last executing test programs: 16m25.476184859s ago: executing program 4 (id=4253): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x7, 0x731b, 0x9a01}) 16m25.391553193s ago: executing program 4 (id=4258): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x800, 0x3, 0x7, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read(r0, &(0x7f0000000500)=""/200, 0xc8) io_uring_setup(0x7bcb, &(0x7f0000000380)={0x0, 0x82cf, 0x1848, 0x3, 0xc2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x1, 0x0, 0xff, 0xd, 0x5, 0x1}, 0x20) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000"], 0x50) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000340)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x10400, 0x0) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) fsetxattr$trusted_overlay_nlink(r7, &(0x7f00000018c0), 0x0, 0x0, 0x3) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x74, r9, {}, {0x0, 0x1}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 16m25.108375805s ago: executing program 4 (id=4264): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x4) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x31, 0x0, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000010000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 16m25.091598026s ago: executing program 4 (id=4265): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) r1 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e17cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000040)={[{@noswap}]}) getresuid(&(0x7f00000000c0)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@rnullb, r3, &(0x7f0000000280)) mount$9p_unix(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x2004020, &(0x7f0000000580)={'trans=unix,', {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@seclabel}, {@audit}, {@euid_gt={'euid>', r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}]}}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x125) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 16m25.019571019s ago: executing program 4 (id=4266): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) unshare(0x2c020400) r1 = msgget$private(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c000180060006"], 0x24}}, 0x10) msgsnd(r1, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) fsync(0xffffffffffffffff) getcwd(&(0x7f0000000380)=""/152, 0x98) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 16m21.120122958s ago: executing program 4 (id=4317): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) 16m21.05647258s ago: executing program 32 (id=4317): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) 13m24.969450397s ago: executing program 2 (id=6699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001b000000000080000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000200)=ANY=[], 0x8, 0x25d, &(0x7f0000000f40)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, 0x0) syncfs(r1) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f00000001c0)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@delalloc}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 13m24.062298927s ago: executing program 2 (id=6718): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x6, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100082, 0x7ff, 0x6, 0x7, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 13m23.935239702s ago: executing program 2 (id=6719): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 13m23.920404733s ago: executing program 2 (id=6721): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@abort}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x6571, &(0x7f0000000280)={0x0, 0x1aba, 0x20000, 0x2, 0x308}, &(0x7f0000000300), &(0x7f0000000340)) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7712, 0x80, 0xfffffffe, 0xd3, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = semget(0x1, 0x0, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x3c8, 0x0) r9 = geteuid() setfsuid(r9) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000180)={{0x0, r9, 0xee00, 0xee01, r10, 0x102, 0x8}, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x101}) semctl$IPC_RMID(r8, 0x0, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x400000000000001) 13m23.76705217s ago: executing program 2 (id=6723): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) socket$kcm(0x29, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 13m23.500190811s ago: executing program 2 (id=6726): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000002c0)=0x6) write$P9_RREADLINK(r4, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x50) 13m23.499920171s ago: executing program 33 (id=6726): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000002c0)=0x6) write$P9_RREADLINK(r4, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x50) 5.593533986s ago: executing program 5 (id=15382): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r4 = socket(0x400000000010, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r3, 0x1000}, &(0x7f00000002c0)=0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000040)=@ethtool_rxfh={0x47, 0x32, 0x285a, 0x5, 0xf9, "4707aa", 0x7, [0x7f, 0x8, 0x6, 0x7ff, 0x3]}}) r6 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000340)={0x3, &(0x7f0000000540)=[{0x10000, 0x81, &(0x7f0000000480)="16de1c8e692cbb5a996783da0dc74fb5c865bdafd1a26d6fab686dbb4ab8f0eeebf22a45b090bcc45ee50683ec00b0017c60955624332b67081a34d5d782b93383da1032f34eb48fa8718ab2f760861786332af3326cf1d1d96e286e184ab9c404b03870f5d7d542a068944618afdfcae65e75c02e381492dd23261c64160e7f42", 0x1, 0x1}, {0xc1, 0xf80, &(0x7f0000000880)="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", 0x0, 0x1}, {0x0, 0x1c, &(0x7f0000000200)="c9825d3fd2362789dc86363002eaa5556d6102d0226f40b061ed6224", 0x1, 0x1}]}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0xbc2756f95db25251) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e23, 0x1e, @mcast2, 0x200}}, 0x5, 0x7f, 0x1, 0x8001, 0x68f}, &(0x7f00000000c0)=0x98) 5.327344268s ago: executing program 0 (id=15388): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="000000000601000000000000000000528f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) read(r4, &(0x7f0000000440)=""/52, 0x34) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) 4.37825972s ago: executing program 5 (id=15389): r0 = socket$kcm(0x11, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) write$binfmt_register(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828b", 0x25}, {&(0x7f0000000340)="126873159fca3fa38fb190e9a6b763ceb3e6d803ab766b7a38e451d14e0b3457474fe6", 0x23}], 0x2}, 0x40010) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4000000}, 0x18) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[]) r3 = socket(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000180)=0x4) 3.211947741s ago: executing program 0 (id=15390): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x7d, 0x0, 0x3, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x200000, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7056}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 3.209508521s ago: executing program 6 (id=15391): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) 3.143332013s ago: executing program 1 (id=15393): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="000000000601000000000000000000528f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) read(r4, &(0x7f0000000440)=""/52, 0x34) 2.98307115s ago: executing program 6 (id=15396): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x55b2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 2.871886365s ago: executing program 3 (id=15398): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000600)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x120, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x5, 0x40, 0x4000000000000f, 0x3, 0x26c}) 2.856054026s ago: executing program 3 (id=15399): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r4 = socket(0x400000000010, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r3, 0x1000}, &(0x7f00000002c0)=0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000040)=@ethtool_rxfh={0x47, 0x32, 0x285a, 0x5, 0xf9, "4707aa", 0x7, [0x7f, 0x8, 0x6, 0x7ff, 0x3]}}) r6 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000340)={0x3, &(0x7f0000000540)=[{0x10000, 0x81, &(0x7f0000000480)="16de1c8e692cbb5a996783da0dc74fb5c865bdafd1a26d6fab686dbb4ab8f0eeebf22a45b090bcc45ee50683ec00b0017c60955624332b67081a34d5d782b93383da1032f34eb48fa8718ab2f760861786332af3326cf1d1d96e286e184ab9c404b03870f5d7d542a068944618afdfcae65e75c02e381492dd23261c64160e7f42", 0x1, 0x1}, {0xc1, 0xf80, &(0x7f0000000880)="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", 0x0, 0x1}, {0x0, 0x1c, &(0x7f0000000200)="c9825d3fd2362789dc86363002eaa5556d6102d0226f40b061ed6224", 0x1, 0x1}]}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0xbc2756f95db25251) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e23, 0x1e, @mcast2, 0x200}}, 0x5, 0x7f, 0x1, 0x8001, 0x68f}, &(0x7f00000000c0)=0x98) 2.282296141s ago: executing program 1 (id=15400): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) read(0xffffffffffffffff, &(0x7f0000032440)=""/102364, 0x18fdc) read(0xffffffffffffffff, &(0x7f0000000440)=""/52, 0x34) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) 2.155426057s ago: executing program 1 (id=15401): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="000000000601000000000000000000528f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) read(r4, &(0x7f0000000440)=""/52, 0x34) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) 2.025988452s ago: executing program 3 (id=15402): syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x1, 0x246, &(0x7f00000016c0)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) r0 = fsopen(&(0x7f0000001100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xfffffffffffffd18, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="58db1d", 0x0, 0x0, 0x0, 0x40}, 0x38) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000200000000000000de4768ff355ccd6ede", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) openat(r2, 0x0, 0x80101, 0x41) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.001183593s ago: executing program 0 (id=15403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0xb, 0xfffffffd}, 0x14}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000080)={0xfe9c, 0x1, [{0xb}]}) 1.915438937s ago: executing program 0 (id=15404): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, 0x0, &(0x7f0000000580)}, 0x20) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f847427"], 0x28}}, 0x0) 1.3759066s ago: executing program 6 (id=15405): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000020000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x2a, &(0x7f0000000500)=[{&(0x7f0000000000)="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", 0x188}], 0x1}, 0x40016) 1.218180527s ago: executing program 5 (id=15406): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @random="445763595cb4"}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xfffffffb, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x169, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x5, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x8000963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x6, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x14, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x5, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xfeffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0x5, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 1.217596647s ago: executing program 6 (id=15407): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 1.14737065s ago: executing program 1 (id=15408): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x7d, 0x0, 0x3, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x200000, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) socket(0xa, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.086635373s ago: executing program 0 (id=15409): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000600)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x120, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x5, 0x40, 0x4000000000000f, 0x3, 0x26c}) 1.055424684s ago: executing program 6 (id=15410): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x3a) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="09000000000100"/20, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x90000, 0x8) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x3, 0x2, 0x6, 0x7, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) 1.035889755s ago: executing program 3 (id=15411): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) read(0xffffffffffffffff, &(0x7f0000032440)=""/102364, 0x18fdc) read(0xffffffffffffffff, &(0x7f0000000440)=""/52, 0x34) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) 979.279238ms ago: executing program 0 (id=15412): keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) socket$kcm(0x2, 0x0, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000940)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x3, @empty, 0xfff}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000380)="a54366ce0fd9a3b390b0a820a99eb4c81298178655fb589462aa972a4cf0c5655848df958ca5e0f409ff36d462769b38f31fbe41355a45116a2a70ffa4a09afe36acf335f327252bcb7dd358accd74c8c3f239829964a33138c6943bd4011afa10686ae3e00c10a475c6189aedd2cecbc2b2ba6d8d8e1a15734f9a3b9f3673114d305ffeb412de798e2f", 0x8a}, {0x0}, {&(0x7f0000000100)="6b4719d916529e3970a6e508a76e2b2efc2fb440be614aab9d7d17a658843120fd2b3d1e7793a65307295585a61155f5edf1759759c6df37b8be8705544f04d77cd0419c328134b17350f68a0beb63a53383694be4d2120106d2e04d151ae7bce3520c614b468ba9975150", 0x6b}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f00000001c0)="ee15ae2663fc16735e8e21d63efdb2d550f1a4759c13a8862ce774e9515618cff003149c2e7c1d738f3bdc73e7e32214ff09856157ff51c83688b348957e9bd202e65a3a93720d8fe71cc12ea7eed379e181f34358ae6ac8", 0x58}, {&(0x7f00000002c0)="7d050837949d6c880d57f2a2c7ffef441b097a3b30587cf144c5e22b680eb8e160e03c5c7146efaf224d021ebf66010a76be591a8d1e75ca49580fb7b3c38cf51064abe9234ba587054c1efcd8e8608533e8e0816bb15ea8bf2c2294bc5200fb", 0x60}, {&(0x7f0000000580)="313fda2e60daa9d29b5e251300b2d3829003907669b34bf401e106f34caee0836064f1a771c844e62e8e46439f16268d45ade6c5c35ee5314e19d857eeee0246012e994b51dd225d06604f1d22f5a29c0be3a5091160005a914eaacfa1edf689e6c1202f79456d2f3f113cbe0ca234ee9313b047ef58fe5af405a99c42edcfd44d678676aca254ce5122f7b917f45bc8d2ad8c6dc2119f18ad56465b", 0x9c}, {&(0x7f0000000640)="c1a30bc0ea39ac085ca5cc7f3abf6a2ca790ba1edbf0ac9aa8f15028d84e232b98a44608d87d81aea88c20f0c68c60c8c89305715d27354c38ffea51c7398ab91b39a291410c9e5e62ae5b33a789e9e2e715d36658bfc2b1fddaf2412b6f7a6bc667b2482360c47649124815bb650626022a3b26a0a048eb906378d8f581508613779210337867fcaf90a57455ea7c79c7414ac8533f0a166d1d6980b5ae17fbf943c8a6e0c0b41b9f01c0ffcd3373c356acb0763a314f6d14a0dad216a657cb68ed3dd24551dc04fc0a93", 0xcb}, {&(0x7f0000000740)="1a06af77deff66e468edc49dfbb4d233f9bfa9b3aa212536040624bdf11b1dfad10fa6124b1a5bc79d46ca6a65cb7ee5fe68451929c55b5dc5263c472a73b9ea24c83ea9862ed4ea42316ab3a41d4870481d753d0e56f0ded707d53b645eb8bf6ae55940921981bafe75f2003a8ab8ae86a5b0b3c9af370f17fdeafe4ccfef1090e62f9836513974706e2ddbebaf93258ff1197cb23fef6516b453c4dae1864778f4a6f7c02e3a68", 0xa8}], 0x9, &(0x7f00000008c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x2, 0x8, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @init={0x18, 0x84, 0x0, {0x0, 0x3, 0x5, 0xfff8}}], 0x48, 0x4000}, 0x80) r2 = gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_elf32(r4, &(0x7f0000001440)=ANY=[@ANYBLOB="7f454c460b397a2dd4000000000000000300060007000000ba03000038000000fd2600000180ffff060020000100020004000600000000000300000000000000040000000900e6fffe"], 0x58) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x22000401) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000900)={r8, @in6={{0xa, 0x4e24, 0x100, @empty, 0xa}}, 0xfffc, 0x9}, &(0x7f0000000500)=0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000000)) fcntl$lock(r9, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r2}) 978.721488ms ago: executing program 3 (id=15413): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x37d, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000006b080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095", @ANYRESOCT=r1, @ANYRESHEX, @ANYRESHEX, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', r1, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095690a208c6795907cdefc4a34741a649251eb72d15bf6fc5ddf1611d350c037d4e1e4ef3423438d9faea5c7a479b8286650131ab44df901295dd9f7acf6181e29dd6b2408a479172604463a898fccf09e632425e5b02709e8a666f539a6640ccb1f4a44fed6285eee5304d25b9a02bff5cb99778715a8bea7ed0e495e577820dcd5459c4e53bcebb7a5710bb3a2c486957e00f3564679eeac9c39612b427b4cba2522d9583b517018d22a6787154e745de5346ec359a217f7732ae706f626d9cd830bead10c0f6399fb"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x4040010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="0503162ed3fc140820004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x200001c, &(0x7f0000000080)=ANY=[], 0x1, 0x294, &(0x7f00000008c0)="$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") truncate(&(0x7f0000000080)='./file0\x00', 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xa4000021) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x9}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0xe, "4375bc038782496c3594ecd4b2ba"}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @multicast}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 409.099812ms ago: executing program 5 (id=15414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) cachestat(r0, &(0x7f0000000000)={0x8000000000000001, 0x1}, &(0x7f0000000080), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x3}}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x5}]}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}]}, 0x5c}, 0x1, 0x4000, 0x0, 0x44000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket(0x21, 0x3, 0x7) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="4400028040000100240001007072696f726974790000000000000000000000006e0001000000000000000000050003000e"], 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x228, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x840}, 0x8180) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 399.185683ms ago: executing program 3 (id=15415): r0 = socket$kcm(0x11, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) write$binfmt_register(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb190e9a6b763ceb3e6d803ab766b7a38e451d14e0b3457474fe6", 0xfe58}], 0x2}, 0x40010) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000040000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4000000}, 0x18) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[]) r3 = socket(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000180)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0, 0x200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x1, 0x0, 0xff, 0xd, 0x5, 0x1}, 0x20) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, 0x0, 0x0) 277.004678ms ago: executing program 5 (id=15416): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000002c0), 0xfd, 0x4a0, &(0x7f0000000e00)="$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") socket(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 276.249609ms ago: executing program 1 (id=15417): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) write$selinux_context(r0, 0x0, 0x0) 232.25703ms ago: executing program 6 (id=15418): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="000000000601000000000000000000528f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) read(r4, &(0x7f0000000440)=""/52, 0x34) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) 107.480996ms ago: executing program 1 (id=15420): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 0s ago: executing program 5 (id=15421): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x3a) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="09000000000100"/20, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007f571cd56360b8bfdd09387e8dab83c4dc45a702bd3886a4bcdde08e48727e569eb18df1fc0968bf36f606f13a22a354844ea57a6e63c4a42934ee589f5d8187", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x90000, 0x8) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x3, 0x2, 0x6, 0x7, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) kernel console output (not intermixed with test programs): st 0 is lower than device lo mtu (65550) ! [ 1296.185345][ T9709] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.194105][ T9709] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.210778][T20724] random: crng reseeded on system resumption [ 1296.234104][T20727] loop6: detected capacity change from 0 to 128 [ 1296.252254][T20724] syzkaller0: entered allmulticast mode [ 1296.258046][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.269856][T20727] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1296.282752][T20724] syzkaller0: entered promiscuous mode [ 1296.290733][T20724] syzkaller0 (unregistering): left allmulticast mode [ 1296.297429][T20724] syzkaller0 (unregistering): left promiscuous mode [ 1296.530920][T13770] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1296.781197][T20739] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1296.846301][T11553] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1296.943860][T20752] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14688'. [ 1297.568568][T20759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14696'. [ 1297.823230][T20758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14695'. [ 1297.869816][T20760] set_capacity_and_notify: 1 callbacks suppressed [ 1297.869844][T20760] loop1: detected capacity change from 0 to 512 [ 1297.887883][T20758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14695'. [ 1297.919273][T20763] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1297.944775][T20765] program syz.5.14697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1297.954909][T20765] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1297.990903][T20767] loop5: detected capacity change from 0 to 2048 [ 1297.998827][T20760] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1298.031399][T20771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14700'. [ 1298.032924][T20772] xt_hashlimit: max too large, truncated to 1048576 [ 1298.053744][T20767] loop5: p1 < > p4 [ 1298.066931][T20760] EXT4-fs (loop1): 1 truncate cleaned up [ 1298.074039][T20767] loop5: p4 size 722688 extends beyond EOD, truncated [ 1298.096925][T20760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1298.136602][T20781] blktrace: Concurrent blktraces are not allowed on loop13 [ 1298.150007][T20767] loop5: detected capacity change from 0 to 1024 [ 1298.156735][T20767] EXT4-fs: Ignoring removed bh option [ 1298.168266][T20783] loop6: detected capacity change from 0 to 128 [ 1298.183098][T20788] netlink: 'syz.0.14706': attribute type 1 has an invalid length. [ 1298.183352][T20767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1298.196831][T20788] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1298.212005][T20783] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1298.217091][T20791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.242245][T20791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.252121][T13770] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1298.268077][T20767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1298.315287][T20798] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1298.335727][T20800] program syz.0.14710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1298.353989][T20798] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14709'. [ 1298.367311][T20800] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1298.372841][T20798] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14709'. [ 1298.376402][T20796] loop6: detected capacity change from 0 to 512 [ 1298.394046][T20796] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1298.420931][T20802] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 1298.426921][T20805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14712'. [ 1298.430481][T20802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1298.447429][T20796] EXT4-fs (loop6): 1 truncate cleaned up [ 1298.454859][T20802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1298.460001][T20796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1298.496164][T20808] loop5: detected capacity change from 0 to 128 [ 1298.503954][T20808] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1298.504375][T13770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.903152][T20825] netlink: 68 bytes leftover after parsing attributes in process `syz.6.14719'. [ 1298.949326][T20829] loop3: detected capacity change from 0 to 512 [ 1298.973088][T20831] program syz.0.14721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1298.998432][T20831] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1299.063242][T11553] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.075626][T20832] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1299.083317][T20832] FAT-fs (loop3): Filesystem has been set read-only [ 1299.101584][T20834] netlink: 'syz.5.14723': attribute type 39 has an invalid length. [ 1299.119027][T20829] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1299.131605][T20838] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1299.156909][T20840] loop6: detected capacity change from 0 to 512 [ 1299.178831][T20840] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1299.192779][ T29] audit: type=1326 audit(1353.439:81735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20844 comm="syz.3.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1299.207922][T20840] EXT4-fs (loop6): 1 truncate cleaned up [ 1299.223084][ T29] audit: type=1326 audit(1353.470:81736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20844 comm="syz.3.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1299.254627][T20840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.268712][ T29] audit: type=1326 audit(1353.512:81737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20844 comm="syz.3.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1299.310155][T20851] blktrace: Concurrent blktraces are not allowed on loop3 [ 1299.314866][ T29] audit: type=1326 audit(1353.512:81738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20849 comm="syz.3.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f346d1e2005 code=0x7ffc0000 [ 1299.340523][ T29] audit: type=1326 audit(1353.544:81739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20844 comm="syz.3.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1299.418229][T13770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.449902][ T29] audit: type=1326 audit(1353.596:81740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20844 comm="syz.3.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1299.473227][ T29] audit: type=1326 audit(1353.596:81741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20844 comm="syz.3.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1299.496372][ T29] audit: type=1326 audit(1353.596:81742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20844 comm="syz.3.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1299.555345][T20860] loop6: detected capacity change from 0 to 2048 [ 1299.571526][T20865] loop3: detected capacity change from 0 to 2048 [ 1299.633339][T20860] loop6: p1 < > p4 [ 1299.633681][T20865] loop3: p1 < > p4 [ 1299.637621][T20860] loop6: p4 size 722688 extends beyond EOD, truncated [ 1299.648071][T20865] loop3: p4 size 722688 extends beyond EOD, truncated [ 1299.655890][T20856] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.14729: bad orphan inode 11862016 [ 1299.673559][T20856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1299.677905][T20860] EXT4-fs: Ignoring removed bh option [ 1299.711609][T20865] EXT4-fs: Ignoring removed bh option [ 1299.719819][T20860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.739839][T20860] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1299.749847][T20865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.764221][T20865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1299.799922][T20856] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1299.874845][T16133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1299.885419][T20875] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.943096][T13770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.047983][T20887] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1300.055585][T20887] FAT-fs (loop6): Filesystem has been set read-only [ 1300.067138][T20887] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1300.088103][T20896] IPv6: Can't replace route, no match found [ 1300.094207][T20893] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1300.111943][T20893] EXT4-fs (loop3): 1 truncate cleaned up [ 1300.130443][T20893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1300.296685][T20902] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1300.300131][T20906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.335185][T20906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.339647][T20902] EXT4-fs (loop6): 1 truncate cleaned up [ 1300.369873][T20902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1300.415121][T20909] loop1: p1 < > p4 [ 1300.420377][T13770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.442763][T20909] loop1: p4 size 722688 extends beyond EOD, truncated [ 1300.478724][T20909] EXT4-fs: Ignoring removed bh option [ 1300.491118][T20909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1300.503642][T20912] loop6: p1 < > p4 [ 1300.508092][T20912] loop6: p4 size 722688 extends beyond EOD, truncated [ 1300.515141][T20909] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1300.534742][T20912] EXT4-fs: Ignoring removed bh option [ 1300.558143][T20912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1300.577470][T20912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1300.643897][T20923] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 1300.743888][T20926] program syz.1.14749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1300.753475][T20926] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1300.846226][T20932] blktrace: Concurrent blktraces are not allowed on loop11 [ 1300.878990][T20935] IPv6: Can't replace route, no match found [ 1300.897001][T20937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.905464][T20937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.973984][T20938] bridge0: port 3(vlan4) entered blocking state [ 1300.980359][T20938] bridge0: port 3(vlan4) entered disabled state [ 1300.986774][T20938] vlan4: entered allmulticast mode [ 1300.991882][T20938] bridge0: entered allmulticast mode [ 1301.090947][T20938] vlan4: left allmulticast mode [ 1301.095833][T20938] bridge0: left allmulticast mode [ 1301.229308][T20948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.238127][T20948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.406297][T20553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.421745][T20950] program syz.6.14761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1301.433961][T20950] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1301.455889][T20954] random: crng reseeded on system resumption [ 1301.470490][T20954] FAT-fs (loop6): error, clusters badly computed (1 != 0) [ 1301.477789][T20954] FAT-fs (loop6): Filesystem has been set read-only [ 1301.487691][T20954] syzkaller0: entered allmulticast mode [ 1301.494478][T20954] syzkaller0: entered promiscuous mode [ 1301.501892][T20954] syzkaller0 (unregistering): left allmulticast mode [ 1301.509293][T20954] syzkaller0 (unregistering): left promiscuous mode [ 1301.777518][T20969] __nla_validate_parse: 3 callbacks suppressed [ 1301.777533][T20969] netlink: 68 bytes leftover after parsing attributes in process `syz.6.14767'. [ 1302.125974][T20981] IPv6: Can't replace route, no match found [ 1302.396905][T20987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14774'. [ 1302.554402][T20992] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1302.562036][T20992] FAT-fs (loop3): Filesystem has been set read-only [ 1302.573313][T20991] rock: directory entry would overflow storage [ 1302.579601][T20991] rock: sig=0x4654, size=5, remaining=4 [ 1302.599790][T20989] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1302.643164][T20997] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 1302.666442][T20999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14779'. [ 1302.685016][T21001] random: crng reseeded on system resumption [ 1302.709126][T21001] set_capacity_and_notify: 14 callbacks suppressed [ 1302.709147][T21001] loop5: detected capacity change from 0 to 512 [ 1302.725032][T21001] FAT-fs (loop5): error, clusters badly computed (1 != 0) [ 1302.732210][T21001] FAT-fs (loop5): Filesystem has been set read-only [ 1302.749943][T20983] loop1: detected capacity change from 0 to 512 [ 1302.764929][T21003] team0: Port device team_slave_1 removed [ 1302.772003][T20983] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.14773: bad orphan inode 11862016 [ 1302.782870][T21001] syzkaller0: entered allmulticast mode [ 1302.792920][T20983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1302.793597][T21001] syzkaller0: entered promiscuous mode [ 1302.818529][T21001] syzkaller0 (unregistering): left allmulticast mode [ 1302.825246][T21001] syzkaller0 (unregistering): left promiscuous mode [ 1302.881660][T21009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.893895][T20999] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1302.914589][T21009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.957708][T21013] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1303.004027][T21022] netlink: 596 bytes leftover after parsing attributes in process `syz.0.14784'. [ 1303.023244][T11553] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1303.039811][T21024] loop1: detected capacity change from 0 to 128 [ 1303.046778][T21024] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1303.074675][T21027] loop1: detected capacity change from 0 to 764 [ 1303.082218][T21027] rock: directory entry would overflow storage [ 1303.088409][T21027] rock: sig=0x4654, size=5, remaining=4 [ 1303.108258][T21030] loop1: detected capacity change from 0 to 512 [ 1303.153239][T21030] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1303.160860][T21030] FAT-fs (loop1): Filesystem has been set read-only [ 1303.168148][T21030] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1303.190309][T21032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14791'. [ 1303.606559][T21038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1303.651842][T21038] bond5: (slave veth29): Enslaving as an active interface with an up link [ 1303.691822][T21038] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1303.717681][T21038] bond5 (unregistering): (slave veth29): Releasing backup interface [ 1303.731480][T21038] bond5 (unregistering): (slave dummy0): Releasing backup interface [ 1303.746437][T21038] bond5 (unregistering): Released all slaves [ 1303.826862][T21048] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14797'. [ 1303.862950][T21054] loop3: detected capacity change from 0 to 128 [ 1303.920921][T21056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14796'. [ 1304.085706][T21059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14802'. [ 1304.142142][T21050] loop5: detected capacity change from 0 to 512 [ 1304.197431][T21050] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.14798: bad orphan inode 11862016 [ 1304.227883][T21050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1304.334228][T21069] netlink: 596 bytes leftover after parsing attributes in process `syz.1.14804'. [ 1304.359633][T21054] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1304.362910][T21070] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1304.427018][T16133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1304.440271][T20553] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1304.473361][T21080] loop3: detected capacity change from 0 to 2048 [ 1304.510103][T21080] loop3: p1 < > p4 [ 1304.515141][T21080] loop3: p4 size 722688 extends beyond EOD, truncated [ 1304.532662][T21080] loop3: detected capacity change from 0 to 1024 [ 1304.539253][T21080] EXT4-fs: Ignoring removed bh option [ 1304.548979][T21080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1304.561710][T21080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1304.605443][T21091] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14811'. [ 1304.743528][T21095] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1304.771785][T21107] loop3: detected capacity change from 0 to 128 [ 1304.779826][T21107] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1304.815293][T20553] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1304.854507][T21105] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1304.897642][T21113] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1304.919817][T21113] EXT4-fs (loop3): 1 truncate cleaned up [ 1304.931572][T21113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1304.947726][T21118] xt_hashlimit: max too large, truncated to 1048576 [ 1305.331931][T21126] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1305.339578][T21126] FAT-fs (loop1): Filesystem has been set read-only [ 1305.368212][T21131] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1305.378477][T21128] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1305.445380][T21133] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1305.493588][T21135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1305.511310][T20553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.524125][T21135] bond5: (slave veth31): Enslaving as an active interface with an up link [ 1305.542599][T21135] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1305.557756][T21135] bond5 (unregistering): (slave veth31): Releasing backup interface [ 1305.568300][T21135] bond5 (unregistering): (slave dummy0): Releasing backup interface [ 1305.579707][T21135] bond5 (unregistering): Released all slaves [ 1305.589064][T21147] xt_hashlimit: max too large, truncated to 1048576 [ 1305.605453][T21142] loop5: p1 < > p4 [ 1305.611290][T21142] loop5: p4 size 722688 extends beyond EOD, truncated [ 1305.640822][T21142] EXT4-fs: Ignoring removed bh option [ 1305.646625][T21152] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1305.654011][T21142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1305.691035][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 1305.691050][ T29] audit: type=1326 audit(1360.263:81835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21158 comm="syz.5.14837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1305.720501][ T29] audit: type=1326 audit(1360.284:81836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21158 comm="syz.5.14837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1305.744515][ T29] audit: type=1326 audit(1360.315:81837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21158 comm="syz.5.14837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1305.805535][ T29] audit: type=1326 audit(1360.315:81838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.5.14837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b5b682005 code=0x7ffc0000 [ 1305.828759][ T29] audit: type=1326 audit(1360.347:81839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21158 comm="syz.5.14837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1305.868787][T21167] IPv6: Can't replace route, no match found [ 1305.905862][ T29] audit: type=1326 audit(1360.452:81840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21158 comm="syz.5.14837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1305.929112][ T29] audit: type=1326 audit(1360.452:81841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21158 comm="syz.5.14837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1305.952279][ T29] audit: type=1326 audit(1360.452:81842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21158 comm="syz.5.14837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1305.975493][ T29] audit: type=1326 audit(1360.452:81843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21158 comm="syz.5.14837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1306.006774][ T29] audit: type=1326 audit(1360.452:81844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21158 comm="syz.5.14837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1306.071341][T21177] rock: directory entry would overflow storage [ 1306.077593][T21177] rock: sig=0x4654, size=5, remaining=4 [ 1306.143383][T21183] random: crng reseeded on system resumption [ 1306.165208][T21183] FAT-fs (loop6): error, clusters badly computed (1 != 0) [ 1306.168370][T21185] IPv6: Can't replace route, no match found [ 1306.172406][T21183] FAT-fs (loop6): Filesystem has been set read-only [ 1306.201082][T21189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.201557][T21183] syzkaller0: entered allmulticast mode [ 1306.218611][T21183] syzkaller0: entered promiscuous mode [ 1306.227790][T21183] syzkaller0 (unregistering): left allmulticast mode [ 1306.228248][T21189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.234592][T21183] syzkaller0 (unregistering): left promiscuous mode [ 1307.149969][T21201] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1307.414160][T21206] rock: directory entry would overflow storage [ 1307.420423][T21206] rock: sig=0x4654, size=5, remaining=4 [ 1307.431665][T21211] __nla_validate_parse: 7 callbacks suppressed [ 1307.431679][T21211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14855'. [ 1307.611124][T21216] IPv6: Can't replace route, no match found [ 1308.585999][T21219] set_capacity_and_notify: 11 callbacks suppressed [ 1308.586013][T21219] loop5: detected capacity change from 0 to 128 [ 1308.682947][T21220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14858'. [ 1308.693516][ T9410] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1308.751760][ T9410] bio_check_eod: 104 callbacks suppressed [ 1308.751774][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1308.751774][ T9410] loop3: rw=1, sector=137, nr_sectors = 8 limit=128 [ 1309.062824][T21236] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14865'. [ 1309.349791][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1309.349791][ T9410] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 1309.405674][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1309.405674][ T9410] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 1309.460954][T21248] loop5: detected capacity change from 0 to 512 [ 1309.493984][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1309.493984][ T9410] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 1309.652256][T21251] loop6: detected capacity change from 0 to 512 [ 1309.666032][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1309.666032][ T9410] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 1309.724068][T21251] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.6.14868: corrupted xattr block 95: invalid header [ 1309.790654][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1309.790654][ T9410] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 1309.828985][ T7157] bridge_slave_1: left allmulticast mode [ 1309.834800][ T7157] bridge_slave_1: left promiscuous mode [ 1309.840639][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.859957][T21251] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.14868: bg 0: block 7: invalid block bitmap [ 1309.900371][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1309.900371][ T9410] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 1309.925276][T21254] IPv6: Can't replace route, no match found [ 1309.937866][T21251] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1309.960412][ T7157] bridge_slave_0: left allmulticast mode [ 1309.966110][ T7157] bridge_slave_0: left promiscuous mode [ 1309.971822][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.165769][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1310.165769][ T9410] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 1310.179510][T21251] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2971: inode #11: comm syz.6.14868: corrupted xattr block 95: invalid header [ 1310.203194][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1310.203194][ T9410] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 1310.218453][T21251] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 1310.252398][T21251] EXT4-fs (loop6): 1 orphan inode deleted [ 1310.268440][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1310.268440][ T9410] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 1310.321852][T20553] INFO: The task syz-executor:20553 has been waiting for writeback completion for more than 1 seconds. [ 1310.321876][T20553] INFO: The task syz-executor:20553 has been waiting for writeback completion for more than 1 seconds. [ 1310.350286][T20553] INFO: The task syz-executor:20553 has been waiting for writeback completion for more than 1 seconds. [ 1310.387964][ T7157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.948740][ T7157] bond_slave_0: left promiscuous mode [ 1310.978627][ T7157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1311.027685][ T7157] bond_slave_1: left promiscuous mode [ 1311.058274][ T7157] bond0 (unregistering): Released all slaves [ 1311.086476][ T7157] bond1 (unregistering): Released all slaves [ 1311.095842][ T7157] bond2 (unregistering): (slave veth7): Releasing active interface [ 1311.104726][ T7157] bond2 (unregistering): Released all slaves [ 1311.113918][ T7157] bond3 (unregistering): (slave veth13): Releasing active interface [ 1311.122446][ T7157] bond3 (unregistering): Released all slaves [ 1311.131622][ T7157] bond4 (unregistering): (slave veth21): Releasing active interface [ 1311.140384][ T7157] bond4 (unregistering): Released all slaves [ 1311.159608][ T7157] bond5 (unregistering): (slave veth23): Releasing active interface [ 1311.170097][T21263] loop6: detected capacity change from 0 to 128 [ 1311.177393][ T7157] bond5 (unregistering): Released all slaves [ 1311.194240][ T7157] bond6 (unregistering): (slave veth39): Releasing active interface [ 1311.204599][ T7157] bond6 (unregistering): Released all slaves [ 1311.206588][T21266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14872'. [ 1311.338621][T21276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.347338][T21276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.394883][T21225] chnl_net:caif_netlink_parms(): no params data found [ 1311.418819][T21282] loop6: detected capacity change from 0 to 764 [ 1311.425933][T21282] rock: directory entry would overflow storage [ 1311.432091][T21282] rock: sig=0x4654, size=5, remaining=4 [ 1311.479728][T21285] loop6: detected capacity change from 0 to 128 [ 1311.486147][ T7157] hsr_slave_0: left promiscuous mode [ 1311.500997][T21285] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1311.510240][ T7157] hsr_slave_1: left promiscuous mode [ 1311.516400][ T7157] batman_adv: batadv0: Removing interface: €Â [ 1311.528057][ T7157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.598793][ T9232] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1311.633211][T21287] loop6: detected capacity change from 0 to 2048 [ 1311.646181][ T7157] pimreg (unregistering): left allmulticast mode [ 1311.662984][T21287] loop6: p1 < > p4 [ 1311.669200][T21287] loop6: p4 size 722688 extends beyond EOD, truncated [ 1311.706404][T21287] loop6: detected capacity change from 0 to 1024 [ 1311.723081][T21287] EXT4-fs: Ignoring removed bh option [ 1311.728923][ T7157] team_slave_1 (unregistering): left promiscuous mode [ 1311.736340][ T7157] team0 (unregistering): Port device team_slave_1 removed [ 1311.749595][ T7157] team_slave_0 (unregistering): left promiscuous mode [ 1311.757092][ T7157] team0 (unregistering): Port device team_slave_0 removed [ 1311.843096][T21225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.850261][T21225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.860616][T21225] bridge_slave_0: entered allmulticast mode [ 1311.867130][T21225] bridge_slave_0: entered promiscuous mode [ 1311.874326][T21225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.881488][T21225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.888645][T21225] bridge_slave_1: entered allmulticast mode [ 1311.903154][T21225] bridge_slave_1: entered promiscuous mode [ 1311.923794][T21225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.934181][T21225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.059525][T21225] team0: Port device team_slave_0 added [ 1312.067428][T21225] team0: Port device team_slave_1 added [ 1312.113474][T21225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.120465][T21225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.146527][T21225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.235749][T21225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.242762][T21225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.268684][T21225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.308761][T21225] hsr_slave_0: entered promiscuous mode [ 1312.315151][T21225] hsr_slave_1: entered promiscuous mode [ 1312.331297][T21225] debugfs: 'hsr0' already exists in 'hsr' [ 1312.337045][T21225] Cannot create hsr debugfs directory [ 1312.350833][T21304] random: crng reseeded on system resumption [ 1312.370261][T21304] loop5: detected capacity change from 0 to 512 [ 1312.373405][T21308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14883'. [ 1312.389395][T21304] FAT-fs (loop5): error, clusters badly computed (1 != 0) [ 1312.396599][T21304] FAT-fs (loop5): Filesystem has been set read-only [ 1312.412288][T21304] syzkaller0: entered allmulticast mode [ 1312.423842][T21311] IPv6: Can't replace route, no match found [ 1312.427353][T21304] syzkaller0: entered promiscuous mode [ 1312.454782][T21304] syzkaller0 (unregistering): left allmulticast mode [ 1312.461536][T21304] syzkaller0 (unregistering): left promiscuous mode [ 1312.931701][T21320] loop6: detected capacity change from 0 to 128 [ 1312.942726][T21320] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1313.121064][ T9232] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1313.224015][T21323] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1313.253720][T21339] loop6: p1 < > p4 [ 1313.268995][T21339] loop6: p4 size 722688 extends beyond EOD, truncated [ 1313.326035][T21339] EXT4-fs: Ignoring removed bh option [ 1313.327243][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 1313.327256][ T29] audit: type=1326 audit(1368.274:81897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21340 comm="syz.3.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1313.363055][ T29] audit: type=1326 audit(1368.316:81898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21340 comm="syz.3.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1313.386163][ T29] audit: type=1326 audit(1368.316:81899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21340 comm="syz.3.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1313.409286][ T29] audit: type=1326 audit(1368.316:81900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21340 comm="syz.3.14894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1313.536766][ T29] audit: type=1326 audit(1368.389:81901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21346 comm="syz.5.14895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1313.560071][ T29] audit: type=1326 audit(1368.389:81902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21346 comm="syz.5.14895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1313.583153][ T29] audit: type=1326 audit(1368.400:81903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21346 comm="syz.5.14895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1313.606323][ T29] audit: type=1326 audit(1368.410:81904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21346 comm="syz.5.14895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1313.629463][ T29] audit: type=1326 audit(1368.431:81906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21351 comm="syz.5.14895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b5b682005 code=0x7ffc0000 [ 1313.652580][ T29] audit: type=1326 audit(1368.431:81905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21346 comm="syz.5.14895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1313.782212][T21225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1313.791032][T21225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1313.799598][T21225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1313.808911][T21225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1313.829256][T21365] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 1313.846138][T21225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.859083][T21225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1313.869322][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.876536][ T9410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.893245][ T911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.900333][ T911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.976978][T21225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.047933][T21379] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1314.058291][T21225] veth0_vlan: entered promiscuous mode [ 1314.067129][T21225] veth1_vlan: entered promiscuous mode [ 1314.073643][T21379] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14899'. [ 1314.080009][T21225] veth0_macvtap: entered promiscuous mode [ 1314.093343][T21379] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14899'. [ 1314.128879][T21225] veth1_macvtap: entered promiscuous mode [ 1314.137809][T21384] set_capacity_and_notify: 3 callbacks suppressed [ 1314.137877][T21384] loop6: detected capacity change from 0 to 128 [ 1314.156529][T21225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1314.165686][T21387] loop3: detected capacity change from 0 to 128 [ 1314.173271][T21387] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1314.181295][T21384] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1314.184233][T21225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.212156][ T911] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.240794][ T911] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.256967][ T911] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.289776][ T911] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.425349][T21399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14906'. [ 1314.857513][T21415] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1314.869772][T21415] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14910'. [ 1314.879019][T21415] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14910'. [ 1315.024139][T21420] loop5: detected capacity change from 0 to 128 [ 1315.047492][T21420] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1315.677784][ T9410] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1315.697304][ T9410] bio_check_eod: 302 callbacks suppressed [ 1315.697319][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1315.697319][ T9410] loop5: rw=1, sector=137, nr_sectors = 8 limit=128 [ 1315.736536][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1315.736536][ T9410] loop5: rw=1, sector=153, nr_sectors = 8 limit=128 [ 1315.768345][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1315.768345][ T9410] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 1315.796202][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1315.796202][ T9410] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 1315.824865][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1315.824865][ T9410] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 1315.865815][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1315.865815][ T9410] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 1315.882335][T21407] 9p: Unknown uid 00000000004294967295 [ 1315.928460][T21426] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14914'. [ 1315.939195][T21425] loop3: detected capacity change from 0 to 128 [ 1315.945471][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1315.945471][ T9410] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 1315.968576][T21425] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1315.977598][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1315.977598][ T9410] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 1316.001011][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1316.001011][ T9410] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 1316.022204][ T9410] kworker/u8:25: attempt to access beyond end of device [ 1316.022204][ T9410] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 1316.139547][T21428] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14913'. [ 1316.167715][T21438] IPv6: Can't replace route, no match found [ 1316.368212][T21444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14912'. [ 1316.546992][T21447] IPv6: Can't replace route, no match found [ 1317.208069][T21449] bridge0: port 3(dummy0) entered blocking state [ 1317.214539][T21449] bridge0: port 3(dummy0) entered disabled state [ 1317.221151][T21449] dummy0: entered allmulticast mode [ 1317.236956][T21449] dummy0: entered promiscuous mode [ 1318.213264][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 1318.213278][ T29] audit: type=1326 audit(1373.408:82073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.3.14924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1318.267599][T21461] random: crng reseeded on system resumption [ 1318.278356][ T29] audit: type=1326 audit(1373.439:82074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.3.14924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1318.301525][ T29] audit: type=1326 audit(1373.439:82075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.3.14924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1318.324676][ T29] audit: type=1326 audit(1373.439:82076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.3.14924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1318.347710][ T29] audit: type=1326 audit(1373.439:82077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.3.14924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1318.370892][ T29] audit: type=1326 audit(1373.439:82078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.3.14924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1318.394234][ T29] audit: type=1326 audit(1373.439:82079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.3.14924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1318.417560][ T29] audit: type=1326 audit(1373.439:82080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.3.14924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1318.440725][ T29] audit: type=1326 audit(1373.439:82081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.3.14924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1318.463889][ T29] audit: type=1326 audit(1373.439:82082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.3.14924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f346d1af749 code=0x7ffc0000 [ 1318.490548][T21461] loop5: detected capacity change from 0 to 512 [ 1318.499385][T21461] syzkaller0: entered allmulticast mode [ 1318.505576][T21461] syzkaller0: entered promiscuous mode [ 1318.513083][T21461] syzkaller0 (unregistering): left allmulticast mode [ 1318.513526][T21465] loop3: detected capacity change from 0 to 128 [ 1318.519779][T21461] syzkaller0 (unregistering): left promiscuous mode [ 1318.526967][T21465] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1318.627055][T21474] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14931'. [ 1318.664276][T21478] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1318.679026][T21478] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1318.748313][T21490] loop5: detected capacity change from 0 to 128 [ 1318.756756][T21490] EXT4-fs mount: 15 callbacks suppressed [ 1318.756771][T21490] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1318.817534][T16133] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1318.880420][T21495] loop5: detected capacity change from 0 to 128 [ 1318.898322][T21495] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1318.920884][T21498] netlink: 'syz.0.14938': attribute type 1 has an invalid length. [ 1318.948215][T21498] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1318.970439][T21498] bond5: (slave veth41): Enslaving as an active interface with an up link [ 1318.981452][T16133] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1318.994046][T21498] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1319.009716][T21498] bond5 (unregistering): (slave veth41): Releasing backup interface [ 1319.019374][T21498] bond5 (unregistering): (slave dummy0): Releasing backup interface [ 1319.022403][T21501] loop5: detected capacity change from 0 to 512 [ 1319.036232][T21498] bond5 (unregistering): Released all slaves [ 1319.080215][T21506] netlink: 'syz.1.14941': attribute type 1 has an invalid length. [ 1319.159215][T21513] dummy0: left allmulticast mode [ 1319.172382][T21513] dummy0: left promiscuous mode [ 1319.177518][T21513] bridge0: port 3(dummy0) entered disabled state [ 1319.255416][T21513] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1319.263440][T21519] loop5: detected capacity change from 0 to 2048 [ 1319.321001][T21519] loop5: p1 < > p4 [ 1319.325364][T21519] loop5: p4 size 722688 extends beyond EOD, truncated [ 1319.372461][T21519] loop5: detected capacity change from 0 to 1024 [ 1319.387497][T21519] EXT4-fs: Ignoring removed bh option [ 1319.417993][T21519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1319.438124][T21519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1319.466776][T21532] loop3: detected capacity change from 0 to 512 [ 1319.481355][T21532] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1319.493353][T21534] loop5: detected capacity change from 0 to 128 [ 1319.496210][T21534] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1319.526961][T21532] EXT4-fs (loop3): 1 truncate cleaned up [ 1319.540461][T16133] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1319.544666][T21532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1319.588950][T21540] loop5: detected capacity change from 0 to 512 [ 1319.634888][T21540] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.14952: bad orphan inode 11862016 [ 1319.655379][T21540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1319.673296][T21544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.691606][T21544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.704627][T16133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1319.742341][T21546] xt_hashlimit: max too large, truncated to 1048576 [ 1319.793859][T21548] loop5: detected capacity change from 0 to 512 [ 1319.960796][T21562] loop6: detected capacity change from 0 to 512 [ 1319.969190][T21562] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.6.14958: corrupted xattr block 95: invalid header [ 1319.983444][T21562] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.14958: bg 0: block 7: invalid block bitmap [ 1319.996079][T21562] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1320.005035][T21562] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2971: inode #11: comm syz.6.14958: corrupted xattr block 95: invalid header [ 1320.019222][T21562] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 1320.028359][T21562] EXT4-fs (loop6): 1 orphan inode deleted [ 1320.035384][T21562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1320.061761][T13770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.095654][T21567] loop6: detected capacity change from 0 to 128 [ 1320.103815][T21567] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1320.164758][T13770] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1320.250808][T21570] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1320.274791][T21570] bond5: (slave veth33): Enslaving as an active interface with an up link [ 1320.295065][T21570] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1320.310655][T21570] bond5 (unregistering): (slave veth33): Releasing backup interface [ 1320.320799][T21570] bond5 (unregistering): (slave dummy0): Releasing backup interface [ 1320.343757][T21570] bond5 (unregistering): Released all slaves [ 1320.355366][T20553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.376498][T21574] loop3: detected capacity change from 0 to 512 [ 1320.424878][T21576] bridge0: port 3(vlan5) entered blocking state [ 1320.431180][T21576] bridge0: port 3(vlan5) entered disabled state [ 1320.437797][T21576] vlan5: entered allmulticast mode [ 1320.442911][T21576] bridge0: entered allmulticast mode [ 1320.463977][T21576] vlan5: left allmulticast mode [ 1320.468865][T21576] bridge0: left allmulticast mode [ 1321.218836][T21611] random: crng reseeded on system resumption [ 1321.231741][T21611] syzkaller0: entered allmulticast mode [ 1321.249936][T21611] syzkaller0: entered promiscuous mode [ 1321.257238][T21611] syzkaller0 (unregistering): left allmulticast mode [ 1321.263946][T21611] syzkaller0 (unregistering): left promiscuous mode [ 1321.314484][T21617] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1322.178708][T21623] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1322.195899][T21632] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1322.238483][T21631] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1322.249677][T21623] EXT4-fs (loop3): 1 truncate cleaned up [ 1322.265038][T21623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1322.295921][T21225] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1322.308737][T21631] EXT4-fs (loop6): 1 truncate cleaned up [ 1322.322185][T21631] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1322.377909][T21642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14984'. [ 1322.422436][T21644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.454109][T21644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.711320][T20553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1322.770963][T21647] netlink: 'syz.3.14986': attribute type 1 has an invalid length. [ 1322.784184][T21647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1322.800288][T21647] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1322.812735][T21647] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1322.824127][T21647] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1322.834527][T21647] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 1322.843604][T21647] bond1 (unregistering): Released all slaves [ 1322.871401][T21649] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1322.908400][T21651] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1322.934427][T20553] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1323.025811][T21660] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14990'. [ 1323.037932][T21660] bond6: (slave dummy0): Releasing backup interface [ 1323.077252][T21663] rock: directory entry would overflow storage [ 1323.083443][T21663] rock: sig=0x4654, size=5, remaining=4 [ 1323.123387][T21671] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1323.163304][T13770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1323.174175][T21675] netlink: 'syz.1.14997': attribute type 1 has an invalid length. [ 1323.201768][T21678] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1323.244179][T13770] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1323.264435][T21685] bond0: (slave bond_slave_0): Releasing backup interface [ 1323.273555][T21684] loop5: p1 < > p4 [ 1323.288003][T21684] loop5: p4 size 722688 extends beyond EOD, truncated [ 1323.300598][T21675] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1323.310672][T21689] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15002'. [ 1323.336105][T21684] EXT4-fs: Ignoring removed bh option [ 1323.374557][T21684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1323.401648][T21684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1323.463631][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 1323.463644][ T29] audit: type=1326 audit(1378.920:82223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.0.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1323.497493][ T29] audit: type=1326 audit(1378.951:82224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.0.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1323.520731][ T29] audit: type=1326 audit(1378.951:82225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.0.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1323.543808][ T29] audit: type=1326 audit(1378.951:82226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.0.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1323.566978][ T29] audit: type=1326 audit(1378.951:82227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.0.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1323.590097][ T29] audit: type=1326 audit(1378.951:82228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.0.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1323.613252][ T29] audit: type=1326 audit(1378.951:82229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.0.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1323.636498][ T29] audit: type=1326 audit(1378.951:82230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.0.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1323.659635][ T29] audit: type=1326 audit(1378.951:82231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.0.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1323.682787][ T29] audit: type=1326 audit(1378.951:82232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.0.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1323.709303][T21706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15003'. [ 1324.319693][T21722] set_capacity_and_notify: 10 callbacks suppressed [ 1324.319711][T21722] loop5: detected capacity change from 0 to 128 [ 1324.392882][T21722] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1324.702858][T21730] netlink: 'syz.1.15015': attribute type 1 has an invalid length. [ 1325.146523][T21730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1325.261518][T21730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.343177][T21736] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1325.390103][T21744] IPv6: Can't replace route, no match found [ 1325.686011][T21755] random: crng reseeded on system resumption [ 1325.745562][T21755] syzkaller0: entered allmulticast mode [ 1325.755954][T21755] syzkaller0: entered promiscuous mode [ 1325.771512][T21754] syzkaller0: left promiscuous mode [ 1325.774882][T21762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15024'. [ 1325.776791][T21754] syzkaller0: left allmulticast mode [ 1325.803254][T21764] loop1: detected capacity change from 0 to 128 [ 1325.816853][T21764] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1325.875049][T21772] IPv6: Can't replace route, no match found [ 1325.879705][T21774] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1325.900391][T21774] bond5: (slave veth35): Enslaving as an active interface with an up link [ 1325.911824][T21225] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1325.924136][T21774] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1325.924615][T21777] IPv6: Can't replace route, no match found [ 1325.940769][T21774] bond5 (unregistering): (slave veth35): Releasing backup interface [ 1325.956202][T21774] bond5 (unregistering): (slave dummy0): Releasing backup interface [ 1325.956375][T21779] xt_hashlimit: max too large, truncated to 1048576 [ 1325.972983][T21774] bond5 (unregistering): Released all slaves [ 1326.051555][T21789] loop6: detected capacity change from 0 to 128 [ 1326.061511][T21789] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1326.121980][T13770] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1326.176533][T21808] IPv6: Can't replace route, no match found [ 1326.200120][T21812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.208754][T21812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.232974][T21814] loop6: detected capacity change from 0 to 2048 [ 1326.267883][T21816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15041'. [ 1326.335364][T21814] loop6: p1 < > p4 [ 1326.359147][T21814] loop6: p4 size 722688 extends beyond EOD, truncated [ 1326.393821][T21814] loop6: detected capacity change from 0 to 1024 [ 1326.401078][T21814] EXT4-fs: Ignoring removed bh option [ 1326.450308][T21814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1326.582235][T21814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1327.199683][T21834] loop6: detected capacity change from 0 to 128 [ 1327.209901][T21834] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1327.222997][T21832] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1327.250871][T21839] IPv6: Can't replace route, no match found [ 1327.270024][T13770] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1327.349271][T21852] loop5: detected capacity change from 0 to 128 [ 1327.359108][T21851] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1327.364404][T21854] IPv6: Can't replace route, no match found [ 1327.378503][T21852] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1327.398740][T21857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.420828][T21857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.446161][T21859] loop5: detected capacity change from 0 to 2048 [ 1327.483759][T21859] loop5: p1 < > p4 [ 1327.489629][T21859] loop5: p4 size 722688 extends beyond EOD, truncated [ 1327.543270][T21866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15061'. [ 1327.610279][T21859] loop5: detected capacity change from 0 to 1024 [ 1327.636136][T21859] EXT4-fs: Ignoring removed bh option [ 1327.669227][T21859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1327.709173][T21859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1327.813733][T21844] loop6: detected capacity change from 0 to 512 [ 1327.827552][T21844] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.15054: bad orphan inode 11862016 [ 1327.842134][T21844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1327.972177][T21874] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1328.006906][T21844] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1328.027904][T21872] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1328.050083][T21872] EXT4-fs (loop5): 1 truncate cleaned up [ 1328.060554][T21872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1328.074235][T13770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1328.113422][T21882] random: crng reseeded on system resumption [ 1328.141899][T21882] FAT-fs (loop6): error, clusters badly computed (1 != 0) [ 1328.149171][T21882] FAT-fs (loop6): Filesystem has been set read-only [ 1328.164216][T21884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.191623][T21884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.207514][T21882] syzkaller0: entered allmulticast mode [ 1328.216784][T21882] syzkaller0: entered promiscuous mode [ 1328.225891][T21880] syzkaller0: left promiscuous mode [ 1328.231233][T21880] syzkaller0: left allmulticast mode [ 1328.338299][T21900] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15073'. [ 1328.364614][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 1328.364629][ T29] audit: type=1326 audit(1384.065:82268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21903 comm="syz.0.15075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1328.393939][ T29] audit: type=1326 audit(1384.065:82269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21903 comm="syz.0.15075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1329.024467][T21919] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1329.053636][ T29] audit: type=1326 audit(1384.096:82270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21903 comm="syz.0.15075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1329.077167][ T29] audit: type=1326 audit(1384.128:82271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21903 comm="syz.0.15075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1329.100372][ T29] audit: type=1326 audit(1384.128:82272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21903 comm="syz.0.15075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1329.112682][T21919] EXT4-fs (loop1): 1 truncate cleaned up [ 1329.123924][ T29] audit: type=1326 audit(1384.128:82273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21909 comm="syz.0.15075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42e49e2005 code=0x7ffc0000 [ 1329.123958][ T29] audit: type=1326 audit(1384.317:82274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21909 comm="syz.0.15075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1329.123984][ T29] audit: type=1326 audit(1384.338:82275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21903 comm="syz.0.15075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1329.124084][ T29] audit: type=1326 audit(1384.338:82276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21903 comm="syz.0.15075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1329.124109][ T29] audit: type=1326 audit(1384.338:82277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21903 comm="syz.0.15075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1329.129117][T16133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.184106][T21919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1329.300089][T21929] random: crng reseeded on system resumption [ 1329.309336][T21931] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1329.333928][T21929] set_capacity_and_notify: 3 callbacks suppressed [ 1329.333941][T21929] loop3: detected capacity change from 0 to 512 [ 1329.364297][T21929] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 1329.364355][T21931] bond7: (slave veth27): Enslaving as an active interface with an up link [ 1329.371498][T21929] FAT-fs (loop3): Filesystem has been set read-only [ 1329.401845][T21225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.414411][T21931] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1329.446854][T21939] IPv6: Can't replace route, no match found [ 1329.470456][T21941] loop3: detected capacity change from 0 to 2048 [ 1329.480467][T21938] loop1: detected capacity change from 0 to 2048 [ 1329.535077][T21941] loop3: p1 < > p4 [ 1329.540386][T21941] loop3: p4 size 722688 extends beyond EOD, truncated [ 1329.549921][T21938] loop1: p1 < > p4 [ 1329.554315][T21938] loop1: p4 size 722688 extends beyond EOD, truncated [ 1329.590191][T21938] loop1: detected capacity change from 0 to 1024 [ 1329.597311][T21938] EXT4-fs: Ignoring removed bh option [ 1329.614751][T21941] loop3: detected capacity change from 0 to 1024 [ 1329.621742][T21941] EXT4-fs: Ignoring removed bh option [ 1329.628377][T21938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1329.638973][T21941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1329.653121][T21938] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1329.857749][T21941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1329.884462][T21955] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1330.136108][T21959] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1330.393486][T21962] bond5: (slave veth43): Enslaving as an active interface with an up link [ 1330.758622][T21986] xt_hashlimit: max too large, truncated to 1048576 [ 1330.858265][T21991] loop6: detected capacity change from 0 to 128 [ 1330.870819][T21994] loop3: detected capacity change from 0 to 128 [ 1330.876110][T21991] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1330.896178][T21994] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1330.935087][T13770] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1331.074004][T20553] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1332.230104][T22009] IPv6: Can't replace route, no match found [ 1332.599885][T22011] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1332.893468][T22017] loop1: detected capacity change from 0 to 2048 [ 1332.928402][T22020] loop3: detected capacity change from 0 to 2048 [ 1332.950784][T22023] loop1: p1 < > p4 [ 1332.959462][T22023] loop1: p4 size 722688 extends beyond EOD, truncated [ 1332.968357][T22017] loop1: p1 < > p4 [ 1332.978131][T22017] loop1: p4 size 722688 extends beyond EOD, truncated [ 1332.987991][T22027] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1332.999766][T22027] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15111'. [ 1333.000616][T22023] loop1: detected capacity change from 0 to 1024 [ 1333.009140][T22027] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15111'. [ 1333.017902][T22020] loop3: p1 < > p4 [ 1333.056486][T22023] EXT4-fs: Ignoring removed bh option [ 1333.192999][T22023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1333.211523][T22023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1333.307527][T22036] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1333.385848][T22036] EXT4-fs (loop5): 1 truncate cleaned up [ 1333.399331][T22036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1333.419641][T22020] loop3: p4 size 722688 extends beyond EOD, truncated [ 1333.452054][T22020] EXT4-fs: Ignoring removed bh option [ 1333.467454][T22020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1333.484700][T22020] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1333.502233][T22041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1333.523884][T22046] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1333.542484][T16133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.561506][T22050] xt_hashlimit: max too large, truncated to 1048576 [ 1333.585993][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15118'. [ 1333.591070][T22056] bridge0: port 3(vlan2) entered blocking state [ 1333.601443][T22056] bridge0: port 3(vlan2) entered disabled state [ 1333.608319][T22056] vlan2: entered allmulticast mode [ 1333.613447][T22056] bridge0: entered allmulticast mode [ 1333.620081][T22056] vlan2: left allmulticast mode [ 1333.624932][T22056] bridge0: left allmulticast mode [ 1333.637286][T20553] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1333.675409][T22060] random: crng reseeded on system resumption [ 1333.685705][T22061] bond7: (slave dummy0): Releasing backup interface [ 1333.696130][T22061] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1333.711182][T22060] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 1333.718383][T22060] FAT-fs (loop1): Filesystem has been set read-only [ 1333.733230][T22063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1333.746734][T22066] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1333.760725][T22060] syzkaller0: entered allmulticast mode [ 1333.774820][T22063] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1333.808534][T22066] bond8: (slave veth29): Enslaving as an active interface with an up link [ 1333.822545][T22073] syzkaller0: entered promiscuous mode [ 1333.837210][T22072] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1333.850866][T22060] syzkaller0 (unregistering): left allmulticast mode [ 1333.857587][T22060] syzkaller0 (unregistering): left promiscuous mode [ 1333.909089][T22070] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1333.922676][T22066] bond8 (unregistering): (slave veth29): Releasing backup interface [ 1333.933553][T22066] bond8 (unregistering): (slave dummy0): Releasing backup interface [ 1333.945855][T22066] bond8 (unregistering): Released all slaves [ 1333.958945][T22077] bridge0: port 3(vlan2) entered blocking state [ 1333.965357][T22077] bridge0: port 3(vlan2) entered disabled state [ 1333.971866][T22077] vlan2: entered allmulticast mode [ 1333.977119][T22077] bridge0: entered allmulticast mode [ 1333.983090][T22077] vlan2: left allmulticast mode [ 1333.987972][T22077] bridge0: left allmulticast mode [ 1334.059147][T22086] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1334.093613][T22092] xt_hashlimit: max too large, truncated to 1048576 [ 1334.123190][T22097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15132'. [ 1334.137737][T22099] xt_hashlimit: max too large, truncated to 1048576 [ 1334.166623][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 1334.166636][ T29] audit: type=1326 audit(1390.154:82368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22100 comm="syz.5.15134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1334.204239][T22106] bond1: (slave dummy0): Releasing backup interface [ 1334.235911][ T29] audit: type=1326 audit(1390.154:82369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22100 comm="syz.5.15134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1334.236348][T22097] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1334.259150][ T29] audit: type=1326 audit(1390.165:82370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22100 comm="syz.5.15134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1334.259180][ T29] audit: type=1326 audit(1390.165:82371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22102 comm="syz.5.15134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b5b682005 code=0x7ffc0000 [ 1334.259387][ T29] audit: type=1326 audit(1390.165:82372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22100 comm="syz.5.15134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1334.259416][ T29] audit: type=1326 audit(1390.165:82373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22100 comm="syz.5.15134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1334.259442][ T29] audit: type=1326 audit(1390.165:82374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22100 comm="syz.5.15134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1334.259507][ T29] audit: type=1326 audit(1390.165:82375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22103 comm="syz.5.15134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b5b682005 code=0x7ffc0000 [ 1334.259543][ T29] audit: type=1326 audit(1390.165:82376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22100 comm="syz.5.15134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1334.428643][ T29] audit: type=1326 audit(1390.165:82377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22100 comm="syz.5.15134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8b5b64f749 code=0x7ffc0000 [ 1334.481118][T22108] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1334.534201][T22112] random: crng reseeded on system resumption [ 1334.561446][T22112] set_capacity_and_notify: 4 callbacks suppressed [ 1334.561462][T22112] loop3: detected capacity change from 0 to 512 [ 1334.592451][T22112] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 1334.599659][T22112] FAT-fs (loop3): Filesystem has been set read-only [ 1334.624600][T22116] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1334.642693][T22112] syzkaller0: entered allmulticast mode [ 1334.664478][T22116] bond9: (slave veth31): Enslaving as an active interface with an up link [ 1334.673251][T22112] syzkaller0: entered promiscuous mode [ 1334.690142][T22116] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1334.716775][T22112] syzkaller0 (unregistering): left allmulticast mode [ 1334.723521][T22112] syzkaller0 (unregistering): left promiscuous mode [ 1334.766892][T22116] bond9 (unregistering): (slave veth31): Releasing backup interface [ 1334.794269][T22116] bond9 (unregistering): (slave dummy0): Releasing backup interface [ 1334.831002][T22116] bond9 (unregistering): Released all slaves [ 1334.883910][T22110] loop6: detected capacity change from 0 to 512 [ 1334.930629][T22110] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.15136: bad orphan inode 11862016 [ 1334.931741][T22132] xt_hashlimit: max too large, truncated to 1048576 [ 1334.958786][T22110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1335.011032][T22135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15143'. [ 1335.074228][T22136] 9p: Unknown uid 00000000004294967295 [ 1335.198188][T22138] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1335.573808][T13770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1335.752698][T22141] loop3: detected capacity change from 0 to 128 [ 1335.784797][T22141] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1335.822004][T22146] loop5: detected capacity change from 0 to 512 [ 1335.840020][T22148] IPv6: Can't replace route, no match found [ 1335.877906][T20553] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1335.887424][T22146] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.5.15148: corrupted xattr block 95: invalid header [ 1335.925440][T22146] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.15148: bg 0: block 7: invalid block bitmap [ 1336.065626][T22146] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1336.418522][T22162] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1336.448632][T22146] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2971: inode #11: comm syz.5.15148: corrupted xattr block 95: invalid header [ 1336.467031][T22164] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1336.515679][T22146] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 1336.551399][T22146] EXT4-fs (loop5): 1 orphan inode deleted [ 1336.560707][T22157] loop3: detected capacity change from 0 to 512 [ 1336.607793][T22157] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.15151: bad orphan inode 11862016 [ 1336.749223][T22191] xt_hashlimit: max too large, truncated to 1048576 [ 1336.781095][T22193] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1336.800799][T22193] bond2: (slave veth5): Enslaving as an active interface with an up link [ 1336.815680][T22193] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1336.829001][T22193] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1336.838734][T22193] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 1336.849765][T22193] bond2 (unregistering): Released all slaves [ 1337.572749][T22224] loop1: detected capacity change from 0 to 128 [ 1337.581018][T22224] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1337.599497][T22212] loop5: detected capacity change from 0 to 512 [ 1337.626573][T22212] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.15167: bad orphan inode 11862016 [ 1337.628730][T22228] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1337.656339][T22228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15173'. [ 1337.673215][T22228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15173'. [ 1337.686144][T22231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.697799][T22231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.730551][T22212] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1337.741781][T22233] loop1: detected capacity change from 0 to 128 [ 1337.748624][T22233] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1337.791526][T22237] loop3: detected capacity change from 0 to 128 [ 1337.824366][T22240] IPv6: Can't replace route, no match found [ 1337.841410][T22244] loop3: detected capacity change from 0 to 512 [ 1337.852384][T22244] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.3.15180: corrupted xattr block 95: invalid header [ 1337.866899][T22244] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.15180: bg 0: block 7: invalid block bitmap [ 1337.879738][T22244] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1337.888771][T22244] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #11: comm syz.3.15180: corrupted xattr block 95: invalid header [ 1337.902681][T22244] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 1337.911789][T22244] EXT4-fs (loop3): 1 orphan inode deleted [ 1338.389822][T22263] loop6: p1 < > p4 [ 1338.398718][T22263] loop6: p4 size 722688 extends beyond EOD, truncated [ 1338.450736][T22263] EXT4-fs: Ignoring removed bh option [ 1338.493806][T22278] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1338.649108][T22281] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.15190: bad orphan inode 11862016 [ 1338.724884][T22281] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1338.836424][T22292] loop5: p1 < > p4 [ 1338.842466][T22292] loop5: p4 size 722688 extends beyond EOD, truncated [ 1339.012805][T22292] EXT4-fs: Ignoring removed bh option [ 1339.349791][T22309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15196'. [ 1339.898179][T22313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15198'. [ 1339.994446][T22313] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1340.162515][T22319] set_capacity_and_notify: 7 callbacks suppressed [ 1340.162546][T22319] loop1: detected capacity change from 0 to 128 [ 1340.249811][T22331] loop6: detected capacity change from 0 to 512 [ 1340.279924][T22321] loop5: detected capacity change from 0 to 512 [ 1340.319420][T22321] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1340.349263][T22336] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1340.381196][T22321] EXT4-fs (loop5): 1 truncate cleaned up [ 1340.433055][T22341] loop1: detected capacity change from 0 to 2048 [ 1340.461527][T22342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.477573][T22342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.504478][T22341] loop1: p1 < > p4 [ 1340.513255][T22341] loop1: p4 size 722688 extends beyond EOD, truncated [ 1340.535421][T22345] bridge0: port 3(vlan5) entered blocking state [ 1340.541780][T22345] bridge0: port 3(vlan5) entered disabled state [ 1340.563109][T22345] vlan5: entered allmulticast mode [ 1340.568249][T22345] bridge0: entered allmulticast mode [ 1340.578176][T22341] loop1: detected capacity change from 0 to 1024 [ 1340.585928][T22345] vlan5: left allmulticast mode [ 1340.590891][T22345] bridge0: left allmulticast mode [ 1340.603479][T22341] EXT4-fs: Ignoring removed bh option [ 1340.675094][T22351] loop1: detected capacity change from 0 to 128 [ 1340.755013][T22359] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1340.802981][T22365] bridge0: port 3(vlan5) entered blocking state [ 1340.809362][T22365] bridge0: port 3(vlan5) entered disabled state [ 1340.816202][T22365] vlan5: entered allmulticast mode [ 1340.821383][T22365] bridge0: entered allmulticast mode [ 1340.827528][T22365] vlan5: left allmulticast mode [ 1340.832402][T22365] bridge0: left allmulticast mode [ 1340.923527][T22368] loop6: detected capacity change from 0 to 512 [ 1340.933660][T22368] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1340.955288][T22368] EXT4-fs (loop6): 1 truncate cleaned up [ 1341.011755][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 1341.011820][ T29] audit: type=1326 audit(1397.346:82558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.6.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1341.079010][ T29] audit: type=1326 audit(1397.377:82559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.6.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1341.102141][ T29] audit: type=1326 audit(1397.377:82560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.6.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1341.125484][ T29] audit: type=1326 audit(1397.377:82561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.6.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1341.148669][ T29] audit: type=1326 audit(1397.377:82562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.6.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1341.171961][ T29] audit: type=1326 audit(1397.388:82563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22372 comm="syz.6.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4fa592005 code=0x7ffc0000 [ 1341.195231][ T29] audit: type=1326 audit(1397.388:82564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.6.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1341.218442][ T29] audit: type=1326 audit(1397.388:82565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.6.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1341.229835][T22379] loop3: detected capacity change from 0 to 512 [ 1341.241572][ T29] audit: type=1326 audit(1397.388:82566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.6.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1341.241598][ T29] audit: type=1326 audit(1397.388:82567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.6.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1341.329353][T22382] loop5: detected capacity change from 0 to 2048 [ 1341.377405][T22386] loop3: detected capacity change from 0 to 128 [ 1341.389053][T22382] loop5: p1 < > p4 [ 1341.393478][T22382] loop5: p4 size 722688 extends beyond EOD, truncated [ 1341.415593][T22382] EXT4-fs: Ignoring removed bh option [ 1341.477012][T22395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.485713][T22395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.598897][T22403] xt_hashlimit: max too large, truncated to 1048576 [ 1341.808489][T22410] loop5: p1 < > p4 [ 1341.812939][T22410] loop5: p4 size 722688 extends beyond EOD, truncated [ 1341.828043][T22412] loop1: p1 < > p4 [ 1341.834391][T22412] loop1: p4 size 722688 extends beyond EOD, truncated [ 1341.879025][T22410] EXT4-fs: Ignoring removed bh option [ 1341.886154][T22412] EXT4-fs: Ignoring removed bh option [ 1341.942814][T22420] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1341.960019][T22407] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1341.969963][T22420] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15233'. [ 1341.979168][T22420] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15233'. [ 1342.030229][T22429] netlink: 'syz.5.15237': attribute type 1 has an invalid length. [ 1342.068978][T22429] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1342.082430][T22429] bond9: (slave dummy0): making interface the new active one [ 1342.091035][T22429] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1342.094068][T22426] loop1: p1 < > p4 [ 1342.104537][T22426] loop1: p4 size 722688 extends beyond EOD, truncated [ 1342.113255][T22429] bond9 (unregistering): (slave dummy0): Releasing active interface [ 1342.127997][T22429] bond9 (unregistering): Released all slaves [ 1342.146736][T22426] EXT4-fs: Ignoring removed bh option [ 1342.212566][T22444] xt_hashlimit: max too large, truncated to 1048576 [ 1342.248848][T22450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1343.246791][T22464] loop1: p1 < > p4 [ 1343.251318][T22461] loop6: p1 < > p4 [ 1343.272408][T22468] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1343.286069][T22468] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15248'. [ 1343.295230][T22468] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15248'. [ 1343.306812][T22464] loop1: p4 size 722688 extends beyond EOD, truncated [ 1343.313921][T22461] loop6: p4 size 722688 extends beyond EOD, truncated [ 1343.351519][T22472] random: crng reseeded on system resumption [ 1343.370682][T22462] EXT4-fs: Ignoring removed bh option [ 1343.377813][T22472] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 1343.385000][T22472] FAT-fs (loop3): Filesystem has been set read-only [ 1343.393382][T22464] EXT4-fs: Ignoring removed bh option [ 1343.393525][T22472] syzkaller0: entered allmulticast mode [ 1343.406664][T22472] syzkaller0: entered promiscuous mode [ 1343.415001][T22472] syzkaller0 (unregistering): left allmulticast mode [ 1343.421713][T22472] syzkaller0 (unregistering): left promiscuous mode [ 1343.514519][T22487] loop6: p1 < > p4 [ 1343.518886][T22487] loop6: p4 size 722688 extends beyond EOD, truncated [ 1343.538454][T22487] EXT4-fs: Ignoring removed bh option [ 1343.561000][T22493] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1343.600224][T22498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1343.635467][T22506] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1343.647701][T22506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15259'. [ 1343.657024][T22506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15259'. [ 1343.682582][T22493] bond9: (slave veth33): Enslaving as an active interface with an up link [ 1343.684333][T22510] xt_hashlimit: max too large, truncated to 1048576 [ 1343.703110][T22508] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1343.728883][T22493] bond9 (unregistering): (slave veth33): Releasing backup interface [ 1343.738221][T22493] bond9 (unregistering): (slave dummy0): Releasing backup interface [ 1343.748222][T22493] bond9 (unregistering): Released all slaves [ 1343.847495][T22518] bridge0: port 1(vlan5) entered blocking state [ 1343.853840][T22518] bridge0: port 1(vlan5) entered disabled state [ 1343.866171][T22518] vlan5: entered allmulticast mode [ 1343.871383][T22518] bridge0: entered allmulticast mode [ 1343.880523][T22518] vlan5: left allmulticast mode [ 1343.885396][T22518] bridge0: left allmulticast mode [ 1344.031927][T22522] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1344.053101][T22522] EXT4-fs (loop5): 1 truncate cleaned up [ 1344.275190][T22525] loop5: p1 < > p4 [ 1344.283826][T22525] loop5: p4 size 722688 extends beyond EOD, truncated [ 1344.322777][T22525] EXT4-fs: Ignoring removed bh option [ 1344.405846][T22534] random: crng reseeded on system resumption [ 1344.458734][T22534] FAT-fs (loop5): error, clusters badly computed (1 != 0) [ 1344.465900][T22534] FAT-fs (loop5): Filesystem has been set read-only [ 1344.506512][T22534] syzkaller0: entered allmulticast mode [ 1344.512429][T22534] syzkaller0: entered promiscuous mode [ 1344.556695][T22540] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1344.568571][T22534] syzkaller0 (unregistering): left allmulticast mode [ 1344.572285][T22540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15270'. [ 1344.575306][T22534] syzkaller0 (unregistering): left promiscuous mode [ 1344.694988][T22540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15270'. [ 1344.742064][T22552] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.6.15274: corrupted xattr block 95: invalid header [ 1344.765443][T22552] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.15274: bg 0: block 7: invalid block bitmap [ 1344.799807][T22552] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1344.824176][T22552] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2971: inode #11: comm syz.6.15274: corrupted xattr block 95: invalid header [ 1344.853333][T22552] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 1344.872128][T22552] EXT4-fs (loop6): 1 orphan inode deleted [ 1344.900146][T22557] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1344.930280][T22557] EXT4-fs (loop3): 1 truncate cleaned up [ 1345.162423][T22569] xt_hashlimit: max too large, truncated to 1048576 [ 1345.221394][T22571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15277'. [ 1345.690673][T22576] set_capacity_and_notify: 26 callbacks suppressed [ 1345.690690][T22576] loop3: detected capacity change from 0 to 2048 [ 1345.770555][T22576] loop3: p1 < > p4 [ 1345.776553][T22576] loop3: p4 size 722688 extends beyond EOD, truncated [ 1345.868454][T22581] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1345.900624][T22585] loop6: detected capacity change from 0 to 128 [ 1345.990517][T22581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15283'. [ 1346.003364][T22581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15283'. [ 1346.437757][T22595] random: crng reseeded on system resumption [ 1346.546125][T22595] loop6: detected capacity change from 0 to 512 [ 1346.554889][T22595] FAT-fs (loop6): error, clusters badly computed (1 != 0) [ 1346.562068][T22595] FAT-fs (loop6): Filesystem has been set read-only [ 1346.569973][T22595] syzkaller0: entered allmulticast mode [ 1346.575885][T22595] syzkaller0: entered promiscuous mode [ 1346.582950][T22595] syzkaller0 (unregistering): left allmulticast mode [ 1346.589658][T22595] syzkaller0 (unregistering): left promiscuous mode [ 1346.964299][T22606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.993415][T22606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.995303][T22610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.041179][T22614] xt_hashlimit: max too large, truncated to 1048576 [ 1347.041519][T22610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.102978][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 1347.102991][ T29] audit: type=1326 audit(1403.729:82666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22615 comm="syz.6.15296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1347.143371][ T29] audit: type=1326 audit(1403.771:82667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22615 comm="syz.6.15296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1347.166563][ T29] audit: type=1326 audit(1403.771:82668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22615 comm="syz.6.15296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1347.189687][ T29] audit: type=1326 audit(1403.771:82669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22615 comm="syz.6.15296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1347.212805][ T29] audit: type=1326 audit(1403.771:82670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22615 comm="syz.6.15296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1347.235931][ T29] audit: type=1326 audit(1403.771:82671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22615 comm="syz.6.15296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1347.258940][ T29] audit: type=1326 audit(1403.771:82672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22615 comm="syz.6.15296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1347.282039][ T29] audit: type=1326 audit(1403.771:82673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22615 comm="syz.6.15296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1347.305282][ T29] audit: type=1326 audit(1403.771:82674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22615 comm="syz.6.15296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1347.328469][ T29] audit: type=1326 audit(1403.771:82675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22615 comm="syz.6.15296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fa55f749 code=0x7ffc0000 [ 1347.354638][T22623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15297'. [ 1347.611871][T22627] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1347.623998][T22627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15299'. [ 1347.633214][T22627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15299'. [ 1347.657981][T22629] IPv6: Can't replace route, no match found [ 1347.693138][T22631] loop3: detected capacity change from 0 to 2048 [ 1347.732690][T22631] loop3: p1 < > p4 [ 1347.737205][T22631] loop3: p4 size 722688 extends beyond EOD, truncated [ 1347.759734][T22631] loop3: detected capacity change from 0 to 1024 [ 1347.766393][T22631] EXT4-fs: Ignoring removed bh option [ 1347.781773][T22631] EXT4-fs mount: 64 callbacks suppressed [ 1347.781849][T22631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1347.800715][T22631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1348.022891][T22642] netlink: 596 bytes leftover after parsing attributes in process `syz.1.15304'. [ 1348.191436][T22636] loop5: detected capacity change from 0 to 512 [ 1348.211004][T22636] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.15302: bad orphan inode 11862016 [ 1348.222604][T22636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1348.287346][T22636] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1348.324421][T16133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1348.391092][T22655] loop6: detected capacity change from 0 to 2048 [ 1348.418363][T22655] loop6: p1 < > p4 [ 1348.422734][T22655] loop6: p4 size 722688 extends beyond EOD, truncated [ 1348.649418][T22667] loop3: detected capacity change from 0 to 128 [ 1348.657490][T22667] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1349.107703][T22672] loop1: detected capacity change from 0 to 2048 [ 1349.130271][T20553] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1349.147415][T22674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.155844][T22674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.164111][T22672] loop1: p1 < > p4 [ 1349.168389][T22672] loop1: p4 size 722688 extends beyond EOD, truncated [ 1349.299219][T22683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15315'. [ 1349.586844][T22686] loop6: detected capacity change from 0 to 512 [ 1349.655487][T22686] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1349.979713][T22686] EXT4-fs (loop6): 1 truncate cleaned up [ 1350.382688][T22686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1350.652277][T13770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.773188][T22702] loop6: detected capacity change from 0 to 512 [ 1350.852879][T22708] netlink: 596 bytes leftover after parsing attributes in process `syz.5.15322'. [ 1350.928025][T22714] loop6: detected capacity change from 0 to 128 [ 1350.952236][T22714] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1351.010037][T13770] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1351.038532][T22720] xt_hashlimit: max too large, truncated to 1048576 [ 1351.076834][T22724] xt_hashlimit: max too large, truncated to 1048576 [ 1351.170021][T22728] random: crng reseeded on system resumption [ 1351.184132][T22728] loop6: detected capacity change from 0 to 512 [ 1351.192785][T22728] FAT-fs (loop6): error, clusters badly computed (1 != 0) [ 1351.200008][T22728] FAT-fs (loop6): Filesystem has been set read-only [ 1351.208533][T22728] syzkaller0: entered allmulticast mode [ 1351.214600][T22728] syzkaller0: entered promiscuous mode [ 1351.222066][T22728] syzkaller0 (unregistering): left allmulticast mode [ 1351.228825][T22728] syzkaller0 (unregistering): left promiscuous mode [ 1351.431876][T22732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15332'. [ 1351.850336][T22736] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1351.881571][T22736] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15334'. [ 1351.902878][T22736] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15334'. [ 1351.920957][T22738] loop1: detected capacity change from 0 to 512 [ 1351.939726][T22738] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1351.966590][T22738] EXT4-fs (loop1): 1 truncate cleaned up [ 1351.979594][T22738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1352.011224][T22745] loop5: detected capacity change from 0 to 512 [ 1352.023889][T22745] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1352.058508][T22745] EXT4-fs (loop5): 1 truncate cleaned up [ 1352.067965][T22749] IPv6: Can't replace route, no match found [ 1352.085283][T22745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1352.090178][T22751] xt_hashlimit: max too large, truncated to 1048576 [ 1352.128820][T22753] bond6: (slave dummy0): Releasing backup interface [ 1352.159126][T22756] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1352.215048][T22760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.230644][T22760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.257946][T22764] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1352.277081][T22764] bond7: (slave veth45): Enslaving as an active interface with an up link [ 1352.293381][T22764] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1352.356204][T22766] netlink: 596 bytes leftover after parsing attributes in process `syz.6.15344'. [ 1352.500258][T21225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.513484][T22771] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1352.539521][T22776] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1352.566246][T22776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15347'. [ 1352.577883][T22776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15347'. [ 1353.569542][T22796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15352'. [ 1353.628469][T22799] bridge0: port 3(vlan5) entered blocking state [ 1353.634781][T22799] bridge0: port 3(vlan5) entered disabled state [ 1353.641360][T22799] vlan5: entered allmulticast mode [ 1353.646460][T22799] bridge0: entered allmulticast mode [ 1353.652428][T22799] vlan5: left allmulticast mode [ 1353.657343][T22799] bridge0: left allmulticast mode [ 1353.742807][T22803] loop3: detected capacity change from 0 to 512 [ 1353.750256][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 1353.750268][ T29] audit: type=1326 audit(1410.711:82816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.0.15357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1353.762834][T22803] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1353.798494][T22805] loop1: detected capacity change from 0 to 512 [ 1353.810788][ T29] audit: type=1326 audit(1410.753:82817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.0.15357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1353.811179][T22809] netlink: 'syz.6.15358': attribute type 1 has an invalid length. [ 1353.833999][ T29] audit: type=1326 audit(1410.753:82818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.0.15357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1353.864878][ T29] audit: type=1326 audit(1410.753:82819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.0.15357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1353.865143][T22805] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1353.887980][ T29] audit: type=1326 audit(1410.774:82820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.0.15357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1353.888072][ T29] audit: type=1326 audit(1410.774:82821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.0.15357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42e49e2005 code=0x7ffc0000 [ 1353.944683][T22803] EXT4-fs (loop3): 1 truncate cleaned up [ 1353.951819][ T29] audit: type=1326 audit(1410.932:82822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.0.15357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1353.968171][T22803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1353.975335][ T29] audit: type=1326 audit(1410.932:82823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.0.15357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1353.975415][ T29] audit: type=1326 audit(1410.932:82824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22816 comm="syz.0.15357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42e49e2005 code=0x7ffc0000 [ 1353.985648][T22805] EXT4-fs (loop1): 1 truncate cleaned up [ 1354.042060][ T29] audit: type=1326 audit(1410.932:82825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.0.15357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1354.075179][T22809] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1354.077837][T16133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.085144][T22805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1354.115717][T22818] bond6 (unregistering): Released all slaves [ 1354.131516][T22822] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1354.143567][T22822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15359'. [ 1354.154418][T20553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.156686][T22822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15359'. [ 1354.206902][T22827] loop5: detected capacity change from 0 to 512 [ 1354.215276][T22827] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.5.15362: corrupted xattr block 95: invalid header [ 1354.228730][T22828] loop6: detected capacity change from 0 to 512 [ 1354.229290][T22827] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.15362: bg 0: block 7: invalid block bitmap [ 1354.254772][T22828] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1354.265327][T22827] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1354.274347][T22827] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2971: inode #11: comm syz.5.15362: corrupted xattr block 95: invalid header [ 1354.277697][T21225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.290406][T22827] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 1354.306999][T22827] EXT4-fs (loop5): 1 orphan inode deleted [ 1354.314997][T22827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1354.320837][T22828] EXT4-fs (loop6): 1 truncate cleaned up [ 1354.338017][T22828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1354.352914][T22834] loop3: detected capacity change from 0 to 128 [ 1354.367276][T16133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.407793][T22841] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1354.454416][T16133] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1354.482400][T22834] bio_check_eod: 104 callbacks suppressed [ 1354.482416][T22834] syz.3.15363: attempt to access beyond end of device [ 1354.482416][T22834] loop3: rw=2049, sector=169, nr_sectors = 128 limit=128 [ 1354.502838][T22834] syz.3.15363: attempt to access beyond end of device [ 1354.502838][T22834] loop3: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 1354.516742][T22834] syz.3.15363: attempt to access beyond end of device [ 1354.516742][T22834] loop3: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 1354.549285][T22834] syz.3.15363: attempt to access beyond end of device [ 1354.549285][T22834] loop3: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 1354.563236][T22834] syz.3.15363: attempt to access beyond end of device [ 1354.563236][T22834] loop3: rw=2049, sector=353, nr_sectors = 8 limit=128 [ 1354.577170][T22834] syz.3.15363: attempt to access beyond end of device [ 1354.577170][T22834] loop3: rw=2049, sector=369, nr_sectors = 8 limit=128 [ 1354.606477][T13770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.625442][T22834] syz.3.15363: attempt to access beyond end of device [ 1354.625442][T22834] loop3: rw=2049, sector=385, nr_sectors = 8 limit=128 [ 1354.644158][T22834] syz.3.15363: attempt to access beyond end of device [ 1354.644158][T22834] loop3: rw=2049, sector=401, nr_sectors = 8 limit=128 [ 1354.658203][T22834] syz.3.15363: attempt to access beyond end of device [ 1354.658203][T22834] loop3: rw=2049, sector=417, nr_sectors = 8 limit=128 [ 1354.672195][T22834] syz.3.15363: attempt to access beyond end of device [ 1354.672195][T22834] loop3: rw=2049, sector=433, nr_sectors = 8 limit=128 [ 1355.020919][T22852] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1355.048046][T13770] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1355.077465][T22856] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1355.106547][T20553] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1355.127311][T22861] netlink: 'syz.3.15371': attribute type 1 has an invalid length. [ 1355.135393][T22859] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1355.151234][T22861] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1355.165516][T22861] bond3: (slave dummy0): making interface the new active one [ 1355.174226][T22861] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1355.176688][T22859] EXT4-fs (loop6): 1 truncate cleaned up [ 1355.193095][T22861] bond3 (unregistering): (slave dummy0): Releasing active interface [ 1355.193972][T22859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1355.215308][T22861] bond3 (unregistering): Released all slaves [ 1355.224842][T22865] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1355.261462][T22869] IPv6: Can't replace route, no match found [ 1355.289982][T22872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.302053][T22872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.370964][T22877] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1355.383213][T22874] loop1: p1 < > p4 [ 1355.389703][T22879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1355.392597][T22874] loop1: p4 size 722688 extends beyond EOD, truncated [ 1355.407968][T22879] bond3: (slave veth7): Enslaving as an active interface with an up link [ 1355.421377][T22879] bond3 (unregistering): (slave veth7): Releasing backup interface [ 1355.430490][T22879] bond3 (unregistering): Released all slaves [ 1355.446664][T16133] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1355.465497][T22885] xt_hashlimit: max too large, truncated to 1048576 [ 1355.514067][T22887] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1355.536375][T22887] bond3: (slave veth9): Enslaving as an active interface with an up link [ 1355.552829][T22887] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1355.574626][T22887] bond3 (unregistering): (slave veth9): Releasing backup interface [ 1355.584869][T22887] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 1355.587434][T22874] set_capacity_and_notify: 6 callbacks suppressed [ 1355.587447][T22874] loop1: detected capacity change from 0 to 1024 [ 1355.607941][T22887] bond3 (unregistering): Released all slaves [ 1355.644639][T22874] EXT4-fs: Ignoring removed bh option [ 1355.668056][T22874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1355.681388][T22896] __nla_validate_parse: 4 callbacks suppressed [ 1355.681403][T22896] netlink: 596 bytes leftover after parsing attributes in process `syz.5.15382'. [ 1355.700227][T22874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1355.712297][T22898] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1355.726376][T22898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15383'. [ 1355.736731][T22898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15383'. [ 1357.890226][T22911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15386'. [ 1357.971907][T13770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.996039][T22922] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1358.070372][T22922] bond6: (slave veth37): Enslaving as an active interface with an up link [ 1358.091621][T22928] bond6 (unregistering): (slave veth37): Releasing backup interface [ 1358.098210][T22930] IPv6: Can't replace route, no match found [ 1358.117217][T22928] bond6 (unregistering): Released all slaves [ 1358.144623][T22934] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1358.163549][T22934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15395'. [ 1358.180849][T22934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15395'. [ 1358.198072][T22916] loop5: detected capacity change from 0 to 512 [ 1358.319038][T22916] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.15389: bad orphan inode 11862016 [ 1358.333305][T22916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1358.547100][T22950] netlink: 596 bytes leftover after parsing attributes in process `syz.3.15399'. [ 1359.163485][T22959] loop3: detected capacity change from 0 to 512 [ 1359.788594][T22965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15404'. [ 1359.818153][T22967] IPv6: Can't replace route, no match found [ 1359.841091][T22968] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1359.848789][T22968] FAT-fs (loop3): Filesystem has been set read-only [ 1359.937210][T16133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1360.001478][T22969] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1360.058736][T22972] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15407'. [ 1360.119698][T22977] netlink: 'syz.5.15406': attribute type 1 has an invalid length. [ 1360.146802][T22977] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1360.160745][T22977] bond9: (slave dummy0): making interface the new active one [ 1360.170687][T22977] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1360.218678][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1360.218691][ T29] audit: type=1326 audit(1417.504:82827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.0.15412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1360.277736][T22993] random: crng reseeded on system resumption [ 1360.342118][T22996] loop3: detected capacity change from 0 to 512 [ 1360.357271][ T29] audit: type=1326 audit(1417.557:82828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.0.15412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1360.380404][ T29] audit: type=1326 audit(1417.557:82829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.0.15412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1360.403564][ T29] audit: type=1326 audit(1417.557:82830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.0.15412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1360.426639][ T29] audit: type=1326 audit(1417.557:82831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.0.15412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1360.449814][ T29] audit: type=1326 audit(1417.557:82832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.0.15412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1360.473026][ T29] audit: type=1326 audit(1417.557:82833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.0.15412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1360.496152][ T29] audit: type=1326 audit(1417.557:82834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.0.15412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1360.519239][ T29] audit: type=1326 audit(1417.557:82835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.0.15412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1360.542330][ T29] audit: type=1326 audit(1417.567:82836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.0.15412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f42e49af749 code=0x7ffc0000 [ 1360.596192][T22977] bond9 (unregistering): (slave dummy0): Releasing active interface [ 1360.606520][T22977] bond9 (unregistering): Released all slaves [ 1360.616739][T22993] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 1360.623878][T22993] FAT-fs (loop3): Filesystem has been set read-only [ 1360.732462][T22994] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1360.780092][T23001] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1360.795371][T23001] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15414'. [ 1360.804820][T23001] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15414'. [ 1360.864733][T23005] loop5: detected capacity change from 0 to 512 [ 1360.875841][T23005] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.5.15416: corrupted xattr block 95: invalid header [ 1360.957320][T23005] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.15416: bg 0: block 7: invalid block bitmap [ 1360.975766][T23005] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1360.989536][T23005] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2971: inode #11: comm syz.5.15416: corrupted xattr block 95: invalid header [ 1361.007135][T23005] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 1361.016407][T23003] loop3: detected capacity change from 0 to 512 [ 1361.072645][T23018] loop1: detected capacity change from 0 to 128 [ 1361.076409][T23005] EXT4-fs (loop5): 1 orphan inode deleted [ 1361.089446][T23003] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.15415: bad orphan inode 11862016 [ 1361.102137][T23005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.110891][T23018] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1361.129393][T23003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1361.172942][T16133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.200596][T16133] ================================================================== [ 1361.208685][T16133] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 1361.216409][T16133] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1361.218716][T16133] read-write to 0xffff888237c27550 of 8 bytes by task 23018 on cpu 0: [ 1361.226853][T16133] find_get_block_common+0x4f3/0x950 [ 1361.232134][T16133] bdev_getblk+0x4d/0x3f0 [ 1361.236449][T16133] ext4_read_inode_bitmap+0x15f/0xb10 [ 1361.241801][T16133] __ext4_new_inode+0xc83/0x2330 [ 1361.246722][T16133] ext4_ext_migrate+0x3f7/0x9b0 [ 1361.251552][T16133] ext4_ioctl+0x1395/0x2d20 [ 1361.256041][T16133] __se_sys_ioctl+0xce/0x140 [ 1361.260622][T16133] __x64_sys_ioctl+0x43/0x50 [ 1361.265201][T16133] x64_sys_call+0x14b0/0x3000 [ 1361.269863][T16133] do_syscall_64+0xd8/0x2a0 [ 1361.274354][T16133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.280231][T16133] [ 1361.282533][T16133] read to 0xffff888237c27550 of 8 bytes by task 16133 on cpu 1: [ 1361.290140][T16133] has_bh_in_lru+0x35/0x1f0 [ 1361.294629][T16133] smp_call_function_many_cond+0x2a9/0xc60 [ 1361.300421][T16133] on_each_cpu_cond_mask+0x3c/0x80 [ 1361.305517][T16133] invalidate_bh_lrus+0x2a/0x30 [ 1361.310350][T16133] blkdev_flush_mapping+0x9a/0x1a0 [ 1361.315456][T16133] bdev_release+0x2bf/0x3d0 [ 1361.319943][T16133] blkdev_release+0x15/0x20 [ 1361.324430][T16133] __fput+0x29b/0x650 [ 1361.328398][T16133] ____fput+0x1c/0x30 [ 1361.332365][T16133] task_work_run+0x131/0x1a0 [ 1361.336940][T16133] exit_to_user_mode_loop+0x1fe/0x740 [ 1361.342292][T16133] do_syscall_64+0x202/0x2a0 [ 1361.346870][T16133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.352744][T16133] [ 1361.355049][T16133] value changed: 0x0000000000000000 -> 0xffff88811ade4138 [ 1361.362129][T16133] [ 1361.364433][T16133] Reported by Kernel Concurrency Sanitizer on: [ 1361.370564][T16133] CPU: 1 UID: 0 PID: 16133 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1361.382090][T16133] Tainted: [W]=WARN [ 1361.385869][T16133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1361.395903][T16133] ================================================================== [ 1361.519778][T23003] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1361.592063][T21971] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1361.692905][T23007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1361.898668][T11829] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.950263][T11829] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.002414][T11829] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.049930][T11829] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.137390][T11829] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.164467][T11829] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.221586][T11829] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.288223][T11829] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.338372][T11829] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.364637][T11829] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.412836][T11829] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.452026][T11829] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.509434][T11829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.555267][T11829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.621805][T11829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.669283][T11829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.737880][T11829] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.774266][T11829] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.812158][T11829] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.869933][T11829] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.917351][T11829] bridge_slave_1: left allmulticast mode [ 1362.922972][T11829] bridge_slave_1: left promiscuous mode [ 1362.928655][T11829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.936289][T11829] bridge_slave_0: left allmulticast mode [ 1362.941951][T11829] bridge_slave_0: left promiscuous mode [ 1362.947658][T11829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.956355][T11829] bridge_slave_1: left allmulticast mode [ 1362.961966][T11829] bridge_slave_1: left promiscuous mode [ 1362.967591][T11829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.975272][T11829] bridge_slave_0: left allmulticast mode [ 1362.980901][T11829] bridge_slave_0: left promiscuous mode [ 1362.986583][T11829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.994856][T11829] bridge_slave_1: left allmulticast mode [ 1363.000568][T11829] bridge_slave_1: left promiscuous mode [ 1363.006187][T11829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.013726][T11829] bridge_slave_0: left allmulticast mode [ 1363.019373][T11829] bridge_slave_0: left promiscuous mode [ 1363.024940][T11829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.230684][T11829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.239368][T11829] bond_slave_0: left promiscuous mode [ 1363.245411][T11829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.254180][T11829] bond_slave_1: left promiscuous mode [ 1363.260063][T11829] bond0 (unregistering): Released all slaves [ 1363.268489][T11829] bond1 (unregistering): (slave veth13): Releasing active interface [ 1363.277249][T11829] bond1 (unregistering): Released all slaves [ 1363.285539][T11829] bond2 (unregistering): (slave veth19): Releasing active interface [ 1363.294256][T11829] bond2 (unregistering): Released all slaves [ 1363.302372][T11829] bond3 (unregistering): (slave veth21): Releasing active interface [ 1363.311148][T11829] bond3 (unregistering): Released all slaves [ 1363.318999][T11829] bond4 (unregistering): Released all slaves [ 1363.327203][T11829] bond5 (unregistering): Released all slaves [ 1363.393946][T11829] bond0 (unregistering): Released all slaves [ 1363.401843][T11829] bond1 (unregistering): Released all slaves [ 1363.410311][T11829] bond2 (unregistering): (slave veth5): Releasing active interface [ 1363.419131][T11829] bond2 (unregistering): Released all slaves [ 1363.427636][T11829] bond3 (unregistering): (slave veth23): Releasing active interface [ 1363.436468][T11829] bond3 (unregistering): Released all slaves [ 1363.444554][T11829] bond4 (unregistering): Released all slaves [ 1363.452764][T11829] bond5 (unregistering): Released all slaves [ 1363.460730][T11829] bond6 (unregistering): Released all slaves [ 1363.469491][T11829] bond7 (unregistering): (slave veth27): Releasing backup interface [ 1363.478530][T11829] bond7 (unregistering): Released all slaves [ 1363.486464][T11829] bond8 (unregistering): Released all slaves [ 1363.535642][T11829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.545145][T11829] bond0 (unregistering): Released all slaves [ 1363.553055][T11829] bond1 (unregistering): Released all slaves [ 1363.561352][T11829] bond2 (unregistering): Released all slaves [ 1363.569434][T11829] bond3 (unregistering): Released all slaves [ 1363.631009][T11829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.640432][T11829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.649899][T11829] bond0 (unregistering): Released all slaves [ 1363.658078][T11829] bond1 (unregistering): Released all slaves [ 1363.666080][T11829] bond2 (unregistering): Released all slaves [ 1363.754675][T11829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.763287][T11829] bond_slave_0: left promiscuous mode [ 1363.769709][T11829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.778511][T11829] bond_slave_1: left promiscuous mode [ 1363.784466][T11829] bond0 (unregistering): Released all slaves [ 1363.793069][T11829] bond1 (unregistering): (slave veth35): Releasing active interface [ 1363.801724][T11829] bond1 (unregistering): Released all slaves [ 1363.809664][T11829] bond2 (unregistering): Released all slaves [ 1363.817616][T11829] bond3 (unregistering): Released all slaves [ 1363.825794][T11829] bond4 (unregistering): Released all slaves [ 1363.834383][T11829] bond5 (unregistering): (slave veth43): Releasing backup interface [ 1363.843037][T11829] bond5 (unregistering): Released all slaves [ 1363.851192][T11829] bond6 (unregistering): Released all slaves [ 1363.860215][T11829] bond7 (unregistering): (slave veth45): Releasing backup interface [ 1363.869542][T11829] bond7 (unregistering): (slave dummy0): Releasing backup interface [ 1363.879033][T11829] bond7 (unregistering): Released all slaves [ 1364.003242][T11829] hsr_slave_0: left promiscuous mode [ 1364.008792][T11829] hsr_slave_1: left promiscuous mode [ 1364.016154][T11829] hsr_slave_0: left promiscuous mode [ 1364.021750][T11829] hsr_slave_1: left promiscuous mode [ 1364.028503][T11829] hsr_slave_0: left promiscuous mode [ 1364.035017][T11829] hsr_slave_1: left promiscuous mode [ 1364.040533][T11829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.047877][T11829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.056600][T11829] hsr_slave_0: left promiscuous mode [ 1364.062184][T11829] hsr_slave_1: left promiscuous mode [ 1364.067861][T11829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.075213][T11829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.082677][T11829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.090064][T11829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.099121][T11829] hsr_slave_0: left promiscuous mode [ 1364.104601][T11829] hsr_slave_1: left promiscuous mode [ 1364.110281][T11829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.117648][T11829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.131952][T11829] veth1_vlan: left promiscuous mode [ 1364.137284][T11829] veth0_vlan: left promiscuous mode [ 1364.143026][T11829] veth1_macvtap: left promiscuous mode [ 1364.148566][T11829] veth0_macvtap: left promiscuous mode [ 1364.154266][T11829] veth1_vlan: left promiscuous mode [ 1364.159532][T11829] veth0_vlan: left promiscuous mode [ 1364.165099][T11829] veth1_macvtap: left promiscuous mode [ 1364.170618][T11829] veth0_macvtap: left promiscuous mode [ 1364.176121][T11829] veth1_vlan: left promiscuous mode [ 1364.181332][T11829] veth0_vlan: left promiscuous mode [ 1364.186964][T11829] veth1_macvtap: left promiscuous mode [ 1364.192496][T11829] veth0_macvtap: left promiscuous mode [ 1364.198026][T11829] veth1_vlan: left promiscuous mode [ 1364.203230][T11829] veth0_vlan: left promiscuous mode [ 1364.208885][T11829] veth1_macvtap: left promiscuous mode [ 1364.214354][T11829] veth0_macvtap: left promiscuous mode [ 1364.219829][T11829] veth1_vlan: left promiscuous mode [ 1364.225073][T11829] veth0_vlan: left promiscuous mode [ 1364.400190][T11829] team_slave_1 (unregistering): left promiscuous mode [ 1364.407823][T11829] team0 (unregistering): Port device team_slave_1 removed [ 1364.417971][T11829] team_slave_0 (unregistering): left promiscuous mode [ 1364.425221][T11829] team0 (unregistering): Port device team_slave_0 removed [ 1364.432980][T28548] smc: removing ib device syz! [ 1364.544741][T11829] team0 (unregistering): Port device team_slave_1 removed [ 1364.555565][T11829] team0 (unregistering): Port device team_slave_0 removed [ 1364.605631][T11829] team0 (unregistering): Port device team_slave_0 removed [ 1364.670621][T11829] pimreg (unregistering): left allmulticast mode [ 1364.699046][T11829] team_slave_1 (unregistering): left promiscuous mode [ 1364.706052][T11829] team0 (unregistering): Port device team_slave_1 removed [ 1364.715151][T11829] team_slave_0 (unregistering): left promiscuous mode [ 1364.722137][T11829] team0 (unregistering): Port device team_slave_0 removed