last executing test programs: 1m59.560317471s ago: executing program 3 (id=90): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r3) 1m59.475618903s ago: executing program 3 (id=91): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) 1m59.450204453s ago: executing program 3 (id=92): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m59.398317424s ago: executing program 3 (id=94): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000000280)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@i_version, 0x0}, {@noload}, {@usrquota}, {@grpquota}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@acl}, {@bsdgroups}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$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") add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) flistxattr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000200)) 1m59.201623276s ago: executing program 3 (id=100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40012160, 0x0) 1m58.849856161s ago: executing program 3 (id=109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 1m58.845017921s ago: executing program 32 (id=109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 1m1.327723426s ago: executing program 5 (id=1817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m0.44162845s ago: executing program 5 (id=1849): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$eJzs3U1oHOUbAPBnZrPtv23+pgUFlR6KChVKN0k/tHpKr2Kh0IPgpS6bbQjZZEN2U5uQQ3ovYkFR6aXe9OBR8eBBvHj06kXxLIgGhaYHiUx2N/1Isq61ydbO7wezfT+GPu+bmWey7zBDAsitI9lHGvFMRJxPIobu6huIdueR1n6rK0uV2ytLlSTW1i78mkQSEbdWliqd/ZP2vwciYjkino6Ib4oRx9LNcRsLi1PlWq06164PN6dnhxsLi8cnp8sT1YnqzMmXXzl95tTp0ROjD22u1368/s617167ef3Tzw4vV94vJzEWg+2+u+fxMLV+JsUYu6/91E4E66Ok3wPggRTaeV6MiKdiKArtrAcef2t7I9aAnErkP+RU53tAtv7tbLv5/eOXs60FSBZ3tb21egZa9ybif+trk/2/J/esTLL15sHdHCiPpeWrETEyMLD5/E/a59+DG3kYA2RHfX22daA2H/904/oTW1x/Bjv3Tv+lzvVvddP17078wjbXv/M9xvjzzZ8+2jb+1Yhnt4yfbMRPtoifRsRbPca/8caXZ7brW/s44mhsHb8j6X5/ePjSZK060vrcMsZXRw+/2m3++7eJP9Zl/lnbbI/z/+Lbz59b7hL/xee7H/+t4u+LiHd7jH/o1ievb9eXxR/fZv7d4mdtN3uM/9LYkR963BUAAAAAAAAAAPgH0vVn2ZK0tFFO01Kp9Q7vk7E/rdUbzWOX6vMz461n3g5GMe08aTXUqidZfbT9PG6nfuK++smIOBQR7xX2rddLlXptvN+TBwAAAAAAAAAAAAAAAAAAgEfEgfve//+j0Hr/H8gJf/Ib8kv+Q37dm/9J38YB7D6//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74vy5c9m2dntlqZLVxy8vzE/VLx8frzamStPzlVKlPjdbmqjXJ2rVUqU+/Xf/X61enx2Jmfkrw81qozncWFi8OF2fn2lenJwuT1QvVou7MisAAAAAAAAAAAAAAAAAAAD4bxlc35K0FBHpejlNS6WI/0fEwSgmlyZr1ZGIeCIivi8U92b10X4PGgAAAAAAAAAAAAAAAAAAAB4zjYXFqXKtVp1T2FyIiOVHYBgKCn05+QEAAAAAAAAAAAAAAAAAgF1156Xffo8EAAAAAAAAAAAAAAAAAAAA8iz9OYmIbDs69MLg3T17I2JPslrIynsi4u0bFz64Um4250az9t822psftttP9GsOQC86edrJYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCOxsLiVLlWq87tYKHfcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4EH8FAAD//46R2W8=") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001740)='./bus\x00', 0x81) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = open(&(0x7f0000000100)='./bus\x00', 0x86602, 0x330269f53da8c4ce) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x50000, 0x0, 0x0) 1m0.331721691s ago: executing program 5 (id=1852): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1908004500006a76495d1400650000003a9078ac1e0001e000000180004e21009c907801000000040000004d69da731167d7d966ee21faaa03eed2fcd184b06096ac72a35bd79f33085cff8ab5c889a4e6354fcc0c08cefbf99d664efd3c8a05826e25c21d7545a95d84b968216436f9dfd65c9419725422b56d4f62c6fb8b65969e02ca79afa485fa585694f18c7cdd24aa7d1706404e62"], 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}, {&(0x7f0000003dc0)={0x22f8, 0x3f, 0x300, 0x70bd2a, 0x25dfdbfb, "", [@typed={0xc, 0xe0, 0x0, 0x0, @u64=0x5}, @nested={0xa5, 0x70, 0x0, 0x1, [@generic="28dbdd61738effa992938bd9dc71b57a608d5c2d9bd8e132dcf65808346eec4fdedfb27da54ca8c14322391f46b76db6252aa7377ecb21792a88b0dfb7dbf692f335478f7f55e6713ffdf93e723df677b7e1d41af928f507fc39fb97e4b407cd5a5d0cb5fac952c24526a77bf814268dde4a89c0642ab6fce5", @nested={0x4, 0x39}, @nested={0x4, 0xb2}, @nested={0x4, 0xc5}, @nested={0x4, 0x2e}, @nested={0x4, 0xda}, @typed={0xc, 0x139, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x119, 0x0, 0x0, @uid}]}, @nested={0x11c5, 0x3b, 0x0, 0x1, [@generic="c456d99722b8dadfcdc6eb6419adea079a84894ee733741c9a3b6880acc6cdb915e9592d8693501a6ef989e7442ae55d2c223e5e52d1fb59ada28f8218b55169de97193663d901c7766da003923f84f628b618cfc890d940bb9a7910744a3eb3b68a3828732cb91e053a2ecdd04572bfc2c4150ac6452b44f9eb4759ccb74bdb82733005ada925a6df8443eaa7d5aab02b988a3feeaad502afbc2e4a20c021327cf15d781a147c0a256a2987fc93a0c41b133db1ae1f212e7313a98f0e6a0403de061c65bb9fdb1da3769a20f6d119772024d3e28a756bfe38b82b97e9b20449759b294b0fbe061bb75f773ad858551b5be9275351cf40828a2b01ccbb303de3216335847cacd7a36ccfda346d50e3a12ba77aaa7088b6ba0f72796910a38da4b5e56e5d19f4ecff2d670df9ff5240402e749f33f11941bddc649950d14e3667a75fe2433de1cf8d86c080a9f464639139828d0afaf130fee609e1b751b43533dc61f57267e0fe558efb50b813e049b7d2a934338176fcb712eda81e262820a896bacbd5c0712cb0bbe0b3a4df90f9756a3e9280143fa80a54c67e23b64c618cf0584333487d827adb28f8911d34b34819a055a703486392a07b253c1ed1b6d85a7f86e52e28491dbf0d0a6e2cd4c3c9b5620ff8c3524bb8839ef38729991c08eff4e1fe5b4ce811f60c389c6d4168550d5331068bc61db626f34bdaa1a38e4fa6d110752589ea99f97dec09925edaf71a08c058dde8006b7bab26cb9f655aa23f857b7f22c1ebdd2349af880dca27dc282fc283c83d4c509115e829835288bf81faa398f8299e98d33fb653b120c85503185dcdcaa9bd2d31411e2b58eb9127e71219afc3d5d1fec5d26efa643bbbcfb865afdca6dbfc9990f67bfc7ee09a5fa12cd7bac6d1916bb19bd4ed490c864dcbd5181da7bbcbd9534a63cb5a31f9d70d8474f55916071e78f4ca11633a43894208280bc321bd3e1554386ddb5be86ad252c8c9d3bc6769cdce48f5819090789c6f894c2b596c43080767d62677b0463de668bca1e8f92a3cc7899a5cd44947a07933cfa8304f98cd2456595c8e74e4466acc4b1b07d14321507b486d4168aa63e383bf9447b85daca30dfa749661b8fd376d7bf8b806a4e215cb1c9cb9dc7ac7136805f58ebf24954ee0983b11149d77527ad142cf5803b00850c181d96de3a8a84ef46839ac29c4d40c7283ef04eab9399dd979a14d29fc0c768c7c3c8cbdcf62bd8a37798fe1703f3c7e9df2e071b526c3c9d192db2a009ef07a4ebf21c9d3405fc8d4088e6dcf4aeca53c80732dadae1855fe7749519ad4f35730bdc233599a8f6fe78a15ed2859ab1bc6986e20eb377b8fecc2764c39650d4c4e2512ba130685493fcf74795676ed6f1ea239263367454abe570a2723bbab47671fed1a84cf667dfc49f24df1bbeb3fe7bd603aa0e3ad7c4d2bab2bc0c6b6748d10d68d859c11cf947e9a71be468d99192319c22aeac8b1e7dd64776bb71239cf3760171b0c2f30ce43718943d59cf4b6b8c1cc6fa811c352de9fb630ceea4ddaa36721f1a959069860857ff7fce3f165102913b5b91e747e53d3a6a6b1dd9ed05ee61ef27a917ac27a0dc8d423d816f1d6dfcb424ae2df4b2257b22a20c84949c5ce09a178aa8c061de36c40e9c874cdd67ea3c476d958f272a061ad869d9ec604d576460a7be2ffbca47b93b9ff4c42c2e5aa4672495244b888dac097541057816826869a14216be95b0743b5618c2ce884b4e6ebc14b1bd03a25152b64377ca5f004fc4b85ec0589315e728787057861f6fa9ff8c5c09303686a42bccd4f792a47a242c8ef719e0a69c080f93492cf757aa9df4d65e58cfbe86840073c0f2aa99cb631b336f40b53216d7ed28d39b17f7d9dfd83c9d119c86eae51cc6ff8c900006246a378baf3a2766dda872747dc4e88ad8cbdf4740d6aa3a7cf73445032cdba8cf63878b2bb36b07f4ab3ac51353217e45560f58a33c81fefdda04074cfce51a6deaa50d86d0b47ed010ab9035b5d62465b1c4aed5b5f21947590ab4a4d3aba264c126b41929e9c6535b9f8218dcaef8fb0e4e4f4844ce6a08709457c89cf7fb40d03fc81ccd399f91afc15f20237f31e4d4a64e5b446135ca63330b04b4eb258f446b49653a93d0a6f01d1a0b7f0d39eb215a184634fdbcb3266dfb8c33b944f952e67ac4aa8f191c4edd794e8e74b32dabd57db331457a3268e4582b7e2308eb06597a4b400743fdf2e775bb263d0cf1d77fef54b157b45292a1af5589f9a026d6400c51b0c16606a3c0b57b6293aa045f31fc5e69fcd363491fbb558b3dc0d499d8d88f2a7db62ed5c0c5e744c90e476bfe95f9020ae1c365ced7c88954932f18591c4cea45262c47a95f62d919ac14ff06ea3b60dc177bbec5894a6c27f53efb422e24de1de19905981105a764e70df6a86e994654442171358c97f74e9e109415ea66e9115bbc45f1f3752689bc1ffefe347a42386c419e2455fb7d0409496f7d66a0298b353466ea7fd87c9f176cecd9fa608f40bea900da097a48c6719a92ef8a14008ca6e8532b3227aa8e6dac2df81ac64d383b12818fd2e16500ed1cdeedfc3c48f1c9a59871b726b3c96177972b1b274ef268a6a4365f300a368cd1ba363037f7c73eeccb03092564e9a39fa322494c98477581c378c8582fecc7c683564bdd04f604e2f6823cb2ad25cbc5bae821a84db101c6a2a6c36071102c298adb3f4b3b18e2deec4969ffb063346b6bb57aa8d3c52a32f34735ef62df3e064c8aa62452d7b9cfee33334e32e700b11e4282f4cf188ae8cd4a9b4de140345a8571c421f45e58ef6c3648dfc97593e41ffcc926e8e80f35b04d4ef06a40f7a6c4fc85153eb1088ced2e5a0bc1a169bb0e0e531c9242c29e3f2b8f53841f03d89390f3245a55a41a3892e2e61941c17fd8d227cee26a85278caae3cf1f95cf3debe604d80fecc9ead3e0aff66096f5b1b31d3930ad8ebc2cd893866c01d948b5e2e08055cb1f9958c3be31ce3d3411be2bd27c7535a48a554ab68f3ceeb9e2f6862de6f3cba153b45f4cb746dcd30a63ac01198d228f386dc75eadbad5b600d21f253371af81aef4ae1851e9ad8e0203996a2ff0a2ff6b75709b9ee3e9608a0aab68072b6a39dbce03b8b2a8730cd39d4848e90011364b02df9988be7bf3bbaa99f6d1bd72853760b99321d006ef97a0492b7ac63ce611cebe33fed2345c94bc4d2c39a36c1f0456df1fa0180a0655f6adaf37f5f1463cc7426678b633b6e054fd3c33212a83ebc826502126c86b2cfa71023a49789e77154fc52aea34a7525585c34910e03e26db1980201a58cba5ce3c206057106c2e680f39dc2d0a69e0653f19cd62cbd2c32317587bf30b1946258fdd411fa679c8aa32cd288a94becea49db5e67cf1dc9cdd708cde29bb5c5600eea0e4343c06b3d544322e2c57b9efe951a83d627efc24c0ef8e756174472da7fd3a5c72740838432b0d585c103a5fcc39c9a227c7e1ec368879b103dd8d003d2cf4b4af62efbb9f46cc00d2854ad366e39425fe06162931951c4c35e447c97692cb9f1f6e745bea077cf3a2f02309227b8876b5ef1fb50e181833bf4568c80061c7d51d689642079e04ff12f7481ca28153c38acdbb062b0a85b4abad34680ea780210239a56ca912c19e1276fcb5b27c35242e97d18dd34b8894e45fc89b72425eea21f8ef63e71868708a5b50627abab1359f1818e91b9659459dde7424ee7382265fb58e71024e96bc00121ee1d9c682f19b654a94013d25a341cc562ea786c574c8e786f42988645bfdcf8a8a41f6f388e420f5e187b5f4389eb34d6ba3069ad8dae13b290d6465ea773accfd10888d8027920d60fc015ccb959021e88b9ea64ed7cc523726fd07a6afbdc083966b13f87040c6a40adc0e02ddb59fbe8f780d11587d4e83e09042c721fbe519d89bc63d3ea10d690a026956a1310226928cab8929b55a852599b70c1d1fcf73736878e34f47445455b050ad722fcad554eb6a63e4c108bdd5b49344209f68eef1f5793da3977106164c44a194f21e9d0eddf70b6104b9a04c174a6ad940f474e8ae8bf246410d3632f6c8808a90b1571019e2b736e544e03b820f1f7954bed9221aa6b350d3915697527fcd746b3f0952dbf0cc7a39ec5fd3c6680fe7f92eabb47acfd655071e521da9b87ea4c97548c662674a99504f5de0c18221330893b2aabcc3fda4bdb45e3055e058f59080f28cedd99d26a15ab7a3c929d750446ed68631852330b4692fb7b3db3161fc13d162375f582486f49be84d0a2a6a8795790027a56f9044920f636f05a44b79299d1712f848a146d95094075ac566db90ce606c3ec3410b91910daf5acae9aa200ca0781d18562ef2d3ab21b13332ccf331c8f9115879faea4a42e200c9286858df71cd8488ac27e35b1d934ff791c80b31189754bcfa70b9c7c8644af9a03218f4e6a083996aec8304d447f5db77c2bd63d873ed7d74e1eb6feab136aaccbdbcbd70a24bb8ed06304a6958f082347120e18598002f645bc7bfab6c6b5c6fa094a0fe0354f1df446af57a862a32da053be00377a80652a2496af44a072fffa72d82262ce313b3232eb69cd711e06b04725ab91fef74f271356bf4c96c7b93b673166d4bb65e1ac7a882b81c0fc8f0ec8665c865b033792a688c41ec7598eda7f3388f9b008050cb7d9f73c9598cef08763a2594931fdabeb7c551e0c2f05598c41c6d06ab169f9342c88e15460a78aa2db667b4609d592cc30dbfa9349ee8c27b82a9c60a69d5b87edada85b932c51d82317b37fab329a990ed5d76f9e12893fe9dbdc4108e625505ef618f6068197fb58c6d5f93c2d0af40e8c524f577fb42a8125f32d7c23e8dafc1247df5574a259cbea2e9efff406e0c5686bdfa9584431e3fcf8ca361342e0c03d6f5d734ad64257d4f79f5ab32ec7aadec3306b4d38b5c4c09f63eeeeba79274ecf3697074be805facdce043f74479c6191c94864b9a1dd536b9dc59aedec109226cd95474b26227813d221b652929c63c609ab48266254cd83fa04993c878594dd41da8a1716a9df54398a54e0519bdf554125f1d6ffaf327ff31c9b135765b8e8bb82344b47f4a5df229ebcaf8c2fa7c5956a7f69c7b9fedb70c95245db8bb4ac9d39f168e4b8baa5f259abe67c7d249d03a04bbeeaaa9446380ac0a030a24f4b83c50ccc9525f09fc876189f3e6038ebc4a4a12397c56048a67f9f1d382ec0a76582834fe74610b609b41bd18c7f2b335471dcfa3050e7c27728c1733b919f9c6a59c5d8f7426c714399de1fde5c46821ff7776b6690c2dc3135087c5f15ef5e21e8e7780ff24bfe763a3c0c7077d26139e363e317bf0f1f885cd4a379ee32f199ec9077c7ba36d46d940b5669e7c758db949050953502ad62ef15fc01e944c56a364b9be5628c4703602fbed236ca344f41d5fcf0380cae8674bc87cbbb68507348d638fcab4130764243ae6916b24fb075be9b7caec86144034b3737b7b167c1257948cf243f5adfa85bf8cea0aa7b052b14719c6cb16baef76662c073baba35d190d2228c03de7836b6ac1d86c05b7b891f980e5cf65a5032704ccbc6428d4b6b2f43fefe40a6527c116b4d132953f0540faa0812e3715ca60fa3be3a2886c780c2b41e4704676eaac35a8211690e3b7de205c2d31eae7a29bf2e7dd4743d88a08f72c42c66bc195e40fc8beb673fb5a19c12f934e6797a9a23170983beb2b7ae85bcaf02eeae1e7d63b469e25a129af131c15ac3b2", @typed={0x8, 0x68, 0x0, 0x0, @fd=r1}, @generic="08161ddda7e0ad7430b76f0160a501ef35f11ba8e6210601cc578cbd01ea05dab2c5e904232d4c3199d80278164f16def6113030bffc3c7fe5f7c1e4bef4c19a82fa56ddd39a7dba120a4cdb9c9ca73a5f79e4e37e627eeb568f432a1a7bc0ebf502d8b8fd9fc8fcdf27a79082540cf6fa13490d12d66e7bdeafd4678db33b19f90ce1fc7c738bd7f8cbd5f6fdfddab16fa4c1edf702bfc78de2bcf362c3b7d6ca08", @generic="e3d82b26123fad5eb28e3d722f4af3fdd15decd44749782ab272e72492c9fd8fb5", @generic="29c4273724750d3bb87b782b4b93cdc238f184590aeaf02d966baf9634b6122393a8b60d97c565d6e0f09e46087ec56b60ca2904c735f59be99fb5475d29761c4391d0636a475ed810927cf2973ecf5c18307ef4aca3772a72fe8b20b98340e42f3aa47d110a8e37866863f3561ee61e294fc9324d24847301689a17875518137547571ac0a2238a98f757c71760e8f05ea6313d29e4aa9b8f38b71a4997cd2c2c8c336227294760b289a47366f03b44b65fa43cc38482393dc2b323c4251ef19c4b51155614801d444319b42dda4dfc7113a41a3d58b959cb9d8f8da27dc5f2a153", @typed={0x14, 0x88, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}}]}, @generic="6291067328dc6779bd2cd875f3e057d4200cc31995df95c3d1430ca4116dc32577cbc8894d24c98c559f8322d1e2f9963c7b47973c3a2aeabe", @nested={0x1dd, 0x12a, 0x0, 0x1, [@generic="b0b016ba424e658cfc2375af1f5a181d8abc9ab116abb555fdc92760bd180d1d685ad6f370f92a2ab2db251e114d89070fde6b3aee6aeceaa66bbf280b9a3bd1454d68b9d84feaaa8de54e2f0449ec7f416eab213e7e47efc14863aa39a8759f37748c919f605f07d73e181a9cb6381ed920631b2833294b91f3b2f89e70878e0180605103ded5a280c7474e68517ae07ea2c3d607215b43bc99a9d4d02493e929f0fad28dd1b62c463eb50c2d6725c394aa373532f6af6dabab94a3413b2d0facdb313885ed4c5b2501f10722fae4126b226e0dae8544d1e3d019c9e6fe9e8fbcee9dce2054cdc4e198be0b51480b0543bb25b1f96896889fab3bf386ef333c313f6ab9938a48e9c05aab52cff22e52eae4465d13", @typed={0x8, 0x132, 0x0, 0x0, @u32=0x200}, @typed={0xb5, 0x79, 0x0, 0x0, @binary="810946d6f1977b732117b432e8ed58484cb040c177b7333eae1cf20b8dd45536cc6ed420002468a6e968eec7d87c35a44866b546598b19bd36ee3de8390b884a5b6e0b103906cffb925b084fa83bd779076ac100293b6c4b3a1bcb4c1c2d66dec545bd4e13464f25c85b0dc2eae190d293a7798b4f71635a8d38430d9cea018cc68f3e6f0a9942e857a7d34af57cdbdbd2ec7a73d7621839903969fb28992b627d84349dcb52b57dfd203bc6f18ece9620"}, @nested={0x4, 0x27}]}, @typed={0x8, 0xf5, 0x0, 0x0, @fd=r0}, @nested={0xe45, 0x142, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @ipv4=@remote}, @generic="2e94605d67a028f63a6275adab03f0a7b5b2641161c218d7157bfb048509057858805d099ccae9fa7c2f73cae92f141ad94bfe7a8ad9246c12476bf6c8658ad9ba00e2692f96fe6760d6f24b5dcede031d339548842a3ac992c9dc705ab36307", @nested={0x4, 0x69}, @nested={0x4, 0x59}, @nested={0x4, 0x6}, @generic="372459ebb4e177ba73c737aad0e7987433ce090a92c29a40c207f670e612dee2e49bb04b33242e217d1b781656998e489ef864453b60af3c021d8e097e4a6b0e5c14c0afe4628fefa8e7dff6448475165c1e0c809fe130446eea32f07e55227e2e7612e673f94432c289f0771cfb7319254d7581696354c9ea8cc20e69b5e3d4fa912ed899c89016a2513743964e99804a03d3605102d49d47f3f86ca97f059d0e9f461148dc5e687b46f4b526b6d6c84dcbe42e933324a5", @generic="a6ba39aa0551c9f23e08c97f8acfe8afeffe74ea71889798da74ab8ea01c1e66671764610a3cd7ccb45dfc375e21baf76e1cdd29dde346b6b70dca6c2ac87972d0f5eef99c5ee41fd1edc2b426ced34b1d67449b280c45590f1d886023618f1027058be0dbe8146396ac7fd02e00ef2f7b6e5d3a50efabea51031fc17d866a21522e1396b35ff88d80a8acea58ce69aa36e52830531963d4f53487584bb6a9c9d7d45608bdd6aa5cf2033cbd7cb1f7cfdb80e2e80e6de51c80b6e29cd995d3e5f4f8d64605a0c04ce4829de5025387eaa7951760582e2efa2b4e468d37de1728d264e5b97bcc6fa5f65afe0e1f22b70c41c2217e8c806221fb61805d9c58b1d97d8a862673a7d48a694f00490d4a78a2a54f8a18feb9cc8035cba20bd8622c49de835fd25211b18ed23cea5839a30dc51c1a7b75c3cd55aee1305901bc68263350ef7ae6c6a8cc4132e78094555add934b1bf46884768350321858b87c8c58ac061e4aaecabe0aadbae60fd3bef23f922d5a9ad4650522ddf55f88f02ae264f65a2342f9aa150f3d419c163307076907c6ff1a31b85b78b21187b388b116187bb9059f6054ad0417b56deffb1f836179b1704889d6c7e03c1f8c43fec57222dde1ba62c684bfb81941afd860b752ac2a7f8340743f6ae5fcad94bf9f02905d063512a4737519de125dba3eef7416d45bac477b42d8884d0e86269f6cf85113356263414ff49e66d61b3f9343e68dd0cdd5f1a3ac73e9293deebd18ead5d058e257882484aa2d916549c5e2455c0fa6c2977704a9d626720390a7d9324c3210b64421b88a140ade9d8a3f98d447b11d4de926b7c7b1aad66074568c9397b316834e85c6fab94d68c259fb98e388653c47ab7a09bb376157e4226574aff0dc59a7aa92bca5113cd1d73af296e712e4dad313374d1fdcf1cbc74a0b0841fc81793afcb5f8b7909d7b4a9fd33bd956856135e3fea0c76d9a0714343ece135cae94897f3d512472eb2b77e89f5c71feb4a29d4c3ff4b3b630a90a1c607056e62173fe599319f4d438f866a45a7e176e6c3b94ec5e42f78dd8edd447e5128aa61ee0ac2f0250391882e43f11c2e41c1ef021eeb6444c50bddabbe78cfedb6dd8ba73c5c5ab37a94c34350ec08ba31a3e5dbbff776ee97cb3d827bcb48f531923743778277d317f7645cc685e8eb5f954033e527965a0450a772bdaff0b9d352cf88a9bd7704d2a6f85343faf759f9add0f56bbd3d89ec5b386cd9e8efc077045b4ae1acb0b4d5ccde9f02a200dbead53fda175c22607807266eab20894f4535039182ac28e1d13c8a832feaeca9f5e9bda14c555f11d7c2d14edae63f88cb866af3268542eac6a867747c1fa44118c059c41c1e41911b62995c921d67190865462abfcc18e389fc8c56deaa63394785d4f283afd73c4d1504ceb09ed57e2302d86e7f4998bbe97a591f0a34136e0320e0797911c788c2701f9bf04cb54c1a98e40cd03a9190bd00f75f3fd97655e92bf84e4f248062077143230e3a27f2ba5ab9c64f0121be25e9692eb8577f37fc830f8d0e4c0a2bf0907c353528ffdfbae4b6739a0b5bbb595e4714e4719934e84c2fcc65f8c7b1cc01499c323fdc860756a35f1ad44f75c48f244ec166470416380eb774692cfb423823fec81d1fa3f0ae064b4e6977ab01c8a510475f2a0683c046e8602517955cfbe9e09a7543b5e3712b25e624a1cebd7ca96d746aafbdb141da2f7dde35de9e4ccde5c6a276ff401695e43eb54a1bf23f2fb6c04146d59a26b2e35bf340fae1590948db8f6af7591f9d78925eff52a556ecc978adc293138b58fbccbf23a532b31aca625e110493de1a29117ce6e9dfe122c70a7a327c6bf5e31dd1a429eccc101b980105d07bb44b433823d8661fbf4af0c98d53d20979a11e730514e54136f378366326a897d25e610a4ffe611dcd78cec0265157419199e6c56efe5020c726fa058db45f500273e35c28c0bc42568f449a783afa0e29fd32635681c2d7410201a01a1a6b78a64d8b7649fc4c44f2b684ea84b0f87f3940e1eb62e4c37c0bb93b62c038190d695358e095e729ea4c554f3deb81cf4d53b46686d313be8e19e5e98346542b16c21c9ccbcc2e830b9b7cdbd087d77e61d47ff0bd406125c21328addae759808c1a9db8358f84d512376bec3923b82960e116b0e9ddf160d7258695c7afa8369e197e8e7f710f99fa5d9a3796da169f29c4fd922647530e024c693dc4d471934ae1a220a2d9fa97b3d95876ea42643f2801994dd6e80b14b334b419a16862d2051c520f9dbc9dc0decb8012726a8684abc8b2d7ea2c1787338ddd04bf0cebad71ea8596c6f0008f0d31ce8639df040a388c0ac23280a932b3c3a9a252d4903da468e3b38174784fe8c0aa20b9f7894257fba5ca89b254283cd56eebca138480b363efb47be6cea02cca42ce2fe4696cf149892fbee96d98e5fb85e1816db807d6940713815b1299730d4e34aae98d68415ed0c41134f929d533cf6b93eda78b6f0fdacb4f16b81c278ac848e53a0160044c5176286aa71a321e115c76ae777e1cd20c3ca71e8fc01e53dee40a325f65f7dff39dfc5da6ee38471b700e495105df405ae1d0eb817f00317c200e061b572d61a4958ca61af5890ce2a14269ad6b88379f11e025e76dca0a218d925f3b05f580654ddc4ce042f391e64a84c08b8b2879d2ebe95702f15714b0941f394f581967dd93786b19ed5b1d4d56873faf7fbe83cf42f61ae6c8e20eb4633fb6b6a9a7457756b89659c976ec38e093e0902124b66ca01a882361e5b5a43f121b7ad6224d4aa5237a36ef6753c4485bd433b97f753cd5488f95bfff75402059cc57c631c3d66a6a132df9ea851eee5eb555060e8eda471e0d813e1c9bb8b9f044d626b4bfe1b62e33da3417e0c62b091d430ec96795421c0f849166875d5f38087db4c1d138830fbacd0dea043d522a6e6d6628047ccf6a2ae0a289a512ec07e5b7b2da5f4108223201438228df470767869761cb29ea25018b3d2cf4e91bd50a930e4c9ef888efe196ce8350afe93d3a95c91f741ee4ceebe6ea908dd97d249b6fa550161c09234c65154dc052757880cc8a49cb98707d7302cdc6a38437a8fb7ed77157d1a62af13f99fda62865cba298bbb60955151356573884f70ebb4b1a754bf9e78e46cc220f66efb2ca533bfdc8ecb0a7e4119533f9442135da0e175fde7c458a376f55e1b259739917a304f9fa0c3f258757dee25316ca84a5d8d5d807bcf1b45954096225be138b7772dd74d5998aa4646dacfce406fe5abee60f628a44584287542b79a87a8cfc78eebcf0104458c8e4c9ee2254401b2838d83bb7c6aeb4f8d88e045344c5d65910b6d9af6126c2a52a902eea4e38de5a61b47108c79ae3b3314244cc2bbd4b4e416fba4c78afe048db9f976fa1b5125234ba2b8c908da913120b3265ca1f21bc0dd7c675913ef5bb07ecf4a4bb6546b9e0607b83d7f9ebee51151698688bcaa954c6a15657070f1069b1cc125ef9941f33bac506a88e4c1b47215203a95aca6b41837bc6a59dc5dcc3679ddf23667ba056d99c7b45d2548e4b6c8cbf1144517e8c613dc6df9cf014cd3d7a3caaa468280c5759bb93a151b68c3fee38abd9f2f37539b976093c636e6463dc3cd40b73b7ba899e584b07d6d54997d7e3ec4b5ac2a31aba432c09b98527cfd3c12997efcd1cd2ab14c642082f335edd0c2c3ec53a06879d90bdd53d8f4ff68b859161519f13010bafc615d6b46b48c4091e6619a4756ad1c41780f289054d51c96d9244a89d796837f13a7128dbdb5a547d8bb94fa46f1888e2c89215d28c26231853c434a805bd7e287b9e46c32a2ef5f83d8e2600e7c8022b39b515c88626a1d59570b3c529d134649396079949a362d0e24a340860e55acfb8025b00161d48ee39e893e8662edb7c05b3d1d5e6a3f2e46136de15df6a68f59fadfd0ec8df8f7ce7f7d5a6355cbcae50e4c1baf82ea9d6a85a809dd7f9e26759aab6cb9f96456120d101bec0542eb1f313e1a52095eb93c3ce3e1af67767450bafcae6eecbd1280d7134c0ca7a98bf7183f0f47db1962a9d31077021cca520f5778f8712412012e6c37b02ec6f954dbf8996d35968a143a4ecd911e085d14950ba4b120835a8000cc0c89a84dd6c087fd379ed20c6fa33ea8ecd875a79787c5a0365e2ba0daea498b3f227e016ef37a7c16aa3e6ef7af8feacd4fb71b51e94eb20b8d6e2047d3ec687efea81f09f9d1efcf6680d42525f20e3b2238f6649e444ec61a730b94517e3448eee23ed85e868db1466428bd7581ff5e67baeebc01a71b0bbceca9b5f683b2b274e91634252e17dff122551480b47914cac578bb3b3bd715e83870a8da36ab78e4b52dea270a364f1e82da34f903b9c12952a86f9cc87cfe759430fc9521f642517a771cd499999fb2763aded25798c0da60e914a25bf86512e6eba5c4a82c54d5ec9dd604682abf3cf754aecfa15ea38a4cc6278c1b11dee0abf963cbcb75ca752b038d0d9102603d2e9fc11f36adf63e344d7f965b1f4fb39b0f1f09223b7ab90327f3fca847936c4bfc629ed69c2ca89c580c4b4753711512f6c70dc4a8dcfe5f7217b347b9f8c01aafb12d3486b0d5acc4618209fa7f243b9d6bfe4a3c9713b8bb76784656db84cf19526d0c132e8ee06bcd04e7a8ead908c65943b1c549dfc391d043bb8b873e5edc0839ce6612c1f1"]}]}, 0x22f8}], 0x2}, 0x10) 1m0.297721122s ago: executing program 5 (id=1853): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 1m0.254833542s ago: executing program 5 (id=1855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) 59.697571541s ago: executing program 5 (id=1864): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) close_range(r0, r0, 0x0) 59.681787461s ago: executing program 33 (id=1864): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) close_range(r0, r0, 0x0) 36.218189926s ago: executing program 1 (id=2682): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000500000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ef0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x2c, r0, 0x4196ccce67868bab, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040090}, 0x8000) 36.120603568s ago: executing program 1 (id=2684): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00'}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 35.99666104s ago: executing program 1 (id=2688): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgid(0x0) 35.97459304s ago: executing program 1 (id=2690): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_io_uring_setup(0x909, &(0x7f0000000240)={0x0, 0x770, 0x1, 0x0, 0x18d}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0xdc7, 0xe4bd, 0x1, 0x0, 0x0) 35.797359773s ago: executing program 1 (id=2693): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 35.675789035s ago: executing program 1 (id=2696): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x1, 0x10, "0062ba7d8200000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0xcfbf, 0x7, 0x7fff, 0x16, "fd2487fd547da1e6"}) 35.675577845s ago: executing program 34 (id=2696): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x1, 0x10, "0062ba7d8200000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0xcfbf, 0x7, 0x7fff, 0x16, "fd2487fd547da1e6"}) 22.730520685s ago: executing program 0 (id=3086): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0xc104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22.43383747s ago: executing program 0 (id=3088): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x1e1e, 0x0, 0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x1061, &(0x7f0000002400)="$eJzsz8ttwkAUBdA7cuzY2TgdpI10EEWsaYE2+JTDhhLogzpYIhn5I0oAFuesRnNn7tMLL9WVJNXHb0mGbfLfL/fXzXKokiap90nKLvlpkgyfY9LOD86rus3QV21ScvnrDlNlTnPT7fsxqoxFUzZ/rb+yPj5xVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4W/cAAAD//0h9DI0=") 21.351375145s ago: executing program 0 (id=3121): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000009}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 20.462605188s ago: executing program 0 (id=3138): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@seclabel}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") 20.311220961s ago: executing program 0 (id=3141): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = dup2(r0, r1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='df'], 0x2c) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) 19.849668348s ago: executing program 0 (id=3154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x4) 19.849333118s ago: executing program 35 (id=3154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x4) 3.975415492s ago: executing program 7 (id=3594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) keyctl$chown(0x4, r2, 0xee00, 0x0) 3.942760792s ago: executing program 7 (id=3595): statfs(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, 0x0, 0x4) recvmsg$kcm(r1, &(0x7f0000001300)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/102, 0x66}], 0x2, &(0x7f0000001200)=""/193, 0xc1}, 0x10022) connect(r0, &(0x7f0000000040)=@in6={0xa, 0x4e20, 0x1, @remote, 0xddb5}, 0x80) close(0xffffffffffffffff) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) 3.078818055s ago: executing program 7 (id=3634): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x9135}, 0x18) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 3.036439925s ago: executing program 7 (id=3636): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 3.022915486s ago: executing program 7 (id=3637): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r0 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) pipe(0x0) semop(r0, &(0x7f00000000c0)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 1.139565444s ago: executing program 6 (id=3685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.124042404s ago: executing program 2 (id=3686): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000280), &(0x7f0000000840)=r1}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x19) readv(r2, 0x0, 0x0) 1.071095145s ago: executing program 2 (id=3688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 916.528757ms ago: executing program 8 (id=3690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 892.089557ms ago: executing program 8 (id=3692): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000406, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 726.57231ms ago: executing program 6 (id=3693): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, 0x0, 0x0) 661.844951ms ago: executing program 8 (id=3694): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 622.998181ms ago: executing program 6 (id=3696): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc00}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC, @ANYBLOB=',wfdno=', @ANYRESOCT]) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 577.297531ms ago: executing program 6 (id=3698): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0x3) 519.700003ms ago: executing program 4 (id=3699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd020303004d000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e"], 0xd2) 457.509593ms ago: executing program 6 (id=3700): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r2, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000001c0)={0xfffffffd, 0x2, {0xffffffffffffffff, 0x0, 0x8, 0x3, 0x8}, 0x3}) tkill(r1, 0x7) 395.644724ms ago: executing program 4 (id=3701): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x9}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) 273.239476ms ago: executing program 6 (id=3702): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 272.865826ms ago: executing program 4 (id=3703): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 237.987467ms ago: executing program 4 (id=3704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 225.470647ms ago: executing program 4 (id=3705): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) 216.299817ms ago: executing program 2 (id=3706): unshare(0x22020400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c021}, 0x2004c8d4) 206.628137ms ago: executing program 4 (id=3707): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) 165.186168ms ago: executing program 2 (id=3708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r3, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r3}}, 0x18) 143.175848ms ago: executing program 2 (id=3709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001c000000180001801400020074756e6c30"], 0x2c}}, 0x4000000) 126.661718ms ago: executing program 8 (id=3710): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x5, 0xfe9d, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7b2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', 0x0, 0x8}, 0x18) 119.093189ms ago: executing program 2 (id=3711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) 105.472929ms ago: executing program 8 (id=3712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 88.913869ms ago: executing program 8 (id=3713): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) 0s ago: executing program 7 (id=3714): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}], 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): lease dquot type 0 [ 112.312559][ T9040] EXT4-fs (loop2): Remounting filesystem read-only [ 112.347320][ T9026] rose0: refused to change device tx_queue_len [ 112.358100][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.437124][ T8445] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.449098][ T8445] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 112.464658][ T8445] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 112.480503][ T8445] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 112.543109][ T3410] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 112.552535][ T3410] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 112.562243][ T3410] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 112.562872][ T9092] IPv6: Can't replace route, no match found [ 112.571464][ T3410] hid-generic 0000:0004:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 112.578039][ T5421] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 112.605526][ T9098] loop6: detected capacity change from 0 to 1024 [ 112.618320][ T9098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.634770][ T9098] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.654219][ T9098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9098 comm=syz.6.2126 [ 112.765117][ T8445] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.818134][ T3375] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 112.826282][ T3375] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 112.835006][ T3375] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 112.846766][ T3375] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 112.908009][ T9127] SELinux: ebitmap: truncated map [ 112.915145][ T9127] SELinux: failed to load policy [ 113.029131][ T9141] __nla_validate_parse: 2 callbacks suppressed [ 113.029151][ T9141] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2145'. [ 113.106547][ T9147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.142317][ T9152] loop6: detected capacity change from 0 to 512 [ 113.149171][ T9152] EXT4-fs: dax option not supported [ 113.368548][ T9179] loop0: detected capacity change from 0 to 512 [ 113.384199][ T9179] EXT4-fs: Ignoring removed nobh option [ 113.404366][ T9179] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.2162: iget: bad i_size value: 38620345925642 [ 113.425332][ T9179] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2162: couldn't read orphan inode 15 (err -117) [ 113.461970][ T9179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.580075][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2174'. [ 113.597830][ T9194] SELinux: failed to load policy [ 113.607605][ T9200] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2174'. [ 113.691516][ T9210] loop4: detected capacity change from 0 to 128 [ 113.727019][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.753488][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2190'. [ 114.021949][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 114.021969][ T29] audit: type=1400 audit(1749722239.632:2173): avc: denied { create } for pid=9235 comm="syz.4.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.055750][ T29] audit: type=1400 audit(1749722239.662:2174): avc: denied { bind } for pid=9235 comm="syz.4.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.125767][ T9240] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2193'. [ 114.286048][ T9254] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2209'. [ 114.286758][ T9253] loop4: detected capacity change from 0 to 512 [ 114.303822][ T9253] EXT4-fs: dax option not supported [ 114.380909][ T9260] SELinux: failed to load policy [ 114.470814][ T9274] SELinux: security policydb version 18 (MLS) not backwards compatible [ 114.480292][ T9274] SELinux: failed to load policy [ 114.515719][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2212'. [ 114.558953][ T9284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9284 comm=syz.4.2214 [ 114.595976][ T29] audit: type=1326 audit(1749722240.202:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 114.620939][ T29] audit: type=1326 audit(1749722240.232:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 114.645262][ T29] audit: type=1326 audit(1749722240.232:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 114.668876][ T29] audit: type=1326 audit(1749722240.232:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 114.692816][ T29] audit: type=1326 audit(1749722240.232:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 114.765481][ T9302] loop1: detected capacity change from 0 to 512 [ 114.772601][ T9302] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.799214][ T9302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.824981][ T9302] ext4 filesystem being mounted at /454/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.859948][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.972443][ T29] audit: type=1326 audit(1749722240.582:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.2.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f5ae929 code=0x7ffc0000 [ 114.996952][ T29] audit: type=1326 audit(1749722240.582:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.2.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f5ae929 code=0x7ffc0000 [ 115.021071][ T29] audit: type=1326 audit(1749722240.582:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.2.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f278f5ae929 code=0x7ffc0000 [ 115.072913][ T9332] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 115.087392][ T9334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.266532][ T9346] loop2: detected capacity change from 0 to 512 [ 115.279180][ T9346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.292801][ T9346] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.325194][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.346597][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2240'. [ 115.561843][ T9377] tipc: Failed to remove unknown binding: 66,1,1/0:907971649/907971651 [ 115.570456][ T9377] tipc: Failed to remove unknown binding: 66,1,1/0:907971649/907971651 [ 115.604904][ T9381] vlan2: entered allmulticast mode [ 115.610638][ T9381] bridge_slave_0: entered allmulticast mode [ 115.700246][ T9397] netlink: 'syz.2.2262': attribute type 21 has an invalid length. [ 115.723958][ T9400] netlink: 'syz.0.2263': attribute type 21 has an invalid length. [ 115.732096][ T9400] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.869194][ T9424] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2274'. [ 115.920522][ T9428] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2276'. [ 116.585953][ T9486] netlink: 'syz.2.2299': attribute type 21 has an invalid length. [ 116.617936][ T9489] loop4: detected capacity change from 0 to 128 [ 116.642873][ T9488] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 116.651648][ T9488] FAT-fs (loop4): Filesystem has been set read-only [ 116.669964][ T9493] ip6gre1: entered promiscuous mode [ 116.675258][ T9493] ip6gre1: entered allmulticast mode [ 116.682990][ T9488] syz.4.2309: attempt to access beyond end of device [ 116.682990][ T9488] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 116.716784][ T9488] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 116.724711][ T9488] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 116.759799][ T9489] syz.4.2309: attempt to access beyond end of device [ 116.759799][ T9489] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.808245][ T9489] syz.4.2309: attempt to access beyond end of device [ 116.808245][ T9489] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.834222][ T9489] syz.4.2309: attempt to access beyond end of device [ 116.834222][ T9489] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.855660][ T9489] syz.4.2309: attempt to access beyond end of device [ 116.855660][ T9489] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.920610][ T9503] loop4: detected capacity change from 0 to 2048 [ 116.938240][ T3410] kernel write not supported for file bpf-prog (pid: 3410 comm: kworker/0:3) [ 116.951700][ T9503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.958177][ T9507] loop6: detected capacity change from 0 to 1024 [ 116.993963][ T9503] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 117.030372][ T9507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.075146][ T9503] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 117.087911][ T9503] EXT4-fs (loop4): This should not happen!! Data will be lost [ 117.087911][ T9503] [ 117.097809][ T9503] EXT4-fs (loop4): Total free blocks count 0 [ 117.104099][ T9503] EXT4-fs (loop4): Free/Dirty block details [ 117.110462][ T9503] EXT4-fs (loop4): free_blocks=4096 [ 117.115902][ T9503] EXT4-fs (loop4): dirty_blocks=288 [ 117.121194][ T9503] EXT4-fs (loop4): Block reservation details [ 117.127407][ T9503] EXT4-fs (loop4): i_reserved_data_blocks=18 [ 117.157406][ T8445] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.171196][ T9524] loop2: detected capacity change from 0 to 512 [ 117.228028][ T9524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.245447][ T9519] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 721 with error 28 [ 117.280834][ T9524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.319881][ T9524] ext4 filesystem being mounted at /437/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.442621][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.547640][ T9529] netlink: 'syz.1.2315': attribute type 4 has an invalid length. [ 117.678602][ T9558] syzkaller1: entered promiscuous mode [ 117.684180][ T9558] syzkaller1: entered allmulticast mode [ 117.708421][ T9567] loop6: detected capacity change from 0 to 2048 [ 117.719979][ T9567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.739256][ T9567] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 117.754382][ T9567] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 117.757015][ T9571] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 117.767855][ T9567] EXT4-fs (loop6): This should not happen!! Data will be lost [ 117.767855][ T9567] [ 117.787457][ T9567] EXT4-fs (loop6): Total free blocks count 0 [ 117.793661][ T9567] EXT4-fs (loop6): Free/Dirty block details [ 117.800149][ T9567] EXT4-fs (loop6): free_blocks=4096 [ 117.805606][ T9567] EXT4-fs (loop6): dirty_blocks=288 [ 117.811374][ T9567] EXT4-fs (loop6): Block reservation details [ 117.817747][ T9567] EXT4-fs (loop6): i_reserved_data_blocks=18 [ 117.845132][ T9573] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 593 with error 28 [ 117.881884][ T9577] tipc: Started in network mode [ 117.887361][ T9577] tipc: Node identity ac14140f, cluster identity 4711 [ 117.894966][ T9577] tipc: New replicast peer: 255.255.255.255 [ 117.901448][ T9577] tipc: Enabled bearer , priority 10 [ 118.025398][ T9590] loop1: detected capacity change from 0 to 512 [ 118.054483][ T9590] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.075529][ T9590] EXT4-fs (loop1): 1 truncate cleaned up [ 118.084253][ T9590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.102558][ T9601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.122937][ T9603] loop6: detected capacity change from 0 to 512 [ 118.130519][ T9601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.139258][ T9603] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 118.158773][ T9603] EXT4-fs (loop6): 1 truncate cleaned up [ 118.168595][ T9603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.234745][ T8445] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.309553][ T9619] netlink: 'syz.2.2354': attribute type 1 has an invalid length. [ 118.318738][ T9619] __nla_validate_parse: 7 callbacks suppressed [ 118.318754][ T9619] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2354'. [ 118.362289][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.420264][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2360'. [ 118.434776][ T9633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.445814][ T9635] io-wq is not configured for unbound workers [ 118.940064][ T9671] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2375'. [ 119.017865][ T1033] tipc: Node number set to 2886997007 [ 119.237590][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 119.237610][ T29] audit: type=1326 audit(1749722244.852:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.4.2377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadb3cce929 code=0x0 [ 119.413441][ T9692] loop1: detected capacity change from 0 to 512 [ 119.431512][ T9692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.462383][ T9692] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.486384][ T9692] EXT4-fs error (device loop1): ext4_add_entry:2417: inode #12: comm syz.1.2383: Directory hole found for htree leaf block 0 [ 119.501333][ T9692] EXT4-fs (loop1): Remounting filesystem read-only [ 119.542199][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.551854][ T5388] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 119.562904][ T5388] Quota error (device loop1): write_blk: dquota write failed [ 119.570528][ T5388] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 119.703099][ T9726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2398'. [ 119.719146][ T9723] vhci_hcd: invalid port number 224 [ 119.821119][ T29] audit: type=1326 audit(1749722245.432:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.0.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 119.876146][ T29] audit: type=1326 audit(1749722245.432:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.0.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 119.900019][ T29] audit: type=1326 audit(1749722245.432:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.0.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 119.924070][ T29] audit: type=1326 audit(1749722245.432:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 119.947443][ T29] audit: type=1326 audit(1749722245.432:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 119.970980][ T29] audit: type=1326 audit(1749722245.432:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 119.994315][ T29] audit: type=1326 audit(1749722245.432:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 120.150816][ T9762] vlan0: entered allmulticast mode [ 120.156317][ T9762] macvtap0: entered allmulticast mode [ 120.183399][ T9764] netlink: 'syz.2.2415': attribute type 1 has an invalid length. [ 120.225654][ T9764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.312394][ T9789] random: crng reseeded on system resumption [ 120.451595][ T9806] loop4: detected capacity change from 0 to 4096 [ 120.464493][ T9806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.602795][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.641502][ T9821] xt_hashlimit: max too large, truncated to 1048576 [ 120.700828][ T9825] team0 (unregistering): Port device team_slave_0 removed [ 120.716139][ T9825] team0 (unregistering): Port device team_slave_1 removed [ 120.750774][ T9829] loop4: detected capacity change from 0 to 512 [ 120.758688][ T9829] EXT4-fs: dax option not supported [ 120.806757][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2447'. [ 121.034031][ T9862] atomic_op ffff888103f4a928 conn xmit_atomic 0000000000000000 [ 121.100856][ T9869] netlink: 'syz.2.2462': attribute type 1 has an invalid length. [ 121.161723][ T9875] Falling back ldisc for ptm0. [ 121.320477][ T9811] 9pnet_fd: p9_fd_create_tcp (9811): problem connecting socket to 127.0.0.1 [ 121.502372][ T9901] bridge_slave_0: left allmulticast mode [ 121.509626][ T9901] bridge_slave_0: left promiscuous mode [ 121.517003][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.526252][ T9901] bridge_slave_1: left allmulticast mode [ 121.532639][ T9901] bridge_slave_1: left promiscuous mode [ 121.538719][ T9901] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.549320][ T9901] bond0: (slave bond_slave_0): Releasing backup interface [ 121.560585][ T9901] bond0: (slave bond_slave_1): Releasing backup interface [ 121.570030][ T9901] team0: Port device team_slave_0 removed [ 121.578463][ T9901] team0: Port device team_slave_1 removed [ 121.601870][ T9901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.610194][ T9901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.654176][ T9913] vlan2: entered allmulticast mode [ 121.660019][ T9913] macvtap0: entered allmulticast mode [ 121.666399][ T9913] veth0_macvtap: entered allmulticast mode [ 121.955973][ T9954] syzkaller0: entered promiscuous mode [ 121.961678][ T9954] syzkaller0: entered allmulticast mode [ 122.141219][ T9957] vlan2: entered allmulticast mode [ 122.146862][ T9957] macvtap0: entered allmulticast mode [ 122.407357][ T9983] vhci_hcd: invalid port number 65 [ 122.414382][ T9983] vhci_hcd: invalid port number 65 [ 122.575495][ T9993] vhci_hcd: invalid port number 96 [ 122.580781][ T9993] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 122.762485][T10016] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 122.762485][T10016] program syz.6.2525 not setting count and/or reply_len properly [ 122.806176][T10018] loop2: detected capacity change from 0 to 2048 [ 122.827188][T10018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.878509][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.116195][T10060] ALSA: seq fatal error: cannot create timer (-22) [ 123.192534][T10070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.202387][T10070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.213716][T10070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.222880][T10070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.258189][T10072] hub 9-0:1.0: USB hub found [ 123.266472][T10072] hub 9-0:1.0: 8 ports detected [ 123.354957][T10077] hub 1-0:1.0: USB hub found [ 123.380027][T10077] hub 1-0:1.0: 8 ports detected [ 123.543046][T10101] loop4: detected capacity change from 0 to 2048 [ 123.608179][T10101] loop4: p1 < > p4 [ 123.613698][T10101] loop4: p4 size 8388608 extends beyond EOD, truncated [ 123.767723][T10124] openvswitch: netlink: Message has 6 unknown bytes. [ 123.799330][T10126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.809268][T10126] IPv6: NLM_F_CREATE should be set when creating new route [ 123.818056][T10130] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 123.818056][T10130] program syz.6.2575 not setting count and/or reply_len properly [ 123.969966][T10149] vhci_hcd: invalid port number 65 [ 123.976073][T10149] vhci_hcd: invalid port number 65 [ 124.032118][T10155] bridge0: entered promiscuous mode [ 124.038562][T10155] macsec1: entered allmulticast mode [ 124.043974][T10155] bridge0: entered allmulticast mode [ 124.050983][T10155] bridge0: port 3(macsec1) entered blocking state [ 124.058378][T10155] bridge0: port 3(macsec1) entered disabled state [ 124.066479][T10155] bridge0: left allmulticast mode [ 124.072423][T10155] bridge0: left promiscuous mode [ 124.103218][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2586'. [ 124.166417][T10164] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 124.166417][T10164] program syz.2.2588 not setting count and/or reply_len properly [ 124.205883][T10167] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 124.205883][T10167] program syz.6.2590 not setting count and/or reply_len properly [ 124.257759][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 124.268172][T10171] netlink: 'syz.2.2592': attribute type 5 has an invalid length. [ 124.296526][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 124.296542][ T29] audit: type=1326 audit(1749722249.902:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 124.330952][ T29] audit: type=1326 audit(1749722249.902:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 124.343252][T10176] syzkaller0: entered promiscuous mode [ 124.358546][ T29] audit: type=1326 audit(1749722249.902:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 124.358654][ T29] audit: type=1326 audit(1749722249.902:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 124.358689][ T29] audit: type=1326 audit(1749722249.902:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 124.366150][T10176] syzkaller0: entered allmulticast mode [ 124.466219][ T29] audit: type=1326 audit(1749722250.072:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 124.492426][ T29] audit: type=1326 audit(1749722250.072:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 124.521993][ T29] audit: type=1326 audit(1749722250.132:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 124.548018][ T29] audit: type=1326 audit(1749722250.132:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 124.574205][ T29] audit: type=1326 audit(1749722250.132:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15607e929 code=0x7ffc0000 [ 124.686938][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2602'. [ 124.804429][T10203] syzkaller0: entered promiscuous mode [ 124.810435][T10203] syzkaller0: entered allmulticast mode [ 124.933082][T10213] netlink: 'syz.6.2611': attribute type 1 has an invalid length. [ 124.948744][T10213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.014404][T10220] bond2: (slave ip6gretap1): making interface the new active one [ 125.034828][T10220] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 125.047448][T10222] ipip0: entered promiscuous mode [ 125.121000][T10237] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 125.139124][T10237] batman_adv: batadv0: Adding interface: ip6gretap1 [ 125.147092][T10237] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.174858][T10240] loop6: detected capacity change from 0 to 512 [ 125.182729][T10240] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.201045][T10237] batman_adv: batadv0: Interface activated: ip6gretap1 [ 125.239496][T10240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.261195][T10242] syzkaller0: entered promiscuous mode [ 125.267424][T10242] syzkaller0: entered allmulticast mode [ 125.274919][T10240] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.500284][ T8445] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.619927][T10272] SELinux: failed to load policy [ 125.672710][T10282] loop1: detected capacity change from 0 to 1024 [ 125.680616][T10282] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 125.690767][T10282] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 125.736204][T10282] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #32: comm syz.1.2641: iget: special inode unallocated [ 125.751412][T10282] EXT4-fs (loop1): no journal found [ 125.756716][T10282] EXT4-fs (loop1): can't get journal size [ 125.763832][T10286] vhci_hcd: invalid port number 236 [ 125.766923][T10282] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.2641: iget: special inode unallocated [ 125.769453][T10286] vhci_hcd: invalid port number 236 [ 125.791021][T10282] EXT4-fs (loop1): get root inode failed [ 125.796985][T10282] EXT4-fs (loop1): mount failed [ 126.010218][T10301] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2648' sets config #1 [ 126.186181][T10318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2657'. [ 126.307009][T10324] loop2: detected capacity change from 0 to 2048 [ 126.355413][T10324] loop2: p1 < > p4 [ 126.361606][T10324] loop2: p4 size 8388608 extends beyond EOD, truncated [ 126.421297][T10330] loop2: detected capacity change from 0 to 164 [ 126.431911][T10330] rock: directory entry would overflow storage [ 126.439162][T10330] rock: sig=0x4543, size=28, remaining=18 [ 126.599318][T10351] loop6: detected capacity change from 0 to 512 [ 126.606183][T10351] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 126.626836][T10351] EXT4-fs (loop6): 1 truncate cleaned up [ 126.636260][T10351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.719480][ T8445] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.792256][T10374] loop4: detected capacity change from 0 to 1024 [ 126.820134][T10374] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 126.830328][T10374] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 126.862605][T10374] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 126.904666][T10374] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.2681: unexpected bad inode w/o EXT4_IGET_BAD [ 126.923292][T10374] EXT4-fs (loop4): no journal found [ 126.928966][T10374] EXT4-fs (loop4): can't get journal size [ 126.938151][T10374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.986003][T10374] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1340: inode #12: block 16: comm syz.4.2681: path /529/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 127.017520][T10374] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1340: inode #12: block 16: comm syz.4.2681: path /529/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 127.070531][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.093110][T10387] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 127.108103][T10387] batman_adv: batadv0: Adding interface: ip6gretap1 [ 127.115411][T10387] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.145398][T10387] batman_adv: batadv0: Interface activated: ip6gretap1 [ 127.201430][T10394] loop1: detected capacity change from 0 to 1024 [ 127.218897][T10394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.398828][ T7481] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.464494][T10410] xt_hashlimit: max too large, truncated to 1048576 [ 127.646149][T10430] netlink: 'syz.6.2702': attribute type 1 has an invalid length. [ 127.654070][T10430] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2702'. [ 127.815128][T10442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.824611][T10442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.871494][T10414] chnl_net:caif_netlink_parms(): no params data found [ 127.927465][T10414] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.934841][T10414] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.942523][T10414] bridge_slave_0: entered allmulticast mode [ 127.949506][T10414] bridge_slave_0: entered promiscuous mode [ 127.956255][T10414] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.963883][T10414] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.971468][T10414] bridge_slave_1: entered allmulticast mode [ 127.978473][T10414] bridge_slave_1: entered promiscuous mode [ 127.998360][T10414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.009079][T10414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.031153][T10414] team0: Port device team_slave_0 added [ 128.038730][T10414] team0: Port device team_slave_1 added [ 128.095120][T10414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.102698][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.130760][T10414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.145053][T10414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.152389][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.180357][T10414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.211944][T10414] hsr_slave_0: entered promiscuous mode [ 128.218495][T10414] hsr_slave_1: entered promiscuous mode [ 128.224653][T10414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.232383][T10414] Cannot create hsr debugfs directory [ 128.304993][T10414] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 128.315730][T10414] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 128.327446][T10414] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 128.336998][T10414] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 128.359507][T10470] netlink: 'syz.2.2716': attribute type 4 has an invalid length. [ 128.365284][T10414] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.375183][T10414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.382759][T10414] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.389966][T10414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.423857][T10414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.441316][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.449993][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.477828][T10414] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.489343][ T5386] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.496762][ T5386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.510685][ T5386] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.518126][ T5386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.560819][T10414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.623827][T10414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.839034][T10414] veth0_vlan: entered promiscuous mode [ 128.850098][T10414] veth1_vlan: entered promiscuous mode [ 128.887092][T10414] veth0_macvtap: entered promiscuous mode [ 128.914273][T10414] veth1_macvtap: entered promiscuous mode [ 128.934111][T10414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.948610][T10414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.962352][T10414] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.971235][T10414] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.980396][T10414] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.989519][T10414] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.019703][T10528] loop6: detected capacity change from 0 to 512 [ 129.043026][T10528] EXT4-fs: Ignoring removed i_version option [ 129.049513][T10528] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.060985][T10528] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 129.099046][T10528] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 129.412938][T10568] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2750'. [ 129.428526][T10571] netlink: 'syz.7.2752': attribute type 3 has an invalid length. [ 129.466419][T10575] loop2: detected capacity change from 0 to 1024 [ 129.486265][T10575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.514831][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 129.514889][ T29] audit: type=1400 audit(1749722255.122:2598): avc: denied { write } for pid=10584 comm="syz.4.2757" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.583059][ T29] audit: type=1326 audit(1749722255.172:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.6.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff076e5e929 code=0x7ffc0000 [ 129.606786][ T29] audit: type=1326 audit(1749722255.172:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.6.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff076e5e929 code=0x7ffc0000 [ 129.619501][T10575] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.2753: Allocating blocks 449-513 which overlap fs metadata [ 129.630614][ T29] audit: type=1326 audit(1749722255.172:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.6.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff076e5e929 code=0x7ffc0000 [ 129.668254][ T29] audit: type=1326 audit(1749722255.172:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.6.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff076e5e929 code=0x7ffc0000 [ 129.691919][ T29] audit: type=1326 audit(1749722255.172:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.6.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff076e5e929 code=0x7ffc0000 [ 129.698382][T10595] netlink: 'syz.6.2762': attribute type 6 has an invalid length. [ 129.715775][ T29] audit: type=1326 audit(1749722255.172:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.6.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff076e5e929 code=0x7ffc0000 [ 129.715813][ T29] audit: type=1326 audit(1749722255.172:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.6.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff076e5e929 code=0x7ffc0000 [ 129.723765][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2762'. [ 129.747507][ T29] audit: type=1326 audit(1749722255.172:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.6.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff076e5e929 code=0x7ffc0000 [ 129.747549][ T29] audit: type=1326 audit(1749722255.172:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.6.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff076e5e929 code=0x7ffc0000 [ 129.819088][T10573] EXT4-fs (loop2): pa ffff8881004f73f0: logic 48, phys. 177, len 21 [ 129.837155][T10573] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 129.837688][T10593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10593 comm=syz.0.2761 [ 129.859931][T10593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10593 comm=syz.0.2761 [ 129.873972][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2764'. [ 129.916248][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.974366][T10607] syzkaller1: entered promiscuous mode [ 129.980715][T10607] syzkaller1: entered allmulticast mode [ 130.028979][T10615] loop6: detected capacity change from 0 to 1024 [ 130.036187][T10615] EXT4-fs: Ignoring removed orlov option [ 130.095411][T10623] loop4: detected capacity change from 0 to 1024 [ 130.103671][T10623] EXT4-fs: Ignoring removed orlov option [ 130.109871][T10623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.130846][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'. [ 130.160045][T10631] loop6: detected capacity change from 0 to 512 [ 130.178411][T10631] EXT4-fs: Ignoring removed bh option [ 130.184989][T10631] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.194259][T10631] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 130.199992][T10635] netlink: 'syz.2.2781': attribute type 2 has an invalid length. [ 130.206691][T10631] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 130.210621][T10635] netlink: 'syz.2.2781': attribute type 9 has an invalid length. [ 130.221948][T10631] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 130.229324][T10635] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2781'. [ 130.258891][T10639] loop7: detected capacity change from 0 to 2048 [ 130.280210][T10638] hub 2-0:1.0: USB hub found [ 130.285201][T10638] hub 2-0:1.0: 8 ports detected [ 130.375102][T10655] SELinux: Context Ü is not valid (left unmapped). [ 130.466887][T10663] syzkaller0: entered promiscuous mode [ 130.472677][T10663] syzkaller0: entered allmulticast mode [ 130.547283][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2792'. [ 130.559378][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2792'. [ 131.040753][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2805'. [ 131.143870][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2806'. [ 131.248711][T10709] netlink: zone id is out of range [ 131.249938][T10707] vhci_hcd: invalid port number 96 [ 131.253900][T10709] netlink: zone id is out of range [ 131.253910][T10709] netlink: zone id is out of range [ 131.253918][T10709] netlink: zone id is out of range [ 131.253926][T10709] netlink: zone id is out of range [ 131.259211][T10707] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 131.287101][T10709] netlink: zone id is out of range [ 131.292301][T10709] netlink: zone id is out of range [ 131.297653][T10709] netlink: zone id is out of range [ 131.303193][T10709] netlink: zone id is out of range [ 131.308519][T10709] netlink: zone id is out of range [ 131.399557][T10713] loop4: detected capacity change from 0 to 512 [ 131.424183][T10713] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.450682][T10713] EXT4-fs (loop4): failed to initialize system zone (-117) [ 131.461907][T10713] EXT4-fs (loop4): mount failed [ 131.653836][T10742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.662623][T10742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.673804][T10744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2827'. [ 131.690177][T10742] loop6: detected capacity change from 0 to 256 [ 131.697772][T10742] vfat: Unknown parameter 'roshortna' [ 132.278493][T10752] SELinux: failed to load policy [ 132.337688][T10756] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 132.503533][T10778] loop6: detected capacity change from 0 to 164 [ 132.518075][T10778] syz.6.2843: attempt to access beyond end of device [ 132.518075][T10778] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 132.532602][T10778] syz.6.2843: attempt to access beyond end of device [ 132.532602][T10778] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.678453][T10787] netlink: 'syz.6.2845': attribute type 10 has an invalid length. [ 132.689036][T10787] team0: Port device dummy0 added [ 132.783718][T10795] loop6: detected capacity change from 0 to 512 [ 132.800553][T10795] EXT4-fs: Ignoring removed nobh option [ 132.823300][T10795] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.2851: corrupted inode contents [ 132.838337][T10795] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #3: comm syz.6.2851: mark_inode_dirty error [ 132.851836][T10795] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.2851: corrupted inode contents [ 132.864056][T10795] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.2851: mark_inode_dirty error [ 132.883262][T10795] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2851: Failed to acquire dquot type 0 [ 132.902056][T10795] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2851: corrupted inode contents [ 132.919723][T10795] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #16: comm syz.6.2851: mark_inode_dirty error [ 132.932808][T10795] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2851: corrupted inode contents [ 132.955108][T10795] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2851: mark_inode_dirty error [ 132.975190][T10795] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2851: corrupted inode contents [ 132.996986][T10795] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 133.006142][T10795] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2851: corrupted inode contents [ 133.025607][T10795] EXT4-fs error (device loop6): ext4_truncate:4597: inode #16: comm syz.6.2851: mark_inode_dirty error [ 133.039344][T10795] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 133.049400][T10795] EXT4-fs (loop6): 1 truncate cleaned up [ 133.059174][T10795] EXT4-fs mount: 8 callbacks suppressed [ 133.059253][T10795] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.078852][T10795] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.168826][ T8445] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.205799][T10827] netlink: 'syz.6.2864': attribute type 1 has an invalid length. [ 133.254736][T10834] loop6: detected capacity change from 0 to 1024 [ 133.272219][T10834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.311691][ T8445] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.320829][T10843] loop7: detected capacity change from 0 to 2048 [ 133.339706][T10843] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.446479][T10861] team0: Port device dummy0 removed [ 133.452685][T10861] batman_adv: batadv0: Adding interface: dummy0 [ 133.459207][T10861] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.484786][T10861] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 133.497745][T10862] netlink: 'syz.6.2873': attribute type 1 has an invalid length. [ 133.505720][T10862] netlink: 'syz.6.2873': attribute type 2 has an invalid length. [ 133.514922][T10414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.606535][T10876] 8021q: adding VLAN 0 to HW filter on device team1 [ 133.639863][T10880] pim6reg1: entered promiscuous mode [ 133.645279][T10880] pim6reg1: entered allmulticast mode [ 133.783919][T10896] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 134.215461][T10945] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 134.222449][T10945] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 134.230478][T10945] vhci_hcd vhci_hcd.0: Device attached [ 134.258796][T10945] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 134.265905][T10945] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.273846][T10945] vhci_hcd vhci_hcd.0: Device attached [ 134.291162][T10945] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 134.305114][T10945] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(9) [ 134.312068][T10945] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 134.313166][T10955] syzkaller1: entered promiscuous mode [ 134.319837][T10945] vhci_hcd vhci_hcd.0: Device attached [ 134.325384][T10955] syzkaller1: entered allmulticast mode [ 134.360857][T10945] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(11) [ 134.367716][T10945] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 134.376437][T10945] vhci_hcd vhci_hcd.0: Device attached [ 134.410859][T10962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 134.440180][ T3410] vhci_hcd: vhci_device speed not set [ 134.458497][T10945] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(13) [ 134.465354][T10945] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 134.473123][T10945] vhci_hcd vhci_hcd.0: Device attached [ 134.506779][ T3410] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 134.506891][T10962] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(18) [ 134.521308][T10962] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.529352][T10962] vhci_hcd vhci_hcd.0: Device attached [ 134.575387][T10975] vhci_hcd: connection closed [ 134.575662][T10954] vhci_hcd: connection closed [ 134.576075][T10968] vhci_hcd: connection closed [ 134.585858][T10948] vhci_hcd: connection closed [ 134.591484][T10946] vhci_hcd: connection reset by peer [ 134.602125][ T5388] vhci_hcd: stop threads [ 134.606806][ T5388] vhci_hcd: release socket [ 134.611278][ T5388] vhci_hcd: disconnect device [ 134.613579][T10958] vhci_hcd: connection closed [ 134.624733][T10978] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 134.643509][ T5388] vhci_hcd: stop threads [ 134.648117][ T5388] vhci_hcd: release socket [ 134.652761][ T5388] vhci_hcd: disconnect device [ 134.679757][ T5388] vhci_hcd: stop threads [ 134.684454][ T5388] vhci_hcd: release socket [ 134.689137][ T5388] vhci_hcd: disconnect device [ 134.705515][ T5388] vhci_hcd: stop threads [ 134.710236][ T5388] vhci_hcd: release socket [ 134.714687][ T5388] vhci_hcd: disconnect device [ 134.726909][ T5388] vhci_hcd: stop threads [ 134.731600][ T5388] vhci_hcd: release socket [ 134.736343][ T5388] vhci_hcd: disconnect device [ 134.739180][T10994] __nla_validate_parse: 4 callbacks suppressed [ 134.739201][T10994] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.2927'. [ 134.747009][ T5388] vhci_hcd: stop threads [ 134.747606][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2927'. [ 134.756882][ T5388] vhci_hcd: release socket [ 134.768462][T10996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.770120][ T5388] vhci_hcd: disconnect device [ 134.793477][T10996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.422219][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 135.422236][ T29] audit: type=1400 audit(1749722261.032:2748): avc: denied { mount } for pid=11020 comm="syz.6.2941" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 135.487989][ T29] audit: type=1326 audit(1749722261.072:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11020 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff076e558e7 code=0x7ffc0000 [ 135.512145][ T29] audit: type=1326 audit(1749722261.072:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11020 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff076dfab19 code=0x7ffc0000 [ 135.536247][ T29] audit: type=1326 audit(1749722261.072:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11020 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff076e558e7 code=0x7ffc0000 [ 135.559927][ T29] audit: type=1326 audit(1749722261.072:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11020 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff076dfab19 code=0x7ffc0000 [ 135.583928][ T29] audit: type=1326 audit(1749722261.072:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11020 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff076e5e929 code=0x7ffc0000 [ 135.609250][ T29] audit: type=1326 audit(1749722261.072:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11020 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7ff076e5e929 code=0x7ffc0000 [ 135.634431][ T29] audit: type=1326 audit(1749722261.072:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11020 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff076e5e929 code=0x7ffc0000 [ 135.659212][ T29] audit: type=1400 audit(1749722261.092:2756): avc: denied { unmount } for pid=8445 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 135.739410][T11034] @: renamed from vlan0 (while UP) [ 135.810634][ T29] audit: type=1326 audit(1749722261.422:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11042 comm="syz.2.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f5ae929 code=0x7ffc0000 [ 136.281957][T11088] netlink: 'syz.2.2972': attribute type 10 has an invalid length. [ 136.360033][T11095] loop2: detected capacity change from 0 to 2048 [ 136.392276][T11095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.605973][T11108] batman_adv: batadv0: Adding interface: dummy0 [ 136.612423][T11108] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.666992][T11108] batman_adv: batadv0: Interface activated: dummy0 [ 136.677834][T11109] batadv0: mtu less than device minimum [ 136.684017][T11109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.694700][T11109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.706008][T11109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.717136][T11109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.728083][T11109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.739000][T11109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.749944][T11109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.761109][T11109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.771973][T11109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.788587][T11108] netlink: 'syz.7.2979': attribute type 1 has an invalid length. [ 136.796493][T11108] netlink: 'syz.7.2979': attribute type 2 has an invalid length. [ 136.885433][T11116] loop7: detected capacity change from 0 to 512 [ 136.894726][T11116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.922235][T11116] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.935261][T11116] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.976102][T10414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.056161][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.224313][T11152] netlink: 'syz.6.2990': attribute type 10 has an invalid length. [ 137.234226][T11152] hsr_slave_0: left promiscuous mode [ 137.240623][T11152] hsr_slave_1: left promiscuous mode [ 137.488142][T11173] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 137.488142][T11173] program syz.2.3007 not setting count and/or reply_len properly [ 137.515422][T11171] bond0: entered promiscuous mode [ 137.521855][T11171] batadv0: entered promiscuous mode [ 137.529155][T11171] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 137.539140][T11171] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 137.550023][T11171] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 137.578386][T11171] bond0: left promiscuous mode [ 137.584625][T11171] batadv0: left promiscuous mode [ 137.632840][T11177] netlink: 'syz.0.3008': attribute type 4 has an invalid length. [ 137.845595][T11199] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 138.012933][T11210] loop4: detected capacity change from 0 to 1024 [ 138.033011][T11210] EXT4-fs: Ignoring removed nobh option [ 138.038802][T11210] EXT4-fs: Ignoring removed bh option [ 138.098283][T11210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.230983][T11216] block device autoloading is deprecated and will be removed. [ 138.612306][T11239] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3033'. [ 138.625587][T11241] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3034'. [ 138.661025][T11245] loop7: detected capacity change from 0 to 512 [ 138.667974][T11245] EXT4-fs: Ignoring removed bh option [ 138.674598][T11245] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.683980][T11245] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 138.693828][T11245] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 138.705606][T11245] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 138.714533][T11245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.746002][T10414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.769592][T11207] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3020: Allocating blocks 497-513 which overlap fs metadata [ 138.823024][T11218] EXT4-fs (loop4): pa ffff8881004f7460: logic 592, phys. 449, len 4 [ 138.831372][T11218] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 138.878465][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.903596][T11258] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3040'. [ 138.919634][T11260] netlink: 'syz.7.3042': attribute type 4 has an invalid length. [ 139.236627][T11286] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3054'. [ 139.370795][T11294] netlink: 'syz.4.3059': attribute type 10 has an invalid length. [ 139.511734][T11310] 9p: Unknown Cache mode or invalid value m [ 139.538593][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3065'. [ 139.587313][ T3410] usb 15-1: enqueue for inactive port 0 [ 139.594237][ T3410] usb 15-1: enqueue for inactive port 0 [ 139.650823][T11321] loop6: detected capacity change from 0 to 512 [ 139.662127][T11321] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 139.676792][ T3410] vhci_hcd: vhci_device speed not set [ 139.683583][T11321] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #13: comm syz.6.3069: iget: bad i_size value: 12154757448730 [ 139.707210][T11321] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.3069: couldn't read orphan inode 13 (err -117) [ 139.726274][T11321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.761804][ T8445] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.986183][T11336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3077'. [ 140.053480][ T51] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 140.121435][ T51] bond0 (unregistering): Released all slaves [ 140.132850][ T51] bond1 (unregistering): Released all slaves [ 140.150432][ T51] bond2 (unregistering): Released all slaves [ 140.193336][ T51] batman_adv: batadv0: Removing interface: dummy0 [ 140.313277][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3083'. [ 140.381373][T11366] x_tables: ip_tables: TPROXY target: only valid in mangle table, not syz0 [ 140.393078][T11337] chnl_net:caif_netlink_parms(): no params data found [ 140.440722][T11337] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.448015][T11337] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.455310][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 140.455328][ T29] audit: type=1326 audit(1749722266.062:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.4.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 140.485939][ T29] audit: type=1326 audit(1749722266.062:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.4.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 140.509799][ T29] audit: type=1326 audit(1749722266.062:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.4.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 140.533575][ T29] audit: type=1326 audit(1749722266.062:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.4.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 140.544107][T11337] bridge_slave_0: entered allmulticast mode [ 140.557422][ T29] audit: type=1326 audit(1749722266.062:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.4.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 140.557453][ T29] audit: type=1326 audit(1749722266.062:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.4.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 140.557480][ T29] audit: type=1326 audit(1749722266.062:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.4.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 140.566769][T11337] bridge_slave_0: entered promiscuous mode [ 140.587115][ T29] audit: type=1326 audit(1749722266.062:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.4.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 140.587152][ T29] audit: type=1326 audit(1749722266.062:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.4.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 140.612512][T11337] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.634269][ T29] audit: type=1326 audit(1749722266.062:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.4.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 140.640359][T11337] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.726155][T11337] bridge_slave_1: entered allmulticast mode [ 140.736267][T11337] bridge_slave_1: entered promiscuous mode [ 140.774597][T11337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.789481][T11337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.822050][T11337] team0: Port device team_slave_0 added [ 140.839113][T11337] team0: Port device team_slave_1 added [ 140.902208][T11337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.909298][T11337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.935371][T11337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.987402][T11337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.994681][T11337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.021200][T11337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.038228][ T3375] IPVS: starting estimator thread 0... [ 141.121537][T11337] hsr_slave_0: entered promiscuous mode [ 141.132914][T11337] hsr_slave_1: entered promiscuous mode [ 141.136824][T11391] IPVS: using max 2064 ests per chain, 103200 per kthread [ 141.164833][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 141.188467][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3097'. [ 141.264138][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 141.278834][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 141.441945][T11425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.451959][T11425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.465721][T11429] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3111'. [ 141.498008][T11425] loop2: detected capacity change from 0 to 256 [ 141.529779][T11425] vfat: Unknown parameter 'roshortna' [ 141.599444][T11337] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 141.618721][T11337] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 141.628044][T11337] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 141.639584][T11337] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 141.732253][T11337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.754126][T11337] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.782660][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.790093][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.814720][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.821992][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.869984][T11337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.880727][T11337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.994131][T11337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.080801][T11487] netlink: 'syz.4.3130': attribute type 1 has an invalid length. [ 142.266281][T11337] veth0_vlan: entered promiscuous mode [ 142.281807][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3134'. [ 142.295420][T11337] veth1_vlan: entered promiscuous mode [ 142.314268][T11506] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.330343][T11505] wireguard0: entered promiscuous mode [ 142.335960][T11505] wireguard0: entered allmulticast mode [ 142.382604][T11337] veth0_macvtap: entered promiscuous mode [ 142.390450][T11337] veth1_macvtap: entered promiscuous mode [ 142.402866][T11337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.416350][T11337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.428639][T11337] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.437542][T11337] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.440137][T11513] loop2: detected capacity change from 0 to 128 [ 142.446346][T11337] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.461647][T11337] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.498937][T11513] syz.2.3136: attempt to access beyond end of device [ 142.498937][T11513] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 142.755636][T11526] netlink: 'syz.2.3140': attribute type 10 has an invalid length. [ 142.905570][T11532] loop6: detected capacity change from 0 to 2048 [ 142.929833][T11532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.931902][T11534] pim6reg1: entered promiscuous mode [ 142.947691][T11534] pim6reg1: entered allmulticast mode [ 143.075155][T11541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.086560][ T51] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.109291][T11541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.120332][T11337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.133319][T11543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3148'. [ 143.156026][ T51] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.213103][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3151'. [ 143.229001][T11549] IPVS: Error joining to the multicast group [ 143.238699][ T51] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.284519][T11553] hsr0: entered promiscuous mode [ 143.298650][ T51] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.427120][ T51] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 143.501075][ T51] batman_adv: batadv0: Removing interface: ip6gretap1 [ 143.524316][T11575] loop2: detected capacity change from 0 to 1024 [ 143.542039][T11574] loop6: detected capacity change from 0 to 8192 [ 143.553531][T11575] EXT4-fs: Ignoring removed nobh option [ 143.560078][T11575] EXT4-fs: Ignoring removed bh option [ 143.562235][ T51] bond0 (unregistering): Released all slaves [ 143.593316][T11575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.611248][T11574] loop6: p1 p2 p3 p4 [ 143.627109][T11574] loop6: p1 start 51379968 is beyond EOD, truncated [ 143.634183][T11574] loop6: p2 start 2936012800 is beyond EOD, truncated [ 143.641144][T11574] loop6: p3 size 100663552 extends beyond EOD, truncated [ 143.670540][ T51] hsr_slave_0: left promiscuous mode [ 143.695325][ T51] hsr_slave_1: left promiscuous mode [ 143.711821][T11580] loop4: detected capacity change from 0 to 2048 [ 143.728587][ T51] veth1_macvtap: left promiscuous mode [ 143.746371][T11582] loop7: detected capacity change from 0 to 128 [ 143.753150][ T51] veth0_macvtap: left allmulticast mode [ 143.758992][ T51] veth0_macvtap: left promiscuous mode [ 143.787398][ T51] veth1_vlan: left promiscuous mode [ 143.792926][ T51] veth0_vlan: left promiscuous mode [ 143.798766][T11574] loop6: p4 size 656640 extends beyond EOD, truncated [ 143.928104][T11580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.142053][T11569] syz.6.3157 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 144.156926][T11569] CPU: 1 UID: 0 PID: 11569 Comm: syz.6.3157 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 144.156968][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.156981][T11569] Call Trace: [ 144.156990][T11569] [ 144.156998][T11569] __dump_stack+0x1d/0x30 [ 144.157019][T11569] dump_stack_lvl+0xe8/0x140 [ 144.157043][T11569] dump_stack+0x15/0x1b [ 144.157064][T11569] dump_header+0x81/0x220 [ 144.157152][T11569] oom_kill_process+0x334/0x3f0 [ 144.157195][T11569] out_of_memory+0x979/0xb80 [ 144.157231][T11569] try_charge_memcg+0x5e6/0x9e0 [ 144.157269][T11569] obj_cgroup_charge_pages+0xa6/0x150 [ 144.157334][T11569] __memcg_kmem_charge_page+0x9f/0x170 [ 144.157369][T11569] __alloc_frozen_pages_noprof+0x188/0x360 [ 144.157443][T11569] alloc_pages_mpol+0xb3/0x250 [ 144.157527][T11569] alloc_pages_noprof+0x90/0x130 [ 144.157617][T11569] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 144.157677][T11569] __kvmalloc_node_noprof+0x30f/0x4e0 [ 144.157716][T11569] ? ip_set_alloc+0x1f/0x30 [ 144.157831][T11569] ? ip_set_alloc+0x1f/0x30 [ 144.157875][T11569] ? __kmalloc_cache_noprof+0x189/0x320 [ 144.157914][T11569] ip_set_alloc+0x1f/0x30 [ 144.157959][T11569] hash_netiface_create+0x282/0x740 [ 144.158070][T11569] ? __pfx_hash_netiface_create+0x10/0x10 [ 144.158119][T11569] ip_set_create+0x3cc/0x960 [ 144.158180][T11569] ? __nla_parse+0x40/0x60 [ 144.158205][T11569] nfnetlink_rcv_msg+0x4c3/0x590 [ 144.158259][T11569] ? selinux_capable+0x1f9/0x270 [ 144.158323][T11569] netlink_rcv_skb+0x120/0x220 [ 144.158349][T11569] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 144.158405][T11569] nfnetlink_rcv+0x16b/0x1690 [ 144.158484][T11569] ? __kfree_skb+0x109/0x150 [ 144.158510][T11569] ? nlmon_xmit+0x4f/0x60 [ 144.158540][T11569] ? consume_skb+0x49/0x150 [ 144.158578][T11569] ? nlmon_xmit+0x4f/0x60 [ 144.158611][T11569] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 144.158650][T11569] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 144.158671][T11569] ? __dev_queue_xmit+0x182/0x1fb0 [ 144.158694][T11569] ? ref_tracker_free+0x37d/0x3e0 [ 144.158740][T11569] ? __netlink_deliver_tap+0x4dc/0x500 [ 144.158830][T11569] netlink_unicast+0x5a1/0x670 [ 144.158878][T11569] netlink_sendmsg+0x58b/0x6b0 [ 144.158911][T11569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.158976][T11569] __sock_sendmsg+0x142/0x180 [ 144.159011][T11569] ____sys_sendmsg+0x31e/0x4e0 [ 144.159038][T11569] ___sys_sendmsg+0x17b/0x1d0 [ 144.159120][T11569] __x64_sys_sendmsg+0xd4/0x160 [ 144.159151][T11569] x64_sys_call+0x2999/0x2fb0 [ 144.159173][T11569] do_syscall_64+0xd2/0x200 [ 144.159198][T11569] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 144.159230][T11569] ? clear_bhb_loop+0x40/0x90 [ 144.159289][T11569] ? clear_bhb_loop+0x40/0x90 [ 144.159311][T11569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.159333][T11569] RIP: 0033:0x7f62b16fe929 [ 144.159404][T11569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.159423][T11569] RSP: 002b:00007f62afd67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.159443][T11569] RAX: ffffffffffffffda RBX: 00007f62b1925fa0 RCX: 00007f62b16fe929 [ 144.159456][T11569] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 144.159528][T11569] RBP: 00007f62b1780b39 R08: 0000000000000000 R09: 0000000000000000 [ 144.159540][T11569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.159553][T11569] R13: 0000000000000000 R14: 00007f62b1925fa0 R15: 00007fffeabbead8 [ 144.159576][T11569] [ 144.159667][T11569] memory: usage 307200kB, limit 307200kB, failcnt 222 [ 144.195859][T11558] chnl_net:caif_netlink_parms(): no params data found [ 144.199381][T11569] memory+swap: usage 311476kB, limit 9007199254740988kB, failcnt 0 [ 144.199401][T11569] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 144.199415][T11569] Memory cgroup stats for /syz6: [ 144.224691][T11569] cache 0 [ 144.550867][T11569] rss 0 [ 144.553720][T11569] shmem 0 [ 144.556709][T11569] mapped_file 0 [ 144.560250][T11569] dirty 0 [ 144.563228][T11569] writeback 0 [ 144.566542][T11569] workingset_refault_anon 64 [ 144.571267][T11569] workingset_refault_file 0 [ 144.575788][T11569] swap 4378624 [ 144.579203][T11569] swapcached 16384 [ 144.582995][T11569] pgpgin 29005 [ 144.586367][T11569] pgpgout 29001 [ 144.589903][T11569] pgfault 50419 [ 144.593381][T11569] pgmajfault 14 [ 144.596927][T11569] inactive_anon 16384 [ 144.600968][T11569] active_anon 0 [ 144.604424][T11569] inactive_file 0 [ 144.608097][T11569] active_file 0 [ 144.611586][T11569] unevictable 0 [ 144.615060][T11569] hierarchical_memory_limit 314572800 [ 144.620537][T11569] hierarchical_memsw_limit 9223372036854771712 [ 144.626901][T11569] total_cache 0 [ 144.630515][T11569] total_rss 0 [ 144.633798][T11569] total_shmem 0 [ 144.637334][T11569] total_mapped_file 0 [ 144.641478][T11569] total_dirty 0 [ 144.645027][T11569] total_writeback 0 [ 144.648988][T11569] total_workingset_refault_anon 64 [ 144.654243][T11569] total_workingset_refault_file 0 [ 144.659476][T11569] total_swap 4378624 [ 144.663383][T11569] total_swapcached 16384 [ 144.667712][T11569] total_pgpgin 29005 [ 144.671646][T11569] total_pgpgout 29001 [ 144.675638][T11569] total_pgfault 50419 [ 144.679700][T11569] total_pgmajfault 14 [ 144.683753][T11569] total_inactive_anon 16384 [ 144.688296][T11569] total_active_anon 0 [ 144.692297][T11569] total_inactive_file 0 [ 144.696522][T11569] total_active_file 0 [ 144.700597][T11569] total_unevictable 0 [ 144.704658][T11569] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3157,pid=11568,uid=0 [ 144.719523][T11569] Memory cgroup out of memory: Killed process 11568 (syz.6.3157) total-vm:95800kB, anon-rss:936kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 144.740586][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.763237][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.847652][T11558] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.854810][T11558] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.862283][T11558] bridge_slave_0: entered allmulticast mode [ 144.869354][T11558] bridge_slave_0: entered promiscuous mode [ 144.877098][T11558] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.884200][T11558] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.891651][T11558] bridge_slave_1: entered allmulticast mode [ 144.898413][T11558] bridge_slave_1: entered promiscuous mode [ 144.924904][T11558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.947502][T11558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.989993][T11558] team0: Port device team_slave_0 added [ 144.997069][T11558] team0: Port device team_slave_1 added [ 145.014615][T11558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.021839][T11558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.048301][T11558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.060759][T11558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.067905][T11558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.094062][T11558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.127144][T11558] hsr_slave_0: entered promiscuous mode [ 145.137224][T11558] hsr_slave_1: entered promiscuous mode [ 145.143578][T11558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.151379][T11558] Cannot create hsr debugfs directory [ 145.240669][T11558] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 145.260043][T11558] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 145.269614][T11558] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 145.283711][T11558] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 145.300671][T11558] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.307973][T11558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.315667][T11558] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.322795][T11558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.351438][T11558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.362787][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.379369][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.399235][T11558] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.417967][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.425404][ T5381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.437789][ T5381] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.445300][ T5381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.490621][T11558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.568249][T11558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.581328][T11655] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3185'. [ 145.680032][T11665] vhci_hcd: invalid port number 96 [ 145.685226][T11665] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 145.827693][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 145.827709][ T29] audit: type=1400 audit(1749722271.442:2903): avc: denied { cmd } for pid=11683 comm="syz.2.3194" path="socket:[31295]" dev="sockfs" ino=31295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 145.861882][T11558] veth0_vlan: entered promiscuous mode [ 145.886082][T11558] veth1_vlan: entered promiscuous mode [ 145.892182][T11686] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3195'. [ 145.903544][T11693] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.943344][T11558] veth0_macvtap: entered promiscuous mode [ 145.955691][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3200'. [ 145.958821][T11558] veth1_macvtap: entered promiscuous mode [ 145.964662][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3200'. [ 145.979976][T11558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.000878][T11699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3201'. [ 146.028705][T11558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.040364][T11558] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.049421][T11558] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.058500][T11558] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.067516][T11558] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.153992][T11719] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3155'. [ 146.163230][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3155'. [ 146.172383][T11719] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3155'. [ 146.182064][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3155'. [ 146.191167][T11719] netlink: 'syz.8.3155': attribute type 6 has an invalid length. [ 146.235488][ T29] audit: type=1326 audit(1749722271.842:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.7.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f8f9e929 code=0x7ffc0000 [ 146.259432][ T29] audit: type=1326 audit(1749722271.842:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.7.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f8f9e929 code=0x7ffc0000 [ 146.283952][ T29] audit: type=1326 audit(1749722271.902:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.7.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62f8f9e929 code=0x7ffc0000 [ 146.308518][ T29] audit: type=1326 audit(1749722271.902:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.7.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f8f9e929 code=0x7ffc0000 [ 146.332487][ T29] audit: type=1326 audit(1749722271.902:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.7.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f8f9e929 code=0x7ffc0000 [ 146.356844][ T29] audit: type=1326 audit(1749722271.922:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.7.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f62f8f9e929 code=0x7ffc0000 [ 146.380546][ T29] audit: type=1326 audit(1749722271.922:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.7.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f8f9e929 code=0x7ffc0000 [ 146.404388][ T29] audit: type=1326 audit(1749722271.922:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.7.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f8f9e929 code=0x7ffc0000 [ 146.456216][T11731] rdma_op ffff88810295d980 conn xmit_rdma 0000000000000000 [ 146.490361][T11736] batman_adv: batadv0: Interface deactivated: dummy0 [ 146.497365][T11736] batman_adv: batadv0: Removing interface: dummy0 [ 146.518526][T11736] bridge_slave_0: left allmulticast mode [ 146.524360][T11736] bridge_slave_0: left promiscuous mode [ 146.530459][T11736] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.539280][T11741] netlink: 'syz.7.3217': attribute type 10 has an invalid length. [ 146.550369][T11736] bridge_slave_1: left allmulticast mode [ 146.556303][T11736] bridge_slave_1: left promiscuous mode [ 146.562243][T11736] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.579894][T11736] bond0: (slave bond_slave_0): Releasing backup interface [ 146.594777][T11745] loop8: detected capacity change from 0 to 1024 [ 146.616586][T11736] bond0: (slave bond_slave_1): Releasing backup interface [ 146.617138][T11745] EXT4-fs: Ignoring removed nobh option [ 146.629898][T11745] EXT4-fs: Ignoring removed bh option [ 146.640939][T11736] team0: Port device team_slave_0 removed [ 146.657687][T11736] team0: Port device team_slave_1 removed [ 146.666360][T11736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.673895][T11736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.684472][T11745] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.707621][T11736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.715327][T11736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.765440][T11741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.788600][T11741] team0: Port device bond0 added [ 146.853861][ T29] audit: type=1326 audit(1749722272.462:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11760 comm="syz.4.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb3cce929 code=0x7ffc0000 [ 146.883411][T11761] loop2: detected capacity change from 0 to 512 [ 146.915808][T11761] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.3226: corrupted in-inode xattr: invalid ea_ino [ 146.962182][T11761] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3226: couldn't read orphan inode 15 (err -117) [ 146.977048][T11761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.060032][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.095765][T11772] netlink: 'syz.2.3230': attribute type 8 has an invalid length. [ 147.225340][T11740] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.3219: Allocating blocks 497-513 which overlap fs metadata [ 147.246237][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3234'. [ 147.372613][T11558] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.425816][T11804] hsr_slave_0: left promiscuous mode [ 147.432849][T11804] hsr_slave_1: left promiscuous mode [ 147.576012][T11820] loop6: detected capacity change from 0 to 1024 [ 147.594776][T11820] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 147.608047][T11820] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 147.616371][T11820] EXT4-fs (loop6): orphan cleanup on readonly fs [ 147.624654][T11820] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3251: bg 0: block 10: padding at end of block bitmap is not set [ 147.641412][T11820] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3251: Failed to acquire dquot type 0 [ 147.653641][T11820] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3251: Failed to acquire dquot type 0 [ 147.666551][T11820] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.3251: Freeing blocks not in datazone - block = 0, count = 4096 [ 147.684882][T11820] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3251: Failed to acquire dquot type 0 [ 147.700543][T11820] EXT4-fs (loop6): 1 orphan inode deleted [ 147.708987][T11820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.740033][T11337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.754507][T11823] netlink: 'syz.4.3253': attribute type 4 has an invalid length. [ 147.766090][T11823] netlink: 'syz.4.3253': attribute type 4 has an invalid length. [ 147.851401][T11830] loop6: detected capacity change from 0 to 1024 [ 147.861532][T11830] EXT4-fs: Ignoring removed nobh option [ 147.867454][T11830] EXT4-fs: Ignoring removed bh option [ 147.900184][T11830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.342871][T11825] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.3252: Allocating blocks 497-513 which overlap fs metadata [ 148.399543][T11824] EXT4-fs (loop6): pa ffff8881004f74d0: logic 544, phys. 433, len 5 [ 148.407892][T11824] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 148.446113][T11337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.597002][T11914] loop8: detected capacity change from 0 to 512 [ 148.609594][T11914] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.622550][T11914] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.642374][T11918] SELinux: ebitmap: truncated map [ 148.649615][T11918] SELinux: failed to load policy [ 148.656048][T11558] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.800103][T11930] netlink: 'syz.8.3294': attribute type 7 has an invalid length. [ 148.809175][T11930] netlink: 'syz.8.3294': attribute type 7 has an invalid length. [ 149.079655][T11942] bridge_slave_0: left allmulticast mode [ 149.085506][T11942] bridge_slave_0: left promiscuous mode [ 149.091434][T11942] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.100746][T11942] bridge_slave_1: left allmulticast mode [ 149.106860][T11942] bridge_slave_1: left promiscuous mode [ 149.112717][T11942] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.115460][T11945] netlink: 'syz.8.3298': attribute type 10 has an invalid length. [ 149.130970][T11942] bond0: (slave bond_slave_0): Releasing backup interface [ 149.141652][T11942] bond0: (slave bond_slave_1): Releasing backup interface [ 149.153391][T11942] team0: Port device team_slave_0 removed [ 149.162514][T11942] team0: Port device team_slave_1 removed [ 149.169837][T11942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.177428][T11942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.186463][T11942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.194322][T11942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.214611][T11944] hsr_slave_0: left promiscuous mode [ 149.220709][T11944] hsr_slave_1: left promiscuous mode [ 149.235339][T11945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.245134][T11945] team0: Port device bond0 added [ 149.295398][T11950] loop8: detected capacity change from 0 to 128 [ 149.364988][T11957] loop7: detected capacity change from 0 to 256 [ 149.382318][T11959] netlink: 'syz.2.3306': attribute type 4 has an invalid length. [ 149.391412][T11959] netlink: 'syz.2.3306': attribute type 4 has an invalid length. [ 149.452537][T11965] loop2: detected capacity change from 0 to 512 [ 149.460444][T11965] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.472066][T11965] EXT4-fs (loop2): 1 truncate cleaned up [ 149.496611][T11965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.558659][T11970] loop7: detected capacity change from 0 to 512 [ 149.564239][T11950] syz.8.3302: attempt to access beyond end of device [ 149.564239][T11950] loop8: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 149.581044][T11950] syz.8.3302: attempt to access beyond end of device [ 149.581044][T11950] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 149.594126][T11970] EXT4-fs (loop7): orphan cleanup on readonly fs [ 149.595561][T11950] syz.8.3302: attempt to access beyond end of device [ 149.595561][T11950] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 149.616277][T11950] syz.8.3302: attempt to access beyond end of device [ 149.616277][T11950] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 149.618947][T11970] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3311: bg 0: block 248: padding at end of block bitmap is not set [ 149.646112][T11970] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3311: Failed to acquire dquot type 1 [ 149.658004][T11950] syz.8.3302: attempt to access beyond end of device [ 149.658004][T11950] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 149.672073][T11950] syz.8.3302: attempt to access beyond end of device [ 149.672073][T11950] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 149.685728][T11950] syz.8.3302: attempt to access beyond end of device [ 149.685728][T11950] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 149.700188][T11970] EXT4-fs (loop7): 1 truncate cleaned up [ 149.706548][T11970] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.719289][T11950] syz.8.3302: attempt to access beyond end of device [ 149.719289][T11950] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 149.741959][T11975] bridge_slave_0: left promiscuous mode [ 149.744851][T11950] syz.8.3302: attempt to access beyond end of device [ 149.744851][T11950] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 149.748428][T11975] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.761742][T11950] syz.8.3302: attempt to access beyond end of device [ 149.761742][T11950] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 149.772418][T11970] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.3311: deleted inode referenced: 12 [ 149.806389][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.832891][T11975] bridge_slave_1: left allmulticast mode [ 149.838848][T11975] bridge_slave_1: left promiscuous mode [ 149.844673][T11975] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.854558][T11975] bond0: (slave 77ÿ): Releasing backup interface [ 149.864191][T10414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.873863][T11975] bond0: (slave bond_slave_1): Releasing backup interface [ 149.916780][T11975] team0: Port device team_slave_0 removed [ 149.927623][T11975] team0: Port device team_slave_1 removed [ 149.940099][T11988] xt_hashlimit: max too large, truncated to 1048576 [ 149.956755][T11975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.970180][T11975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.978875][T11975] bond1: (slave gretap1): Releasing active interface [ 149.995299][T11975] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 150.003257][T11975] batman_adv: batadv0: Removing interface: ip6gretap1 [ 150.170679][T12009] loop2: detected capacity change from 0 to 128 [ 150.263070][T12022] loop8: detected capacity change from 0 to 128 [ 150.485201][T12048] rdma_op ffff8881235e8180 conn xmit_rdma 0000000000000000 [ 150.590227][T12054] __nla_validate_parse: 9 callbacks suppressed [ 150.590247][T12054] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3349'. [ 150.619756][T12057] ref_ctr_offset mismatch. inode: 0x12c offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 150.661398][T12065] tipc: Failed to remove unknown binding: 66,1,1/0:166933937/166933939 [ 150.729489][T12073] syzkaller0: entered promiscuous mode [ 150.735053][T12073] syzkaller0: entered allmulticast mode [ 150.781299][T12075] tipc: Started in network mode [ 150.786401][T12075] tipc: Node identity 4aaadbf48401, cluster identity 4711 [ 150.791552][T12073] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 150.793798][T12075] tipc: Enabled bearer , priority 0 [ 150.828286][T12075] tipc: Disabling bearer [ 150.842175][T12081] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3362'. [ 151.063646][T12106] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3374'. [ 151.259151][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'. [ 151.269070][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'. [ 151.359493][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 151.359509][ T29] audit: type=1326 audit(1749722276.972:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.8.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c6d0e929 code=0x7ffc0000 [ 151.401619][ T29] audit: type=1326 audit(1749722276.972:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.8.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44c6d0e929 code=0x7ffc0000 [ 151.426457][ T29] audit: type=1326 audit(1749722276.972:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.8.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c6d0e929 code=0x7ffc0000 [ 151.451510][ T29] audit: type=1326 audit(1749722276.972:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.8.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c6d0e929 code=0x7ffc0000 [ 151.476089][ T29] audit: type=1326 audit(1749722276.972:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.8.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44c6d0e929 code=0x7ffc0000 [ 151.500351][ T29] audit: type=1326 audit(1749722276.972:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.8.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c6d0e929 code=0x7ffc0000 [ 151.526337][ T29] audit: type=1326 audit(1749722276.972:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.8.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c6d0e929 code=0x7ffc0000 [ 151.551353][ T29] audit: type=1326 audit(1749722276.972:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.8.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44c6d0e929 code=0x7ffc0000 [ 151.576194][ T29] audit: type=1326 audit(1749722276.972:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.8.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c6d0e929 code=0x7ffc0000 [ 151.600957][ T29] audit: type=1326 audit(1749722276.972:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.8.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c6d0e929 code=0x7ffc0000 [ 151.844849][T12149] syzkaller0: entered promiscuous mode [ 151.975047][T12174] tipc: New replicast peer: 0.0.255.255 [ 151.980954][T12174] tipc: Enabled bearer , priority 10 [ 152.009189][T12179] tipc: Failed to remove unknown binding: 66,1,1/0:3137485213/3137485215 [ 152.054817][T12186] loop6: detected capacity change from 0 to 256 [ 152.193891][T12204] netlink: 'syz.7.3418': attribute type 3 has an invalid length. [ 152.242121][T12209] tipc: Failed to remove unknown binding: 66,1,1/0:2352678738/2352678740 [ 152.287928][T12217] veth1_to_bond: entered allmulticast mode [ 152.296713][T12217] veth1_to_bond: entered promiscuous mode [ 152.334602][T12224] vhci_hcd: invalid port number 15 [ 152.341834][T12224] vhci_hcd: invalid port number 15 [ 152.357654][T12217] veth1_to_bond: left promiscuous mode [ 152.363441][T12217] veth1_to_bond: left allmulticast mode [ 152.369973][T12226] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3428'. [ 152.568426][T12240] wireguard0: entered promiscuous mode [ 152.574997][T12240] wireguard0: entered allmulticast mode [ 152.641475][T12246] tipc: Failed to remove unknown binding: 66,1,1/2886997005:3451564208/3451564210 [ 152.734620][T12257] tipc: Enabled bearer , priority 0 [ 152.746047][T12257] tipc: Disabling bearer [ 152.989027][T12275] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.3445'. [ 152.999594][T12275] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3445'. [ 153.034019][T12276] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.3447'. [ 153.043458][T12276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3447'. [ 153.052556][ T10] page_pool_release_retry() stalled pool shutdown: id 47, 1 inflight 60 sec [ 153.106831][ T3410] tipc: Node number set to 3467369460 [ 153.980233][T12290] tipc: Failed to remove unknown binding: 66,1,1/2886997007:159911327/159911329 [ 154.083699][T12295] net_ratelimit: 43 callbacks suppressed [ 154.083720][T12295] netlink: zone id is out of range [ 154.094873][T12295] netlink: zone id is out of range [ 154.101472][T12295] netlink: zone id is out of range [ 154.107460][T12295] netlink: del zone limit has 8 unknown bytes [ 154.305699][T12318] program syz.4.3466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.388801][T12325] all: renamed from bridge_slave_0 (while UP) [ 154.521924][T12341] ALSA: seq fatal error: cannot create timer (-22) [ 154.557648][T12345] team0: No ports can be present during mode change [ 154.578368][T12345] team0 (unregistering): Port device team_slave_0 removed [ 154.589017][T12345] team0 (unregistering): Port device team_slave_1 removed [ 154.623590][T12351] vhci_hcd: invalid port number 255 [ 154.626304][T12349] netlink: zone id is out of range [ 154.629031][T12351] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 154.644270][T12349] netlink: zone id is out of range [ 154.650568][T12349] netlink: zone id is out of range [ 154.655957][T12349] netlink: del zone limit has 8 unknown bytes [ 154.716486][T12359] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 154.723163][T12359] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 154.730745][T12359] vhci_hcd vhci_hcd.0: Device attached [ 154.742055][T12359] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5) [ 154.748692][T12359] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.756426][T12359] vhci_hcd vhci_hcd.0: Device attached [ 154.764478][T12359] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 154.778366][T12359] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(9) [ 154.784991][T12359] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 154.792982][T12359] vhci_hcd vhci_hcd.0: Device attached [ 154.804192][T12359] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(11) [ 154.810945][T12359] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 154.818670][T12359] vhci_hcd vhci_hcd.0: Device attached [ 154.825860][T12287] tipc: Failed to remove unknown binding: 66,1,1/2886997007:159911327/159911329 [ 154.835135][T12287] tipc: Failed to remove unknown binding: 66,1,1/2886997007:159911327/159911329 [ 154.837824][T12359] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 154.858882][T12359] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 154.873088][T12359] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(17) [ 154.880134][T12359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 154.888799][T12359] vhci_hcd vhci_hcd.0: Device attached [ 154.896294][T12380] vhci_hcd: connection closed [ 154.896608][ T5381] vhci_hcd: stop threads [ 154.897848][T12360] vhci_hcd: connection closed [ 154.901557][ T5381] vhci_hcd: release socket [ 154.901576][ T5381] vhci_hcd: disconnect device [ 154.921149][ T3410] vhci_hcd: vhci_device speed not set [ 154.926749][T12370] vhci_hcd: connection closed [ 154.926923][T12367] vhci_hcd: connection closed [ 154.931782][T12376] vhci_hcd: connection closed [ 154.946570][ T5381] vhci_hcd: stop threads [ 154.955708][ T5381] vhci_hcd: release socket [ 154.960512][ T5381] vhci_hcd: disconnect device [ 154.996977][ T3410] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 155.004756][ T3410] usb 17-1: enqueue for inactive port 0 [ 155.010490][ T5381] vhci_hcd: stop threads [ 155.014775][ T5381] vhci_hcd: release socket [ 155.019275][ T5381] vhci_hcd: disconnect device [ 155.024036][ T3410] usb 17-1: enqueue for inactive port 0 [ 155.031365][ T3410] usb 17-1: enqueue for inactive port 0 [ 155.038036][ T5381] vhci_hcd: stop threads [ 155.042509][ T5381] vhci_hcd: release socket [ 155.046991][ T5381] vhci_hcd: disconnect device [ 155.052139][ T5381] vhci_hcd: stop threads [ 155.056529][ T5381] vhci_hcd: release socket [ 155.061168][ T5381] vhci_hcd: disconnect device [ 155.069915][T12388] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 155.079854][T12388] SELinux: failed to load policy [ 155.109269][ T3410] vhci_hcd: vhci_device speed not set [ 155.115756][T12394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12394 comm=syz.6.3493 [ 155.131467][T12383] wireguard0: entered promiscuous mode [ 155.157776][T12383] wireguard0: entered allmulticast mode [ 155.268361][T12396] bridge_slave_0: left allmulticast mode [ 155.274172][T12396] bridge_slave_0: left promiscuous mode [ 155.280180][T12396] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.290656][T12396] bridge_slave_1: left allmulticast mode [ 155.296479][T12396] bridge_slave_1: left promiscuous mode [ 155.302190][T12396] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.312242][T12396] bond0: (slave bond_slave_0): Releasing backup interface [ 155.322181][T12396] bond0: (slave bond_slave_1): Releasing backup interface [ 155.334783][T12396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.342417][T12396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.351560][T12396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.359922][T12396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.530216][T12420] ip6gre1: entered allmulticast mode [ 155.666130][T12444] geneve0: entered allmulticast mode [ 155.739758][T12449] __nla_validate_parse: 3 callbacks suppressed [ 155.739778][T12449] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.3515'. [ 155.757030][T12449] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3515'. [ 155.792282][T12448] wireguard0: entered promiscuous mode [ 155.799880][T12448] wireguard0: entered allmulticast mode [ 156.142586][ T1033] IPVS: starting estimator thread 0... [ 156.173725][T12476] hub 6-0:1.0: USB hub found [ 156.188666][T12476] hub 6-0:1.0: 8 ports detected [ 156.230126][T12490] ALSA: seq fatal error: cannot create timer (-22) [ 156.237071][T12477] IPVS: using max 2208 ests per chain, 110400 per kthread [ 156.297835][T12481] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3531'. [ 156.307698][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3531'. [ 157.103726][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 157.103745][ T29] audit: type=1326 audit(1749722282.702:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12492 comm="syz.4.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb3cce929 code=0x7fc00000 [ 157.144578][T12501] wireguard0: entered promiscuous mode [ 157.151145][T12501] wireguard0: entered allmulticast mode [ 157.387641][T12524] loop7: detected capacity change from 0 to 128 [ 157.398263][ T29] audit: type=1326 audit(1749722283.012:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b16fe929 code=0x7ffc0000 [ 157.423355][ T29] audit: type=1326 audit(1749722283.012:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b16fe929 code=0x7ffc0000 [ 157.454766][ T29] audit: type=1326 audit(1749722283.062:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62b16fe929 code=0x7ffc0000 [ 157.478678][ T29] audit: type=1326 audit(1749722283.062:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b16fe929 code=0x7ffc0000 [ 157.502580][ T29] audit: type=1326 audit(1749722283.062:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b16fe929 code=0x7ffc0000 [ 157.529722][ T29] audit: type=1326 audit(1749722283.072:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62b16fe929 code=0x7ffc0000 [ 157.554515][ T29] audit: type=1326 audit(1749722283.142:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b16fe929 code=0x7ffc0000 [ 157.578487][ T29] audit: type=1326 audit(1749722283.142:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b16fe929 code=0x7ffc0000 [ 157.618898][ T29] audit: type=1326 audit(1749722283.232:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f62b16fe929 code=0x7ffc0000 [ 157.700503][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3557'. [ 157.776362][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3560'. [ 157.785563][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3560'. [ 157.799970][T12546] wireguard0: entered promiscuous mode [ 157.805789][T12546] wireguard0: entered allmulticast mode [ 157.862686][T12552] team0: Port device bond0 removed [ 157.909891][T12553] syzkaller1: entered promiscuous mode [ 157.915656][T12553] syzkaller1: entered allmulticast mode [ 158.201282][T12592] team0: Port device bond0 removed [ 158.303921][T12601] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 158.311245][T12601] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 158.319718][T12601] vhci_hcd vhci_hcd.0: Device attached [ 158.333643][T12601] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 158.340243][T12601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.348814][T12601] vhci_hcd vhci_hcd.0: Device attached [ 158.360514][T12604] vhci_hcd: invalid port number 96 [ 158.365718][T12604] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 158.366255][T12601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 158.424138][T12601] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 158.430844][T12601] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 158.438761][T12601] vhci_hcd vhci_hcd.0: Device attached [ 158.449865][T12601] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 158.456595][T12601] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 158.464380][T12601] vhci_hcd vhci_hcd.0: Device attached [ 158.471761][T12601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 158.480781][T12601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 158.490704][T12601] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(17) [ 158.497387][T12601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 158.505353][T12601] vhci_hcd vhci_hcd.0: Device attached [ 158.511820][T12618] vhci_hcd: connection closed [ 158.511974][ T5386] vhci_hcd: stop threads [ 158.512462][T12602] vhci_hcd: connection closed [ 158.516937][ T5386] vhci_hcd: release socket [ 158.517006][ T5386] vhci_hcd: disconnect device [ 158.544292][T12606] vhci_hcd: connection closed [ 158.546226][T12614] vhci_hcd: connection closed [ 158.551680][T12616] vhci_hcd: connection closed [ 158.558259][ T5386] vhci_hcd: stop threads [ 158.568033][ T5386] vhci_hcd: release socket [ 158.572504][ T5386] vhci_hcd: disconnect device [ 158.586070][ T5386] vhci_hcd: stop threads [ 158.591163][ T5386] vhci_hcd: release socket [ 158.595715][ T5386] vhci_hcd: disconnect device [ 158.604805][ T5386] vhci_hcd: stop threads [ 158.609498][ T5386] vhci_hcd: release socket [ 158.613969][ T5386] vhci_hcd: disconnect device [ 158.619381][ T5386] vhci_hcd: stop threads [ 158.623713][ T5386] vhci_hcd: release socket [ 158.628349][ T5386] vhci_hcd: disconnect device [ 159.160929][T12629] wireguard1: entered promiscuous mode [ 159.180598][T12629] wireguard1: entered allmulticast mode [ 159.329976][T12653] smc: net device bond0 applied user defined pnetid SYZ0 [ 159.339132][T12653] smc: net device bond0 erased user defined pnetid SYZ0 [ 159.384328][T12660] tipc: New replicast peer: 255.255.255.83 [ 159.391436][T12660] tipc: Enabled bearer , priority 10 [ 159.550845][T12677] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3612'. [ 159.594540][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3614'. [ 159.604349][T12681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3614'. [ 159.829566][T12706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12706 comm=syz.4.3625 [ 160.004013][T12718] pim6reg: entered allmulticast mode [ 160.012117][T12718] pim6reg: left allmulticast mode [ 160.074519][T12723] loop4: detected capacity change from 0 to 1024 [ 160.119385][T12723] ext4: Unknown parameter 'uid<00000000000000000000' [ 160.440250][T12753] syz_tun: entered allmulticast mode [ 160.449988][T12752] syz_tun: left allmulticast mode [ 160.460441][T12755] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.513778][T12755] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.591094][T12755] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.661071][T12755] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.735046][T12755] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.750803][T12755] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.763229][T12755] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.777071][T12767] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 160.779579][T12755] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.783635][T12767] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 160.799659][T12767] vhci_hcd vhci_hcd.0: Device attached [ 160.835680][T12767] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 160.842366][T12767] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.850075][T12767] vhci_hcd vhci_hcd.0: Device attached [ 160.857677][T12767] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 160.868082][T12767] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 160.874877][T12767] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 160.883459][T12767] vhci_hcd vhci_hcd.0: Device attached [ 160.901162][T12767] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 160.907879][T12767] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 160.915576][T12767] vhci_hcd vhci_hcd.0: Device attached [ 160.923254][T12767] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 160.936960][T12767] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 160.957107][T12767] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 160.963791][T12767] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 160.971468][T12767] vhci_hcd vhci_hcd.0: Device attached [ 160.981146][T12775] vhci_hcd: connection closed [ 160.981326][T12770] vhci_hcd: connection closed [ 160.981407][T12779] vhci_hcd: connection closed [ 160.981485][T12768] vhci_hcd: connection closed [ 160.986587][ T5381] vhci_hcd: stop threads [ 161.005239][ T5381] vhci_hcd: release socket [ 161.007601][T12772] vhci_hcd: connection closed [ 161.009694][ T5381] vhci_hcd: disconnect device [ 161.019325][ T9] vhci_hcd: vhci_device speed not set [ 161.025466][ T5381] vhci_hcd: stop threads [ 161.029811][ T5381] vhci_hcd: release socket [ 161.034419][ T5381] vhci_hcd: disconnect device [ 161.058518][ T5381] vhci_hcd: stop threads [ 161.063287][ T5381] vhci_hcd: release socket [ 161.067935][ T5381] vhci_hcd: disconnect device [ 161.084569][ T5381] vhci_hcd: stop threads [ 161.089044][ T5381] vhci_hcd: release socket [ 161.093712][ T5381] vhci_hcd: disconnect device [ 161.104899][ T9] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 161.114660][ T9] usb 5-1: enqueue for inactive port 0 [ 161.122339][ T9] usb 5-1: enqueue for inactive port 0 [ 161.128074][ T9] usb 5-1: enqueue for inactive port 0 [ 161.133926][ T5381] vhci_hcd: stop threads [ 161.138350][ T5381] vhci_hcd: release socket [ 161.142840][ T5381] vhci_hcd: disconnect device [ 161.196700][ T9] vhci_hcd: vhci_device speed not set [ 161.263044][T12804] loop6: detected capacity change from 0 to 512 [ 161.294021][T12804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.309324][T12804] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.355132][T11337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.370094][T12811] loop4: detected capacity change from 0 to 2048 [ 161.392314][T12811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.406105][T12815] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3668'. [ 161.426421][T12811] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 161.444038][T12811] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 161.456766][T12811] EXT4-fs (loop4): This should not happen!! Data will be lost [ 161.456766][T12811] [ 161.466444][T12811] EXT4-fs (loop4): Total free blocks count 0 [ 161.469796][T12821] netlink: 'syz.6.3669': attribute type 27 has an invalid length. [ 161.472473][T12811] EXT4-fs (loop4): Free/Dirty block details [ 161.486852][T12811] EXT4-fs (loop4): free_blocks=4096 [ 161.492478][T12811] EXT4-fs (loop4): dirty_blocks=288 [ 161.497913][T12811] EXT4-fs (loop4): Block reservation details [ 161.504073][T12811] EXT4-fs (loop4): i_reserved_data_blocks=18 [ 161.552687][T12822] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 801 with error 28 [ 161.645036][T12821] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.653641][T12821] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.662982][T12821] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.671717][T12821] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.686753][T12821] ip6gre1: left allmulticast mode [ 161.715327][T12827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.727342][T12827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.789174][T12839] wireguard1: entered promiscuous mode [ 161.795024][T12839] wireguard1: entered allmulticast mode [ 161.851440][T12836] syzkaller0: entered promiscuous mode [ 161.857202][T12836] syzkaller0: entered allmulticast mode [ 162.051352][T12865] pim6reg1: entered promiscuous mode [ 162.056847][T12865] pim6reg1: entered allmulticast mode [ 162.178203][T12877] loop4: detected capacity change from 0 to 512 [ 162.188952][T12877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.203138][T12877] ext4 filesystem being mounted at /747/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.305996][T12884] loop8: detected capacity change from 0 to 512 [ 162.313811][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.339831][T12884] EXT4-fs (loop8): 1 orphan inode deleted [ 162.346176][T12884] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.347253][T12867] Set syz1 is full, maxelem 65536 reached [ 162.362071][T12884] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.366361][ T5381] __quota_error: 144 callbacks suppressed [ 162.366381][ T5381] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 162.392955][ T5381] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 1 [ 162.436749][T12884] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 162.457676][T11558] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.558189][T12902] pim6reg: entered allmulticast mode [ 162.565343][T12902] pim6reg: left allmulticast mode [ 162.901353][ T29] audit: type=1326 audit(1749722288.512:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12917 comm="syz.6.3702" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62b16fe929 code=0x0 [ 163.187808][ T5417] ================================================================== [ 163.195965][ T5417] BUG: KCSAN: data-race in ppp_asynctty_receive / tty_set_termios [ 163.203911][ T5417] [ 163.206265][ T5417] write to 0xffff8881469fc108 of 44 bytes by task 12946 on cpu 0: [ 163.214400][ T5417] tty_set_termios+0xc0/0x8c0 [ 163.219159][ T5417] set_termios+0x496/0x4e0 [ 163.223629][ T5417] tty_mode_ioctl+0x379/0x5c0 [ 163.228445][ T5417] ppp_asynctty_ioctl+0x13f/0x2d0 [ 163.233600][ T5417] tty_ioctl+0x845/0xb80 [ 163.238011][ T5417] __se_sys_ioctl+0xce/0x140 [ 163.242633][ T5417] __x64_sys_ioctl+0x43/0x50 [ 163.247268][ T5417] x64_sys_call+0x19a8/0x2fb0 [ 163.251965][ T5417] do_syscall_64+0xd2/0x200 [ 163.256488][ T5417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.262409][ T5417] [ 163.264765][ T5417] read to 0xffff8881469fc108 of 4 bytes by task 5417 on cpu 1: [ 163.272337][ T5417] ppp_asynctty_receive+0x75c/0xd40 [ 163.277668][ T5417] tty_ldisc_receive_buf+0xbc/0xf0 [ 163.282891][ T5417] tty_port_default_receive_buf+0x59/0x90 [ 163.288817][ T5417] flush_to_ldisc+0x144/0x360 [ 163.293511][ T5417] process_scheduled_works+0x4cb/0x9d0 [ 163.299110][ T5417] worker_thread+0x582/0x770 [ 163.303818][ T5417] kthread+0x486/0x510 [ 163.307902][ T5417] ret_from_fork+0xda/0x150 [ 163.312771][ T5417] ret_from_fork_asm+0x1a/0x30 [ 163.317554][ T5417] [ 163.319886][ T5417] value changed: 0x00000500 -> 0x00038000 [ 163.325611][ T5417] [ 163.328035][ T5417] Reported by Kernel Concurrency Sanitizer on: [ 163.334283][ T5417] CPU: 1 UID: 0 PID: 5417 Comm: kworker/u8:55 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 163.347758][ T5417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.358701][ T5417] Workqueue: events_unbound flush_to_ldisc [ 163.364533][ T5417] ==================================================================