last executing test programs: 2m37.771433838s ago: executing program 32 (id=724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x44}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}}, 0x24}}, 0x0) 2m34.975713639s ago: executing program 33 (id=785): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_open_procfs(0x0, 0x0) close(r0) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m29.998523199s ago: executing program 34 (id=904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000002980)={@broadcast, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x14, 0x64, 0x0, 0x6, 0x88, 0x0, @private=0xa010101, @rand_addr=0x64010100}}}}}, 0x0) 2m23.507722621s ago: executing program 35 (id=1063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 1m31.955850671s ago: executing program 8 (id=2402): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="8b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="ef", 0x1}], 0x1}}], 0x2, 0x48800) 1m31.955232291s ago: executing program 8 (id=2403): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0x3f84, 0x10, 0x4, 0x6fd}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x4047f6, 0x0, 0x4, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m31.812605955s ago: executing program 8 (id=2408): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r2, 0x4}, 0x8) 1m31.66080835s ago: executing program 1 (id=2411): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x3400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1m31.619302105s ago: executing program 8 (id=2412): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@barrier}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) recvmmsg(r0, &(0x7f0000000ac0), 0x0, 0x40000040, 0x0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r2, 0x0, 0x0, 0x1001f3) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m31.532413633s ago: executing program 1 (id=2413): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$inet6(0xa, 0x2, 0x0) 1m31.458503251s ago: executing program 1 (id=2416): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 1m31.394978587s ago: executing program 8 (id=2417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1m31.332687563s ago: executing program 1 (id=2420): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18040, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16, @ANYRESHEX, @ANYRES8, @ANYRES64=0x0, @ANYRESHEX=r0], 0x8, 0x2fe, &(0x7f00000007c0)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x4) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40403, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x402, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0x5]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) 1m31.06886755s ago: executing program 1 (id=2426): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x100, 0x4, 0x20}, 0x0, &(0x7f0000000000)) rename(0x0, &(0x7f0000000200)='./file0\x00') r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) 1m31.009171826s ago: executing program 1 (id=2429): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0xffffffffffffdcaf, &(0x7f0000000400)=""/45) 1m30.981010299s ago: executing program 36 (id=2429): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0xffffffffffffdcaf, &(0x7f0000000400)=""/45) 1m30.519627335s ago: executing program 8 (id=2435): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 1m30.481050789s ago: executing program 37 (id=2435): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 1m26.909810178s ago: executing program 2 (id=2502): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 1m26.879132121s ago: executing program 2 (id=2503): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000440)={[{@nouid32}, {@data_err_ignore}, {@bh}]}, 0x1, 0x528, &(0x7f0000000f80)="$eJzs3c9vHFcdAPDvTLy2k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNZWXXa9nrUptIuGc4IlGJExz5Azj3xJ0LghuXckDihwWqkTgMmtmxs3F27U0T75rdz0cazbx54/2+l828N/N2d14AE+tqROxFxHREvBsR8+X+pFzirc6SH/fJ/v3lg/37y0lk2Tv/SIr8fF90/U3ucvmasxHxvW9F/DDpCvizcr2ze2+p0ahvlsmFdnNjYWtn98Zac2m1vlpfr9VuL96++cat12uPUZvZE3Nfak6XW1/8+Pd7X/txXqy5ck93PZ6mTtUrR3FyUxHxnbMINgIXyvpMj7ogfCppRDwfES8X5/98XCjeTQBgnGXZfGTz3WkAYNylxRhYklbLsYC5SNNqtTOG90JcShutrfb1u63t9ZXOWNmVqKR31xr1m+VY4ZWoJHl6sdh+kK4dS9+KiOci4uczF4t0dbnVWBnlhQ8ATLDLx/r/f890+n8AYMyd/LUZAGAc6f8BYPLo/wFg8uj/AWDydPr/i4/7Z1mW/eQsigMADIH7fwCYPA/3/x7lCABj7rtvv50v2UH5/OuV93a277Xeu7FS37pXbW4vV5dbmxvV1VZrtXhmT/O012u0WhuLr8X2+1e+vrHVXtja2b3TbG2vt+8Uz/W+U68UR+0NoWYAQD/PvfTRn5K8R37zYrFE1wBAZaQlA85aOuoCACNzYdQFAEbGbF8wuR7c4z/2lwAND8CYSE7Jn+31A6Esy7KzKxJwxq59zvg/TKqu8X+/AoIJc9r4fzE3sA8JYSwZ/4fJlWXJoHP+x6AHAgDn2wlj/FeGeR0CjE6fz/+fL9e/KT8c+MHK8SM+PMtSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPl2OP9vtZzmdy7StFqNeKaYAKiS3F1r1G9GxLMR8ceZykyeXhxxmQGAJ5X+NSnn/7o2/+rcQ1kvXj7anI6IH/3ynV+8v9Rub/4hYjr558zh/vaH5f7aqcFmz6IGAMDJDvvpYt11I//J/v3lw2WY5fnbNztXBXncg/3pODiKPxVTxXo2KhFx6V9Jme5IusYunsTeBxHx2V71T2KuGAPpXLIcj5/Hfmao8dOH4qflBM1p+W/xmadQFpg0H+Xtz1u9zr80rhbr3uf/bNFCPbmy/ctfavmgaAMfxD9s/y70af+uDhrjtd99u1OLi4/mfRDx+amIw9gHXe3PYfykT/xXB4z/5y+8+HK/vOxXEdeid/zuWAvt5sbC1s7ujbXm0mp9tb5eq91evH3zjVuv1xburjWy+RPi//3N68/2y8vrf6lP/NlT6v/lAev/6/+++/0vnRD/q6/0ip/GCyfEz/vErwwYf+nSb/ved+fxVx6tfzLI+399wPgf/2X3kWnDAYDR2drZvbfUaNQ3bfw/bkydj2IMbSP/L3sOitFz4xvDijUdvbN++krnnD6WlWWfKla/FuNpjLoB58HRSR8R/xl1YQAAAAAAAAAAAAAAgJ6G8YulUdcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA8fW/AAAA//+CMdPe") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) ftruncate(r1, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x2, 0x405, 0x1000000002}) 1m26.699743699s ago: executing program 2 (id=2506): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1m26.611555898s ago: executing program 2 (id=2510): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18040, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16, @ANYRESHEX, @ANYRES8, @ANYRES64=0x0, @ANYRESHEX=r0], 0x8, 0x2fe, &(0x7f00000007c0)="$eJzs3M9PE1sUwPFDW0pbAmXx8l7eS1640Y1uJlBdK42BxNhEgtT4IzEZYKpNx5Z0GkyNEVy5Nf4RLghLdibKP8DGnW7cuGNj4kIWxjEznaGlHYpAaRG+n4TMYc49M/emAznTtLN159XjQs7ScnpFQjElfSIi2yIjEhJfn7cNuXFUGq3IxcFvH/+/dffejXQmMzmj1FR69lJKKTU8+u7Js7g37O2AbI482Pqa+rL59+a/Wz9nH+UtlbdUsVRRuporfa7oc6ahFvJWQVNq2jR0y1D5omWUa/lSLZ8zS4uLVaUXF4YSi2XDspRerKqCUVWVkqqUqyr8UM8XlaZpaigh2E92dWZGTx+yeL7Dk8ExKZfTelhE4i2Z7GpPJgQAAHqquf8Piepk/792bqMyeHt92On/YyISDer/L3+qHcvp/we84+rO6MD+3z9/YP+vH6z/b+2IzpYj9f84GUajLbv66qGTLKf1hPf363pxf23MDej/AQAAAAAAAAAAAAAAAAAAAAD4E2zbdtK27aS/9X8GRCQmIv7vAaVhEbnagymjg47w+uMUqH9xLzIsYr5cyi5la1tvwIaImGLImCTlh3s9eJzY/+aRcozIe3PZq19eyobdTDonebd+XJL90lxv21PXM5PjqmZ3fb8kGutTkpS/gutTgfVRuXC+oV6TpHyYl5KYsuDOo17/fFypazczTfVxdxwAAAAAAKeBpnYE3r9r2l75Wv3O/XXz+wPh+v31WOD9eUT+i/R27QAAAAAAnBVW9WlBN02j3CaIy/5jDh9EGvbIinTsXP4Kf7fK/yzD8a20TeCffFcq5u3s6LnEezzsEY8TksNUjTqrUQGplrW3C/y3jfYaI9MT3X8F3eCf12++d+6AV9Zj+6z0gIF/lZmmEW5/AfR3438PAAAAgO6qN/3+noneTggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDOoG09H6/UaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJPiVwAAAP//gYT6Qg==") creat(&(0x7f0000000380)='./bus\x00', 0x4) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40403, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x402, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0x5]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) 1m26.340102735s ago: executing program 2 (id=2513): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1m24.288468711s ago: executing program 2 (id=2526): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) close(r0) 1m24.248566885s ago: executing program 38 (id=2526): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) close(r0) 43.960508943s ago: executing program 3 (id=3475): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000040000000000000001000000950000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) 43.89086871s ago: executing program 3 (id=3479): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r3}) 43.842898575s ago: executing program 3 (id=3481): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a00000308000000", @ANYRES32=0x0, @ANYBLOB="d447c8ed4c66000cea0069d9e341b2846df9b89836c7b143b2385ed5aec69e13a4d26028c49f175c6747c16d68145da295985113df81ed9483f12ac366db87a065cd416881ccef8540eabaf5780c3919161354d20f5193bc5c3d8bf1907434cf81f26bc862d95e"], 0x1c}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000004) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @tcp={0x4, 0x6, "e79b72", 0x14, 0x6, 0xff, @private1, @dev={0xfe, 0x80, '\x00', 0x3c}, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0xff}}}}}}}, 0x0) 43.823952897s ago: executing program 3 (id=3484): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 43.753133304s ago: executing program 3 (id=3486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='cachefiles_ondemand_cread\x00', 0xffffffffffffffff, 0x0, 0xb4c}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_create(0x7) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) 43.532910056s ago: executing program 3 (id=3493): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4e4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 43.512473298s ago: executing program 39 (id=3493): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4e4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 17.045858187s ago: executing program 0 (id=3979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) sendfile(r3, r3, 0x0, 0x100000000) 16.71386984s ago: executing program 0 (id=3989): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r3, r4+10000000}) 16.647754727s ago: executing program 0 (id=3994): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f00000009c0)=ANY=[], 0x358) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000005ec0)={0x59c, r2, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xb8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x9c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x9}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x72, 0xb, "eb5503106fa4773aac33db2d449964420c9325500d46cc43530cca9f6abbec829a5b95b0defc239fb675c65582ee9ac1b70ffde17d55f839acfc73318577b09ec15b32c78347b1cbacef80038ad62371df373c45ae8e2532b660a9b207d44264b7aac3e9ff2d25428a8f49b88a45"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x7}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x7}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4ac, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x4a8, 0x4, 0x0, 0x1, [{0x4a4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xd1, 0x2, "2f2371e39bbcd9b8286f89e1457d5e4e3d6983d04ddfcf1e2ed7e648e7d8fd046db664df64b5f7366b1451073045c55b5b6f522c08fff359df5a89ff22a6dbe77e8c3e75f164fecbca58ac1f070ec30581b8512fcf06b39578c8c2767aa3b2d65cfc226c602114893bd04157285d58d66c21550fbe79b2ae7cdefa901bd0de37752ad373e1675d03842d609719ab769983293a589fd421607a182276906b581d39213a2fc959e3b13ff9c1930a625503ce675fe12ef1cedf3a7bb17e0f945a4cf1fbf76225fea06916e2fd3a8f"}, @NL80211_PKTPAT_MASK={0xa1, 0x1, "cbfa11c51a42f3c321b97959337b340c551fd662f2ce5703c4dd134d9cf2ed75766f47ea0084046faf56708ae809efa3a5fc3a7e6a85d7728c1af474f899f9c65c3763d39eebbedc7ed06c02c451ac4acac9a817693a433fd611f8bfd1deecde2a87df6a74d18476d96bf6dd98d807ff2d2050291e589798edf1a20390cff3b23efed0c53b7a2a9ef4d248e85bed32cfa885bee5daaec90155b6bcdb1d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_PATTERN={0xdd, 0x2, "276ec82f3d67894345576ebf43389e7fb85625a370cfd28c53594463fdcf836eae870828a17505d3b04ea5147c64822491a92a7fed7e82d623821cfae5442d65f705e2ca8bfe97a4b82461281573361e923cca47f4300e2272d2ef8e929bfbeabbe1c6274f6877e992c9a519163401f0b69fe109593e0b807f15f9a39a677b87d6369c1f12b800fe90a28bca294265bc2a96fdbab0d86a9efcb58460d57ada016d43d39bdef34905c093744888e4cb97253ad2be21b69719717c69b1f24f6408865b7ea1fbeae2b97c9f59a3b0bccae66c97055d77934b7ae9"}, @NL80211_PKTPAT_PATTERN={0x23d, 0x2, "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"}]}]}]}]}, 0x59c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) 15.740314038s ago: executing program 0 (id=4020): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@nodioread_nolock}, {@nodelalloc}, {@auto_da_alloc}, {@inlinecrypt}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15.538221899s ago: executing program 0 (id=4026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 15.183107064s ago: executing program 0 (id=4036): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00"/12, @ANYBLOB="11"], 0x20) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") 15.166758106s ago: executing program 40 (id=4036): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00"/12, @ANYBLOB="11"], 0x20) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") 3.645504853s ago: executing program 9 (id=4284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000760e00000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.585279099s ago: executing program 9 (id=4286): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setlease(r2, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x200000) close_range(r1, 0xffffffffffffffff, 0x0) 2.890779449s ago: executing program 9 (id=4290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 2.890465549s ago: executing program 4 (id=4291): socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700", 0x3f}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) 2.808473248s ago: executing program 4 (id=4295): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x158, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 2.718401646s ago: executing program 4 (id=4296): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 2.596406198s ago: executing program 5 (id=4312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 2.488308509s ago: executing program 5 (id=4305): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 2.487717129s ago: executing program 6 (id=4306): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.372959331s ago: executing program 5 (id=4307): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xc0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 2.370475831s ago: executing program 6 (id=4320): r0 = getpid() perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7d54, 0x4c2, 0x40, 0x0, 0x0) 2.276358721s ago: executing program 7 (id=4309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.212603367s ago: executing program 6 (id=4310): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.18846608s ago: executing program 6 (id=4311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 1.18781052s ago: executing program 9 (id=4325): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write(r0, &(0x7f0000000040)="0600", 0x2) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 1.18757643s ago: executing program 7 (id=4313): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6a", 0x15}], 0x1}, 0x20000044) 1.1872704s ago: executing program 4 (id=4314): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") symlink(0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0) 1.18707573s ago: executing program 5 (id=4316): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048880, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) creat(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 1.161716493s ago: executing program 7 (id=4317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x6, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) 1.117340857s ago: executing program 7 (id=4318): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 956.482973ms ago: executing program 4 (id=4321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) listen(r1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) 888.38449ms ago: executing program 5 (id=4322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0x100000000000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 610.866688ms ago: executing program 5 (id=4323): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 353.308234ms ago: executing program 9 (id=4324): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x158, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 352.727154ms ago: executing program 7 (id=4335): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0x100000000000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 320.625147ms ago: executing program 6 (id=4326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 725.99µs ago: executing program 7 (id=4327): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYRES32, @ANYBLOB], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 400.18µs ago: executing program 9 (id=4328): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010300"/56, @ANYRES32=0x0, @ANYBLOB="0000000000002000ff"], 0x54}}, 0x0) 169.09µs ago: executing program 4 (id=4329): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 0s ago: executing program 6 (id=4330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r4, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r1, r5, 0x0) kernel console output (not intermixed with test programs): 1003 failed: -110 [ 158.502367][T11756] EXT4-fs (loop3): Free/Dirty block details [ 158.508276][T11756] EXT4-fs (loop3): free_blocks=0 [ 158.513217][T11756] EXT4-fs (loop3): dirty_blocks=0 [ 158.518263][T11756] EXT4-fs (loop3): Block reservation details [ 158.524296][T11756] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 158.556503][T11760] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.606562][T11760] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.646840][T11760] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.691199][ T3937] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.703132][ T3937] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.715189][ T3937] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.727213][ T3937] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.774697][T11767] netlink: 'syz.4.2932': attribute type 10 has an invalid length. [ 158.786077][T11768] bond0: (slave dummy0): Releasing backup interface [ 158.793011][T11769] netlink: 'syz.7.2942': attribute type 1 has an invalid length. [ 158.807355][T11768] bridge_slave_0: left allmulticast mode [ 158.813018][T11768] bridge_slave_0: left promiscuous mode [ 158.818701][T11768] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.827959][T11768] bridge_slave_1: left allmulticast mode [ 158.833601][T11768] bridge_slave_1: left promiscuous mode [ 158.839265][T11768] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.839681][T11774] netlink: 'syz.4.2932': attribute type 10 has an invalid length. [ 158.857418][T11768] bond0: (slave bond_slave_0): Releasing backup interface [ 158.867462][T11768] bond0: (slave bond_slave_1): Releasing backup interface [ 158.880362][T11768] team0: Port device team_slave_0 removed [ 158.895130][T11768] team0: Port device team_slave_1 removed [ 158.903849][T11768] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.935572][T11775] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 158.943903][T11775] bond0: (slave batadv1): making interface the new active one [ 158.952933][T11775] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 158.967035][T11774] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 158.978712][T11774] team0: Port device dummy0 removed [ 158.986696][T11774] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 159.035321][T11787] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 159.119179][T11798] netlink: '+}[@': attribute type 10 has an invalid length. [ 159.162764][T11798] team0 (unregistering): Port device team_slave_1 removed [ 159.209778][T11809] bond0: (slave dummy0): Releasing backup interface [ 159.218811][T11809] bridge_slave_0: left allmulticast mode [ 159.224605][T11809] bridge_slave_0: left promiscuous mode [ 159.230293][T11809] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.246306][T11809] bridge_slave_1: left allmulticast mode [ 159.251965][T11809] bridge_slave_1: left promiscuous mode [ 159.257748][T11809] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.272397][T11809] bond0: (slave bond_slave_0): Releasing backup interface [ 159.282546][T11809] bond0: (slave bond_slave_1): Releasing backup interface [ 159.291168][T11809] team0: Port device team_slave_0 removed [ 159.297641][T11809] team0: Port device team_slave_1 removed [ 159.303593][T11809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.311483][T11809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.319019][T11809] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.561117][T11837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11837 comm=syz.3.2959 [ 159.596347][T11841] tipc: Enabled bearer , priority 0 [ 159.603450][T11841] syzkaller0: entered promiscuous mode [ 159.609544][T11841] syzkaller0: entered allmulticast mode [ 159.616059][T11841] tipc: Resetting bearer [ 159.622763][T11839] tipc: Resetting bearer [ 159.629868][T11839] tipc: Disabling bearer [ 160.122618][T11852] $H: (slave dummy0): Releasing backup interface [ 160.130924][T11852] dummy0: left promiscuous mode [ 160.161799][T11852] bond0: (slave batadv1): Releasing active interface [ 160.302832][T11860] can0: slcan on ttyS3. [ 160.354065][T11859] can0 (unregistered): slcan off ttyS3. [ 160.512352][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2972'. [ 160.868672][T11892] netlink: 'syz.7.2983': attribute type 10 has an invalid length. [ 160.881547][T11892] team0: Port device dummy0 added [ 160.897927][T11892] netlink: 'syz.7.2983': attribute type 10 has an invalid length. [ 160.915286][T11892] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 160.948147][T11892] team0: Failed to send options change via netlink (err -105) [ 160.968641][T11892] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 160.987170][T11892] team0: Port device dummy0 removed [ 161.002166][T11892] dummy0: entered promiscuous mode [ 161.015143][T11892] $H: (slave dummy0): Enslaving as an active interface with an up link [ 161.128735][T11899] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2984'. [ 161.599693][T11909] netlink: 'syz.9.2990': attribute type 1 has an invalid length. [ 161.657854][T11909] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 161.682500][T11909] bond2: (slave batadv1): making interface the new active one [ 161.711605][T11909] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 161.836777][T11920] veth2: entered promiscuous mode [ 161.841852][T11920] veth2: entered allmulticast mode [ 162.143231][T11946] netlink: 'syz.3.3005': attribute type 3 has an invalid length. [ 163.427856][T12004] veth4: entered promiscuous mode [ 163.432950][T12004] veth4: entered allmulticast mode [ 163.692130][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 163.698394][ T29] audit: type=1326 audit(163.663:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.4.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7fc00000 [ 163.721306][ T29] audit: type=1326 audit(163.663:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.4.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe7cecf6c9 code=0x7fc00000 [ 163.744241][ T29] audit: type=1326 audit(163.663:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.4.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7fc00000 [ 163.767181][ T29] audit: type=1326 audit(163.663:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.4.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7fc00000 [ 163.790125][ T29] audit: type=1326 audit(163.663:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.4.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7fc00000 [ 163.813297][ T29] audit: type=1326 audit(163.663:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.4.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7fc00000 [ 163.836176][ T29] audit: type=1326 audit(163.663:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.4.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7fc00000 [ 163.859089][ T29] audit: type=1326 audit(163.663:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.4.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7fc00000 [ 163.882161][ T29] audit: type=1326 audit(163.663:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.4.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7fc00000 [ 163.905066][ T29] audit: type=1326 audit(163.663:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.4.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7fc00000 [ 163.991047][T12031] loop4: detected capacity change from 0 to 512 [ 164.007400][T12031] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3037: Failed to acquire dquot type 1 [ 164.028277][T12031] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3037: Failed to acquire dquot type 1 [ 164.056413][T12031] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3037: bg 0: block 248: padding at end of block bitmap is not set [ 164.071754][T12031] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 164.081188][T12031] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3037: Failed to acquire dquot type 1 [ 164.097614][T12031] EXT4-fs (loop4): 1 orphan inode deleted [ 164.110022][T12031] EXT4-fs mount: 7 callbacks suppressed [ 164.110034][T12031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.149419][T10691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.182808][T12048] veth2: entered promiscuous mode [ 164.188596][T12048] veth2: entered allmulticast mode [ 164.294745][T12060] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 164.322570][T12063] loop4: detected capacity change from 0 to 128 [ 164.339575][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'. [ 164.349205][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3051'. [ 164.363116][ T3940] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.373996][T12063] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.393653][ T3940] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.412458][ T3940] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.431306][ T3940] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.455826][T12072] loop3: detected capacity change from 0 to 512 [ 164.467832][T10691] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.492590][T12072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.510868][T12072] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.3054: corrupted inode contents [ 164.522911][T12072] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.3054: mark_inode_dirty error [ 164.535654][T12072] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.3054: corrupted inode contents [ 164.549708][T12072] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.3054: corrupted inode contents [ 164.561863][T12072] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.3054: mark_inode_dirty error [ 164.573539][T12072] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.3054: corrupted inode contents [ 164.586066][T12072] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3054: mark_inode_dirty error [ 164.597913][T12072] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.3054: corrupted inode contents [ 164.609768][T12072] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.3054: mark_inode_dirty error [ 164.648658][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.085610][T12133] loop3: detected capacity change from 0 to 128 [ 165.108849][T12131] pim6reg1: entered promiscuous mode [ 165.114318][T12131] pim6reg1: entered allmulticast mode [ 165.152995][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3082'. [ 165.265361][T12143] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 165.278734][T12143] loop4: detected capacity change from 0 to 1024 [ 165.287093][T12143] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.297945][T12143] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 165.306728][T12143] EXT4-fs (loop4): orphan cleanup on readonly fs [ 165.313414][T12143] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 165.328667][T12143] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 165.336292][T12143] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.3084: Freeing blocks not in datazone - block = 0, count = 4096 [ 165.349899][T12143] EXT4-fs (loop4): Remounting filesystem read-only [ 165.356987][T12143] EXT4-fs (loop4): 1 truncate cleaned up [ 165.363063][T12143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.387642][T10691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.469486][T12157] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3089'. [ 165.479836][T12157] IPVS: Unknown mcast interface: [ 165.562863][T12167] loop7: detected capacity change from 0 to 1024 [ 165.577736][T12167] EXT4-fs: Ignoring removed orlov option [ 165.583478][T12167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.587306][T12171] tipc: Enabled bearer , priority 0 [ 165.599277][T12167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.612987][T12170] tipc: Resetting bearer [ 165.636018][T12170] tipc: Disabling bearer [ 165.642273][ T6563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.644825][T12173] netlink: 660 bytes leftover after parsing attributes in process `syz.4.3097'. [ 165.682958][T12181] netlink: 'syz.4.3099': attribute type 21 has an invalid length. [ 165.691102][T12181] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3099'. [ 165.733120][T12186] netlink: 'syz.4.3101': attribute type 10 has an invalid length. [ 165.742999][T12186] bond0: (slave dummy0): Releasing backup interface [ 165.754638][T12186] netlink: 'syz.4.3101': attribute type 10 has an invalid length. [ 165.765071][T12186] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.237986][T12228] wg2: entered promiscuous mode [ 166.243025][T12228] wg2: entered allmulticast mode [ 166.290932][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3121'. [ 166.330767][T12236] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.353081][T12236] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 166.646800][T12255] syz.9.3127 (12255): attempted to duplicate a private mapping with mremap. This is not supported. [ 166.991458][T12277] : renamed from bond_slave_0 [ 167.106697][T12289] loop4: detected capacity change from 0 to 256 [ 167.203494][T12305] hub 2-0:1.0: USB hub found [ 167.217102][T12305] hub 2-0:1.0: 8 ports detected [ 167.279018][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3156'. [ 167.330385][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3156'. [ 167.364872][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3157'. [ 167.876568][T12364] netlink: 'syz.7.3176': attribute type 12 has an invalid length. [ 167.876554][T12366] can0: slcan on ptm0. [ 167.964792][T12366] can0 (unregistered): slcan off ptm0. [ 167.970566][T12366] Falling back ldisc for ptm0. [ 168.053603][T12382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=12382 comm=syz.7.3182 [ 168.149133][T12387] tipc: Enabled bearer , priority 0 [ 168.169448][T12386] tipc: Resetting bearer [ 168.199727][T12386] tipc: Disabling bearer [ 168.505341][T12411] pim6reg1: entered promiscuous mode [ 168.510668][T12411] pim6reg1: entered allmulticast mode [ 168.682969][T12429] loop3: detected capacity change from 0 to 1024 [ 168.691784][T12429] EXT4-fs: Ignoring removed bh option [ 168.710513][T12429] EXT4-fs: inline encryption not supported [ 168.732100][T12429] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.764213][T12429] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 168.792068][T12429] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3204: lblock 2 mapped to illegal pblock 2 (length 1) [ 168.810317][T12429] __quota_error: 343 callbacks suppressed [ 168.810336][T12429] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 168.873385][T12429] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3204: lblock 0 mapped to illegal pblock 48 (length 1) [ 168.943271][T12429] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 168.952127][T12429] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3204: Failed to acquire dquot type 0 [ 168.966319][T12429] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 169.001916][T12429] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3204: mark_inode_dirty error [ 169.035078][T12429] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 169.064046][T12429] EXT4-fs (loop3): 1 orphan inode deleted [ 169.084546][T12429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.097140][ T3923] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:38: lblock 1 mapped to illegal pblock 1 (length 1) [ 169.130749][ T29] audit: type=1326 audit(169.103:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.3.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c96e0df10 code=0x7ffc0000 [ 169.138377][ T3923] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 169.163709][ T3923] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:38: Failed to release dquot type 0 [ 169.179503][ T29] audit: type=1326 audit(169.133:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.3.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f8c96e0e417 code=0x7ffc0000 [ 169.202386][ T29] audit: type=1326 audit(169.133:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.3.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c96e0df10 code=0x7ffc0000 [ 169.225345][ T29] audit: type=1326 audit(169.133:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.3.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c96e0f6c9 code=0x7ffc0000 [ 169.248270][ T29] audit: type=1326 audit(169.133:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.3.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c96e0f6c9 code=0x7ffc0000 [ 169.297512][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.315891][ T29] audit: type=1326 audit(169.293:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.6.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 169.338838][ T29] audit: type=1326 audit(169.293:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.6.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 169.363705][ T3314] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 169.380571][ T3314] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 169.390162][ T3314] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 169.452176][T12449] bridge0: entered promiscuous mode [ 169.457793][T12449] macsec0: entered promiscuous mode [ 169.463235][T12449] bridge0: port 1(macsec0) entered blocking state [ 169.469819][T12449] bridge0: port 1(macsec0) entered disabled state [ 169.476564][T12449] macsec0: entered allmulticast mode [ 169.481872][T12449] bridge0: entered allmulticast mode [ 169.494167][T12449] macsec0: left allmulticast mode [ 169.499312][T12449] bridge0: left allmulticast mode [ 169.528958][T12449] bridge0: left promiscuous mode [ 169.681863][T12471] __nla_validate_parse: 5 callbacks suppressed [ 169.681881][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3221'. [ 169.717140][T12480] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3224'. [ 169.764574][T12485] netlink: 'syz.7.3226': attribute type 4 has an invalid length. [ 169.872073][T12493] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3230'. [ 169.890884][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3231'. [ 169.900359][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3231'. [ 169.945246][T12497] netlink: 'syz.4.3233': attribute type 4 has an invalid length. [ 169.965684][T12497] netlink: 'syz.4.3233': attribute type 4 has an invalid length. [ 170.360574][T12523] loop4: detected capacity change from 0 to 8192 [ 170.407003][T12525] ip6tnl0: entered promiscuous mode [ 170.412328][T12525] ip6tnl0: entered allmulticast mode [ 170.498590][T12530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3246'. [ 170.661890][T12526] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 170.669574][T12526] FAT-fs (loop4): Filesystem has been set read-only [ 170.696215][T12548] ip6gre1: entered allmulticast mode [ 170.702911][T12523] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 170.703045][T12533] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 170.746167][T12523] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 170.755099][T12523] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 170.777477][T12555] loop6: detected capacity change from 0 to 256 [ 170.790495][T12555] FAT-fs (loop6): bogus number of FAT sectors [ 170.796759][T12555] FAT-fs (loop6): Can't find a valid FAT filesystem [ 171.045797][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'. [ 171.077156][T12567] bridge_slave_1: left allmulticast mode [ 171.082845][T12567] bridge_slave_1: left promiscuous mode [ 171.088668][T12567] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.125279][T12567] bridge_slave_0: left allmulticast mode [ 171.131017][T12567] bridge_slave_0: left promiscuous mode [ 171.137967][T12567] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.336945][T12592] loop9: detected capacity change from 0 to 164 [ 171.648747][T12614] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.680799][T12614] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.730660][T12614] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.755168][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3279'. [ 171.813231][T12614] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.862716][T12626] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.883545][T12626] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.919963][T12615] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.938694][T12615] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.971950][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3285'. [ 172.060073][T12641] bridge: RTM_NEWNEIGH with invalid ether address [ 172.203565][T12655] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3293'. [ 173.400597][T12712] loop9: detected capacity change from 0 to 512 [ 173.415867][T12712] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 173.431335][T12712] EXT4-fs (loop9): mount failed [ 173.497405][T12722] bridge: RTM_NEWNEIGH with invalid ether address [ 173.536289][T12727] xt_connbytes: Forcing CT accounting to be enabled [ 173.867182][T12778] unsupported nla_type 46065 [ 173.914269][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 173.914285][ T29] audit: type=1326 audit(173.883:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12783 comm="syz.7.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893967f6c9 code=0x7ffc0000 [ 173.943470][ T29] audit: type=1326 audit(173.883:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12783 comm="syz.7.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f893967f6c9 code=0x7ffc0000 [ 173.966362][ T29] audit: type=1326 audit(173.883:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12783 comm="syz.7.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893967f6c9 code=0x7ffc0000 [ 173.989508][ T29] audit: type=1326 audit(173.893:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12783 comm="syz.7.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f893967f6c9 code=0x7ffc0000 [ 174.012509][ T29] audit: type=1326 audit(173.893:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12783 comm="syz.7.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893967f6c9 code=0x7ffc0000 [ 174.035466][ T29] audit: type=1326 audit(173.893:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12783 comm="syz.7.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893967f6c9 code=0x7ffc0000 [ 174.058363][ T29] audit: type=1400 audit(173.933:5188): avc: denied { create } for pid=12785 comm="syz.7.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 174.081579][T12792] loop6: detected capacity change from 0 to 128 [ 174.128813][ T29] audit: type=1400 audit(174.103:5189): avc: denied { listen } for pid=12793 comm="syz.3.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.185199][T12805] loop3: detected capacity change from 0 to 164 [ 174.201097][T12805] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 174.215215][T12805] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 174.223840][T12805] Symlink component flag not implemented [ 174.230110][T12805] Symlink component flag not implemented [ 174.237530][T12805] Symlink component flag not implemented (7) [ 174.243640][T12805] Symlink component flag not implemented (116) [ 174.303688][ T29] audit: type=1326 audit(174.273:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.6.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 174.326665][ T29] audit: type=1326 audit(174.273:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.6.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 174.453151][T12836] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.495945][T12836] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.544582][T12844] 0X: renamed from caif0 [ 174.551280][T12844] 0X: entered allmulticast mode [ 174.556758][T12844] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 174.575499][T12836] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.616151][T12836] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.667159][ T3965] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.675594][ T3965] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.686980][ T3965] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.698218][ T3965] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.062347][T12862] loop9: detected capacity change from 0 to 256 [ 175.366749][T12868] loop9: detected capacity change from 0 to 512 [ 175.373459][T12868] EXT4-fs: Ignoring removed bh option [ 175.392180][T12868] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.559338][T12886] __nla_validate_parse: 8 callbacks suppressed [ 175.559437][T12886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3389'. [ 175.577597][T12886] IPVS: Error connecting to the multicast addr [ 175.588178][T10359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.633089][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3392'. [ 175.651570][T12892] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 175.677743][T12896] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 175.690015][T12896] hsr_slave_0: left promiscuous mode [ 175.697709][T12896] hsr_slave_1: left promiscuous mode [ 175.902896][T12915] 0{X: left allmulticast mode [ 175.912703][T12915] bond1: left promiscuous mode [ 175.917520][T12915] gretap1: left promiscuous mode [ 175.923542][T12915] ip6gre1: left allmulticast mode [ 175.930026][T12915] veth2: left promiscuous mode [ 175.934891][T12915] veth2: left allmulticast mode [ 176.049039][T12925] loop4: detected capacity change from 0 to 512 [ 176.065068][T12925] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 176.073112][T12925] EXT4-fs (loop4): orphan cleanup on readonly fs [ 176.081225][T12925] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.3408: corrupted inode contents [ 176.093439][T12925] EXT4-fs (loop4): Remounting filesystem read-only [ 176.100175][T12925] EXT4-fs (loop4): 1 truncate cleaned up [ 176.106014][ T3938] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 176.116663][ T3938] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 176.128271][ T3938] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 176.138763][T12925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.160409][T10691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.222440][T12936] Dead loop on virtual device ip6_vti0, fix it urgently! [ 176.246667][T12938] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 176.307666][T12942] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.375192][T12942] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.426415][T12942] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.465616][T12942] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.519932][ T3965] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.530996][ T3965] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.542444][ T3965] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.553647][ T3965] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.879085][T12966] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3425'. [ 176.889501][T12967] netlink: 1276 bytes leftover after parsing attributes in process `syz.9.3423'. [ 176.904820][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3425'. [ 177.059848][T12979] netlink: 'syz.3.3430': attribute type 10 has an invalid length. [ 177.091242][T12981] loop4: detected capacity change from 0 to 128 [ 177.214416][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3438'. [ 177.723905][T13005] 9pnet_virtio: no channels available for device 127.0.0.1 [ 177.799648][T13010] bridge0: port 1(gretap0) entered blocking state [ 177.807590][T13010] bridge0: port 1(gretap0) entered disabled state [ 177.829361][T13010] gretap0: entered allmulticast mode [ 177.836664][T13010] gretap0: entered promiscuous mode [ 177.845754][T13010] gretap0: left allmulticast mode [ 177.850834][T13010] gretap0: left promiscuous mode [ 177.855939][T13010] bridge0: port 1(gretap0) entered disabled state [ 178.206645][T13027] loop4: detected capacity change from 0 to 512 [ 178.226915][T13027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.337096][T13033] wg2: entered promiscuous mode [ 178.342011][T13033] wg2: entered allmulticast mode [ 178.347734][T13035] : renamed from bond_slave_0 [ 178.393491][T13039] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 178.428900][T13047] loop6: detected capacity change from 0 to 1024 [ 178.443566][T13047] EXT4-fs: Ignoring removed nobh option [ 178.444906][T13049] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 178.467143][T13047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.509579][T13057] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3463'. [ 178.537235][T10764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.562825][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3467'. [ 178.572500][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3467'. [ 178.725138][T13093] bridge0: port 1(syz_tun) entered blocking state [ 178.731881][T13093] bridge0: port 1(syz_tun) entered disabled state [ 178.741097][T13093] syz_tun: entered allmulticast mode [ 178.748242][T13093] syz_tun: entered promiscuous mode [ 178.801047][ T3955] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.810316][ T3955] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.818772][ T3955] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.828400][ T3955] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.970531][T13108] loop6: detected capacity change from 0 to 256 [ 178.997060][T12558] syz_tun (unregistering): left allmulticast mode [ 179.003524][T12558] syz_tun (unregistering): left promiscuous mode [ 179.010063][T12558] bridge0: port 1(syz_tun) entered disabled state [ 179.043115][T10691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.270558][T13145] netlink: 'syz.6.3503': attribute type 21 has an invalid length. [ 179.313825][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 179.313836][ T29] audit: type=1400 audit(179.283:5320): avc: denied { write } for pid=13142 comm="syz.4.3502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 179.340434][ T29] audit: type=1400 audit(179.283:5321): avc: denied { read } for pid=13142 comm="syz.4.3502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 179.372924][T13124] chnl_net:caif_netlink_parms(): no params data found [ 179.432410][T13159] loop6: detected capacity change from 0 to 256 [ 179.470134][T13124] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.477285][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.508133][T13124] bridge_slave_0: entered allmulticast mode [ 179.547323][T13124] bridge_slave_0: entered promiscuous mode [ 179.560826][T13124] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.567916][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.576379][T13124] bridge_slave_1: entered allmulticast mode [ 179.586194][T13124] bridge_slave_1: entered promiscuous mode [ 179.615450][T13124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.629471][T13124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.680795][T13124] team0: Port device team_slave_0 added [ 179.695220][T13124] team0: Port device team_slave_1 added [ 179.763239][T13180] loop6: detected capacity change from 0 to 128 [ 179.778247][T13180] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 179.787930][T13124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.794911][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.820851][T13124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.832831][T13124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.839837][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.865870][T13124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.893977][T13124] hsr_slave_0: entered promiscuous mode [ 179.900929][T13124] hsr_slave_1: entered promiscuous mode [ 179.906953][T13124] debugfs: 'hsr0' already exists in 'hsr' [ 179.912693][T13124] Cannot create hsr debugfs directory [ 179.947977][T13186] tipc: Enabling of bearer rejected, failed to enable media [ 180.001140][T13124] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.068590][T13124] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.120599][T13124] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.181541][T13124] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.290344][T13202] loop4: detected capacity change from 0 to 128 [ 180.297034][T13124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.315509][T13124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.382373][T13124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.419775][T13124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.580252][T13124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.592333][T13124] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.603104][ T3965] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.610173][ T3965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.622537][ T3965] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.629625][ T3965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.762920][T13124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.901299][T13124] veth0_vlan: entered promiscuous mode [ 180.912398][T13124] veth1_vlan: entered promiscuous mode [ 180.943272][T13124] veth0_macvtap: entered promiscuous mode [ 180.961143][T13124] veth1_macvtap: entered promiscuous mode [ 180.980582][T13124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.992808][T13124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.003605][ T3965] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.012640][ T3965] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.030904][ T3965] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.045706][ T3965] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.421584][T13253] tipc: Enabled bearer , priority 0 [ 181.447174][T13250] tipc: Resetting bearer [ 181.486210][T13250] tipc: Disabling bearer [ 181.537340][T13270] __nla_validate_parse: 8 callbacks suppressed [ 181.537392][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3537'. [ 181.558202][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3537'. [ 181.639586][ T29] audit: type=1326 audit(181.613:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7ffc0000 [ 181.663982][ T29] audit: type=1326 audit(181.613:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7ffc0000 [ 181.728558][ T29] audit: type=1326 audit(181.663:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe7cecf6c9 code=0x7ffc0000 [ 181.752880][ T29] audit: type=1326 audit(181.663:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7ffc0000 [ 181.775923][ T29] audit: type=1326 audit(181.663:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7ffc0000 [ 181.800206][ T29] audit: type=1326 audit(181.673:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efe7cecf6c9 code=0x7ffc0000 [ 181.823184][ T29] audit: type=1326 audit(181.673:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7ffc0000 [ 181.846414][ T29] audit: type=1326 audit(181.673:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7cecf6c9 code=0x7ffc0000 [ 181.960900][T13307] loop9: detected capacity change from 0 to 256 [ 181.967781][T13307] FAT-fs (loop9): bogus number of FAT sectors [ 181.974075][T13307] FAT-fs (loop9): Can't find a valid FAT filesystem [ 181.992658][ T3912] bridge_slave_1: left allmulticast mode [ 181.999639][ T3912] bridge_slave_1: left promiscuous mode [ 182.005474][ T3912] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.014897][ T3912] bridge_slave_0: left allmulticast mode [ 182.020551][ T3912] bridge_slave_0: left promiscuous mode [ 182.027791][ T3912] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.112228][T13314] loop4: detected capacity change from 0 to 2048 [ 182.144409][T13314] loop4: p2 < > p4 [ 182.153429][T13314] loop4: p4 size 262144 extends beyond EOD, truncated [ 182.199463][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3560'. [ 182.250424][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3560'. [ 182.261408][ T3912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.274278][ T3912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.285476][ T3912] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 182.294551][ T3912] bond0 (unregistering): Released all slaves [ 182.366030][ T3912] hsr_slave_0: left promiscuous mode [ 182.371656][ T3912] hsr_slave_1: left promiscuous mode [ 182.378135][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.385551][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.393289][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.400810][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.412990][ T3912] veth1_vlan: left promiscuous mode [ 182.419860][ T3912] veth0_vlan: left promiscuous mode [ 182.482961][ T3912] team0 (unregistering): Port device team_slave_1 removed [ 182.496013][ T3912] team0 (unregistering): Port device team_slave_0 removed [ 182.718739][T13354] loop0: detected capacity change from 0 to 1024 [ 182.738921][T13358] loop9: detected capacity change from 0 to 2048 [ 182.750150][T13354] EXT4-fs: Ignoring removed orlov option [ 182.755935][T13354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.776064][T13354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.789733][T13358] loop9: p2 < > p4 [ 182.798360][T13358] loop9: p4 size 262144 extends beyond EOD, truncated [ 182.826466][T13364] netlink: 'syz.6.3573': attribute type 4 has an invalid length. [ 182.871106][T13364] netlink: 'syz.6.3573': attribute type 4 has an invalid length. [ 182.894943][T13124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.967844][ T3912] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.051915][ T3912] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.090768][T13380] loop9: detected capacity change from 0 to 1024 [ 183.098999][T13380] EXT4-fs: Ignoring removed orlov option [ 183.105916][T13380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.126921][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3592'. [ 183.138548][T13380] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.239601][T10359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.259760][ T3912] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.356568][ T3912] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.459984][ T3912] bridge_slave_1: left allmulticast mode [ 183.465709][ T3912] bridge_slave_1: left promiscuous mode [ 183.471433][ T3912] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.479325][ T3912] bridge_slave_0: left allmulticast mode [ 183.485121][ T3912] bridge_slave_0: left promiscuous mode [ 183.490912][ T3912] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.566200][ T3912] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.576110][ T3912] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.586135][ T3912] .` (unregistering): Released all slaves [ 183.636109][ T3912] tipc: Left network mode [ 183.643196][ T3912] hsr_slave_0: left promiscuous mode [ 183.649048][ T3912] hsr_slave_1: left promiscuous mode [ 183.655134][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.662706][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.670643][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.679503][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.691457][ T3912] veth1_macvtap: left promiscuous mode [ 183.697112][ T3912] veth0_macvtap: left promiscuous mode [ 183.702888][ T3912] veth1_vlan: left promiscuous mode [ 183.710037][ T3912] veth0_vlan: left promiscuous mode [ 183.840105][ T3912] team0 (unregistering): Port device team_slave_1 removed [ 183.860380][ T3912] team0 (unregistering): Port device team_slave_0 removed [ 183.897856][T13419] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3594'. [ 184.217879][T13423] loop4: detected capacity change from 0 to 1024 [ 184.234316][T13423] EXT4-fs: Ignoring removed orlov option [ 184.240075][T13423] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.267876][T13423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.334288][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3598'. [ 184.380844][T10691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.402804][T13434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3598'. [ 184.462183][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 184.462197][ T29] audit: type=1326 audit(184.433:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.7.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8939676567 code=0x7ffc0000 [ 184.526346][ T29] audit: type=1326 audit(184.473:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.7.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f893961b789 code=0x7ffc0000 [ 184.526592][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3599'. [ 184.550569][ T29] audit: type=1326 audit(184.473:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.7.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8939676567 code=0x7ffc0000 [ 184.582001][ T29] audit: type=1326 audit(184.473:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.7.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f893961b789 code=0x7ffc0000 [ 184.606154][ T29] audit: type=1326 audit(184.473:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.7.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893967f6c9 code=0x7ffc0000 [ 184.629151][ T29] audit: type=1326 audit(184.473:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.7.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893967f6c9 code=0x7ffc0000 [ 184.653438][ T29] audit: type=1326 audit(184.483:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.7.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f893967f6c9 code=0x7ffc0000 [ 184.676589][ T29] audit: type=1326 audit(184.483:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.7.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893967f6c9 code=0x7ffc0000 [ 184.700809][ T29] audit: type=1326 audit(184.483:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.7.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893967f6c9 code=0x7ffc0000 [ 184.723986][ T29] audit: type=1326 audit(184.483:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.7.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f893967f6c9 code=0x7ffc0000 [ 184.904962][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3611'. [ 184.922338][T13467] 0X: renamed from caif0 [ 184.930624][T13467] 0X: entered allmulticast mode [ 184.935944][T13467] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 186.307742][T13517] : renamed from bond_slave_0 (while UP) [ 186.333150][T13519] loop0: detected capacity change from 0 to 512 [ 186.387386][T13519] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3631: Failed to acquire dquot type 1 [ 186.424848][T13519] EXT4-fs (loop0): 1 truncate cleaned up [ 186.430827][T13519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.507548][T13124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.570443][T13544] __nla_validate_parse: 8 callbacks suppressed [ 186.570497][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3640'. [ 186.587220][T13544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.600277][T13544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.831964][T13553] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3642'. [ 186.919589][T13560] : renamed from bond_slave_0 (while UP) [ 187.011054][T13568] loop0: detected capacity change from 0 to 512 [ 187.027503][T13568] EXT4-fs: Ignoring removed oldalloc option [ 187.054916][T13568] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.080539][T13568] EXT4-fs (loop0): 1 truncate cleaned up [ 187.096606][T13568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.193966][T13568] loop0: detected capacity change from 512 to 64 [ 187.216385][T13568] syz.0.3651: attempt to access beyond end of device [ 187.216385][T13568] loop0: rw=524288, sector=54, nr_sectors = 18 limit=64 [ 187.256082][T13583] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3657'. [ 187.289731][T13124] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -12) [ 187.305131][T13124] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 187.317580][T13124] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 187.341724][T13590] 9pnet_fd: Insufficient options for proto=fd [ 187.505488][T13124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.517998][ T3895] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.567105][ T3895] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.606900][ T3895] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.657346][ T3895] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.727336][ T3895] bridge_slave_1: left allmulticast mode [ 187.732977][ T3895] bridge_slave_1: left promiscuous mode [ 187.738651][ T3895] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.746467][ T3895] bridge_slave_0: left allmulticast mode [ 187.752119][ T3895] bridge_slave_0: left promiscuous mode [ 187.757851][ T3895] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.866449][ T3895] bond0 (unregistering): (slave 77): Releasing backup interface [ 187.876331][ T3895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.885771][ T3895] bond0 (unregistering): Released all slaves [ 187.949978][ T3895] hsr_slave_0: left promiscuous mode [ 187.963833][ T3895] hsr_slave_1: left promiscuous mode [ 187.977003][T13600] loop6: detected capacity change from 0 to 8192 [ 187.983366][ T3895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.991541][ T3895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.024817][ T3895] veth1_macvtap: left promiscuous mode [ 188.030398][ T3895] veth0_macvtap: left promiscuous mode [ 188.088629][T13616] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 188.096361][T13616] FAT-fs (loop6): Filesystem has been set read-only [ 188.106967][T13620] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 188.109584][T13600] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 188.129517][T13600] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 188.138667][T13600] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 188.138952][ T3895] team0 (unregistering): Port device team_slave_1 removed [ 188.158335][ T3895] team0 (unregistering): Port device team_slave_0 removed [ 188.215511][T13618] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.316696][T13618] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.366246][T13606] chnl_net:caif_netlink_parms(): no params data found [ 188.375429][T13634] vhci_hcd: invalid port number 0 [ 188.396777][T13618] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.470202][T13606] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.477353][T13606] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.488286][T13606] bridge_slave_0: entered allmulticast mode [ 188.495161][T13606] bridge_slave_0: entered promiscuous mode [ 188.503071][T13618] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.560364][T13606] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.567498][T13606] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.575058][T13606] bridge_slave_1: entered allmulticast mode [ 188.581569][T13606] bridge_slave_1: entered promiscuous mode [ 188.678670][T13606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.710365][T13606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.732959][ T3884] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.762472][ T3884] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.783129][T13606] team0: Port device team_slave_0 added [ 188.800556][ T3884] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.809680][T13606] team0: Port device team_slave_1 added [ 188.854930][ T3884] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.873877][T13606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.880949][T13606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.906853][T13606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.918738][T13606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.925796][T13606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.951786][T13606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.991441][T13655] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3673'. [ 189.002381][T13606] hsr_slave_0: entered promiscuous mode [ 189.008621][T13606] hsr_slave_1: entered promiscuous mode [ 189.059416][T13660] loop9: detected capacity change from 0 to 512 [ 189.087118][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3682'. [ 189.098107][T13660] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.114362][T13660] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.3680: corrupted inode contents [ 189.138706][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3682'. [ 189.147926][T13660] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.3680: mark_inode_dirty error [ 189.160852][T13660] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.3680: corrupted inode contents [ 189.179681][T13660] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.3680: corrupted inode contents [ 189.200703][T13660] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.3680: mark_inode_dirty error [ 189.214122][T13660] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.3680: corrupted inode contents [ 189.226549][T13660] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.3680: mark_inode_dirty error [ 189.238034][T13660] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.3680: corrupted inode contents [ 189.250333][T13660] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.3680: mark_inode_dirty error [ 189.292331][T10359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.342475][T13676] loop6: detected capacity change from 0 to 512 [ 189.369028][T13676] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 189.377799][T13680] loop9: detected capacity change from 0 to 128 [ 189.388633][T13680] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.430509][T10359] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.547743][T13696] netlink: 'syz.4.3693': attribute type 1 has an invalid length. [ 189.585921][T13696] bond1: (slave veth5): Enslaving as an active interface with a down link [ 189.612803][T13696] bond1: entered promiscuous mode [ 189.618013][T13696] bond1: entered allmulticast mode [ 189.623275][T13696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.642132][T13606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 189.664394][T13606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 189.680782][T13606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 189.702488][T13606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.726276][T13705] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 189.795340][T13606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.806511][T13606] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.820366][ T3899] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.827448][ T3899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.845208][T13606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.855646][T13606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.869783][ T3899] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.876970][ T3899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.954453][T13606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.012595][T13606] veth0_vlan: entered promiscuous mode [ 190.021032][T13606] veth1_vlan: entered promiscuous mode [ 190.035100][T13606] veth0_macvtap: entered promiscuous mode [ 190.042181][T13606] veth1_macvtap: entered promiscuous mode [ 190.053275][T13606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.064365][T13606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.076179][ T3895] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.085284][ T3895] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.097768][ T3895] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.107813][ T3895] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.142786][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3708'. [ 190.152433][T13728] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3708'. [ 190.172099][T13733] atomic_op ffff888107031d28 conn xmit_atomic 0000000000000000 [ 190.208355][T13740] loop4: detected capacity change from 0 to 128 [ 190.236640][T13740] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.311528][T10691] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.544407][T13762] 9p: Unknown access argument : -22 [ 190.587370][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3714'. [ 190.601145][T13765] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3714'. [ 190.640699][T13768] bridge_slave_1: left allmulticast mode [ 190.646588][T13768] bridge_slave_1: left promiscuous mode [ 190.652327][T13768] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.666701][T13768] bridge_slave_0: left allmulticast mode [ 190.672518][T13768] bridge_slave_0: left promiscuous mode [ 190.678290][T13768] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.339652][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 191.339669][ T29] audit: type=1326 audit(191.313:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.6.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 191.370303][ T29] audit: type=1326 audit(191.313:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.6.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 191.394751][ T29] audit: type=1326 audit(191.313:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.6.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 191.418354][ T29] audit: type=1326 audit(191.313:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.6.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 191.441790][ T29] audit: type=1326 audit(191.313:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.6.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 191.466305][ T29] audit: type=1326 audit(191.313:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.6.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 191.489407][ T29] audit: type=1326 audit(191.313:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.6.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 191.513460][ T29] audit: type=1326 audit(191.313:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.6.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 191.537813][ T29] audit: type=1326 audit(191.313:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.6.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 191.560714][ T29] audit: type=1326 audit(191.313:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.6.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddb013f6c9 code=0x7ffc0000 [ 191.633611][T13793] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.686667][T13793] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.737151][T13793] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.785813][T13793] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.875669][ T3967] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.885605][ T3967] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.895560][ T3967] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.920173][ T3929] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.375377][T13808] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.552236][T13822] __nla_validate_parse: 1 callbacks suppressed [ 192.552329][T13822] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3736'. [ 192.609494][T13812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.639123][T13812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.703346][T13822] IPVS: Unknown mcast interface: ipvlan1 [ 192.721074][ T3938] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.729943][ T3938] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.751841][ T3938] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.770634][ T3938] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.808845][T13827] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3738'. [ 192.843633][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3739'. [ 192.844365][T13827] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3738'. [ 192.994234][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3743'. [ 193.258852][T13849] loop4: detected capacity change from 0 to 1024 [ 193.265651][T13849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.275718][T13849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.321000][T13859] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 193.355898][T13859] loop9: detected capacity change from 0 to 1024 [ 193.382471][T13859] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 193.402822][T13859] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 193.414064][T13859] EXT4-fs (loop9): orphan cleanup on readonly fs [ 193.425286][T13859] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 193.439981][T13859] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 193.466631][T13859] EXT4-fs error (device loop9): ext4_free_blocks:6706: comm syz.9.3750: Freeing blocks not in datazone - block = 0, count = 4096 [ 193.492170][T10691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.511030][T13859] EXT4-fs (loop9): Remounting filesystem read-only [ 193.517733][T13859] EXT4-fs (loop9): 1 truncate cleaned up [ 193.523784][T13859] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.597953][T10359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.827201][T13808] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.889124][T13808] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.899687][T13898] loop6: detected capacity change from 0 to 512 [ 193.900013][T13898] EXT4-fs: Ignoring removed bh option [ 193.958546][T13808] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.970793][T13898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.006564][T13903] Y4`ҘDʆ5: renamed from lo [ 194.040550][ T3901] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.074153][ T3901] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.084173][T13913] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 194.117156][ T3901] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.135627][ T3938] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.177329][T13917] netlink: 'syz.4.3775': attribute type 13 has an invalid length. [ 194.187801][T13921] loop9: detected capacity change from 0 to 128 [ 194.225985][T13921] syz.9.3777: attempt to access beyond end of device [ 194.225985][T13921] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 194.324400][T10764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.396898][T13932] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 194.421760][T13932] loop6: detected capacity change from 0 to 1024 [ 194.435945][T13932] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 194.455147][T13932] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 194.473331][T13932] EXT4-fs (loop6): orphan cleanup on readonly fs [ 194.483631][T13932] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 194.498461][T13932] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 194.534065][T13932] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.3789: Freeing blocks not in datazone - block = 0, count = 4096 [ 194.617087][T13932] EXT4-fs (loop6): Remounting filesystem read-only [ 194.623678][T13932] EXT4-fs (loop6): 1 truncate cleaned up [ 194.640092][T13932] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.675899][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3781'. [ 194.716578][T10764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.828788][T13952] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.838823][T13952] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.876398][ T23] kernel write not supported for file /input/event0 (pid: 23 comm: kworker/1:0) [ 194.877087][T13952] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.896873][T13952] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.911543][T13957] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3790'. [ 194.956751][T13952] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.966876][T13952] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.022511][T13961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3792'. [ 195.047414][T13952] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.057306][T13952] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.160074][T12617] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.168443][T12617] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.202076][T12617] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.210713][T12617] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.220172][T13967] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3794'. [ 195.282113][T12617] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.290569][T12617] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.310512][T12617] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.318877][T12617] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.413024][T13979] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 195.427033][T13979] loop0: detected capacity change from 0 to 1024 [ 195.439046][T13979] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.469658][T13979] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 195.485213][T13979] EXT4-fs (loop0): orphan cleanup on readonly fs [ 195.496838][T13979] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 195.511524][T13979] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 195.523080][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3800'. [ 195.567772][T13979] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.3797: Freeing blocks not in datazone - block = 0, count = 4096 [ 195.594008][T13979] EXT4-fs (loop0): Remounting filesystem read-only [ 195.600789][T13979] EXT4-fs (loop0): 1 truncate cleaned up [ 195.614808][T13979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.674093][T13606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.937985][T14016] siw: device registration error -23 [ 195.944284][T14017] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 195.959372][T14017] loop6: detected capacity change from 0 to 1024 [ 195.970416][T14017] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.984665][T14017] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 196.002254][T14017] EXT4-fs (loop6): orphan cleanup on readonly fs [ 196.011891][T14017] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 196.026781][T14017] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 196.039274][T14017] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.3815: Freeing blocks not in datazone - block = 0, count = 4096 [ 196.058770][T14024] loop9: detected capacity change from 0 to 4096 [ 196.065504][T14024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.073077][T14017] EXT4-fs (loop6): Remounting filesystem read-only [ 196.079848][T14017] EXT4-fs (loop6): 1 truncate cleaned up [ 196.087162][T14024] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.100460][T14017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.168636][T10764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.549461][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 196.549477][ T29] audit: type=1326 audit(196.523:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14041 comm="syz.7.3824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8939676567 code=0x0 [ 196.611925][ T29] audit: type=1326 audit(196.583:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd1e3f6c9 code=0x7ffc0000 [ 196.634968][ T29] audit: type=1326 audit(196.583:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd1e3f6c9 code=0x7ffc0000 [ 196.658691][ T29] audit: type=1326 audit(196.633:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1cd1e3f6c9 code=0x7ffc0000 [ 196.681609][ T29] audit: type=1326 audit(196.633:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd1e3f6c9 code=0x7ffc0000 [ 196.704502][ T29] audit: type=1326 audit(196.633:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd1e3f6c9 code=0x7ffc0000 [ 196.728098][ T29] audit: type=1326 audit(196.703:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1cd1e3f6c9 code=0x7ffc0000 [ 196.751136][ T29] audit: type=1326 audit(196.703:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd1e3f6c9 code=0x7ffc0000 [ 196.774019][ T29] audit: type=1326 audit(196.703:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd1e3f6c9 code=0x7ffc0000 [ 196.797367][ T29] audit: type=1326 audit(196.773:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f1cd1e3f6c9 code=0x7ffc0000 [ 196.932430][T10359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.975164][T14052] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.041426][T14054] netlink: 'syz.9.3829': attribute type 30 has an invalid length. [ 197.733317][T14074] loop4: detected capacity change from 0 to 4096 [ 197.733595][T14075] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 197.753908][T14074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.788098][T14074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.432133][T14116] bond0: (slave bond_slave_0): Releasing backup interface [ 198.447485][T14116] bond0: (slave bond_slave_1): Releasing backup interface [ 198.459400][T14116] team0: Failed to send options change via netlink (err -105) [ 198.469179][T14116] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 198.534204][T14116] team0: Port device team_slave_0 removed [ 198.542779][T14116] team0: Failed to send options change via netlink (err -105) [ 198.550671][T14116] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 198.587087][T14116] team0: Port device team_slave_1 removed [ 198.617549][T10691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.629236][T14116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.636663][T14116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.662680][T14120] xt_hashlimit: max too large, truncated to 1048576 [ 198.666082][T14116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.670260][T14120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.677737][T14116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.706366][T14116] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.722703][T14117] team0: Failed to send options change via netlink (err -105) [ 198.730310][T14117] team0: Mode changed to "activebackup" [ 199.024547][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.044965][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.691456][T14150] loop0: detected capacity change from 0 to 4096 [ 199.698535][T14150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.708499][T14150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.749286][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3866'. [ 200.517169][T14192] sctp: [Deprecated]: syz.9.3878 (pid 14192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.517169][T14192] Use struct sctp_sack_info instead [ 200.592516][T14196] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3880'. [ 200.635623][T14197] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 200.656984][T13606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.692424][T14199] veth6: entered promiscuous mode [ 200.698215][T14199] veth6: entered allmulticast mode [ 200.844688][T14212] tipc: Enabled bearer , priority 0 [ 200.852183][T14211] tipc: Resetting bearer [ 200.868934][T14211] tipc: Disabling bearer [ 200.955245][T14222] loop9: detected capacity change from 0 to 8192 [ 200.978117][T14225] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3893'. [ 200.990064][T14226] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3894'. [ 201.025539][T14231] tipc: Started in network mode [ 201.030462][T14231] tipc: Node identity ac14140f, cluster identity 4711 [ 201.038773][T14231] tipc: New replicast peer: 255.255.255.255 [ 201.045053][T14231] tipc: Enabled bearer , priority 10 [ 201.173495][T14246] loop6: detected capacity change from 0 to 1024 [ 201.186066][T14246] EXT4-fs: Ignoring removed nobh option [ 201.199346][T14246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.305757][T14246] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 201.368065][T10764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.431860][T14272] loop9: detected capacity change from 0 to 128 [ 201.610875][ T29] kauditd_printk_skb: 1120 callbacks suppressed [ 201.610921][ T29] audit: type=1400 audit(201.583:6711): avc: denied { create } for pid=14287 comm="syz.7.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.684250][ T29] audit: type=1400 audit(201.613:6712): avc: denied { allowed } for pid=14287 comm="syz.7.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 201.703130][ T29] audit: type=1400 audit(201.613:6713): avc: denied { create } for pid=14287 comm="syz.7.3921" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 201.724066][ T29] audit: type=1400 audit(201.613:6714): avc: denied { map } for pid=14287 comm="syz.7.3921" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 201.747820][ T29] audit: type=1400 audit(201.613:6715): avc: denied { read write } for pid=14287 comm="syz.7.3921" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 201.772094][ T29] audit: type=1400 audit(201.623:6716): avc: denied { execmem } for pid=14287 comm="syz.7.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 201.796777][T14295] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 201.807214][ T29] audit: type=1400 audit(201.683:6717): avc: denied { name_bind } for pid=14291 comm="syz.7.3932" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 201.828505][ T29] audit: type=1400 audit(201.683:6718): avc: denied { node_bind } for pid=14291 comm="syz.7.3932" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 201.882431][ T29] audit: type=1400 audit(201.853:6719): avc: denied { create } for pid=14298 comm="syz.4.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.921937][ T29] audit: type=1400 audit(201.853:6720): avc: denied { connect } for pid=14298 comm="syz.4.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.174791][ T9708] tipc: Node number set to 2886997007 [ 202.239289][T14312] kernel profiling enabled (shift: 63) [ 202.245482][T14312] profiling shift: 63 too large [ 202.583136][T14328] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.593060][T14328] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.677142][T14328] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.686961][T14328] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.857925][T14328] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.868474][T14328] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.013726][T14328] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.024836][T14328] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.133071][ T3894] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.141395][ T3894] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.156742][ T3894] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.164981][ T3894] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.190296][T14349] loop9: detected capacity change from 0 to 8192 [ 203.194275][ T3894] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.204880][ T3894] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.223970][ T3894] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.232263][ T3894] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.281349][T14352] loop6: detected capacity change from 0 to 128 [ 203.564012][T14367] tipc: New replicast peer: 255.255.255.255 [ 203.570096][T14367] tipc: Enabled bearer , priority 10 [ 203.728581][T14381] loop4: detected capacity change from 0 to 128 [ 204.684829][ T3605] tipc: Node number set to 634730275 [ 204.710805][T14399] netlink: 'syz.4.3964': attribute type 39 has an invalid length. [ 204.847128][T14415] wg2: left promiscuous mode [ 204.851798][T14415] wg2: left allmulticast mode [ 204.860871][T14415] wg2: entered promiscuous mode [ 204.865789][T14415] wg2: entered allmulticast mode [ 205.627988][T14440] netlink: 'syz.7.3980': attribute type 29 has an invalid length. [ 205.636644][T14440] netlink: 'syz.7.3980': attribute type 29 has an invalid length. [ 205.654662][T14440] netlink: 500 bytes leftover after parsing attributes in process `syz.7.3980'. [ 205.711432][T14442] loop0: detected capacity change from 0 to 2048 [ 205.782590][T14437] Set syz1 is full, maxelem 65536 reached [ 205.807610][T14442] Alternate GPT is invalid, using primary GPT. [ 205.814093][T14442] loop0: p2 p3 p7 [ 205.945917][T14466] loop9: detected capacity change from 0 to 128 [ 205.959613][T14468] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3993'. [ 205.969289][T14468] netlink: 'syz.4.3993': attribute type 10 has an invalid length. [ 205.980292][T14466] syz.9.3992: attempt to access beyond end of device [ 205.980292][T14466] loop9: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 205.995194][T14466] syz.9.3992: attempt to access beyond end of device [ 205.995194][T14466] loop9: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 206.009369][T14466] Buffer I/O error on dev loop9, logical block 79, lost async page write [ 206.018246][T14466] syz.9.3992: attempt to access beyond end of device [ 206.018246][T14466] loop9: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 206.032475][T14466] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 206.042516][T14466] syz.9.3992: attempt to access beyond end of device [ 206.042516][T14466] loop9: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 206.057335][T14466] syz.9.3992: attempt to access beyond end of device [ 206.057335][T14466] loop9: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 206.071901][T14466] syz.9.3992: attempt to access beyond end of device [ 206.071901][T14466] loop9: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 206.086191][T14466] Buffer I/O error on dev loop9, logical block 95, lost async page write [ 206.095712][T14466] syz.9.3992: attempt to access beyond end of device [ 206.095712][T14466] loop9: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 206.109323][T14466] Buffer I/O error on dev loop9, logical block 96, lost async page write [ 206.119094][T14466] syz.9.3992: attempt to access beyond end of device [ 206.119094][T14466] loop9: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 206.133749][T14466] syz.9.3992: attempt to access beyond end of device [ 206.133749][T14466] loop9: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 206.147834][T14466] Buffer I/O error on dev loop9, logical block 99, lost async page write [ 206.156530][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3999'. [ 206.156788][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3999'. [ 206.186733][T14466] syz.9.3992: attempt to access beyond end of device [ 206.186733][T14466] loop9: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 206.200435][T14466] Buffer I/O error on dev loop9, logical block 100, lost async page write [ 206.210966][T14466] Buffer I/O error on dev loop9, logical block 111, lost async page write [ 206.220062][T14466] Buffer I/O error on dev loop9, logical block 112, lost async page write [ 206.229389][T14466] Buffer I/O error on dev loop9, logical block 115, lost async page write [ 206.238825][T14466] Buffer I/O error on dev loop9, logical block 116, lost async page write [ 206.253590][T14487] loop6: detected capacity change from 0 to 1024 [ 206.274720][T14487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.382501][T10764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.397850][T14504] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4017'. [ 206.438987][T14510] $H: renamed from bond0 [ 206.448199][T14510] $H: entered promiscuous mode [ 206.462506][T14508] loop6: detected capacity change from 0 to 4096 [ 206.472957][T14508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.484911][T14508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.505400][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4012'. [ 206.595707][T14527] loop9: detected capacity change from 0 to 1024 [ 206.602338][T14527] EXT4-fs: Ignoring removed orlov option [ 206.616414][T14527] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 206.632010][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 206.632025][ T29] audit: type=1400 audit(206.603:6852): avc: denied { read write } for pid=14526 comm="syz.9.4015" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 206.679448][T10359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 206.718183][ T29] audit: type=1400 audit(206.673:6853): avc: denied { connect } for pid=14531 comm="syz.4.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.738041][ T29] audit: type=1400 audit(206.673:6854): avc: denied { write } for pid=14531 comm="syz.4.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.773583][ T29] audit: type=1400 audit(206.743:6855): avc: denied { create } for pid=14533 comm="syz.9.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 206.803561][T14534] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4016'. [ 206.812793][T14534] 1{X: renamed from 30{X [ 206.820696][T14534] 1{X: entered allmulticast mode [ 206.827508][T14534] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 206.855174][T14540] loop0: detected capacity change from 0 to 1024 [ 206.875429][T14540] EXT4-fs: inline encryption not supported [ 206.901604][T14540] EXT4-fs: Ignoring removed nobh option [ 206.907842][T14540] EXT4-fs: Ignoring removed bh option [ 206.926486][T14540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.956172][ T29] audit: type=1400 audit(206.933:6856): avc: denied { write } for pid=14549 comm="syz.9.4024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 206.980782][T14540] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.4020: Allocating blocks 449-513 which overlap fs metadata [ 207.002192][T14551] EXT4-fs (loop0): pa ffff888106db3930: logic 48, phys. 177, len 21 [ 207.010365][T14551] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 207.051212][ T29] audit: type=1400 audit(207.023:6857): avc: denied { rmdir } for pid=13606 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.082641][T13606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.105124][ T29] audit: type=1400 audit(207.023:6858): avc: denied { unlink } for pid=13606 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 207.127544][ T29] audit: type=1326 audit(207.083:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.9.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4708bf6c9 code=0x7ffc0000 [ 207.151863][ T29] audit: type=1326 audit(207.083:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.9.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4708bf6c9 code=0x7ffc0000 [ 207.152131][T14558] netlink: 'syz.4.4027': attribute type 1 has an invalid length. [ 207.176532][ T29] audit: type=1326 audit(207.083:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.9.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4708bf6c9 code=0x7ffc0000 [ 207.210629][T14558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.278470][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4027'. [ 207.291578][T14555] bond2 (unregistering): Released all slaves [ 207.326827][T10764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.379301][T14569] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 207.514969][T14587] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4038'. [ 207.546167][T14590] netlink: 'syz.6.4042': attribute type 29 has an invalid length. [ 207.567127][T14590] netlink: 'syz.6.4042': attribute type 29 has an invalid length. [ 207.579454][T14590] netlink: 500 bytes leftover after parsing attributes in process `syz.6.4042'. [ 207.640395][T14603] loop4: detected capacity change from 0 to 512 [ 207.648176][T14603] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 207.660329][T14603] EXT4-fs (loop4): 1 truncate cleaned up [ 207.684507][T14603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.745117][T14579] chnl_net:caif_netlink_parms(): no params data found [ 207.781307][T10691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.894627][T14579] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.901711][T14579] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.913168][T14579] bridge_slave_0: entered allmulticast mode [ 207.919757][T14579] bridge_slave_0: entered promiscuous mode [ 207.948991][T14579] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.956796][T14579] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.965099][T14579] bridge_slave_1: entered allmulticast mode [ 207.972089][T14579] bridge_slave_1: entered promiscuous mode [ 207.989200][T14629] netlink: 'syz.4.4054': attribute type 29 has an invalid length. [ 208.070238][T14629] netlink: 'syz.4.4054': attribute type 29 has an invalid length. [ 208.089207][T14579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.130072][T14579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.200367][T14579] team0: Port device team_slave_0 added [ 208.210439][T14579] team0: Port device team_slave_1 added [ 208.248391][T14579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.256347][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.282364][T14579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.282512][T14643] loop4: detected capacity change from 0 to 1024 [ 208.299763][T14643] EXT4-fs: Ignoring removed orlov option [ 208.327156][T14579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.334183][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.360326][T14579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.409686][T14643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 208.438461][T10691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 208.465520][T14579] hsr_slave_0: entered promiscuous mode [ 208.471802][T14579] hsr_slave_1: entered promiscuous mode [ 208.478052][T14579] debugfs: 'hsr0' already exists in 'hsr' [ 208.483869][T14579] Cannot create hsr debugfs directory [ 208.978343][T14689] loop9: detected capacity change from 0 to 256 [ 209.009727][T14579] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.033184][T14579] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.064683][T14579] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.076905][T14579] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 209.126682][T14579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.146906][T14579] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.166178][ T3885] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.173251][ T3885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.210312][T14579] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.220757][T14579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.263954][ T3885] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.271049][ T3885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.376217][T14579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.478764][T14739] netlink: 'syz.6.4094': attribute type 1 has an invalid length. [ 209.543048][T14739] bond1: (slave veth5): Enslaving as an active interface with a down link [ 209.562559][T14739] bond1: entered promiscuous mode [ 209.567741][T14739] bond1: entered allmulticast mode [ 209.580619][T14739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.616895][T14579] veth0_vlan: entered promiscuous mode [ 209.626290][T14579] veth1_vlan: entered promiscuous mode [ 209.649539][T14579] veth0_macvtap: entered promiscuous mode [ 209.656469][T14763] loop4: detected capacity change from 0 to 164 [ 209.665068][T14579] veth1_macvtap: entered promiscuous mode [ 209.673377][T14763] netlink: zone id is out of range [ 209.677687][T14579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.678691][T14763] netlink: zone id is out of range [ 209.687367][T14579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.705330][T14763] netlink: zone id is out of range [ 209.710484][T14763] netlink: zone id is out of range [ 209.712777][ T3890] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.715686][T14763] netlink: zone id is out of range [ 209.727075][ T3890] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.729482][T14763] netlink: zone id is out of range [ 209.729492][T14763] netlink: zone id is out of range [ 209.738857][ T3890] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.743322][T14763] netlink: zone id is out of range [ 209.772261][ T3890] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.887978][T14789] netlink: 'syz.7.4111': attribute type 1 has an invalid length. [ 209.909637][T14787] netlink: 'syz.4.4110': attribute type 7 has an invalid length. [ 209.934704][T14789] bond1: (slave veth9): Enslaving as an active interface with a down link [ 209.952005][T14789] bond1: entered promiscuous mode [ 209.957289][T14789] bond1: entered allmulticast mode [ 209.971719][T14789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.609820][T14838] loop6: detected capacity change from 0 to 8192 [ 211.468328][T14864] netlink: 'syz.7.4148': attribute type 7 has an invalid length. [ 211.476926][T14864] __nla_validate_parse: 6 callbacks suppressed [ 211.476943][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4148'. [ 211.587070][T14876] loop6: detected capacity change from 0 to 128 [ 211.587359][T14878] loop5: detected capacity change from 0 to 1024 [ 211.611521][T14876] bio_check_eod: 30 callbacks suppressed [ 211.611562][T14876] syz.6.4146: attempt to access beyond end of device [ 211.611562][T14876] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 211.627779][T14878] EXT4-fs: inline encryption not supported [ 211.661858][T14876] syz.6.4146: attempt to access beyond end of device [ 211.661858][T14876] loop6: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 211.665562][T14878] EXT4-fs: Ignoring removed nobh option [ 211.675352][T14876] buffer_io_error: 16 callbacks suppressed [ 211.675366][T14876] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 211.696976][T14878] EXT4-fs: Ignoring removed bh option [ 211.703426][T14876] syz.6.4146: attempt to access beyond end of device [ 211.703426][T14876] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 211.716919][T14876] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 211.745315][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 211.745328][ T29] audit: type=1400 audit(211.724:7083): avc: denied { create } for pid=14884 comm="syz.9.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.782646][T14876] syz.6.4146: attempt to access beyond end of device [ 211.782646][T14876] loop6: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 211.813812][T14876] syz.6.4146: attempt to access beyond end of device [ 211.813812][T14876] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 211.829724][ T29] audit: type=1400 audit(211.724:7084): avc: denied { lock } for pid=14884 comm="syz.9.4152" path="socket:[65352]" dev="sockfs" ino=65352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.862418][T14876] syz.6.4146: attempt to access beyond end of device [ 211.862418][T14876] loop6: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 211.875947][T14876] Buffer I/O error on dev loop6, logical block 95, lost async page write [ 211.902045][T14876] syz.6.4146: attempt to access beyond end of device [ 211.902045][T14876] loop6: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 211.915588][T14876] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 211.925233][T14876] syz.6.4146: attempt to access beyond end of device [ 211.925233][T14876] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 211.925367][T14878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.939071][T14876] syz.6.4146: attempt to access beyond end of device [ 211.939071][T14876] loop6: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 211.964667][T14876] Buffer I/O error on dev loop6, logical block 99, lost async page write [ 211.973580][T14876] syz.6.4146: attempt to access beyond end of device [ 211.973580][T14876] loop6: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 211.987106][T14876] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 211.996499][T14876] Buffer I/O error on dev loop6, logical block 111, lost async page write [ 212.007173][T14876] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 212.016696][T14876] Buffer I/O error on dev loop6, logical block 115, lost async page write [ 212.025244][T14876] Buffer I/O error on dev loop6, logical block 116, lost async page write [ 212.097881][T14878] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.4147: Allocating blocks 449-513 which overlap fs metadata [ 212.122206][T14902] EXT4-fs (loop5): pa ffff888106db3930: logic 48, phys. 177, len 21 [ 212.130368][T14902] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 212.217352][T14579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.247796][T14907] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4161'. [ 212.260413][ T29] audit: type=1400 audit(212.234:7085): avc: denied { name_connect } for pid=14909 comm="syz.5.4160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 212.291044][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4160'. [ 212.301045][T14911] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4161'. [ 212.317226][ T29] audit: type=1400 audit(212.264:7086): avc: denied { listen } for pid=14909 comm="syz.5.4160" lport=54010 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 212.339724][ T29] audit: type=1400 audit(212.264:7087): avc: denied { accept } for pid=14909 comm="syz.5.4160" lport=54010 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 212.405415][T14917] netlink: 'syz.5.4164': attribute type 30 has an invalid length. [ 212.454916][T14919] bridge: RTM_NEWNEIGH with invalid ether address [ 212.471814][ T29] audit: type=1326 audit(212.444:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf149f6c9 code=0x7ffc0000 [ 212.494796][ T29] audit: type=1326 audit(212.444:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf149f6c9 code=0x7ffc0000 [ 212.517770][ T29] audit: type=1326 audit(212.444:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faaf149f6c9 code=0x7ffc0000 [ 212.540636][ T29] audit: type=1326 audit(212.444:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf149f6c9 code=0x7ffc0000 [ 212.563503][ T29] audit: type=1326 audit(212.444:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf149f6c9 code=0x7ffc0000 [ 212.820778][T14945] loop5: detected capacity change from 0 to 1024 [ 212.853845][T14945] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.875841][T14948] loop4: detected capacity change from 0 to 1024 [ 212.893577][T14945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.906245][T14948] EXT4-fs: inline encryption not supported [ 212.912199][T14948] EXT4-fs: Ignoring removed nobh option [ 212.917865][T14948] EXT4-fs: Ignoring removed bh option [ 212.967461][T14948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.046826][T14955] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4176'. [ 213.099388][T14948] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4174: Allocating blocks 449-513 which overlap fs metadata [ 213.119589][T14955] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4176'. [ 213.156345][T14957] EXT4-fs (loop4): pa ffff888106ea8cb0: logic 48, phys. 177, len 21 [ 213.164470][T14957] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 213.281791][T10691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.334133][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4179'. [ 213.378483][T14961] hsr_slave_1 (unregistering): left promiscuous mode [ 213.398181][T14579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.480833][T14966] loop5: detected capacity change from 0 to 1024 [ 213.522424][T14966] EXT4-fs: Ignoring removed orlov option [ 213.540941][T14970] loop4: detected capacity change from 0 to 128 [ 213.566102][T14966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.751486][T14579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.860014][T14988] loop6: detected capacity change from 0 to 1024 [ 213.884252][T14988] EXT4-fs: inline encryption not supported [ 213.890134][T14988] EXT4-fs: Ignoring removed orlov option [ 213.910930][T14993] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4190'. [ 213.925594][T14988] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 213.941277][T14993] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4190'. [ 213.967618][T14988] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 214.000951][T14988] System zones: 0-1, 3-12 [ 214.024995][T14988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.198283][T10764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.229637][T15006] bridge: RTM_NEWNEIGH with invalid ether address [ 214.262086][T15009] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4199'. [ 214.327249][T15014] 9p: Unknown access argument : -22 [ 214.345504][T15017] syzkaller0: entered allmulticast mode [ 214.357956][T15017] syzkaller0: entered promiscuous mode [ 214.375987][T15017] syzkaller0 (unregistering): left allmulticast mode [ 214.382718][T15017] syzkaller0 (unregistering): left promiscuous mode [ 215.273132][T15051] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.305312][T15051] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.440726][T15051] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.474474][T15051] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.737454][T15051] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.756649][T15051] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.045619][T15051] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.056181][T15051] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.079132][T15072] loop9: detected capacity change from 0 to 1024 [ 216.124386][T15072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.147061][T15077] netlink: 'syz.7.4223': attribute type 12 has an invalid length. [ 216.147476][T15072] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.226090][ T3936] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.235082][ T3936] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.243415][ T3936] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.245175][T15084] siw: device registration error -23 [ 216.251698][ T3936] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.266548][ T3936] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.274780][ T3936] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.283209][ T3936] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.292202][ T3936] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.442388][T15102] Y4`ҘDʆ5: renamed from lo (while UP) [ 216.522374][T15108] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.569462][T15110] serio: Serial port ptm0 [ 216.590913][T10359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.603376][T15108] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.655337][ T3422] kernel write not supported for file /input/event0 (pid: 3422 comm: kworker/1:5) [ 216.668715][T15108] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.716093][T15108] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.781387][ T3890] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.796938][ T3890] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.809983][ T3890] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.821590][ T3936] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.212961][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 217.212977][ T29] audit: type=1400 audit(217.184:7148): avc: denied { ioctl } for pid=15136 comm="syz.7.4255" path="socket:[67013]" dev="sockfs" ino=67013 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.247776][T15139] netlink: 'syz.7.4255': attribute type 13 has an invalid length. [ 217.446815][T15149] loop4: detected capacity change from 0 to 1024 [ 217.455142][T15145] __nla_validate_parse: 2 callbacks suppressed [ 217.455210][T15145] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4247'. [ 217.474677][ T29] audit: type=1400 audit(217.454:7149): avc: denied { write } for pid=15148 comm="syz.5.4250" laddr=fe80::10 lport=60 faddr=fe80::3c fport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.504479][T15149] EXT4-fs: Ignoring removed orlov option [ 217.526403][T15149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.541746][T15150] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.548970][T15150] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.576596][ T29] audit: type=1326 audit(217.554:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.9.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4708bf6c9 code=0x7ffc0000 [ 217.636519][T10691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.643708][ T29] audit: type=1326 audit(217.554:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.9.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4708bf6c9 code=0x7ffc0000 [ 217.669733][ T29] audit: type=1326 audit(217.554:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.9.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa4708bf6c9 code=0x7ffc0000 [ 217.692743][ T29] audit: type=1326 audit(217.554:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.9.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4708bf6c9 code=0x7ffc0000 [ 217.717212][ T29] audit: type=1326 audit(217.554:7154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.9.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4708bf6c9 code=0x7ffc0000 [ 217.740126][ T29] audit: type=1326 audit(217.554:7155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.9.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4708bf6c9 code=0x7ffc0000 [ 217.764294][ T29] audit: type=1326 audit(217.554:7156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.9.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4708bf6c9 code=0x7ffc0000 [ 217.787981][ T29] audit: type=1326 audit(217.554:7157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.9.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4708bf6c9 code=0x7ffc0000 [ 217.913083][T15150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.956967][T15150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.024509][T15162] netlink: 'syz.4.4253': attribute type 12 has an invalid length. [ 218.033094][ T3938] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.062341][ T3938] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.062400][ T3938] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.062431][ T3938] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.099559][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4258'. [ 218.133205][T15177] netlink: 'syz.5.4261': attribute type 13 has an invalid length. [ 218.143777][T15180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4262'. [ 218.202892][T15190] wg2: left promiscuous mode [ 218.208266][T15190] wg2: left allmulticast mode [ 218.232475][T15190] wg2: entered promiscuous mode [ 218.238055][T15190] wg2: entered allmulticast mode [ 218.308524][T15200] 9p: Unknown access argument : -22 [ 218.591928][T15211] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4276'. [ 218.686326][T15220] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4277'. [ 219.702145][T15243] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4289'. [ 219.811330][T15256] xt_hashlimit: max too large, truncated to 1048576 [ 219.818780][T15256] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.075151][T15284] netlink: 'syz.6.4306': attribute type 30 has an invalid length. [ 220.220618][T15288] netlink: 'syz.7.4319': attribute type 30 has an invalid length. [ 220.234181][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4307'. [ 220.282495][T15293] xt_hashlimit: max too large, truncated to 1048576 [ 220.292044][T15293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.427195][T15309] loop4: detected capacity change from 0 to 512 [ 221.472066][T15309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.528980][T15318] $H: (slave dummy0): Releasing backup interface [ 221.575046][T15318] dummy0: left promiscuous mode [ 221.589505][T10691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.665068][T15318] bond1: (slave veth9): Releasing active interface [ 221.704340][T15319] team0: Unable to change to the same mode the team is in [ 221.983347][T15326] netlink: 'syz.5.4323': attribute type 30 has an invalid length. [ 222.242287][T15329] xt_hashlimit: max too large, truncated to 1048576 [ 222.249883][T15329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.264854][T15330] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.329142][T15330] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.396052][T15330] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.456280][T15330] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.514709][ T3890] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.526604][ T3890] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.538481][ T3890] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.549056][ T3890] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.596960][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4330'. [ 222.629750][T15340] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.662618][T15343] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4327'. [ 222.744409][T15340] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.775537][T15344] ================================================================== [ 222.783632][T15344] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 222.790573][T15344] [ 222.792880][T15344] read-write to 0xffff88811d0fda2c of 4 bytes by task 15338 on cpu 0: [ 222.797238][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 222.797271][ T29] audit: type=1400 audit(222.754:7202): avc: denied { write } for pid=3302 comm="syz-executor" path="pipe:[2413]" dev="pipefs" ino=2413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 222.801015][T15344] fifo_open+0x86/0x5d0 [ 222.833714][T15344] do_dentry_open+0x649/0xa20 [ 222.838427][T15344] vfs_open+0x37/0x1e0 [ 222.842495][T15344] path_openat+0x1c5e/0x2170 [ 222.847083][T15344] do_file_open_root+0x1d0/0x3f0 [ 222.852016][T15344] file_open_root+0xfd/0x130 [ 222.856598][T15344] do_handle_open+0x659/0x6e0 [ 222.861289][T15344] __x64_sys_open_by_handle_at+0x44/0x50 [ 222.866930][T15344] x64_sys_call+0x279f/0x3000 [ 222.871617][T15344] do_syscall_64+0xd2/0x200 [ 222.876116][T15344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.882014][T15344] [ 222.884338][T15344] read to 0xffff88811d0fda2c of 4 bytes by task 15344 on cpu 1: [ 222.891973][T15344] wait_for_partner+0xb5/0x1c0 [ 222.896754][T15344] fifo_open+0x462/0x5d0 [ 222.901021][T15344] do_dentry_open+0x649/0xa20 [ 222.905712][T15344] vfs_open+0x37/0x1e0 [ 222.909782][T15344] path_openat+0x1c5e/0x2170 [ 222.914384][T15344] do_filp_open+0x109/0x230 [ 222.918890][T15344] do_sys_openat2+0xa6/0x110 [ 222.923474][T15344] __x64_sys_openat+0xf2/0x120 [ 222.928230][T15344] x64_sys_call+0x2eab/0x3000 [ 222.932901][T15344] do_syscall_64+0xd2/0x200 [ 222.937400][T15344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.943385][T15344] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 222.945742][T15344] value changed: 0x00000001 -> 0x00000002 [ 222.951474][T15344] [ 222.953791][T15344] Reported by Kernel Concurrency Sanitizer on: [ 222.959951][T15344] CPU: 1 UID: 0 PID: 15344 Comm: syz.4.4329 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 222.971875][T15344] Tainted: [W]=WARN [ 222.975684][T15344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.985762][T15344] ================================================================== [ 223.032435][T15340] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.154413][T15340] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.547112][ T3938] bond0 (unregistering): (slave 77): Releasing backup interface [ 223.555783][ T3938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.564997][ T3938] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 223.573331][ T3938] bond0 (unregistering): Released all slaves [ 223.582717][ T3938] bond1 (unregistering): (slave veth5): Releasing active interface [ 223.590966][ T3938] bond1 (unregistering): Released all slaves [ 223.665911][ T3938] tipc: Left network mode [ 223.672278][ T3938] hsr_slave_0: left promiscuous mode [ 223.679290][ T3938] hsr_slave_1: left promiscuous mode [ 223.686423][ T3938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.693886][ T3938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.177479][ T3938] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.187307][ T3938] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.225399][ T3938] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.235187][ T3938] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.265778][ T3938] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.275606][ T3938] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.315278][ T3938] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.325235][ T3938] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.386970][ T3938] bridge_slave_1: left allmulticast mode [ 224.392621][ T3938] bridge_slave_1: left promiscuous mode [ 224.399427][ T3938] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.407935][ T3938] bridge_slave_0: left allmulticast mode [ 224.413722][ T3938] bridge_slave_0: left promiscuous mode [ 224.419403][ T3938] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.506415][ T3938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.517050][ T3938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.526454][ T3938] bond0 (unregistering): Released all slaves [ 224.615728][ T3938] bond0 (unregistering): Released all slaves [ 224.624420][ T3938] bond1 (unregistering): (slave veth5): Releasing active interface [ 224.633181][ T3938] bond1 (unregistering): Released all slaves [ 224.677601][ T3938] tipc: Left network mode [ 224.685490][ T3938] hsr_slave_0: left promiscuous mode [ 224.691110][ T3938] hsr_slave_1: left promiscuous mode [ 224.697491][ T3938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.705158][ T3938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.714959][ T3938] veth1_macvtap: left promiscuous mode [ 224.720445][ T3938] veth0_macvtap: left promiscuous mode [ 224.763349][ T3938] team0 (unregistering): Port device team_slave_1 removed [ 224.775543][ T3938] team0 (unregistering): Port device team_slave_0 removed [ 225.366874][ T3890] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.386604][ T3936] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.406600][ T3936] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.427237][ T3890] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0