMD_ADD(r4, 0x0, 0x8d0) 3.70627094s ago: executing program 8 (id=2700): mmap$IORING_OFF_CQ_RING(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1, 0x100010, 0xffffffffffffffff, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 2.863147103s ago: executing program 5 (id=2714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 2.845038474s ago: executing program 5 (id=2716): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 2.617443896s ago: executing program 5 (id=2721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 2.517615637s ago: executing program 8 (id=2724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) 2.350236119s ago: executing program 5 (id=2727): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) 2.341209669s ago: executing program 36 (id=2727): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) 1.64100736s ago: executing program 8 (id=2739): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 1.460593743s ago: executing program 6 (id=2750): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.055568848s ago: executing program 3 (id=2746): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 964.088948ms ago: executing program 3 (id=2747): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43", 0x75}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000) close(r0) syz_read_part_table(0x618, &(0x7f0000002200)="$eJzs3D+IFGcUAPC3dzc7dwqehUWwiWctBMXSK6LsbQwGZE0IHBb5iwhXXeBgQxY3eEVyheIWYplGApviXKvoFVY5FFIHsTAIW9gETBNiipsws3O3GzgOEjaE4O9XfN/bnTfvzQfTvgn+1yYiKaMsLbY3PtozP5sdxu14r1tbOJtlWfZuRCUuRhJzyYFeRExF9G6NVI2jEbF/pM7tb/ZtfP3rW0n3yYVktH470jiY51YjL1ma2e1R0r99WMZufX5z9urqcv1a/qPe6m+9H3HnRa1x79xapzeZnPkk//9KxMMyf6pYZya27/9wKv5yZQ9fDsPKaP/tl+Py43qrf6v77PjW4frk95dOvTyycf3BiYiVvPL5KF72oeo/P/Oo9fnNrFT0X5m7sdhpnT5299DNk837jxrPJ38vLw9aToynLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/5L1fFmtxrXm/OXH9Vb/q59+fOfOi1rj3rm1Tu/t6pmnlUHewzJ/qtw/i2Z8HklELMVSfBrLu5d/bSc6sBMtVkb7z2/OXl1drg/6/7Ev4tnxrcP17sylUy8XNq4/OFFkVWI63ybGevRd+rf6K3M3Fjut08fuHrp5snn/UeP55CBvKY2Pi+NGRDr+xwAAAAAAAAAAAAAAAAAAAOAVV1s4e+T8m42DeXxxOiJ++aKYss/Sme+imLwfOFruT9PBKP/t6cG3ALpPLvxW/eCHtZ/Lofh2pNGOiP3fJhHx+k6fK8W6/fWASIaV+S/9GQAA///p7o1q") mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ustat(0xf000000000000000, &(0x7f00000000c0)) preadv2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 845.056629ms ago: executing program 3 (id=2749): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 746.589209ms ago: executing program 7 (id=2751): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 680.668001ms ago: executing program 3 (id=2752): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r5 = dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) close_range(r0, 0xffffffffffffffff, 0x0) 641.297601ms ago: executing program 7 (id=2753): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) r1 = socket$inet(0x2, 0xa, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) 543.426173ms ago: executing program 6 (id=2754): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 541.771533ms ago: executing program 7 (id=2755): sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2808002, &(0x7f0000000040)={[{@nobh}]}, 0x1, 0x4b4, &(0x7f0000000c80)="$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") bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 528.902633ms ago: executing program 9 (id=2728): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x80000000}]) io_getevents(r4, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) 528.170963ms ago: executing program 3 (id=2765): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c840}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@empty, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) 175.016178ms ago: executing program 9 (id=2756): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) getpriority(0x1, 0x0) ftruncate(r0, 0x2000009) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) statfs(&(0x7f0000000200)='.\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 174.764488ms ago: executing program 3 (id=2757): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rpm_return_int\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x15, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x3, 0xffffffff, 0x4) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 174.594048ms ago: executing program 7 (id=2758): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) close_range(r1, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 174.201628ms ago: executing program 6 (id=2767): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000f00)="a98d4e3a568df934a791f3de6053c132988cee1cc6c9a9f19fdd0ea14e220604c56f8447bcaa8e3f28d830e464cc63d147375e45b30ae7eb959ce21da0792b7bf8e4117719192aaf4d6895d384a38b49b3860da547e9597019ddc4ae127f035dd6e51695d9192b0f2b37c672c9971f2c74f38e9ca05f8c99637198863e427e1893ed25f0129cc7895185df7e663e240d78770e67fbc5dc86a788c106e6e9e26d82a5372418f0bed15a0d7c3db9c2cfa7db907a1aaab13469c4e187", 0xbb}, {&(0x7f0000000fc0)="488c72c093119f33af638b8a53db11f5219119573994eca20a47c554b4e9229db8209256d53762ed555c6f9aa2b99cbe053d1bcbfcdb34b7a61da0d479f4d0f2725b9f78723dbf12e9f534008db93e266aabfc945722d0e46aa8c03d62f0fbc313a670fface5cdb736c944259bd57dad49c8acbb39a0115fd4a1b76bd8a01ad0e167efab52d31c22c908ac8d0abdbc0ae6e7200c62d8c7115273c5dac64e93a2b54f1bd0e7232a6669569aadfefbc7d35246b051345e3c7adb726d2820a8b2e8751c6188aebad3fa5117bb2968ae7ce5ba11251edffb30364becc5ef4f68", 0xde}, {&(0x7f00000010c0)="57af25139bfc433ffceec628b81783909c", 0x11}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000800)="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", 0x15f}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a0", 0xaa}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="0eb1325c89f9adf45fee768467d013e887e116775db7b44fa483fc57939c8790104b7844ebbd6fd934425ece922fdfc5d29ee0ef8adae9419375f2145f0e38478f932d188a01197cf614400be3d267b2c435a90348c61da04d0bfe35c7b30ccc583d8e7f560ba62c0065344c19a98a30399c2a5ef933b9594d2532838d4d1a55f736f7c5315ed9416dd9f1e3dc1def01d5339c5c24d9359d363c3022927f4a7be9de573b18c399556955ae3f57cc0fab2bfb0487b47231953e99ed7ab2f5ac2d16004853b2ee5b373081e23d6d01bcdb75d3", 0xd2}, {&(0x7f00000003c0)="60bd030e1bf8d4085da5657e00574d47f940ab556d7e3cec4e3033dbb30248a8f1d5d1cef5121dfc934746e0ae38615546592196f83458ad792e224254a51e4c4f8b380793888d19e009d656617a35e191ef03595ecbc0209f139e6f307568733719ea8fd4b8cff6f0ac7f0b47934493c51bb362a0f0fa036932a7a49c04b2c6ca7587866deac33246a29a7d741a4c42ff83e1c1aa3457d32925a2623202f2eb314a6632c61f770356e37449a6e4bc7b49", 0xb1}, {&(0x7f00000004c0)="5563a481d21deeb1908045c58308e7c6b517c6e9628547aa126595c98a2439ca80f28f406b5759", 0x27}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000040)="a90aaf10475b4c470f5c2280e07133a0c1fc5aef84b682d479086c35f67ec54478d5398286cbe0f48c804438e03d828d8a975cd50567a23bd3d810", 0x3b}, {&(0x7f0000000500)="fc17fbaae7ce1c0745736ddbfab97236f00c406cb0db49e67b3904365ec6e581c43d43e47a26b9616fe9e3a049368f72ca64cb3700139beb564b043bdd40a4a1145bcf36552dd686ecaafa62157669e897d21529717328066de44f9d528d23046f2cb161fde3108a43639eddb8d62827bfcf2cc32da525bd86f058b442030faa2075c931", 0x84}, {&(0x7f0000000640)="d5aa0087fd62991d210f1c8d9eee12f97a575b72011a81c3b3ff6dc3e00b456ae2b35cbb508f5de29992a9f79afaee60111102f226483ef9189d35eb4486e8ac526a44b6bfd7470b784cf17068107f476ed77ee73a237d5c7ddbbb270d5b0fa7d077ef2a1002d0c2ddb8a9b1625e32ff5048ef65ad2adda8f208e3d3344b7065c0935569c7b8f17a59d854078f6212b2d4d69dde72d7", 0x96}, {&(0x7f0000000200)="7413bdf00a5b42b058218139bf6d5c2a8d461793228c42a254c25fb5bba8452637f92fc0c8746726a965989f606d22efeb2c746f24f4ef9987cc3b37b24ddc4d3544ac97c599af3894ccc1a8d9a42a59b5f671", 0x53}, {&(0x7f0000000a40)="f81be4dc3faba91d81342d205b35846afd12df009e2aafd05ecbe308ad865f810c1e8219cce1de7e2950440bd39b69b8bf4a7266fcd49e3fbeb2ef473ce6e33a62251f2bbab05c66ba92cb572508591f584b81174c5e3715cb28188d7b9d0c9182c4e9d819826e7053a79d547f301ab71f381904051f55b405b35d11195e6e28b7b4a43e441d2c6024eaa9c8c70a781a81662f65ba776083660c8fd707e10ff1e9b7f191e1505543cf4794815fb6a0aa6efe1ce5fa00f2b872cbf3361017df8f11c485d12aed6eb5ec226e051c5016a9572296e042a3ee9be5c7", 0xda}, {&(0x7f0000000b40)="8c96cedb09617d3ea982bff11e07e7d65c3d41fc340df4a836f12484cd5975b05c720f802b729902206ebf26ef96f8dbeb30f93b6804c77c88e2398f4c99f9575b481f56545ee43c7b6a54727226b33f02b33608f8c97c7ce2574867c0225a34450e92be2d2ec2034f61c1432edea1a839caf3c4a688bd097287848d7961f8", 0x7f}, {&(0x7f0000000980)="2cc470d67b1b8c9163c32af36e43133277938c061fa11867052020f125a4d90a6b115f8fd37a0efab793a062c1f8d92c9369218b03b65a9c04427a1c8dc9bb4353fca751b99760bc1b3905e96f36e818457d031f1e7d4f354e861b436c27876088b4b0e22cbe31", 0x67}], 0x7, &(0x7f0000000d80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x77, [@multicast2, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0xb, 0x2, [{0x5, 0x2}, {0x5, 0x3, "cb"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb86}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)="2264f7a2d08fc505b42e2f34959c05cef1fadebdca53f9f06addf38c1af9254fabe813c20fa982c869b29008b8bb99bd2d9fbeab91bcdfda037b5fc012a4f44c671ee630c1e9469151", 0x49}, {&(0x7f0000001100)="5fa07ab294de3c04c6f9cd0e8ce31b3c6c932be096057c2905cc74eef0e7a31dc5b26805cde5b38000411a9a3a6a44ad4bd2c417e3ddef32b8cdec5937aa546b2ef12e454bc97945a976e141777aee59b952fea2a7cf9532706c086bd216ee1388d75550efabb9a67df8a0075cdaab4b4576f760a6f4d7de846d3ba553b401ef", 0x80}], 0x2}}], 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554b", 0x51, 0x11, 0x0, 0x0) 113.57456ms ago: executing program 6 (id=2759): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001010000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) close(r1) 73.347979ms ago: executing program 7 (id=2760): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x2d2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x26) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r4, r0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x3fa4, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 58.526389ms ago: executing program 6 (id=2761): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 51.259429ms ago: executing program 7 (id=2762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x9, 0x8, 0x2549677028661870}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 0s ago: executing program 6 (id=2763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) openat$pfkey(0xffffffffffffff9c, 0x0, 0x2200, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x10) kernel console output (not intermixed with test programs): 9.152008][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.197960][ T4480] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 89.272203][ T4480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.283630][ T4480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.293648][ T4480] bond0 (unregistering): Released all slaves [ 89.303637][ T4480] bond1 (unregistering): Released all slaves [ 89.375894][ T4480] tipc: Left network mode [ 89.385789][ T4480] hsr_slave_0: left promiscuous mode [ 89.401258][ T4480] hsr_slave_1: left promiscuous mode [ 89.406962][ T4480] batman_adv: batadv0: Removing interface: dummy0 [ 89.417195][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.424768][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.442452][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.449913][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.482186][ T4480] veth1_macvtap: left promiscuous mode [ 89.487894][ T4480] veth0_macvtap: left promiscuous mode [ 89.495407][ T4480] veth1_vlan: left promiscuous mode [ 89.500697][ T4480] veth0_vlan: left promiscuous mode [ 89.514222][ T7343] loop5: detected capacity change from 0 to 1024 [ 89.533548][ T7343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.591333][ T4480] team0 (unregistering): Port device team_slave_1 removed [ 89.601137][ T4480] team0 (unregistering): Port device team_slave_0 removed [ 89.642007][ T7301] chnl_net:caif_netlink_parms(): no params data found [ 89.701800][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.708892][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.716396][ T7301] bridge_slave_0: entered allmulticast mode [ 89.724375][ T7301] bridge_slave_0: entered promiscuous mode [ 89.731258][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.738340][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.747033][ T7301] bridge_slave_1: entered allmulticast mode [ 89.753460][ T7301] bridge_slave_1: entered promiscuous mode [ 89.759864][ T7348] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 89.783549][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.823101][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.868523][ T7301] team0: Port device team_slave_0 added [ 89.876952][ T7301] team0: Port device team_slave_1 added [ 89.905587][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.912592][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.938621][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.954021][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.961007][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.964010][ T7351] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 89.987083][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.999147][ T7351] EXT4-fs (loop5): This should not happen!! Data will be lost [ 89.999147][ T7351] [ 89.999160][ T7351] EXT4-fs (loop5): Total free blocks count 0 [ 89.999174][ T7351] EXT4-fs (loop5): Free/Dirty block details [ 90.031483][ T7351] EXT4-fs (loop5): free_blocks=68451041280 [ 90.037484][ T7351] EXT4-fs (loop5): dirty_blocks=16432 [ 90.042905][ T7351] EXT4-fs (loop5): Block reservation details [ 90.048893][ T7351] EXT4-fs (loop5): i_reserved_data_blocks=1027 [ 90.049034][ T7368] loop6: detected capacity change from 0 to 128 [ 90.068390][ T7368] EXT4-fs: inline encryption not supported [ 90.069149][ T7301] hsr_slave_0: entered promiscuous mode [ 90.074681][ T7368] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 90.080404][ T7301] hsr_slave_1: entered promiscuous mode [ 90.099845][ T7301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.107418][ T7301] Cannot create hsr debugfs directory [ 90.119242][ T7370] loop6: detected capacity change from 0 to 512 [ 90.126026][ T7370] EXT4-fs: Ignoring removed bh option [ 90.132410][ T7370] EXT4-fs: Mount option(s) incompatible with ext3 [ 90.179145][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 90.205035][ T7301] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 90.213630][ T7301] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 90.227825][ T7374] loop3: detected capacity change from 0 to 512 [ 90.231674][ T7301] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 90.252619][ T7301] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 90.260518][ T7374] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.269630][ T7374] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 90.344523][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.351691][ T7301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.359030][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.366116][ T7301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.398036][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.410816][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.435572][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.480867][ T7390] netlink: 'syz.3.1408': attribute type 3 has an invalid length. [ 90.489818][ T7390] netlink: 'syz.3.1408': attribute type 3 has an invalid length. [ 90.504751][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.519046][ T4454] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.526155][ T4454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.552782][ T7301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.563342][ T7301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.582273][ T7403] loop6: detected capacity change from 0 to 1024 [ 90.595985][ T4454] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.603111][ T4454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.638518][ T7403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.666035][ T7392] lo speed is unknown, defaulting to 1000 [ 90.672284][ T7301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.769433][ T7392] chnl_net:caif_netlink_parms(): no params data found [ 90.820542][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.827640][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.841326][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 90.841342][ T29] audit: type=1326 audit(90.823:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 90.870221][ T29] audit: type=1326 audit(90.823:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 90.872697][ T7392] bridge_slave_0: entered allmulticast mode [ 90.893095][ T29] audit: type=1326 audit(90.823:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 90.921541][ T29] audit: type=1326 audit(90.823:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 90.929775][ T7392] bridge_slave_0: entered promiscuous mode [ 90.944242][ T29] audit: type=1326 audit(90.823:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 90.972840][ T29] audit: type=1326 audit(90.823:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 90.987393][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.995457][ T29] audit: type=1326 audit(90.823:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 90.995485][ T29] audit: type=1326 audit(90.823:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 90.995510][ T29] audit: type=1326 audit(90.823:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 90.995537][ T29] audit: type=1326 audit(90.823:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 91.094568][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.128572][ T7392] bridge_slave_1: entered allmulticast mode [ 91.135289][ T7392] bridge_slave_1: entered promiscuous mode [ 91.155024][ T4443] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.165216][ T4443] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.177870][ T7392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.188858][ T7392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.216014][ T7392] team0: Port device team_slave_0 added [ 91.227402][ T7301] veth0_vlan: entered promiscuous mode [ 91.239120][ T4443] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.249145][ T4443] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.262338][ T7392] team0: Port device team_slave_1 added [ 91.270865][ T7301] veth1_vlan: entered promiscuous mode [ 91.292681][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.299688][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.325851][ T7392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.340949][ T7429] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 91.356502][ T7429] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 91.368833][ T7429] EXT4-fs (loop6): This should not happen!! Data will be lost [ 91.368833][ T7429] [ 91.378526][ T7429] EXT4-fs (loop6): Total free blocks count 0 [ 91.384526][ T7429] EXT4-fs (loop6): Free/Dirty block details [ 91.390760][ T7429] EXT4-fs (loop6): free_blocks=68451041280 [ 91.396722][ T7429] EXT4-fs (loop6): dirty_blocks=16432 [ 91.402200][ T7429] EXT4-fs (loop6): Block reservation details [ 91.408195][ T7429] EXT4-fs (loop6): i_reserved_data_blocks=1027 [ 91.415488][ T4443] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.425346][ T4443] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.449926][ T7301] veth0_macvtap: entered promiscuous mode [ 91.459419][ T4480] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 91.474976][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.482001][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.508677][ T7392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.529072][ T4443] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.538963][ T4443] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.570809][ T7301] veth1_macvtap: entered promiscuous mode [ 91.605725][ T7392] hsr_slave_0: entered promiscuous mode [ 91.620110][ T7392] hsr_slave_1: entered promiscuous mode [ 91.636127][ T7392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.643842][ T7392] Cannot create hsr debugfs directory [ 91.652856][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.702112][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.731818][ T7301] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.740575][ T7301] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.749271][ T7301] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.758079][ T7301] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.844612][ T4443] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 91.884796][ T4443] bond0 (unregistering): (slave gretap1): Releasing active interface [ 91.896128][ T4443] gretap1 (unregistering): left allmulticast mode [ 91.952042][ T4443] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 92.013376][ T4443] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.022187][ T4443] bond_slave_0: left promiscuous mode [ 92.028852][ T4443] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.039957][ T4443] bond_slave_1: left promiscuous mode [ 92.046193][ T4443] $H (unregistering): Released all slaves [ 92.056854][ T4443] bond1 (unregistering): Released all slaves [ 92.065588][ T4443] bond0 (unregistering): Released all slaves [ 92.074710][ T4443] bond2 (unregistering): Released all slaves [ 92.083690][ T4443] bond3 (unregistering): Released all slaves [ 92.141485][ T7476] netlink: 'syz.5.1431': attribute type 3 has an invalid length. [ 92.149362][ T7476] netlink: 'syz.5.1431': attribute type 3 has an invalid length. [ 92.164051][ T4443] tipc: Disabling bearer [ 92.169049][ T4443] tipc: Disabling bearer [ 92.174064][ T4443] tipc: Left network mode [ 92.203262][ T4443] hsr_slave_0: left promiscuous mode [ 92.209207][ T4443] hsr_slave_1: left promiscuous mode [ 92.215187][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.222778][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.230508][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.238071][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.251797][ T4443] veth0_macvtap: left promiscuous mode [ 92.257363][ T4443] veth1_vlan: left promiscuous mode [ 92.263704][ T4443] veth0_vlan: left promiscuous mode [ 92.300149][ T4443] pimreg (unregistering): left allmulticast mode [ 92.345875][ T4443] team0 (unregistering): Port device team_slave_1 removed [ 92.356192][ T4443] team0 (unregistering): Port device team_slave_0 removed [ 92.392697][ T7392] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 92.404084][ T7482] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1434'. [ 92.415779][ T7392] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 92.425118][ T7487] loop6: detected capacity change from 0 to 512 [ 92.426675][ T7392] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 92.441537][ T7392] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 92.459733][ T7487] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 92.471477][ T7487] EXT4-fs (loop6): 1 truncate cleaned up [ 92.492711][ T7487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.526982][ T7107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.544617][ T7392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.553858][ T7502] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1439'. [ 92.566807][ T7392] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.580661][ T4454] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.587770][ T4454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.619485][ T4454] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.626729][ T4454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.687189][ T7515] netlink: 'syz.6.1454': attribute type 3 has an invalid length. [ 92.698928][ T7515] netlink: 'syz.6.1454': attribute type 3 has an invalid length. [ 92.742900][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.764328][ T4443] IPVS: stop unused estimator thread 0... [ 92.973667][ T7392] veth0_vlan: entered promiscuous mode [ 92.982191][ T7552] loop7: detected capacity change from 0 to 256 [ 92.984063][ T7392] veth1_vlan: entered promiscuous mode [ 93.016343][ T7392] veth0_macvtap: entered promiscuous mode [ 93.043077][ T7552] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.046700][ T7392] veth1_macvtap: entered promiscuous mode [ 93.065867][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.076491][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.087148][ T7392] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.095949][ T7392] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.104713][ T7392] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.113492][ T7392] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.268599][ T7565] loop3: detected capacity change from 0 to 512 [ 93.278992][ T7565] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.292737][ T7565] EXT4-fs (loop3): 1 truncate cleaned up [ 93.301202][ T7565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.314898][ T7571] netlink: 'syz.7.1456': attribute type 3 has an invalid length. [ 93.324345][ T7571] netlink: 'syz.7.1456': attribute type 3 has an invalid length. [ 93.349110][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.687367][ T7583] netlink: 'syz.6.1462': attribute type 7 has an invalid length. [ 93.695222][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1462'. [ 93.895357][ T7604] loop5: detected capacity change from 0 to 256 [ 93.933608][ T7608] netlink: 'syz.8.1474': attribute type 3 has an invalid length. [ 93.947397][ T7604] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.088940][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1482'. [ 94.103583][ T7620] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 94.112815][ T7620] team0: Port device batadv1 added [ 94.142721][ T7620] team0 (unregistering): Port device team_slave_0 removed [ 94.161985][ T7620] team0 (unregistering): Port device team_slave_1 removed [ 94.180606][ T7620] team0 (unregistering): Port device batadv1 removed [ 94.196735][ T7624] loop5: detected capacity change from 0 to 512 [ 94.204145][ T7624] EXT4-fs: Mount option(s) incompatible with ext2 [ 94.426642][ T7633] vlan2: entered allmulticast mode [ 94.614135][ T7643] loop6: detected capacity change from 0 to 1024 [ 94.638645][ T7643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.670317][ T7643] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 94.741083][ T7643] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 94.753663][ T7643] EXT4-fs (loop6): This should not happen!! Data will be lost [ 94.753663][ T7643] [ 94.763412][ T7643] EXT4-fs (loop6): Total free blocks count 0 [ 94.769424][ T7643] EXT4-fs (loop6): Free/Dirty block details [ 94.775372][ T7643] EXT4-fs (loop6): free_blocks=4293918720 [ 94.781132][ T7643] EXT4-fs (loop6): dirty_blocks=48 [ 94.786254][ T7643] EXT4-fs (loop6): Block reservation details [ 94.792309][ T7643] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 94.830910][ T7649] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 94.917221][ T7641] loop5: detected capacity change from 0 to 128 [ 94.939926][ T7641] EXT4-fs: Ignoring removed nobh option [ 94.983632][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1500'. [ 94.989337][ T7641] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.263795][ T5118] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.447653][ T7725] loop6: detected capacity change from 0 to 256 [ 95.471291][ T7725] FAT-fs (loop6): bogus number of FAT sectors [ 95.477457][ T7725] FAT-fs (loop6): Can't find a valid FAT filesystem [ 95.874430][ T7800] syzkaller0: entered allmulticast mode [ 95.889826][ T7800] syzkaller0: entered promiscuous mode [ 95.911809][ T7800] syzkaller0 (unregistering): left allmulticast mode [ 95.918601][ T7800] syzkaller0 (unregistering): left promiscuous mode [ 95.961050][ T7812] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1511'. [ 95.966046][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 95.966093][ T29] audit: type=1326 audit(95.943:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.7.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 95.999842][ T29] audit: type=1326 audit(95.953:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.7.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 96.046371][ T29] audit: type=1326 audit(96.023:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 96.069185][ T29] audit: type=1326 audit(96.023:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 96.093565][ T29] audit: type=1326 audit(96.023:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 96.116356][ T29] audit: type=1326 audit(96.023:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 96.139083][ T29] audit: type=1326 audit(96.023:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 96.161872][ T29] audit: type=1326 audit(96.023:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 96.184668][ T29] audit: type=1326 audit(96.023:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 96.207454][ T29] audit: type=1326 audit(96.023:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 96.248757][ T7823] loop3: detected capacity change from 0 to 128 [ 96.257112][ T7823] EXT4-fs: Ignoring removed nobh option [ 96.285919][ T7823] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.416627][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.645086][ T7840] mmap: syz.7.1520 (7840) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.357177][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 97.971470][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1548'. [ 97.992278][ T7994] validate_nla: 6 callbacks suppressed [ 97.992289][ T7994] netlink: 'syz.7.1549': attribute type 1 has an invalid length. [ 98.018277][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1549'. [ 98.062522][ T7949] loop3: detected capacity change from 0 to 128 [ 98.069547][ T7949] EXT4-fs: Ignoring removed nobh option [ 98.079844][ T7949] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.203452][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1551'. [ 98.218572][ T8025] hsr_slave_0: left promiscuous mode [ 98.224442][ T8025] hsr_slave_1: left promiscuous mode [ 98.276004][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.596119][ T8059] syzkaller0: entered allmulticast mode [ 98.602169][ T8059] syzkaller0: entered promiscuous mode [ 98.610572][ T8059] syzkaller0 (unregistering): left allmulticast mode [ 98.617326][ T8059] syzkaller0 (unregistering): left promiscuous mode [ 98.740045][ T8065] Falling back ldisc for ttyS3. [ 98.791612][ T8073] netlink: 'syz.3.1563': attribute type 1 has an invalid length. [ 98.816367][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1563'. [ 98.830954][ T8073] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 98.839127][ T8073] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 98.857179][ T8080] SELinux: ebitmap: truncated map [ 98.869994][ T8073] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 98.882161][ T8080] SELinux: failed to load policy [ 98.889076][ T8073] bond2 (unregistering): Released all slaves [ 99.064359][ T8086] loop3: detected capacity change from 0 to 256 [ 99.080437][ T8086] FAT-fs (loop3): bogus number of FAT sectors [ 99.086769][ T8086] FAT-fs (loop3): Can't find a valid FAT filesystem [ 99.116239][ T8093] syzkaller0: entered allmulticast mode [ 99.158819][ T8093] syzkaller0: entered promiscuous mode [ 99.229613][ T8093] syzkaller0 (unregistering): left allmulticast mode [ 99.236379][ T8093] syzkaller0 (unregistering): left promiscuous mode [ 99.269779][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1575'. [ 99.585837][ T8122] netlink: 'syz.5.1581': attribute type 1 has an invalid length. [ 99.613620][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1581'. [ 99.640746][ T8127] 9pnet: p9_errstr2errno: server reported unknown error [ 99.646815][ T8122] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 99.661787][ T8122] bond3: (slave batadv1): Enslaving as a backup interface with an up link [ 99.677455][ T8122] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 99.688616][ T8122] bond3 (unregistering): Released all slaves [ 99.801793][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1583'. [ 99.820281][ T8148] ipvlan2: entered promiscuous mode [ 99.891798][ T8168] loop5: detected capacity change from 0 to 256 [ 99.902830][ T8168] FAT-fs (loop5): bogus number of FAT sectors [ 99.908932][ T8168] FAT-fs (loop5): Can't find a valid FAT filesystem [ 99.943488][ T3409] IPVS: starting estimator thread 0... [ 100.030063][ T8175] IPVS: using max 2880 ests per chain, 144000 per kthread [ 100.051861][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1589'. [ 100.137717][ T8202] loop7: detected capacity change from 0 to 128 [ 100.154629][ T8202] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.207790][ T8211] netlink: 197276 bytes leftover after parsing attributes in process `syz.6.1594'. [ 100.282644][ T7301] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.318978][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1596'. [ 101.219818][ T8315] 9pnet: p9_errstr2errno: server reported unknown error [ 101.243429][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 101.243442][ T29] audit: type=1326 audit(101.223:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.7.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 101.276158][ T8320] loop7: detected capacity change from 0 to 128 [ 101.279479][ T29] audit: type=1326 audit(101.253:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.7.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 101.305289][ T29] audit: type=1326 audit(101.253:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.7.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 101.306241][ T8320] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.328240][ T29] audit: type=1326 audit(101.253:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.7.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 101.363558][ T29] audit: type=1326 audit(101.253:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.7.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 101.378203][ T3393] IPVS: starting estimator thread 0... [ 101.386506][ T29] audit: type=1326 audit(101.253:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.7.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 101.414832][ T29] audit: type=1326 audit(101.253:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.7.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 101.437692][ T29] audit: type=1326 audit(101.253:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.7.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 101.449713][ T8328] loop5: detected capacity change from 0 to 512 [ 101.460526][ T29] audit: type=1326 audit(101.253:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.7.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 101.467218][ T8328] EXT4-fs: test_dummy_encryption option not supported [ 101.489531][ T29] audit: type=1326 audit(101.253:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.7.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 101.498578][ T8325] IPVS: using max 2304 ests per chain, 115200 per kthread [ 101.541694][ T7301] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.552812][ T8328] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 101.682876][ T8346] loop3: detected capacity change from 0 to 128 [ 101.756024][ T8354] syzkaller0: entered promiscuous mode [ 101.761551][ T8354] syzkaller0: entered allmulticast mode [ 101.775519][ T8362] loop5: detected capacity change from 0 to 128 [ 101.856577][ T8373] bio_check_eod: 101 callbacks suppressed [ 101.856593][ T8373] syz.5.1627: attempt to access beyond end of device [ 101.856593][ T8373] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 101.896665][ T8373] syz.5.1627: attempt to access beyond end of device [ 101.896665][ T8373] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 101.910261][ T8373] syz.5.1627: attempt to access beyond end of device [ 101.910261][ T8373] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 101.931800][ T8373] syz.5.1627: attempt to access beyond end of device [ 101.931800][ T8373] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 101.945449][ T8373] syz.5.1627: attempt to access beyond end of device [ 101.945449][ T8373] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 101.969693][ T8373] syz.5.1627: attempt to access beyond end of device [ 101.969693][ T8373] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 101.989440][ T8373] syz.5.1627: attempt to access beyond end of device [ 101.989440][ T8373] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 102.042180][ T8373] syz.5.1627: attempt to access beyond end of device [ 102.042180][ T8373] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 102.058855][ T8373] syz.5.1627: attempt to access beyond end of device [ 102.058855][ T8373] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 102.074002][ T8373] syz.5.1627: attempt to access beyond end of device [ 102.074002][ T8373] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 102.285883][ T8432] netlink: 'syz.6.1639': attribute type 1 has an invalid length. [ 102.327761][ T8429] syzkaller0: entered promiscuous mode [ 102.333358][ T8429] syzkaller0: entered allmulticast mode [ 102.376143][ T8438] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 102.387604][ T8438] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 102.423364][ T8432] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 102.459902][ T8432] bond1 (unregistering): Released all slaves [ 102.585591][ T8460] loop7: detected capacity change from 0 to 256 [ 102.592526][ T8460] FAT-fs (loop7): bogus number of FAT sectors [ 102.598667][ T8460] FAT-fs (loop7): Can't find a valid FAT filesystem [ 102.724975][ T8491] loop3: detected capacity change from 0 to 2048 [ 102.754177][ T8499] vlan0: entered allmulticast mode [ 102.759485][ T8499] dummy0: entered allmulticast mode [ 102.765331][ T8491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.806966][ T3414] IPVS: starting estimator thread 0... [ 102.841200][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.899698][ T8509] IPVS: using max 2400 ests per chain, 120000 per kthread [ 102.998081][ T8533] loop7: detected capacity change from 0 to 512 [ 103.014849][ T8533] EXT4-fs: test_dummy_encryption option not supported [ 103.026932][ T8533] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 103.223282][ T8578] loop5: detected capacity change from 0 to 128 [ 103.236965][ T8578] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 103.257588][ T3393] IPVS: starting estimator thread 0... [ 103.274148][ T5118] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.292953][ T8588] __nla_validate_parse: 5 callbacks suppressed [ 103.292967][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1666'. [ 103.350058][ T8586] IPVS: using max 2832 ests per chain, 141600 per kthread [ 103.358629][ T8592] netlink: 'syz.5.1668': attribute type 10 has an invalid length. [ 103.366579][ T8592] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1668'. [ 103.375944][ T8592] bridge0: port 3(dummy0) entered disabled state [ 103.406473][ T8594] ip6gre1: entered allmulticast mode [ 103.537859][ T8602] loop7: detected capacity change from 0 to 512 [ 103.553527][ T8602] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.566591][ T8602] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.599381][ T8606] netlink: 'syz.5.1675': attribute type 4 has an invalid length. [ 103.641274][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1684'. [ 103.721806][ T8625] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 103.749327][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1681'. [ 103.774936][ T8625] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 103.796727][ T8625] bond2: (slave batadv2): Enslaving as a backup interface with an up link [ 103.808020][ T8628] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1682'. [ 103.819960][ T8629] bond2 (unregistering): (slave batadv2): Releasing backup interface [ 103.894826][ T8629] bond2 (unregistering): Released all slaves [ 104.000236][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1688'. [ 104.009565][ T8645] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1689'. [ 104.034449][ T8645] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.043224][ T8645] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.052010][ T8645] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.060784][ T8645] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.079882][ T8645] vxlan0: entered promiscuous mode [ 104.162399][ T8665] loop3: detected capacity change from 0 to 128 [ 104.170479][ T8665] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.182791][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1696'. [ 104.213017][ T8669] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1698'. [ 104.340816][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.357557][ T8677] netlink: 'syz.3.1701': attribute type 1 has an invalid length. [ 104.360929][ T8673] capability: warning: `syz.5.1712' uses 32-bit capabilities (legacy support in use) [ 104.397189][ T8680] vlan2: entered allmulticast mode [ 104.397209][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1701'. [ 104.418313][ T8677] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 104.426462][ T8677] bond2: (slave batadv3): Enslaving as a backup interface with an up link [ 104.453735][ T8677] bond2 (unregistering): (slave batadv3): Releasing backup interface [ 104.463144][ T8677] bond2 (unregistering): Released all slaves [ 104.557095][ T8686] loop3: detected capacity change from 0 to 512 [ 104.563955][ T8686] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.586083][ T8686] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.1705: corrupted xattr entries [ 104.609461][ T8675] loop7: detected capacity change from 0 to 128 [ 104.616154][ T8675] EXT4-fs: Ignoring removed nobh option [ 104.621876][ T8686] EXT4-fs (loop3): Remounting filesystem read-only [ 104.628563][ T8686] EXT4-fs (loop3): 1 truncate cleaned up [ 104.635505][ T8686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.635578][ T8675] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.682436][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.760197][ T8701] syzkaller0: entered promiscuous mode [ 104.765789][ T8701] syzkaller0: entered allmulticast mode [ 104.814035][ T7301] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.906232][ T8714] macsec1: entered promiscuous mode [ 104.911619][ T8714] veth1_to_hsr: entered promiscuous mode [ 104.917371][ T8714] macsec1: entered allmulticast mode [ 104.922734][ T8714] veth1_to_hsr: entered allmulticast mode [ 104.935731][ T8714] veth1_to_hsr: left allmulticast mode [ 104.941342][ T8714] veth1_to_hsr: left promiscuous mode [ 104.996004][ T8718] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 105.074445][ T8721] loop5: detected capacity change from 0 to 2048 [ 105.101501][ T8728] netlink: 'syz.8.1725': attribute type 10 has an invalid length. [ 105.109980][ T8728] dummy0: entered promiscuous mode [ 105.122647][ T8721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.208813][ T8739] ip6gre1: entered allmulticast mode [ 105.245293][ T5118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.307718][ T8753] sit0: entered allmulticast mode [ 105.345893][ T8753] sit0: entered promiscuous mode [ 105.522977][ T8777] loop5: detected capacity change from 0 to 512 [ 105.577456][ T8777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.593269][ T8777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.038985][ T8832] netlink: 'syz.3.1768': attribute type 39 has an invalid length. [ 106.048877][ T8832] veth1_macvtap: left promiscuous mode [ 106.272365][ T8862] loop3: detected capacity change from 0 to 4096 [ 106.293839][ T8862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.310664][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 106.310680][ T29] audit: type=1400 audit(106.293:2189): avc: denied { setattr } for pid=8860 comm="syz.3.1780" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.964496][ T29] audit: type=1326 audit(106.943:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.7.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 106.987590][ T29] audit: type=1326 audit(106.943:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.7.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 106.995076][ T8883] unsupported nla_type 52263 [ 107.030448][ T8885] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.039274][ T8885] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.048065][ T8885] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.056814][ T8885] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.085641][ T29] audit: type=1326 audit(106.943:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.7.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 107.108601][ T29] audit: type=1326 audit(106.943:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.7.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 107.126383][ T8885] vxlan0: entered promiscuous mode [ 107.131482][ T29] audit: type=1326 audit(106.943:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.7.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 107.160194][ T29] audit: type=1326 audit(106.993:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.7.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 107.183281][ T29] audit: type=1326 audit(106.993:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.7.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 107.206104][ T29] audit: type=1326 audit(106.993:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.7.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 107.228941][ T29] audit: type=1326 audit(106.993:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.7.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8eebee9a9 code=0x7ffc0000 [ 107.260376][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.272341][ T8889] loop5: detected capacity change from 0 to 512 [ 107.346298][ T8898] loop7: detected capacity change from 0 to 512 [ 107.353243][ T8898] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 107.365035][ T8898] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.1796: corrupted xattr entries [ 107.380534][ T8898] EXT4-fs (loop7): Remounting filesystem read-only [ 107.387129][ T8898] EXT4-fs (loop7): 1 truncate cleaned up [ 107.393405][ T8898] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.419376][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.565168][ T8923] veth1_to_hsr: entered promiscuous mode [ 107.574617][ T8923] macsec1: entered promiscuous mode [ 107.580173][ T8923] macsec1: entered allmulticast mode [ 107.585481][ T8923] veth1_to_hsr: entered allmulticast mode [ 107.596025][ T8923] veth1_to_hsr: left allmulticast mode [ 107.601691][ T8923] veth1_to_hsr: left promiscuous mode [ 107.775436][ T8928] Set syz1 is full, maxelem 65536 reached [ 108.324279][ T8999] __nla_validate_parse: 15 callbacks suppressed [ 108.324293][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1838'. [ 108.447184][ T9009] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.1842'. [ 108.456592][ T9009] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1842'. [ 108.790769][ T9019] loop3: detected capacity change from 0 to 512 [ 108.840187][ T9022] all: renamed from lo (while UP) [ 108.865632][ T9026] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1848'. [ 108.944966][ T9031] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1850'. [ 108.960383][ T9033] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1851'. [ 109.016507][ T9043] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1866'. [ 109.051550][ T9045] loop7: detected capacity change from 0 to 512 [ 109.064718][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1858'. [ 109.093004][ T9047] veth1_to_hsr: entered promiscuous mode [ 109.098763][ T9047] macsec0: entered promiscuous mode [ 109.104103][ T9047] macsec0: entered allmulticast mode [ 109.109502][ T9047] veth1_to_hsr: entered allmulticast mode [ 109.117700][ T9047] veth1_to_hsr: left allmulticast mode [ 109.123305][ T9047] veth1_to_hsr: left promiscuous mode [ 109.288665][ T9063] loop7: detected capacity change from 0 to 4096 [ 109.304501][ T9074] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1868'. [ 109.304616][ T9063] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.313871][ T9074] netlink: zone id is out of range [ 109.331690][ T9074] netlink: zone id is out of range [ 109.336914][ T9074] netlink: zone id is out of range [ 109.342236][ T9074] netlink: zone id is out of range [ 109.347529][ T9074] netlink: del zone limit has 8 unknown bytes [ 109.356649][ T9075] 9pnet_fd: Insufficient options for proto=fd [ 109.401986][ T9084] ip6gre2: entered allmulticast mode [ 109.438207][ T9088] 9pnet_rdma: rdma_create_trans (9088): problem binding to privport: 13 [ 109.513934][ T9097] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1878'. [ 110.086764][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.309585][ T9099] all: renamed from lo (while UP) [ 111.272614][ T9252] syzkaller1: entered promiscuous mode [ 111.278267][ T9252] syzkaller1: entered allmulticast mode [ 111.366630][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 111.366644][ T29] audit: type=1400 audit(111.343:2384): avc: denied { watch watch_reads } for pid=9264 comm="syz.3.1894" path="/366/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 111.508887][ T9279] ip6gre1: entered allmulticast mode [ 111.534870][ T9281] 0: reclassify loop, rule prio 0, protocol 800 [ 111.560246][ T9283] 0: reclassify loop, rule prio 0, protocol 800 [ 111.587488][ T9287] syzkaller1: entered promiscuous mode [ 111.593190][ T9287] syzkaller1: entered allmulticast mode [ 111.669165][ T9294] loop5: detected capacity change from 0 to 512 [ 111.691943][ T9294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.706737][ T9294] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1910: corrupted inode contents [ 111.718879][ T9294] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.1910: mark_inode_dirty error [ 111.730530][ T9294] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1910: corrupted inode contents [ 111.742945][ T9294] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1910: mark_inode_dirty error [ 111.757850][ T29] audit: type=1400 audit(111.733:2385): avc: denied { create } for pid=9293 comm="syz.5.1910" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 111.791943][ T9294] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1910: corrupted inode contents [ 111.808227][ T9294] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.1910: mark_inode_dirty error [ 111.823572][ T9294] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1910: corrupted inode contents [ 111.855363][ T29] audit: type=1400 audit(111.833:2386): avc: denied { rename } for pid=9293 comm="syz.5.1910" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.876647][ T29] audit: type=1400 audit(111.833:2387): avc: denied { unlink } for pid=9293 comm="syz.5.1910" name="file0" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 111.898353][ T29] audit: type=1400 audit(111.833:2388): avc: denied { rename } for pid=9293 comm="syz.5.1910" name="file0" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 111.935391][ T5118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.090747][ T9314] 0: reclassify loop, rule prio 0, protocol 800 [ 112.093201][ T9315] ip6gre1: entered allmulticast mode [ 112.123692][ T29] audit: type=1326 audit(112.103:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9316 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 112.146655][ T29] audit: type=1326 audit(112.103:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9316 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 112.169450][ T29] audit: type=1326 audit(112.103:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9316 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 112.192452][ T29] audit: type=1326 audit(112.103:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9316 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 112.220276][ T29] audit: type=1326 audit(112.103:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9316 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 112.358106][ T9348] 0: reclassify loop, rule prio 0, protocol 800 [ 112.414646][ T9359] loop7: detected capacity change from 0 to 512 [ 112.440707][ T9359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.477685][ T9359] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.1931: corrupted inode contents [ 112.492588][ T9359] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.1931: mark_inode_dirty error [ 112.504269][ T9359] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.1931: corrupted inode contents [ 112.527527][ T9359] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.1931: mark_inode_dirty error [ 112.549537][ T9359] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.1931: corrupted inode contents [ 112.564099][ T9359] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.1931: mark_inode_dirty error [ 112.578893][ T9383] loop3: detected capacity change from 0 to 128 [ 112.585225][ T9359] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.1931: corrupted inode contents [ 112.657527][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.668676][ T9393] bio_check_eod: 64 callbacks suppressed [ 112.668715][ T9393] syz.3.1935: attempt to access beyond end of device [ 112.668715][ T9393] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 112.689736][ T9393] syz.3.1935: attempt to access beyond end of device [ 112.689736][ T9393] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 112.708484][ T9393] syz.3.1935: attempt to access beyond end of device [ 112.708484][ T9393] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 112.722671][ T9393] syz.3.1935: attempt to access beyond end of device [ 112.722671][ T9393] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 112.736815][ T9393] syz.3.1935: attempt to access beyond end of device [ 112.736815][ T9393] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 112.750502][ T9393] syz.3.1935: attempt to access beyond end of device [ 112.750502][ T9393] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 112.764651][ T9393] syz.3.1935: attempt to access beyond end of device [ 112.764651][ T9393] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 112.778367][ T9393] syz.3.1935: attempt to access beyond end of device [ 112.778367][ T9393] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 112.808130][ T9393] syz.3.1935: attempt to access beyond end of device [ 112.808130][ T9393] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 112.822527][ T9393] syz.3.1935: attempt to access beyond end of device [ 112.822527][ T9393] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 113.583967][ T9504] __nla_validate_parse: 3 callbacks suppressed [ 113.583986][ T9504] netlink: 28 bytes leftover after parsing attributes in process `wޣ'. [ 113.627947][ T9516] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.1941'. [ 113.637251][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1941'. [ 113.752028][ T9526] loop5: detected capacity change from 0 to 1024 [ 113.763414][ T9526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.776895][ T9524] loop3: detected capacity change from 0 to 8192 [ 113.987493][ T9541] wg2: left promiscuous mode [ 113.992292][ T9541] wg2: left allmulticast mode [ 114.021849][ T9526] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 114.045734][ T9541] wg2: entered promiscuous mode [ 114.050642][ T9541] wg2: entered allmulticast mode [ 114.127405][ T5118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.200535][ T4443] 0: reclassify loop, rule prio 0, protocol 800 [ 114.363330][ T9572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.370819][ T9572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.378674][ T9572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.386327][ T9572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.499292][ T9607] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.1979'. [ 114.669793][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 114.830543][ T9579] 0: reclassify loop, rule prio 0, protocol 800 [ 115.122140][ T9638] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1990'. [ 115.309789][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 115.429507][ T9655] 0: reclassify loop, rule prio 0, protocol 800 [ 115.445368][ T9657] netlink: 'syz.6.1998': attribute type 1 has an invalid length. [ 115.451789][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1999'. [ 115.470417][ T4457] 0: reclassify loop, rule prio 0, protocol 800 [ 115.477365][ T9601] 0: reclassify loop, rule prio 0, protocol 800 [ 115.501528][ T9657] bond1: entered promiscuous mode [ 115.506778][ T9657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.544405][ T9657] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1998'. [ 115.556969][ T9657] batadv3: entered promiscuous mode [ 115.562357][ T9657] batadv3: entered allmulticast mode [ 115.569230][ T9657] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 115.571484][ T9664] loop5: detected capacity change from 0 to 256 [ 115.577701][ T9657] bond1: (slave batadv3): making interface the new active one [ 115.590697][ T9657] bond1: (slave batadv3): Enslaving as an active interface with an up link [ 115.601867][ T9668] 0: reclassify loop, rule prio 0, protocol 800 [ 115.638788][ T9672] loop5: detected capacity change from 0 to 128 [ 116.074100][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2010'. [ 116.083518][ T9690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.131150][ T9690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.684840][ T9715] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.695390][ T9715] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.771858][ T9715] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.782532][ T9715] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.793583][ T9719] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 116.802886][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 116.802899][ T29] audit: type=1400 audit(116.773:2468): avc: denied { relabelfrom } for pid=9718 comm="syz.7.2021" name="NETLINK" dev="sockfs" ino=26103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 116.832391][ T29] audit: type=1400 audit(116.783:2469): avc: denied { relabelto } for pid=9718 comm="syz.7.2021" name="NETLINK" dev="sockfs" ino=26103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 116.903082][ T9715] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.913432][ T9715] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.004943][ T9715] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.015280][ T9715] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.111315][ T9715] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.119707][ T9715] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.146639][ T9715] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.155056][ T9715] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.166852][ T29] audit: type=1326 audit(117.143:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 117.173397][ T9715] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.197905][ T9715] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.212600][ T9715] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.220928][ T9715] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.230466][ T29] audit: type=1326 audit(117.173:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 117.253388][ T29] audit: type=1326 audit(117.173:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 117.276435][ T29] audit: type=1326 audit(117.173:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 117.299239][ T29] audit: type=1326 audit(117.173:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 117.322237][ T29] audit: type=1326 audit(117.173:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 117.345564][ T29] audit: type=1326 audit(117.173:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 117.368477][ T29] audit: type=1326 audit(117.173:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 117.776037][ T9787] loop5: detected capacity change from 0 to 128 [ 117.802760][ T9787] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.818257][ T9787] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2048'. [ 117.865140][ T5118] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.127198][ T9821] 0: reclassify loop, rule prio 0, protocol 800 [ 118.290431][ T9831] loop7: detected capacity change from 0 to 256 [ 118.297109][ T9831] vfat: Unknown parameter '18446744073709551615)՝"' [ 118.383720][ T9837] loop5: detected capacity change from 0 to 164 [ 118.404487][ T9837] bio_check_eod: 71 callbacks suppressed [ 118.404501][ T9837] syz.5.2070: attempt to access beyond end of device [ 118.404501][ T9837] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 118.428697][ T9837] syz.5.2070: attempt to access beyond end of device [ 118.428697][ T9837] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 118.648442][ T9852] bond2: entered promiscuous mode [ 118.653720][ T9852] bond2: entered allmulticast mode [ 118.659192][ T9852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.669793][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 118.688904][ T9852] bond2 (unregistering): Released all slaves [ 118.860123][ T9865] netlink: 2036 bytes leftover after parsing attributes in process `syz.7.2078'. [ 118.869493][ T9865] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2078'. [ 119.042470][ T9882] $H: renamed from bond0 (while UP) [ 119.062310][ T9882] $H: entered promiscuous mode [ 119.067411][ T9882] bond_slave_0: entered promiscuous mode [ 119.073145][ T9882] bond_slave_1: entered promiscuous mode [ 119.389739][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 119.562306][ T9980] netlink: 'syz.8.2096': attribute type 10 has an invalid length. [ 119.570578][ T9980] veth1_vlan: entered allmulticast mode [ 119.684159][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2099'. [ 119.950005][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 119.956780][ T4482] 0: reclassify loop, rule prio 0, protocol 800 [ 119.963783][ T9602] 0: reclassify loop, rule prio 0, protocol 800 [ 119.973928][T10044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.981148][T10044] IPv6: NLM_F_CREATE should be set when creating new route [ 120.242386][T10058] netlink: zone id is out of range [ 120.383233][T10070] loop3: detected capacity change from 0 to 2048 [ 120.390421][T10070] EXT4-fs: Ignoring removed nobh option [ 120.403309][T10070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.422704][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2119'. [ 120.459291][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.476247][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2119'. [ 120.595693][ T4482] 0: reclassify loop, rule prio 0, protocol 800 [ 120.609529][T10084] wg2: entered promiscuous mode [ 120.614457][T10084] wg2: entered allmulticast mode [ 120.620393][ T9601] 0: reclassify loop, rule prio 0, protocol 800 [ 120.675897][T10092] bridge: RTM_NEWNEIGH with invalid ether address [ 120.765935][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2131'. [ 120.790495][T10106] IPv4: Oversized IP packet from 127.202.26.0 [ 120.842032][T10114] loop7: detected capacity change from 0 to 2048 [ 120.863440][T10114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.881517][T10119] loop3: detected capacity change from 0 to 1024 [ 120.934136][T10119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.965794][T10119] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 120.978199][T10119] EXT4-fs (loop3): This should not happen!! Data will be lost [ 120.978199][T10119] [ 120.987969][T10119] EXT4-fs (loop3): Total free blocks count 0 [ 120.994026][T10119] EXT4-fs (loop3): Free/Dirty block details [ 120.999938][T10119] EXT4-fs (loop3): free_blocks=0 [ 121.004877][T10119] EXT4-fs (loop3): dirty_blocks=0 [ 121.009920][T10119] EXT4-fs (loop3): Block reservation details [ 121.015967][T10119] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 121.062085][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.087895][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.230206][ T9579] 0: reclassify loop, rule prio 0, protocol 800 [ 121.303680][T10145] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.348715][T10147] SELinux: ebitmap: truncated map [ 121.354841][T10147] SELinux: failed to load policy [ 121.372145][T10145] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.415510][T10151] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2150'. [ 121.431908][T10145] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.491984][T10145] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.579133][T10145] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.592645][T10145] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.603935][T10145] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.620573][T10145] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.660033][T10163] sch_tbf: burst 2 is lower than device ip6tnl0 mtu (1452) ! [ 121.731574][T10175] loop3: detected capacity change from 0 to 1024 [ 121.784631][T10175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.885537][T10188] netlink: 'wޣ': attribute type 7 has an invalid length. [ 121.893105][T10188] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 121.907150][T10185] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2161: bg 0: block 393: padding at end of block bitmap is not set [ 121.957120][T10185] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 122.007473][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.097711][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2172'. [ 122.156971][T10200] loop5: detected capacity change from 0 to 8192 [ 122.192193][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 122.192209][ T29] audit: type=1326 audit(2700.158:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 122.221643][ T29] audit: type=1326 audit(2700.158:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 122.244674][ T29] audit: type=1326 audit(2700.158:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 122.267587][ T29] audit: type=1326 audit(2700.158:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 122.290661][ T29] audit: type=1326 audit(2700.158:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 122.313663][ T29] audit: type=1326 audit(2700.158:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 122.336558][ T29] audit: type=1326 audit(2700.158:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 122.359770][ T29] audit: type=1326 audit(2700.158:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 122.382763][ T29] audit: type=1326 audit(2700.158:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 122.405796][ T29] audit: type=1326 audit(2700.158:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8cce9a9 code=0x7ffc0000 [ 122.492482][T10213] loop5: detected capacity change from 0 to 1024 [ 122.552518][T10213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.681781][ T5118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.760568][T10228] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10228 comm=syz.6.2183 [ 122.773749][T10228] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10228 comm=syz.6.2183 [ 122.917339][T10243] loop5: detected capacity change from 0 to 2048 [ 123.039596][T10252] batadv_slave_0: entered promiscuous mode [ 123.039876][T10243] loop5: p1 < > p4 [ 123.052292][T10243] loop5: p4 size 722688 extends beyond EOD, truncated [ 123.053481][T10252] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 123.079381][T10252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.124086][T10252] batadv_slave_0 (unregistering): left promiscuous mode [ 123.154713][T10252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.231807][T10261] $H: renamed from  [ 123.238827][T10261] $H: entered promiscuous mode [ 123.243979][T10261] bond_slave_0: entered promiscuous mode [ 123.249729][T10261] bond_slave_1: entered promiscuous mode [ 123.311714][T10275] netlink: 'syz.5.2203': attribute type 13 has an invalid length. [ 123.352319][T10281] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 123.429988][T10275] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.438475][T10275] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.446983][T10275] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.455445][T10275] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.523822][T10295] loop5: detected capacity change from 0 to 256 [ 123.626635][T10301] SELinux: failed to load policy [ 123.789345][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 124.162676][T10336] veth0_vlan: entered allmulticast mode [ 124.189125][T10336] veth0_vlan: left promiscuous mode [ 124.194461][T10336] veth0_vlan: entered promiscuous mode [ 124.295910][T10346] wg2: left promiscuous mode [ 124.300737][T10346] wg2: left allmulticast mode [ 124.309023][T10346] wg2: entered promiscuous mode [ 124.314064][T10346] wg2: entered allmulticast mode [ 124.336310][T10351] loop3: detected capacity change from 0 to 512 [ 124.343544][T10351] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.353441][T10351] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 124.400417][T10358] netlink: 'syz.7.2240': attribute type 1 has an invalid length. [ 124.413745][T10358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.428939][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2240'. [ 124.443603][T10358] bond1 (unregistering): Released all slaves [ 124.447618][T10364] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2242'. [ 124.462081][T10364] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.471169][T10364] bond_slave_0: left promiscuous mode [ 124.478112][T10364] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.495627][T10367] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2243'. [ 124.505329][T10367] net_ratelimit: 82 callbacks suppressed [ 124.505356][T10364] bond_slave_1: left promiscuous mode [ 124.505369][T10367] netlink: zone id is out of range [ 124.522616][T10367] netlink: zone id is out of range [ 124.527302][T10364] $H (unregistering): Released all slaves [ 124.527754][T10367] netlink: zone id is out of range [ 124.538980][T10367] netlink: zone id is out of range [ 124.544197][T10367] netlink: del zone limit has 8 unknown bytes [ 124.557050][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2241'. [ 124.763773][T10402] netlink: 'syz.3.2258': attribute type 1 has an invalid length. [ 124.786872][T10402] smc: adding net device bond0 with user defined pnetid SYZ2 [ 124.794874][T10402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.804665][T10402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2258'. [ 124.836439][T10402] smc: removing net device bond0 with user defined pnetid SYZ2 [ 124.859292][T10402] bond0 (unregistering): Released all slaves [ 124.887246][T10418] netlink: 'syz.5.2264': attribute type 1 has an invalid length. [ 124.901001][T10418] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.928100][T10418] bond3 (unregistering): Released all slaves [ 125.012981][T10430] netlink: 'syz.6.2269': attribute type 10 has an invalid length. [ 125.058986][T10430] team0: Port device dummy0 added [ 125.077817][T10433] netlink: 'syz.6.2269': attribute type 10 has an invalid length. [ 125.099493][T10433] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 125.126579][T10433] team0: Failed to send options change via netlink (err -105) [ 125.138091][T10433] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 125.147178][T10433] team0: Port device dummy0 removed [ 125.155901][T10433] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.342962][T10453] loop3: detected capacity change from 0 to 512 [ 125.352571][T10453] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.365491][T10453] EXT4-fs (loop3): 1 truncate cleaned up [ 125.374090][T10453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.403204][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.662261][T10477] netlink: 'syz.8.2283': attribute type 1 has an invalid length. [ 125.675228][T10477] bond1: entered promiscuous mode [ 125.680647][T10477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.694232][T10477] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2283'. [ 125.706034][T10477] batadv2: entered promiscuous mode [ 125.709088][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 125.711501][T10477] batadv2: entered allmulticast mode [ 125.723501][ T4457] 0: reclassify loop, rule prio 0, protocol 800 [ 125.724241][T10477] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 125.739557][T10477] bond1: (slave batadv2): making interface the new active one [ 125.747754][T10487] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2283'. [ 125.757224][T10477] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 125.769986][T10487] batadv3: entered promiscuous mode [ 125.775254][T10487] batadv3: entered allmulticast mode [ 125.781135][T10487] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 125.790195][T10487] bond1: (slave batadv3): Enslaving as an active interface with an up link [ 125.816168][T10487] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2283'. [ 125.841102][T10487] batadv4: entered promiscuous mode [ 125.846329][T10487] batadv4: entered allmulticast mode [ 125.852651][T10487] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 125.863017][T10487] bond1: (slave batadv4): Enslaving as an active interface with an up link [ 126.190433][T10512] 0: reclassify loop, rule prio 0, protocol 800 [ 126.241372][T10516] netlink: 'syz.7.2299': attribute type 12 has an invalid length. [ 126.359437][ T9579] 0: reclassify loop, rule prio 0, protocol 800 [ 126.366234][ T4482] 0: reclassify loop, rule prio 0, protocol 800 [ 126.637969][T10528] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2307' sets config #1 [ 126.855466][T10536] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.865554][T10536] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.903432][T10536] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.913380][T10536] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.954221][T10536] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.964110][T10536] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.013755][T10536] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.023759][T10536] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.103299][T10536] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.111590][T10536] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.125243][T10536] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.133695][T10536] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.149136][T10536] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.157399][T10536] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.169785][T10536] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.178019][T10536] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.280531][T10574] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.2325'. [ 127.293021][T10571] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2327'. [ 127.322855][T10580] wg2: left promiscuous mode [ 127.327606][T10580] wg2: left allmulticast mode [ 127.373594][T10580] wg2: entered promiscuous mode [ 127.378640][T10580] wg2: entered allmulticast mode [ 127.446542][T10592] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10592 comm=syz.8.2333 [ 127.459141][T10592] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10592 comm=syz.8.2333 [ 127.602865][T10600] loop3: detected capacity change from 0 to 1024 [ 127.932516][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 127.932531][ T29] audit: type=1326 audit(2705.909:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9560e9a9 code=0x7ffc0000 [ 127.961981][ T29] audit: type=1326 audit(2705.909:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9560e9a9 code=0x7ffc0000 [ 128.015576][ T29] audit: type=1326 audit(2705.969:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6f9560e9a9 code=0x7ffc0000 [ 128.038627][ T29] audit: type=1326 audit(2705.969:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9560e9a9 code=0x7ffc0000 [ 128.061788][ T29] audit: type=1326 audit(2705.969:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f6f9560e9a9 code=0x7ffc0000 [ 128.084786][ T29] audit: type=1326 audit(2705.969:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9560e9a9 code=0x7ffc0000 [ 128.107880][ T29] audit: type=1326 audit(2705.969:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6f9560e9a9 code=0x7ffc0000 [ 128.130916][ T29] audit: type=1326 audit(2705.969:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9560e9a9 code=0x7ffc0000 [ 128.153879][ T29] audit: type=1326 audit(2705.969:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f6f9560e9a9 code=0x7ffc0000 [ 128.176866][ T29] audit: type=1326 audit(2705.969:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9560e9a9 code=0x7ffc0000 [ 128.205384][T10614] loop5: detected capacity change from 0 to 512 [ 128.220977][T10614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.257079][ T5118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.325183][T10629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.332708][T10629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.660562][T10657] atomic_op ffff8881375c7d28 conn xmit_atomic 0000000000000000 [ 129.210900][T10707] netlink: 'syz.3.2380': attribute type 13 has an invalid length. [ 129.278052][T10707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.342752][T10707] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.351473][T10707] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.359928][T10707] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.368294][T10707] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.400991][ T3400] syz1: Port: 1 Link DOWN [ 129.566814][T10723] loop7: detected capacity change from 0 to 512 [ 129.594560][T10723] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 129.633700][T10723] EXT4-fs (loop7): 1 truncate cleaned up [ 129.645544][T10723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.664142][T10723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.871494][T10788] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.941866][T10788] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.052582][T10788] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.130827][T10788] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.218258][T10788] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.233307][T10788] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.246428][T10788] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.261616][T10788] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.419586][T10820] bond1: entered promiscuous mode [ 131.424754][T10820] bond1: entered allmulticast mode [ 131.430373][T10820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.440957][T10820] bond1 (unregistering): Released all slaves [ 131.560758][T10829] sch_fq: defrate 0 ignored. [ 131.583487][T10831] $H: renamed from bond0 (while UP) [ 131.592899][T10831] $H: entered promiscuous mode [ 131.598072][T10831] bond_slave_0: entered promiscuous mode [ 131.603962][T10831] bond_slave_1: entered promiscuous mode [ 131.994348][T10860] netlink: 'syz.3.2444': attribute type 1 has an invalid length. [ 132.007049][T10860] smc: adding net device bond0 with user defined pnetid SYZ2 [ 132.015140][T10860] bond0: entered promiscuous mode [ 132.020886][T10860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.033153][T10860] __nla_validate_parse: 2 callbacks suppressed [ 132.033167][T10860] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2444'. [ 132.051267][T10860] batadv4: entered promiscuous mode [ 132.056630][T10860] batadv4: entered allmulticast mode [ 132.063549][T10860] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 132.071602][T10860] bond0: (slave batadv4): making interface the new active one [ 132.079940][T10860] bond0: (slave batadv4): Enslaving as an active interface with an up link [ 132.444122][T10869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2448'. [ 132.465063][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2448'. [ 132.480480][T10871] rdma_rxe: rxe_newlink: failed to add bridge0 [ 132.849155][T10904] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.859047][T10904] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.959703][T10904] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.969699][T10904] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.984878][ T29] kauditd_printk_skb: 466 callbacks suppressed [ 132.984892][ T29] audit: type=1326 audit(2710.959:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12f3d25967 code=0x7ffc0000 [ 133.014024][ T29] audit: type=1326 audit(2710.959:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12f3ccab89 code=0x7ffc0000 [ 133.036948][ T29] audit: type=1326 audit(2710.959:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12f3d25967 code=0x7ffc0000 [ 133.059970][ T29] audit: type=1326 audit(2710.959:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12f3ccab89 code=0x7ffc0000 [ 133.082853][ T29] audit: type=1326 audit(2710.959:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 133.105870][ T29] audit: type=1326 audit(2710.959:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 133.128822][ T29] audit: type=1326 audit(2710.959:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 133.154714][ T29] audit: type=1326 audit(2711.009:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 133.177716][ T29] audit: type=1326 audit(2711.009:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12f3d25967 code=0x7ffc0000 [ 133.200812][ T29] audit: type=1326 audit(2711.009:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12f3ccab89 code=0x7ffc0000 [ 133.238604][T10904] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.248568][T10904] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.309429][T10904] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.319420][T10904] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.358974][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2468'. [ 133.368491][T10934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.378179][T10934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.412536][T10904] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.420810][T10904] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.441665][T10904] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.449953][T10904] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.463278][T10904] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.471530][T10904] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.496660][T10904] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.504931][T10904] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.908490][T10990] $H: renamed from bond0 (while UP) [ 133.915736][T10990] $H: entered promiscuous mode [ 133.920868][T10990] bond_slave_0: entered promiscuous mode [ 133.926694][T10990] bond_slave_1: entered promiscuous mode [ 133.932733][T10990] dummy0: entered promiscuous mode [ 134.010705][T11002] bond2: entered promiscuous mode [ 134.015868][T11002] bond2: entered allmulticast mode [ 134.021223][T11002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.037780][T11002] bond2 (unregistering): Released all slaves [ 134.159537][T11020] 9pnet: p9_errstr2errno: server reported unknown error [ 134.277577][T11061] loop5: detected capacity change from 0 to 1024 [ 134.342198][T11061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.441091][T11061] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2480: Allocating blocks 497-513 which overlap fs metadata [ 134.655609][T11060] EXT4-fs (loop5): pa ffff888106a5f3f0: logic 304, phys. 449, len 4 [ 134.663833][T11060] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 134.712998][ T5118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.736209][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2488'. [ 134.991193][T11144] wg2: entered promiscuous mode [ 134.996214][T11144] wg2: entered allmulticast mode [ 135.101468][T11151] loop3: detected capacity change from 0 to 1024 [ 135.127051][T11151] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 135.154251][T11154] team0 (unregistering): Port device team_slave_0 removed [ 135.171548][T11154] team0 (unregistering): Port device team_slave_1 removed [ 135.563685][T11186] IPv6: Can't replace route, no match found [ 135.625476][T11192] loop7: detected capacity change from 0 to 2048 [ 135.635117][T11192] EXT4-fs: Ignoring removed nobh option [ 135.658515][T11192] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.703211][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.736094][T11214] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2519'. [ 135.782013][T11220] loop7: detected capacity change from 0 to 2048 [ 135.831436][T11220] loop7: p1 < > p4 [ 135.839809][T11220] loop7: p4 size 722688 extends beyond EOD, truncated [ 135.922254][T11232] IPv6: Can't replace route, no match found [ 136.099334][T11248] netlink: 'syz.3.2534': attribute type 12 has an invalid length. [ 136.131803][T11250] loop3: detected capacity change from 0 to 2048 [ 136.162466][T11250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.179404][T11241] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2532'. [ 136.262157][T11256] SELinux: failed to load policy [ 136.301754][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.320753][T11262] netlink: 'syz.3.2540': attribute type 7 has an invalid length. [ 136.328650][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2540'. [ 136.620104][T11295] net_ratelimit: 1 callbacks suppressed [ 136.620116][T11295] netlink: zone id is out of range [ 136.630993][T11295] netlink: zone id is out of range [ 136.636114][T11295] netlink: zone id is out of range [ 136.641299][T11295] netlink: zone id is out of range [ 136.646420][T11295] netlink: zone id is out of range [ 136.651640][T11295] netlink: zone id is out of range [ 136.656970][T11295] netlink: zone id is out of range [ 136.662241][T11295] netlink: zone id is out of range [ 136.667393][T11295] netlink: zone id is out of range [ 136.672618][T11295] netlink: zone id is out of range [ 136.769523][T11312] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.780053][T11312] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.844867][T11312] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.855237][T11312] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.927236][T11312] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.937681][T11312] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.993644][T11312] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.004083][T11312] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.074286][T11312] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.082670][T11312] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.095196][T11312] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.103486][T11312] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.129939][T11365] rdma_rxe: rxe_newlink: failed to add bridge0 [ 137.131765][T11312] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.144444][T11312] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.156145][T11312] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.164502][T11312] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.176678][T11368] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2554'. [ 137.342740][T11400] 9pnet: p9_errstr2errno: server reported unknown error [ 137.551828][T11442] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2572'. [ 137.993595][ T29] kauditd_printk_skb: 496 callbacks suppressed [ 137.993611][ T29] audit: type=1326 audit(2715.970:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9173fb5967 code=0x7ffc0000 [ 138.030197][ T29] audit: type=1326 audit(2716.000:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9173f5ab89 code=0x7ffc0000 [ 138.053230][ T29] audit: type=1326 audit(2716.000:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9173fb5967 code=0x7ffc0000 [ 138.076163][ T29] audit: type=1326 audit(2716.000:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9173f5ab89 code=0x7ffc0000 [ 138.099077][ T29] audit: type=1326 audit(2716.000:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 138.122444][ T29] audit: type=1326 audit(2716.090:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9173fb5967 code=0x7ffc0000 [ 138.145521][ T29] audit: type=1326 audit(2716.090:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9173f5ab89 code=0x7ffc0000 [ 138.168469][ T29] audit: type=1326 audit(2716.090:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 138.191572][ T29] audit: type=1326 audit(2716.090:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9173fb5967 code=0x7ffc0000 [ 138.214473][ T29] audit: type=1326 audit(2716.090:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9173f5ab89 code=0x7ffc0000 [ 138.341818][T11451] loop3: detected capacity change from 0 to 8192 [ 138.913552][T11479] veth0_vlan: entered allmulticast mode [ 138.952006][T11479] veth0_vlan: left promiscuous mode [ 138.957275][T11479] veth0_vlan: entered promiscuous mode [ 139.021556][T11483] futex_wake_op: syz.8.2586 tries to shift op by -1; fix this program [ 139.101921][T11488] netlink: 'syz.8.2587': attribute type 1 has an invalid length. [ 139.129408][T11488] bond0: entered promiscuous mode [ 139.134571][T11488] bond0: entered allmulticast mode [ 139.170652][T11491] netlink: 28 bytes leftover after parsing attributes in process `wޣ'. [ 139.179533][T11488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.204517][T11488] ip6gretap1: entered promiscuous mode [ 139.210218][T11488] ip6gretap1: entered allmulticast mode [ 139.216237][T11488] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 139.271056][T11493] netlink: 'syz.6.2594': attribute type 1 has an invalid length. [ 139.303231][T11493] bond0: entered promiscuous mode [ 139.309024][T11493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.329650][T11493] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2594'. [ 139.345364][T11504] loop7: detected capacity change from 0 to 1024 [ 139.354472][T11493] batadv0: entered promiscuous mode [ 139.359786][T11493] batadv0: entered allmulticast mode [ 139.377137][T11493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.384545][T11506] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2594'. [ 139.386033][T11493] bond0: (slave batadv0): making interface the new active one [ 139.401928][T11493] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 139.414548][T11506] batadv4: entered promiscuous mode [ 139.420087][T11506] batadv4: entered allmulticast mode [ 139.426150][T11506] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 139.434789][T11504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.458579][T11506] bond0: (slave batadv4): Enslaving as an active interface with an up link [ 139.468265][T11506] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2594'. [ 139.494293][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.526065][T11506] batadv5: entered promiscuous mode [ 139.531357][T11506] batadv5: entered allmulticast mode [ 139.533527][T11512] loop3: detected capacity change from 0 to 256 [ 139.549546][T11506] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 139.558091][T11506] bond0: (slave batadv5): Enslaving as an active interface with an up link [ 139.567075][T11512] vfat: Unknown parameter '18446744073709551615)՝"' [ 139.616830][T11521] futex_wake_op: syz.6.2601 tries to shift op by -1; fix this program [ 139.636717][T11525] netlink: 'syz.5.2603': attribute type 1 has an invalid length. [ 139.662878][T11525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.675131][T11525] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2603'. [ 139.689694][T11525] bond3 (unregistering): Released all slaves [ 139.730869][T11539] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.2607' sets config #1 [ 139.790110][T11544] loop5: detected capacity change from 0 to 2048 [ 139.796810][T11546] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2611'. [ 139.822475][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2611'. [ 139.913020][T11555] batadv_slave_0: entered promiscuous mode [ 139.920842][T11555] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 139.932168][T11555] batadv_slave_0 (unregistering): left promiscuous mode [ 139.936707][T11559] netlink: 'syz.6.2616': attribute type 1 has an invalid length. [ 139.947836][T11557] wg2: left promiscuous mode [ 139.952487][T11557] wg2: left allmulticast mode [ 139.963739][T11559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.976273][T11557] wg2: entered promiscuous mode [ 139.981247][T11557] wg2: entered allmulticast mode [ 140.003794][T11559] bond2 (unregistering): Released all slaves [ 140.123407][T11578] loop7: detected capacity change from 0 to 1024 [ 140.139493][T11578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.294395][T11578] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 140.341401][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.602706][T11592] loop7: detected capacity change from 0 to 128 [ 140.723526][T11603] batadv_slave_0: entered promiscuous mode [ 140.750591][T11609] loop3: detected capacity change from 0 to 512 [ 140.750927][T11603] batadv_slave_0 (unregistering): left promiscuous mode [ 140.772223][T11602] wg2: entered promiscuous mode [ 140.777267][T11602] wg2: entered allmulticast mode [ 140.793661][T11609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.815546][T11609] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2634: corrupted inode contents [ 140.827979][T11609] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2634: mark_inode_dirty error [ 140.839497][T11609] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2634: corrupted inode contents [ 140.851568][T11609] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2634: mark_inode_dirty error [ 140.867443][T11609] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2634: corrupted inode contents [ 140.879768][T11609] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2634: mark_inode_dirty error [ 140.905853][T11615] netlink: 'syz.8.2649': attribute type 10 has an invalid length. [ 140.913081][T11609] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2634: corrupted inode contents [ 140.913937][T11615] dummy0: left promiscuous mode [ 140.939404][T11615] netlink: 'syz.8.2649': attribute type 10 has an invalid length. [ 140.948709][T11615] dummy0: entered promiscuous mode [ 140.954264][T11615] $H: (slave dummy0): Enslaving as an active interface with an up link [ 140.985854][T11625] netlink: 'syz.5.2637': attribute type 1 has an invalid length. [ 141.009962][T11625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.018780][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.031237][T11625] bond3 (unregistering): Released all slaves [ 141.109110][T11643] loop5: detected capacity change from 0 to 1024 [ 141.132631][T11643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.173226][T11648] loop7: detected capacity change from 0 to 8192 [ 141.193632][T11643] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2651: Allocating blocks 497-513 which overlap fs metadata [ 141.217384][T11643] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 117 [ 141.229792][T11643] EXT4-fs (loop5): This should not happen!! Data will be lost [ 141.229792][T11643] [ 141.304666][ T5118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.741994][T11668] netlink: 'syz.5.2658': attribute type 10 has an invalid length. [ 141.774474][T11668] dummy0: left promiscuous mode [ 141.780009][T11668] netlink: 'syz.5.2658': attribute type 10 has an invalid length. [ 141.795530][T11668] dummy0: entered promiscuous mode [ 141.801258][T11668] $H: (slave dummy0): Enslaving as an active interface with an up link [ 142.650819][T11697] loop3: detected capacity change from 0 to 512 [ 142.756451][T11697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.849507][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.047289][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 143.047305][ T29] audit: type=1326 audit(7877.030:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.5.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f12f3d2e9a9 code=0x7ffc0000 [ 143.922262][T11734] __nla_validate_parse: 4 callbacks suppressed [ 143.922275][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2682'. [ 143.963097][T11734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.976278][T11734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.279401][T11764] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2687'. [ 144.809699][T11850] loop3: detected capacity change from 0 to 512 [ 144.829520][ T29] audit: type=1326 audit(7878.810:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11855 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 144.877958][ T29] audit: type=1326 audit(7878.810:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11855 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 144.895837][T11850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.901080][ T29] audit: type=1326 audit(7878.810:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11855 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 144.936730][ T29] audit: type=1326 audit(7878.810:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11855 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 144.959834][ T29] audit: type=1326 audit(7878.810:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11855 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 144.982976][ T29] audit: type=1326 audit(7878.810:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11855 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 145.006049][ T29] audit: type=1326 audit(7878.810:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11855 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 145.029195][ T29] audit: type=1326 audit(7878.810:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11855 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 145.052261][ T29] audit: type=1326 audit(7878.810:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11855 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9173fbe9a9 code=0x7ffc0000 [ 145.126956][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.182815][T11885] loop7: detected capacity change from 0 to 8192 [ 145.206515][T11892] veth0: entered promiscuous mode [ 145.229880][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2696'. [ 145.256982][T11892] veth0 (unregistering): left promiscuous mode [ 145.672158][T11919] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2703'. [ 146.280147][T11947] loop5: detected capacity change from 0 to 2048 [ 146.313367][T11947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.322222][T11951] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2717'. [ 146.374288][T11951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.399715][T11947] loop5: detected capacity change from 2048 to 64 [ 146.409969][T11957] vlan0: entered allmulticast mode [ 146.415185][T11957] bond1: entered allmulticast mode [ 146.512696][ T5118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.541857][T11962] netlink: 'syz.6.2722': attribute type 10 has an invalid length. [ 146.552050][T11952] kmmpd-loop5: attempt to access beyond end of device [ 146.552050][T11952] loop5: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 146.565643][T11952] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 146.575800][T11962] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.584321][T11962] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.592735][T11962] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.601155][T11962] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.732388][T11969] loop7: detected capacity change from 0 to 1024 [ 146.740274][T11969] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 147.105521][T11976] chnl_net:caif_netlink_parms(): no params data found [ 147.150414][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2736'. [ 147.173534][T12004] veth0: entered promiscuous mode [ 147.188096][T12002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.204583][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2737'. [ 147.232260][T12002] vlan2: entered allmulticast mode [ 147.237448][T12002] bond2: entered allmulticast mode [ 147.302800][T11976] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.309948][T11976] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.335217][T11976] bridge_slave_0: entered allmulticast mode [ 147.341736][T11976] bridge_slave_0: entered promiscuous mode [ 147.353093][T11976] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.360282][T11976] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.371695][T11976] bridge_slave_1: entered allmulticast mode [ 147.378283][T11976] bridge_slave_1: entered promiscuous mode [ 147.417633][T12011] loop7: detected capacity change from 0 to 1024 [ 147.419664][T11976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.434483][T11976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.457313][T12011] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.489786][T11976] team0: Port device team_slave_0 added [ 147.496758][T11976] team0: Port device team_slave_1 added [ 147.513246][T11976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.520266][T11976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.546299][T11976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.557826][T11976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.564835][T11976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.590873][T11976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.632591][ T4480] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:39: lblock 1 mapped to illegal pblock 1 (length 3) [ 147.652796][T11976] hsr_slave_0: entered promiscuous mode [ 147.662674][T11976] hsr_slave_1: entered promiscuous mode [ 147.665725][ T4480] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 147.669040][T11976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.680615][ T4480] EXT4-fs (loop7): This should not happen!! Data will be lost [ 147.680615][ T4480] [ 147.688283][T11976] Cannot create hsr debugfs directory [ 147.710504][ T4480] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 147.730956][ T4480] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 24 with error 28 [ 147.743348][ T4480] EXT4-fs (loop7): This should not happen!! Data will be lost [ 147.743348][ T4480] [ 147.753020][ T4480] EXT4-fs (loop7): Total free blocks count 0 [ 147.753533][T12022] loop3: detected capacity change from 0 to 2048 [ 147.759100][ T4480] EXT4-fs (loop7): Free/Dirty block details [ 147.771317][ T4480] EXT4-fs (loop7): free_blocks=4293918720 [ 147.777138][ T4480] EXT4-fs (loop7): dirty_blocks=32 [ 147.782265][ T4480] EXT4-fs (loop7): Block reservation details [ 147.802596][T12022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.822428][T12026] netlink: 'syz.7.2741': attribute type 10 has an invalid length. [ 147.855091][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.901520][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2744'. [ 147.908944][T11976] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 147.919801][T12031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.930089][T11976] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 147.939577][T11976] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 147.948924][T11976] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 147.994924][T11976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.011737][T11976] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.022798][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.029938][ T9590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.051115][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.058260][ T9590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.151035][T11976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.158047][T12050] loop3: detected capacity change from 0 to 2048 [ 148.196384][T12050] loop3: p1 < > p4 [ 148.200763][T12050] loop3: p4 size 8388608 extends beyond EOD, truncated [ 148.264723][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2749'. [ 148.280824][T12062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.296498][T12062] vlan2: entered allmulticast mode [ 148.301653][T12062] bond2: entered allmulticast mode [ 148.351590][T11976] veth0_vlan: entered promiscuous mode [ 148.363105][T11976] veth1_vlan: entered promiscuous mode [ 148.378164][T11976] veth0_macvtap: entered promiscuous mode [ 148.385458][T11976] veth1_macvtap: entered promiscuous mode [ 148.396504][T11976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.404862][T11976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.417076][T11976] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.425923][T11976] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.434812][T11976] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.443622][T11976] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.472313][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 148.472324][ T29] audit: type=1400 audit(10460.456:4036): avc: denied { mount } for pid=11976 comm="syz-executor" name="/" dev="gadgetfs" ino=3763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 148.501236][ T29] audit: type=1400 audit(10460.466:4037): avc: denied { connect } for pid=12073 comm="syz.7.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.520758][ T29] audit: type=1400 audit(10460.466:4038): avc: denied { module_request } for pid=11976 comm="syz-executor" kmod="fs-binder" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 148.570621][T12078] loop7: detected capacity change from 0 to 512 [ 148.573487][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2754'. [ 148.587834][T12078] EXT4-fs: Ignoring removed nobh option [ 148.592540][ T29] audit: type=1326 audit(10460.576:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.9.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5414e9a9 code=0x7ffc0000 [ 148.616559][ T29] audit: type=1326 audit(10460.576:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.9.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5414e9a9 code=0x7ffc0000 [ 148.642481][ T29] audit: type=1326 audit(10460.606:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.9.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb5414e9a9 code=0x7ffc0000 [ 148.646621][T12078] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2755: bg 0: block 393: padding at end of block bitmap is not set [ 148.665576][ T29] audit: type=1326 audit(10460.606:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.9.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5414e9a9 code=0x7ffc0000 [ 148.687248][T12078] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 148.702969][ T29] audit: type=1326 audit(10460.606:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.9.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb5414e9a9 code=0x7ffc0000 [ 148.716803][T12078] EXT4-fs (loop7): 2 truncates cleaned up [ 148.734711][ T29] audit: type=1326 audit(10460.606:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.9.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5414e9a9 code=0x7ffc0000 [ 148.740921][T12078] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.763546][ T29] audit: type=1326 audit(10460.606:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.9.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb5414e9a9 code=0x7ffc0000 [ 148.799805][T12080] bond0: (slave batadv0): Releasing active interface [ 148.806529][T12080] bond0: (slave batadv0): the permanent HWaddr of slave - 4a:02:59:a5:f9:39 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 148.828460][T12080] bond0: (slave batadv4): making interface the new active one [ 148.875018][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.000635][T12092] loop9: detected capacity change from 0 to 8192 [ 149.062752][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2762'. [ 149.179087][ T9584] ================================================================== [ 149.187224][ T9584] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 149.195492][ T9584] [ 149.197832][ T9584] write to 0xffff888183b3549a of 2 bytes by task 12092 on cpu 0: [ 149.205571][ T9584] fat16_ent_put+0x28/0x60 [ 149.210021][ T9584] fat_alloc_clusters+0x4ce/0xa80 [ 149.215075][ T9584] fat_get_block+0x258/0x5e0 [ 149.219690][ T9584] __block_write_begin_int+0x3fd/0xf90 [ 149.225185][ T9584] cont_write_begin+0x5fc/0x970 [ 149.230053][ T9584] fat_write_begin+0x4f/0xe0 [ 149.234664][ T9584] cont_write_begin+0x1ad/0x970 [ 149.239557][ T9584] fat_write_begin+0x4f/0xe0 [ 149.244179][ T9584] generic_cont_expand_simple+0xb0/0x150 [ 149.249856][ T9584] fat_cont_expand+0x3e/0x170 [ 149.254552][ T9584] fat_setattr+0x2a5/0x8a0 [ 149.258984][ T9584] notify_change+0x806/0x890 [ 149.263582][ T9584] do_ftruncate+0x34b/0x450 [ 149.268107][ T9584] __x64_sys_ftruncate+0x68/0xc0 [ 149.273070][ T9584] x64_sys_call+0xd65/0x2fb0 [ 149.277675][ T9584] do_syscall_64+0xd2/0x200 [ 149.282207][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.288133][ T9584] [ 149.290463][ T9584] read to 0xffff888183b35400 of 512 bytes by task 9584 on cpu 1: [ 149.298190][ T9584] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 149.304117][ T9584] generic_perform_write+0x2c2/0x490 [ 149.309428][ T9584] shmem_file_write_iter+0xc5/0xf0 [ 149.314553][ T9584] lo_rw_aio+0x6a0/0x760 [ 149.318823][ T9584] loop_process_work+0x52d/0xa60 [ 149.323782][ T9584] loop_workfn+0x31/0x40 [ 149.328050][ T9584] process_scheduled_works+0x4cb/0x9d0 [ 149.333550][ T9584] worker_thread+0x582/0x770 [ 149.338170][ T9584] kthread+0x489/0x510 [ 149.342255][ T9584] ret_from_fork+0xda/0x150 [ 149.346772][ T9584] ret_from_fork_asm+0x1a/0x30 [ 149.351540][ T9584] [ 149.353870][ T9584] Reported by Kernel Concurrency Sanitizer on: [ 149.360031][ T9584] CPU: 1 UID: 0 PID: 9584 Comm: kworker/u8:48 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 149.370974][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.381041][ T9584] Workqueue: loop9 loop_workfn [ 149.385842][ T9584] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 149.865214][ T9617] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 150.186969][ T9617] bond1 (unregistering): Released all slaves [ 150.195138][ T9617] smc: removing net device bond0 with user defined pnetid SYZ2 [ 150.203112][ T9617] bond0 (unregistering): (slave batadv4): Releasing active interface [ 150.211853][ T9617] bond0 (unregistering): Released all slaves [ 150.220409][ T9617] bond2 (unregistering): Released all slaves [ 150.267443][ T9617] tipc: Disabling bearer [ 150.272400][ T9617] tipc: Left network mode [ 150.305391][ T9617] team0 (unregistering): Port device team_slave_1 removed [ 150.314964][ T9617] team0 (unregistering): Port device team_slave_0 removed [ 150.340492][ T9617] team0 (unregistering): Port device dummy0 removed [ 150.568938][ T9617] IPVS: stop unused estimator thread 0... [ 150.607229][ T9617] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.656648][ T9617] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.717037][ T9617] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.776788][ T9617] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.848552][ T9617] bridge0: port 3(batadv1) entered disabled state [ 150.855442][ T9617] bridge_slave_1: left allmulticast mode [ 150.861087][ T9617] bridge_slave_1: left promiscuous mode [ 150.866769][ T9617] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.874341][ T9617] bridge_slave_0: left allmulticast mode [ 150.880002][ T9617] bridge_slave_0: left promiscuous mode [ 150.885628][ T9617] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.905460][ T9] page_pool_release_retry() stalled pool shutdown: id 82, 1 inflight 60 sec [ 151.087022][ T9617] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.095967][ T9617] bond_slave_0: left promiscuous mode [ 151.102398][ T9617] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.111143][ T9617] bond_slave_1: left promiscuous mode [ 151.117557][ T9617] $H (unregistering): (slave dummy0): Releasing backup interface [ 151.126065][ T9617] dummy0: left promiscuous mode [ 151.131763][ T9617] $H (unregistering): Released all slaves [ 151.140380][ T9617] bond1 (unregistering): (slave batadv3): Releasing active interface [ 151.149535][ T9617] bond1 (unregistering): Released all slaves [ 151.158694][ T9617] bond0 (unregistering): (slave batadv4): Releasing active interface [ 151.167774][ T9617] bond0 (unregistering): (slave batadv5): Releasing active interface [ 151.176913][ T9617] bond0 (unregistering): Released all slaves [ 151.185495][ T9617] bond2 (unregistering): Released all slaves [ 151.227017][ T9617] tipc: Left network mode [ 151.233894][ T9617] hsr_slave_0: left promiscuous mode [ 151.239496][ T9617] hsr_slave_1: left promiscuous mode [ 151.247512][ T9617] veth1_macvtap: left promiscuous mode [ 151.253073][ T9617] veth0_macvtap: left promiscuous mode [ 151.258655][ T9617] veth1_vlan: left promiscuous mode [ 151.316220][ T9617] team0 (unregistering): Port device team_slave_1 removed [ 151.325395][ T9617] team0 (unregistering): Port device team_slave_0 removed [ 151.590088][ T9617] IPVS: stop unused estimator thread 0... [ 151.638396][ T9617] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.827435][ T9617] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.877777][ T9617] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.937796][ T9617] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.007987][ T9617] bridge_slave_1: left allmulticast mode [ 152.013644][ T9617] bridge_slave_1: left promiscuous mode [ 152.019334][ T9617] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.027217][ T9617] bridge_slave_0: left allmulticast mode [ 152.032846][ T9617] bridge_slave_0: left promiscuous mode [ 152.038571][ T9617] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.099029][ T9617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.109044][ T9617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.118318][ T9617] bond0 (unregistering): Released all slaves [ 152.148693][ T9617] hsr_slave_0: left promiscuous mode [ 152.154308][ T9617] hsr_slave_1: left promiscuous mode [ 152.159922][ T9617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.167404][ T9617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.174921][ T9617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.182385][ T9617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.192006][ T9617] veth1_macvtap: left promiscuous mode [ 152.197550][ T9617] veth0_macvtap: left promiscuous mode [ 152.203089][ T9617] veth1_vlan: left promiscuous mode [ 152.208466][ T9617] veth0_vlan: left promiscuous mode [ 152.266288][ T9617] team0 (unregistering): Port device team_slave_1 removed [ 152.275751][ T9617] team0 (unregistering): Port device team_slave_0 removed