last executing test programs: 4m22.97185471s ago: executing program 32 (id=1107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 4m22.263383964s ago: executing program 33 (id=1135): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) execve(0x0, 0x0, 0x0) 3m8.57178103s ago: executing program 34 (id=3540): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp']) 2m56.720132583s ago: executing program 35 (id=4486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigpending(0x0, 0x0) 2m51.792739659s ago: executing program 36 (id=4594): creat(&(0x7f00000002c0)='./file0\x00', 0x109) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x8390) 2m39.912974482s ago: executing program 37 (id=5029): r0 = semget(0x1, 0x5, 0x6b4) semtimedop(r0, &(0x7f0000000280)=[{0x0, 0x7, 0x3800}], 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x1, 0x0, 0x1800}], 0x12) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000440)) 2m26.187818761s ago: executing program 6 (id=5645): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$caif_seqpacket(0x25, 0x5, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 2m25.408813837s ago: executing program 6 (id=5677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m25.348008038s ago: executing program 6 (id=5678): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$TCSETS(r0, 0x89f2, 0x0) 2m25.328589828s ago: executing program 6 (id=5679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000aaaaaaaaaabbaaaaaaaaaa3d86dd63749d3901242c000000000000000000000000000000000000000000000000000000ffff6401010233"], 0x15e) 2m25.23107082s ago: executing program 6 (id=5680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0xffff}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m25.201991741s ago: executing program 6 (id=5682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m10.880254872s ago: executing program 38 (id=5682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 44.031729816s ago: executing program 9 (id=10177): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r0, 0x541b, 0x0) ioctl(r0, 0x5451, 0x0) 44.031364136s ago: executing program 9 (id=10179): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000680)=""/219, 0xdb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x3}, 0x52}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000400)={0x800, 0x2, {0x3, 0x7, 0xa5bd, 0x3, 0x7fff}, 0x10}) tkill(r0, 0x7) 43.775988401s ago: executing program 9 (id=10190): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 43.696937973s ago: executing program 9 (id=10195): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="12110101"], 0x4) 43.597511815s ago: executing program 0 (id=10204): r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000200)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) 43.539834226s ago: executing program 0 (id=10207): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}]}}}]}, 0x3c}}, 0x84000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x20004000) 43.534655196s ago: executing program 4 (id=10209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 43.517226496s ago: executing program 4 (id=10210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 43.502270807s ago: executing program 0 (id=10211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c00014000000000000000041400000011000100"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r1) 43.451838738s ago: executing program 4 (id=10213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r3, 0x0) 43.451593068s ago: executing program 0 (id=10215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 43.435208098s ago: executing program 4 (id=10216): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 42.888619078s ago: executing program 9 (id=10230): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 42.880034649s ago: executing program 4 (id=10231): r0 = socket$inet(0x2, 0x3, 0xd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 42.785314211s ago: executing program 9 (id=10232): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x11, &(0x7f0000001b00)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf0, "c1"}}}}}, 0x0) 42.760079151s ago: executing program 39 (id=10232): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x11, &(0x7f0000001b00)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf0, "c1"}}}}}, 0x0) 42.551981055s ago: executing program 0 (id=10234): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 42.551783145s ago: executing program 4 (id=10235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 42.551671785s ago: executing program 40 (id=10235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 42.336876079s ago: executing program 0 (id=10236): r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000780)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 42.334831309s ago: executing program 41 (id=10236): r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000780)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 6.054590241s ago: executing program 8 (id=11600): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x8, 0x0) clock_gettime(0x2, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x2, &(0x7f0000000180)={{0x0, 0x3938700}, {r2, r3+10000000}}, 0x0) timerfd_gettime(r0, 0x0) 5.968194703s ago: executing program 8 (id=11603): unshare(0x20480) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000d80)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35c498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c1761f1322b03cc9ea586d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f9156e35424", 0x45c) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x0, 0x0}, 0x10) 5.916341364s ago: executing program 8 (id=11608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x6}, 0x8) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) close(0x3) 5.859281175s ago: executing program 8 (id=11619): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$eJzs3U9vVF0ZAPDn3nbon7fv26Is1KggomgIM+0AlbDCjcYQEiNx5QJqOzRNZzpNZ4q0sijfwUQSV7rwA7gwcWHCyr073bnBhQkq0VATF2PmzhQKnSlF2s6b3t8vObn33DOd5zyd3HPaM+2cAHLrXERsRcSpiLgXEZPd60m3xM1OaT/u5YtH89svHs0n0Wrd+UeStbevxa6vafuo+5yjEfGD70b8ONkbt7GxuTxXrVbWuvVSs7ZaamxsXl6qzS1WFisr5fLszOz09SvXyoeW69nab55/Z+nWD3//uy89++PWN3/a7tZEt213Hoepk3rhVZy24Yi4dRTBBmCom8+pQXeE/0saEZ+JiPPZ/T8ZQ9mrCQCcZK3WZLQmd9cBgJMuzdbAkrQYUeicp2mx2FnDOxPjabXeaF66X19fWeislU1FIb2/VK1Md9cKp6KQtOsz2fnrevmt+pWIOB0RPxsZy+rF+Xp1YZA/+ABAjn30ev7P3gv490hn/gcATrjRQXcAADh25n8AyB/zPwDkj/kfAPLH/A8A+WP+B4D8Mf8DQK58//btdmltdz//euHBxvpy/cHlhUpjuVhbny/O19dWi4v1+mL2mT21dz1ftV5fnbka6w9LzUqjWWpsbN6t1ddXmnezz/W+WykcS1YAwH5On3365yQitm6MZSV27eVgroaTLR10B4CBGRp0B4CBsdsX5Jff8YEeW/S+ofMnQmN7G54cTX+Ao3fx89b/Ia+s/0N+Wf+H/LL+D/nVaiX2/AeAnLHGDxzs/f8evP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjk1kJUmL3b3AJyJNi8WIjyNiKgrJ/aVqZToiPomIP40URtr1mUF3GgD4QOnfku7+XxcnL0y83Xoq+c9IdoyIn/zizs8fzjWbazPt6//sXP/WWMST7vXyIPoPAHk09F6P3pmnd+bxHS9fPJrfKYffx/6ef7uzuWg77na3dFqGYzg7jkYhIsb/lXTrHcl7Z97b1uOI+Fyv/JNsbWSqu/Pp2/HbsT8+1vjpG/HTrK1zbH8vPnsIfYG8edoef272uv/SOJcde9//o9kI9eF2xr/tPeNf+mr8G+oz/p07SICxX0dc/cP3+sZ/HPGF4V7xk1fxkz7xLxwwx7988cvn+7W1fhlxMXrH3x2r1Kytlhobm5eXanOLlcXKSrk8OzM7ff3KtXIpW6Mu7axU7/X3G5c+2S//8T7xR9+R/9cOmP+v/nvvR1/ZJ/43vtr79T+zT/z2nPj1A8afG/9t3+272/EX+uT/rtf/0gHjP/vr5sIBHwoAHIPGxubyXLVaWRv0yU6HPi39ceIk1yeDHZeAo/f6ph90TwAAAAAAAAAAAAAAgH6O49+JBp0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9f/AgAA//9gOtV4") r0 = creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) write$P9_RREADDIR(r0, &(0x7f0000000200)={0xc3, 0x29, 0x2, {0xf, [{{0x4, 0x0, 0x1}, 0x0, 0x85, 0x7, './file2'}, {{0x1, 0x1, 0x4}, 0x23f, 0x72, 0x7, './file2'}, {{0x8, 0x4, 0x6}, 0x2, 0x6, 0x7, './file2'}, {{0x0, 0x4, 0x6}, 0x1, 0x90, 0x5, './bus'}, {{0x0, 0x3, 0x2}, 0x800, 0x4, 0x7, './file2'}, {{0x1, 0x1, 0x1}, 0xfffffffffffffffa, 0x7, 0x7, './file2'}]}}, 0xc3) 5.353841745s ago: executing program 8 (id=11630): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x20}, 0x18) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 5.044030351s ago: executing program 8 (id=11635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r2, &(0x7f0000000140)={@void, @val={0x3, 0x1, 0x0, 0x401, 0x2, 0x6}, @eth={@broadcast, @random="3ce5d7cb8553", @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0x1, "01"}}}}}}, 0x1f) 4.932185584s ago: executing program 42 (id=11635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r2, &(0x7f0000000140)={@void, @val={0x3, 0x1, 0x0, 0x401, 0x2, 0x6}, @eth={@broadcast, @random="3ce5d7cb8553", @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0x1, "01"}}}}}}, 0x1f) 1.56058515s ago: executing program 2 (id=11703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe56, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1.394181943s ago: executing program 2 (id=11710): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="840c2e14b8356e7f3517b00f5278638cc1932c480153", 0x16}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000600)="5cf3", 0x2, 0x3b00, 0x0, 0x0) 1.317629734s ago: executing program 2 (id=11713): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') 1.065452999s ago: executing program 1 (id=11721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.03985738s ago: executing program 1 (id=11722): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fef}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x20004080) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 952.514902ms ago: executing program 1 (id=11725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000001f80)=""/4082, 0xff2) 921.859683ms ago: executing program 1 (id=11729): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_usb_disconnect(r0) 867.867734ms ago: executing program 3 (id=11733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 804.063794ms ago: executing program 3 (id=11734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 803.465854ms ago: executing program 3 (id=11736): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500090000000d000300686173683a6d6163"], 0x5c}}, 0x4000000) 682.073987ms ago: executing program 7 (id=11738): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x25, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 663.290007ms ago: executing program 7 (id=11739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = dup(r1) inotify_rm_watch(r3, r2) 618.359828ms ago: executing program 7 (id=11740): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000001f80)=""/4082, 0xff2) 617.956288ms ago: executing program 5 (id=11741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) 617.626218ms ago: executing program 7 (id=11742): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ptrace(0x10, r0) 572.19761ms ago: executing program 5 (id=11743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe7e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x10000000, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff4}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 571.858419ms ago: executing program 7 (id=11744): writev(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0x20000000000003c3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 571.352789ms ago: executing program 5 (id=11745): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 525.97681ms ago: executing program 3 (id=11746): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='(', 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x6}, &(0x7f0000000380)=0x8) 525.66968ms ago: executing program 3 (id=11747): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 525.30448ms ago: executing program 7 (id=11748): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000040)=[{0x6, 0xe, 0x7f, 0x2003}]}) socket$pptp(0x18, 0x1, 0x2) r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x2003516, 0x0, 0x0, 0x0, 0x0) 484.114381ms ago: executing program 3 (id=11749): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r1, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xa0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 483.721121ms ago: executing program 2 (id=11750): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}]}) 371.956673ms ago: executing program 2 (id=11751): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000400, &(0x7f00000005c0)={[{@abort}, {@errors_remount}]}, 0x3, 0x44f, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) unlink(&(0x7f0000000480)='./bus\x00') 371.561494ms ago: executing program 5 (id=11752): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 348.956054ms ago: executing program 5 (id=11753): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 259.688976ms ago: executing program 5 (id=11754): syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xff38}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x800, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2008, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 165.592897ms ago: executing program 1 (id=11755): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x7}}]}, 0xc1, 0x7b7, &(0x7f00000007c0)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x34) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) 164.883027ms ago: executing program 2 (id=11756): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 0s ago: executing program 1 (id=11757): socket(0x1d, 0x2, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0x21800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) kernel console output (not intermixed with test programs): transport for fe80::1a, load rds_tcp or rds_rdma? [ 280.576388][T26999] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26999 comm=syz.0.10171 [ 280.589151][T26999] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=26999 comm=syz.0.10171 [ 281.347418][T27097] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 281.427848][T27105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10218'. [ 281.440890][ C1] vcan0: j1939_session_tx_dat: 0xffff888105b0ce00: queue data error: -100 [ 281.612712][T27118] lo: entered promiscuous mode [ 281.617813][T27118] lo: entered allmulticast mode [ 281.625019][T27118] tunl0: entered promiscuous mode [ 281.630493][T27118] tunl0: entered allmulticast mode [ 281.636930][T27118] gre0: entered promiscuous mode [ 281.642005][T27118] gre0: entered allmulticast mode [ 281.647878][T27118] gretap0: entered promiscuous mode [ 281.653165][T27118] gretap0: entered allmulticast mode [ 281.659505][T27118] erspan0: entered promiscuous mode [ 281.664723][T27118] erspan0: entered allmulticast mode [ 281.670650][T27118] ip_vti0: entered promiscuous mode [ 281.675849][T27118] ip_vti0: entered allmulticast mode [ 281.681951][T27118] ip6_vti0: entered promiscuous mode [ 281.687382][T27118] ip6_vti0: entered allmulticast mode [ 281.693740][T27118] sit0: entered promiscuous mode [ 281.699118][T27118] sit0: entered allmulticast mode [ 281.705170][T27118] ip6tnl0: entered promiscuous mode [ 281.710425][T27118] ip6tnl0: entered allmulticast mode [ 281.718359][T27118] ip6gre0: entered promiscuous mode [ 281.723590][T27118] ip6gre0: entered allmulticast mode [ 281.729804][T27118] syz_tun: entered promiscuous mode [ 281.735163][T27118] syz_tun: entered allmulticast mode [ 281.740953][T27118] ip6gretap0: entered promiscuous mode [ 281.746535][T27118] ip6gretap0: entered allmulticast mode [ 281.752580][T27118] bridge0: entered promiscuous mode [ 281.757808][T27118] bridge0: entered allmulticast mode [ 281.763694][T27118] vcan0: entered promiscuous mode [ 281.768833][T27118] vcan0: entered allmulticast mode [ 281.774276][T27118] .`: entered promiscuous mode [ 281.779054][T27118] .`: entered allmulticast mode [ 281.785436][T27118] team0: entered promiscuous mode [ 281.790529][T27118] team0: entered allmulticast mode [ 281.796906][T27118] dummy0: entered promiscuous mode [ 281.802336][T27118] dummy0: entered allmulticast mode [ 281.808162][T27118] nlmon0: entered promiscuous mode [ 281.813376][T27118] nlmon0: entered allmulticast mode [ 281.819195][T27118] caif0: entered promiscuous mode [ 281.824326][T27118] caif0: entered allmulticast mode [ 281.829503][T27118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.191346][ T37] bridge_slave_1: left allmulticast mode [ 282.197097][ T37] bridge_slave_1: left promiscuous mode [ 282.202812][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.210573][ T37] bridge_slave_0: left allmulticast mode [ 282.216317][ T37] bridge_slave_0: left promiscuous mode [ 282.222001][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.291172][ T37] bond0 (unregistering): left promiscuous mode [ 282.297499][ T37] bond_slave_0: left promiscuous mode [ 282.303024][ T37] bond_slave_1: left promiscuous mode [ 282.308675][ T37] bond1 (unregistering): left promiscuous mode [ 282.315688][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.325555][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.334907][ T37] bond0 (unregistering): (slave bond1): Releasing backup interface [ 282.343294][ T37] bond0 (unregistering): Released all slaves [ 282.352484][ T37] bond1 (unregistering): Released all slaves [ 282.400308][ T37] veth1_to_bridge: left promiscuous mode [ 282.407521][ T37] hsr_slave_0: left promiscuous mode [ 282.413251][ T37] hsr_slave_1: left promiscuous mode [ 282.418935][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.426514][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.464653][ T37] team0 (unregistering): Port device team_slave_1 removed [ 282.474717][ T37] team0 (unregistering): Port device team_slave_0 removed [ 283.730947][T27170] macsec1: entered promiscuous mode [ 283.747021][T27170] bridge0: port 1(macsec1) entered blocking state [ 283.753525][T27170] bridge0: port 1(macsec1) entered disabled state [ 283.761295][ T29] kauditd_printk_skb: 719 callbacks suppressed [ 283.761331][ T29] audit: type=1400 audit(2000525564.229:10633): avc: denied { mounton } for pid=27171 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 283.773872][T27170] macsec1: entered allmulticast mode [ 283.796672][T27170] macsec1: left allmulticast mode [ 283.992104][T27171] chnl_net:caif_netlink_parms(): no params data found [ 284.037232][T27171] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.044402][T27171] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.051795][T27171] bridge_slave_0: entered allmulticast mode [ 284.058145][T27171] bridge_slave_0: entered promiscuous mode [ 284.070984][T27171] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.078230][T27171] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.085437][T27171] bridge_slave_1: entered allmulticast mode [ 284.092186][T27171] bridge_slave_1: entered promiscuous mode [ 284.116916][T27171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.127540][T27171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.144079][T27173] chnl_net:caif_netlink_parms(): no params data found [ 284.161325][T27171] team0: Port device team_slave_0 added [ 284.170829][T27171] team0: Port device team_slave_1 added [ 284.182328][ T37] IPVS: stop unused estimator thread 0... [ 284.214767][T27171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.221949][T27171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.247963][T27171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.259253][T27171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.266325][T27171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.292334][T27171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.307300][T27173] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.314444][T27173] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.321896][T27173] bridge_slave_0: entered allmulticast mode [ 284.328393][T27173] bridge_slave_0: entered promiscuous mode [ 284.335228][T27173] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.342381][T27173] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.349717][T27173] bridge_slave_1: entered allmulticast mode [ 284.356239][T27173] bridge_slave_1: entered promiscuous mode [ 284.379636][T27173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.394973][T27173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.406083][T27171] hsr_slave_0: entered promiscuous mode [ 284.412558][T27171] hsr_slave_1: entered promiscuous mode [ 284.431359][T27173] team0: Port device team_slave_0 added [ 284.443256][T27173] team0: Port device team_slave_1 added [ 284.461091][T27173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.468070][T27173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.494070][T27173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.511388][T27173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.518430][T27173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.544368][T27173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.580037][T27173] hsr_slave_0: entered promiscuous mode [ 284.586045][T27173] hsr_slave_1: entered promiscuous mode [ 284.592061][T27173] debugfs: 'hsr0' already exists in 'hsr' [ 284.597869][T27173] Cannot create hsr debugfs directory [ 284.917012][ T29] audit: type=1326 audit(2000525565.436:10634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27208 comm="syz.3.10242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 284.940763][ T29] audit: type=1326 audit(2000525565.436:10635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27208 comm="syz.3.10242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 284.964588][ T29] audit: type=1326 audit(2000525565.436:10636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27208 comm="syz.3.10242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 284.988669][T27211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10244'. [ 285.009507][T27211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10244'. [ 285.043053][T27171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 285.052046][T27171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 285.067152][ T29] audit: type=1326 audit(2000525565.594:10637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27216 comm="syz.2.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 285.092523][T27171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 285.118900][ T29] audit: type=1326 audit(2000525565.625:10638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27216 comm="syz.2.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 285.142631][ T29] audit: type=1326 audit(2000525565.625:10639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27216 comm="syz.2.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 285.166375][ T29] audit: type=1326 audit(2000525565.625:10640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27216 comm="syz.2.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 285.190179][ T29] audit: type=1326 audit(2000525565.636:10641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27216 comm="syz.2.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 285.213872][ T29] audit: type=1326 audit(2000525565.636:10642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27216 comm="syz.2.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 285.248213][T27171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 285.288219][ T3388] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 285.355833][ T37] .` (unregistering): Released all slaves [ 285.357394][ T5830] smc: removing ib device syz2 [ 285.363510][ T37] bond0 (unregistering): Released all slaves [ 285.406008][ T37] batman_adv: batadv0: Interface deactivated: macvtap1 [ 285.414663][ T37] bridge0 (unregistering): left allmulticast mode [ 285.425360][ T37] batman_adv: batadv0: Removing interface: macvtap1 [ 285.453647][ T37] bond0 (unregistering): left promiscuous mode [ 285.543610][ T37] bond0 (unregistering): Released all slaves [ 285.638386][T27171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.645506][T27171] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.657330][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.657379][ T5843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.662416][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.678760][ T5843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.733651][T27171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.733685][T27171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.780879][ T37] hsr_slave_0: left promiscuous mode [ 285.781292][ T37] hsr_slave_1: left promiscuous mode [ 285.781522][ T37] batman_adv: batadv0: Removing interface: veth1_vlan [ 285.787145][ T37] veth1_to_bridge: left promiscuous mode [ 285.789365][ T37] hsr_slave_0: left promiscuous mode [ 285.789742][ T37] hsr_slave_1: left promiscuous mode [ 285.790114][ T37] batman_adv: batadv0: Removing interface: veth1_vlan [ 286.032419][T27212] chnl_net:caif_netlink_parms(): no params data found [ 286.044232][T27257] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 286.065895][T27171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.114599][T27173] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 286.134276][T27264] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.166609][T27173] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 286.182526][T27212] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.189770][T27212] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.198781][T27212] bridge_slave_0: entered allmulticast mode [ 286.205597][T27212] bridge_slave_0: entered promiscuous mode [ 286.227934][T27173] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 286.245511][T27212] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.252891][T27212] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.266464][T27212] bridge_slave_1: entered allmulticast mode [ 286.273135][T27212] bridge_slave_1: entered promiscuous mode [ 286.292608][T27173] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 286.348639][T27212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.359990][T27212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.397350][T27212] team0: Port device team_slave_0 added [ 286.411328][T27212] team0: Port device team_slave_1 added [ 286.431078][T27171] veth0_vlan: entered promiscuous mode [ 286.439067][T27171] veth1_vlan: entered promiscuous mode [ 286.458689][T27212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.465745][T27212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.491761][T27212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.503361][T27212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.510601][T27212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.536655][T27212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.582008][T27212] hsr_slave_0: entered promiscuous mode [ 286.589897][T27212] hsr_slave_1: entered promiscuous mode [ 286.596452][T27212] debugfs: 'hsr0' already exists in 'hsr' [ 286.602195][T27212] Cannot create hsr debugfs directory [ 286.608859][T27171] veth0_macvtap: entered promiscuous mode [ 286.618326][T27171] veth1_macvtap: entered promiscuous mode [ 286.625815][ T37] IPVS: stop unused estimator thread 0... [ 286.643162][ T37] IPVS: stop unused estimator thread 0... [ 286.691846][T27171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.706125][T27171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.729619][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.753152][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.780565][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.796628][T27173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.814418][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.830182][T27173] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.863908][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.871084][ T5817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.898132][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.905288][ T5817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.970353][T27330] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27330 comm=syz.3.10280 [ 286.983215][T27330] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27330 comm=syz.3.10280 [ 287.040074][T27173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.175620][T27212] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.190024][T27212] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 287.203949][T27212] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.236200][T27212] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 287.267657][T27173] veth0_vlan: entered promiscuous mode [ 287.290676][T27173] veth1_vlan: entered promiscuous mode [ 287.321451][T27212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.348215][T27173] veth0_macvtap: entered promiscuous mode [ 287.383296][T27212] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.393745][T27173] veth1_macvtap: entered promiscuous mode [ 287.409147][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.416268][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.430661][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.437761][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.457442][T27173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.489091][T27173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.505428][ T5830] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.532066][ T5830] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.557045][ T5830] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.569429][ T5843] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.596330][T27212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.836580][T27212] veth0_vlan: entered promiscuous mode [ 287.863472][T27212] veth1_vlan: entered promiscuous mode [ 287.879558][T27436] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 287.901668][T27212] veth0_macvtap: entered promiscuous mode [ 287.911953][T27212] veth1_macvtap: entered promiscuous mode [ 287.949112][T27212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.980540][T27212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.998654][ T5830] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.029115][ T5830] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.046177][ T5830] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.058571][ T5830] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.243019][T27473] sd 0:0:1:0: device reset [ 288.295075][T27482] netlink: 'syz.5.10331': attribute type 3 has an invalid length. [ 288.324102][T27486] loop5: detected capacity change from 0 to 128 [ 288.405552][T27498] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 288.528547][T27517] loop5: detected capacity change from 0 to 256 [ 288.570779][T27521] loop5: detected capacity change from 0 to 512 [ 288.595346][T27521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.608298][T27521] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.665280][T27212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.716503][T27532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10352'. [ 288.725644][T27532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10352'. [ 288.774552][T27537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.817499][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 288.817561][ T29] audit: type=1326 audit(2000525569.541:10743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.10357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 288.847605][ T29] audit: type=1326 audit(2000525569.541:10744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.10357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 288.871399][ T29] audit: type=1326 audit(2000525569.541:10745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.10357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 288.895204][ T29] audit: type=1326 audit(2000525569.541:10746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.10357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 288.957766][ T29] audit: type=1326 audit(2000525569.677:10747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.5.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f58eec9 code=0x7ffc0000 [ 288.981586][ T29] audit: type=1326 audit(2000525569.677:10748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.5.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f58eec9 code=0x7ffc0000 [ 289.005420][ T29] audit: type=1326 audit(2000525569.677:10749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.5.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20f58eec9 code=0x7ffc0000 [ 289.029212][ T29] audit: type=1326 audit(2000525569.677:10750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.5.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f58eec9 code=0x7ffc0000 [ 289.052996][ T29] audit: type=1326 audit(2000525569.677:10751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.5.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20f58eec9 code=0x7ffc0000 [ 289.076772][ T29] audit: type=1326 audit(2000525569.677:10752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.5.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f58eec9 code=0x7ffc0000 [ 289.144251][T27556] loop5: detected capacity change from 0 to 512 [ 289.188729][T27556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.225330][T27556] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.242322][T27568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10369'. [ 289.251494][T27568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10369'. [ 289.322316][T27212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.828279][T27634] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10400'. [ 290.003959][T27664] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.129062][T27679] loop5: detected capacity change from 0 to 1024 [ 290.144390][T27679] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 290.167296][T27679] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.10421: Invalid block bitmap block 0 in block_group 0 [ 290.188937][T27679] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.10421: Failed to acquire dquot type 0 [ 290.237110][T27679] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.10421: Freeing blocks not in datazone - block = 0, count = 4096 [ 290.298681][T27679] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.10421: Invalid inode bitmap blk 0 in block_group 0 [ 290.322070][ T5843] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:44: Failed to release dquot type 0 [ 290.353553][T27679] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 290.376061][T27679] EXT4-fs (loop5): 1 orphan inode deleted [ 290.382268][T27679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.524557][T27212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.642095][T27724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10442'. [ 290.898461][T27738] loop8: detected capacity change from 0 to 1024 [ 290.915065][T27738] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 290.929205][T27738] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.10449: Invalid block bitmap block 0 in block_group 0 [ 290.944310][T27738] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.10449: Failed to acquire dquot type 0 [ 290.956244][T27738] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.10449: Freeing blocks not in datazone - block = 0, count = 4096 [ 290.970022][T27738] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.10449: Invalid inode bitmap blk 0 in block_group 0 [ 290.985561][ T37] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 291.005394][T27738] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 291.014334][T27738] EXT4-fs (loop8): 1 orphan inode deleted [ 291.020590][T27738] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.052664][T27173] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.323023][T27772] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10463'. [ 291.714925][T27814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10482'. [ 291.734561][T27814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10482'. [ 291.920744][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 291.928424][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 291.935912][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 291.943429][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 291.950990][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 291.958480][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 291.965949][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 291.973405][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 291.981019][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 291.988733][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 292.012701][ T3388] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 292.174558][T27868] bridge0: entered promiscuous mode [ 292.190281][T27868] macsec1: entered promiscuous mode [ 292.199699][T27868] bridge0: port 3(macsec1) entered blocking state [ 292.206235][T27868] bridge0: port 3(macsec1) entered disabled state [ 292.219691][T27868] macsec1: entered allmulticast mode [ 292.225116][T27868] bridge0: entered allmulticast mode [ 292.234378][T27868] macsec1: left allmulticast mode [ 292.239579][T27868] bridge0: left allmulticast mode [ 292.255709][T27868] bridge0: left promiscuous mode [ 292.381675][T27894] veth1_to_bridge: entered promiscuous mode [ 292.389253][T27894] veth1_to_bridge: left promiscuous mode [ 292.429999][T27900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10519'. [ 292.771251][T27928] loop8: detected capacity change from 0 to 512 [ 292.771658][T27928] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.771868][T27928] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 292.779936][T27928] EXT4-fs (loop8): 1 truncate cleaned up [ 292.780422][T27928] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.107467][T27941] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 293.168754][T27949] netlink: 'syz.3.10538': attribute type 3 has an invalid length. [ 293.461839][T27974] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.543512][T27982] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 293.640980][T27173] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.659372][T27985] bridge0: entered promiscuous mode [ 293.672733][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 293.672749][ T29] audit: type=1400 audit(2000525574.632:11021): avc: denied { create } for pid=27986 comm="syz.5.10554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 293.698827][T27985] macsec1: entered promiscuous mode [ 293.704455][T27985] bridge0: port 1(macsec1) entered blocking state [ 293.710966][T27985] bridge0: port 1(macsec1) entered disabled state [ 293.723131][ T29] audit: type=1400 audit(2000525574.685:11022): avc: denied { bind } for pid=27986 comm="syz.5.10554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 293.743855][T27985] macsec1: entered allmulticast mode [ 293.749224][T27985] bridge0: entered allmulticast mode [ 293.755326][ T29] audit: type=1326 audit(2000525574.685:11023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27990 comm="syz.8.10563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 293.779178][ T29] audit: type=1326 audit(2000525574.685:11024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27990 comm="syz.8.10563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 293.802883][ T29] audit: type=1326 audit(2000525574.685:11025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27990 comm="syz.8.10563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 293.826710][ T29] audit: type=1326 audit(2000525574.685:11026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27990 comm="syz.8.10563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 293.850551][ T29] audit: type=1326 audit(2000525574.695:11027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27990 comm="syz.8.10563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 293.874396][ T29] audit: type=1326 audit(2000525574.695:11028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27990 comm="syz.8.10563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 293.898916][ T29] audit: type=1326 audit(2000525574.779:11029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27990 comm="syz.8.10563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 293.903155][T27985] macsec1: left allmulticast mode [ 293.922633][ T29] audit: type=1326 audit(2000525574.779:11030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27990 comm="syz.8.10563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 293.951487][T27985] bridge0: left allmulticast mode [ 293.971789][T27985] bridge0: left promiscuous mode [ 294.019840][T28003] __nla_validate_parse: 4 callbacks suppressed [ 294.019857][T28003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10557'. [ 294.063795][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 294.070325][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.078167][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.086036][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.093967][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.101837][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.109679][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.117528][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.125395][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.133260][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.141139][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.149004][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.156969][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.164819][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.172727][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.180590][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.188430][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.196290][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.204135][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.212076][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.219917][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.219954][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.235593][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.235647][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.251272][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.259124][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.266983][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.274870][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.282725][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.290592][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.298460][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.306330][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.314214][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.322068][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.329936][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.337806][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.345629][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.353513][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.361414][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.369280][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.377125][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.384985][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.392844][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.400700][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.408534][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.416395][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.424211][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.432020][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.439847][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.447676][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.455512][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.463344][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.471186][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.479042][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.486875][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.494713][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.502522][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.510368][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.518199][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.526055][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.533910][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.541744][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.549556][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.557397][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.565211][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.573046][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.580888][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.588710][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 294.596537][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 294.655257][T28025] netlink: 'syz.1.10569': attribute type 3 has an invalid length. [ 294.704576][ T1034] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 294.763348][T28043] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 294.763348][T28043] program syz.8.10576 not setting count and/or reply_len properly [ 294.997685][T28070] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 294.997685][T28070] program syz.1.10589 not setting count and/or reply_len properly [ 295.112434][T28074] hub 8-0:1.0: USB hub found [ 295.117175][T28074] hub 8-0:1.0: 8 ports detected [ 295.182760][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10594'. [ 295.229846][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 295.236334][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.244163][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.252011][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.259819][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.267687][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.275537][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.283388][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.291259][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.299097][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.306944][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.314825][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.322683][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.330549][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.338400][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.346249][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.354103][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.361962][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.369816][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.377683][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.385531][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.393383][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.401229][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.409091][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.416924][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.424791][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.432612][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.440551][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.448487][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.456344][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.464202][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.472057][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.479885][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.487743][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.495587][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.503533][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.511360][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.519188][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.526992][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.534862][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.542696][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.550544][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.558541][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.566409][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.574212][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.582077][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.589927][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.597749][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.605570][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.613402][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.621227][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.629046][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.636896][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.644817][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.652647][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.660482][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.668329][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.676186][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.684049][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.691916][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.699731][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.707546][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.715386][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.723222][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.731140][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.738995][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.746810][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.754656][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.762487][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.770319][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.778132][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.785965][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.793809][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.801640][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.809507][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.817359][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.825204][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.833053][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.840853][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.848801][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.856638][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.864490][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.872321][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.880133][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.887952][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.895831][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.903732][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.911658][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.919472][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.927332][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.935156][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.943125][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.950938][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.958757][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.966629][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.974472][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.982286][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 295.990112][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 295.997928][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.005746][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.013564][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.021404][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.029216][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.037042][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.044905][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.052854][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.060918][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.068794][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.076616][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.084441][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.092273][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.100103][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.107938][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.115892][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.123702][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.131541][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.139367][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.147185][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.154993][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.162823][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.170655][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.178482][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.186332][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.194159][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.201987][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.209835][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.217680][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.225541][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.233404][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.241366][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.249183][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.257006][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.264851][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.272701][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.280545][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.288398][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.296228][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.304080][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.311898][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.320154][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.327989][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.335839][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.343656][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.351498][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.359312][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.367146][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.374965][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.382804][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.390620][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.398508][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.406354][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.414181][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.422002][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.429855][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.437673][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.445492][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.453302][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.461118][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.469102][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.476923][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.484732][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.492658][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.500487][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.508297][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.516154][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.523999][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.531827][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.539644][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.547472][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.555385][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.563201][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.571044][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.578857][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.586694][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.594503][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.602345][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.610172][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.618004][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.625897][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.633716][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.641512][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.649351][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.657161][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.664987][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.672835][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.680661][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.688488][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.696353][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.704242][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.712073][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.719891][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.727729][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.735553][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.743402][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.751216][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.759038][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.766932][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.774744][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.782583][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.790414][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.798311][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.806159][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.813965][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.821806][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.829707][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.837532][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.845360][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.853207][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.861011][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.868854][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.876675][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.884524][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.892345][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.900174][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.907986][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.915823][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.923647][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.931498][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.939322][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.947151][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.954976][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.962818][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.970637][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.978540][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 296.986356][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 296.994183][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.002006][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.009837][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.017648][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.025487][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.033312][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.041137][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.048949][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.056791][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.064662][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.072503][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.080300][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.088146][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.095953][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.103778][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.111604][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.119528][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.127437][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.135257][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.143085][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.150910][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.158720][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.166553][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.174368][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.182283][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.190105][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.197933][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.205760][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.213591][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.221447][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.229267][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.237095][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.244929][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.252738][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.260664][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.268473][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.276295][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.284112][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.291932][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.299733][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.307548][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 297.315361][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 297.399094][T28106] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 297.399094][T28106] program syz.5.10603 not setting count and/or reply_len properly [ 297.585576][T28140] netlink: 'syz.1.10619': attribute type 10 has an invalid length. [ 297.597613][T28140] team0: Port device dummy0 added [ 297.614582][T28140] netlink: 'syz.1.10619': attribute type 10 has an invalid length. [ 297.626787][T28140] team0: Port device dummy0 removed [ 297.637375][T28140] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 297.730228][T28157] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10627'. [ 297.981557][T28193] 9pnet: p9_errstr2errno: server reported unknown error @c$ [ 298.131993][T28212] ip_vti0: left promiscuous mode [ 298.137002][T28212] ip_vti0: left allmulticast mode [ 298.143415][T28212] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10651'. [ 298.182027][T28222] $H: renamed from bond0 (while UP) [ 298.188411][T28220] rdma_op ffff888119578180 conn xmit_rdma 0000000000000000 [ 298.198337][T28222] $H: entered promiscuous mode [ 298.203410][T28222] bond_slave_0: entered promiscuous mode [ 298.209357][T28222] bond_slave_1: entered promiscuous mode [ 298.305603][T28238] lo speed is unknown, defaulting to 1000 [ 298.312052][T28238] lo speed is unknown, defaulting to 1000 [ 298.321862][T28238] lo speed is unknown, defaulting to 1000 [ 298.333376][T28238] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 298.350637][T28238] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 298.368755][T28238] lo speed is unknown, defaulting to 1000 [ 298.380839][T28238] lo speed is unknown, defaulting to 1000 [ 298.387060][T28238] lo speed is unknown, defaulting to 1000 [ 298.393397][T28238] lo speed is unknown, defaulting to 1000 [ 298.399684][T28238] lo speed is unknown, defaulting to 1000 [ 298.607165][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 298.607183][ T29] audit: type=1326 audit(2000525579.818:11166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 298.641055][ T29] audit: type=1326 audit(2000525579.850:11167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 298.664915][ T29] audit: type=1326 audit(2000525579.850:11168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 298.688681][ T29] audit: type=1326 audit(2000525579.850:11169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 298.712468][ T29] audit: type=1326 audit(2000525579.850:11170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 298.736274][ T29] audit: type=1326 audit(2000525579.850:11171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 298.746839][T28255] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10672'. [ 298.760025][ T29] audit: type=1326 audit(2000525579.850:11172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 298.792653][ T29] audit: type=1326 audit(2000525579.850:11173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 298.816317][ T29] audit: type=1326 audit(2000525579.850:11174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 298.839987][ T29] audit: type=1326 audit(2000525579.850:11175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211375eec9 code=0x7ffc0000 [ 298.868500][T28243] netlink: 'syz.3.10666': attribute type 1 has an invalid length. [ 298.925330][T28260] netlink: 87 bytes leftover after parsing attributes in process `syz.2.10674'. [ 299.177545][T28287] SELinux: policydb version 1207 does not match my version range 15-35 [ 299.204986][T28287] SELinux: failed to load policy [ 299.255425][T28299] loop8: detected capacity change from 0 to 512 [ 299.291947][T28299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.322713][T28299] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.377864][T27173] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.535057][T28340] loop5: detected capacity change from 0 to 1024 [ 299.544742][T28340] EXT4-fs: Ignoring removed i_version option [ 299.551681][T28340] EXT4-fs: Ignoring removed nobh option [ 299.558490][T28342] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 299.580423][T28340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.626564][T28340] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.10709: Allocating blocks 449-513 which overlap fs metadata [ 299.650525][T28338] EXT4-fs (loop5): pa ffff88810727dcb0: logic 48, phys. 177, len 21 [ 299.658726][T28338] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 299.682999][T27212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.703961][T28356] lo speed is unknown, defaulting to 1000 [ 299.768922][T28364] loop5: detected capacity change from 0 to 128 [ 299.794537][T28364] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.812283][T28364] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 299.914618][T27212] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.933001][T28377] netlink: 340 bytes leftover after parsing attributes in process `syz.2.10725'. [ 299.986585][T28384] netlink: 65055 bytes leftover after parsing attributes in process `syz.8.10727'. [ 300.005678][T28388] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28388 comm=syz.3.10728 [ 300.024660][T28389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10729'. [ 300.169183][T28416] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 300.208612][T28422] sd 0:0:1:0: device reset [ 300.213374][T28420] loop8: detected capacity change from 0 to 512 [ 300.245026][T28420] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 300.253197][T28420] EXT4-fs (loop8): orphan cleanup on readonly fs [ 300.261040][T28420] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.10743: corrupted inode contents [ 300.273434][T28420] EXT4-fs (loop8): Remounting filesystem read-only [ 300.280266][T28420] EXT4-fs (loop8): 1 truncate cleaned up [ 300.286106][ T5817] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 300.296708][ T5817] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 300.307607][ T5817] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 300.320702][T28420] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 300.347802][T27173] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.453461][T28443] vhci_hcd: invalid port number 11 [ 300.458617][T28443] vhci_hcd: default hub control req: 6031 v0000 i000b l2 [ 300.546569][T28453] netlink: 'syz.3.10758': attribute type 10 has an invalid length. [ 300.555423][T28453] dummy0: left promiscuous mode [ 300.560408][T28453] dummy0: left allmulticast mode [ 300.568132][T28453] dummy0: entered promiscuous mode [ 300.573345][T28453] dummy0: entered allmulticast mode [ 300.579273][T28453] .`: (slave dummy0): Enslaving as an active interface with an up link [ 300.653246][T28461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10762'. [ 300.662382][T28461] netlink: 212 bytes leftover after parsing attributes in process `syz.3.10762'. [ 300.806289][T28481] ALSA: seq fatal error: cannot create timer (-22) [ 300.928633][T28496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10780'. [ 300.938237][T28496] 8021q: VLANs not supported on ip6_vti0 [ 301.001657][T28510] netlink: 'syz.2.10785': attribute type 13 has an invalid length. [ 301.021801][T28510] netlink: 'syz.2.10785': attribute type 13 has an invalid length. [ 301.029857][ T5817] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.040708][ T5817] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.050500][ T5817] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.081668][ T5817] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.131789][T28525] random: crng reseeded on system resumption [ 301.181869][T28530] IPv6: Can't replace route, no match found [ 301.748875][T28625] sd 0:0:1:0: device reset [ 301.863186][T28635] sd 0:0:1:0: device reset [ 301.945773][T28647] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10851'. [ 302.177740][T28682] 9pnet_fd: p9_fd_create_tcp (28682): problem connecting socket to 127.0.0.1 [ 302.373197][T28712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.389699][T24473] lo speed is unknown, defaulting to 1000 [ 302.878702][T28759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10900'. [ 302.905011][T28759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 302.934022][T28759] bond2 (unregistering): Released all slaves [ 303.363433][T28788] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 303.577611][T28815] IPv6: NLM_F_CREATE should be specified when creating new route [ 303.672162][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 303.672180][ T29] audit: type=1326 audit(2000525585.130:11514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28818 comm="syz.1.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1568aeec9 code=0x7ffc0000 [ 303.702223][ T29] audit: type=1326 audit(2000525585.130:11515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28818 comm="syz.1.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1568aeec9 code=0x7ffc0000 [ 303.726138][ T29] audit: type=1326 audit(2000525585.130:11516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28818 comm="syz.1.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fa1568aeec9 code=0x7ffc0000 [ 303.749979][ T29] audit: type=1326 audit(2000525585.130:11517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28818 comm="syz.1.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1568aeec9 code=0x7ffc0000 [ 303.909698][T28822] __nla_validate_parse: 7 callbacks suppressed [ 303.909718][T28822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10930'. [ 303.990848][T28837] sd 0:0:1:0: device reset [ 304.156322][ T29] audit: type=1326 audit(2000525585.634:11518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28847 comm="syz.5.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f58eec9 code=0x7ffc0000 [ 304.156625][T28852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10944'. [ 304.180097][ T29] audit: type=1326 audit(2000525585.634:11519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28847 comm="syz.5.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f58eec9 code=0x7ffc0000 [ 304.226966][ T29] audit: type=1326 audit(2000525585.676:11520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28847 comm="syz.5.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fa20f58eec9 code=0x7ffc0000 [ 304.250744][ T29] audit: type=1326 audit(2000525585.676:11521): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28847 comm="syz.5.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f58eec9 code=0x7ffc0000 [ 304.284509][T28852] xfrm1: entered promiscuous mode [ 304.288313][ T29] audit: type=1326 audit(2000525585.718:11522): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28847 comm="syz.5.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f58eec9 code=0x7ffc0000 [ 304.289621][T28852] xfrm1: entered allmulticast mode [ 304.322824][T28852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10944'. [ 304.378081][T28865] vhci_hcd: invalid port number 96 [ 304.383317][T28865] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 304.434764][ T29] audit: type=1326 audit(2000525585.928:11523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28875 comm="syz.3.10955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 304.477294][T28879] 9pnet: p9_errstr2errno: server reported unknown error  [ 304.511204][T28884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10960'. [ 304.537044][T28890] netlink: 'syz.3.10963': attribute type 10 has an invalid length. [ 304.554786][T28890] .`: (slave dummy0): Releasing backup interface [ 304.564263][T28890] dummy0: left promiscuous mode [ 304.570630][T28890] dummy0: left allmulticast mode [ 304.596205][T28890] dummy0: entered promiscuous mode [ 304.603174][T28890] dummy0: entered allmulticast mode [ 304.611943][T28890] team0: Port device dummy0 added [ 304.639628][T28890] netlink: 'syz.3.10963': attribute type 10 has an invalid length. [ 304.653813][T28890] dummy0: left promiscuous mode [ 304.659926][T28890] dummy0: left allmulticast mode [ 304.665596][T28890] team0: Port device dummy0 removed [ 304.676672][T28890] dummy0: entered promiscuous mode [ 304.682006][T28890] dummy0: entered allmulticast mode [ 304.688196][T28890] .`: (slave dummy0): Enslaving as an active interface with an up link [ 304.787409][T28909] Falling back ldisc for ttyS3. [ 305.051834][T28955] random: crng reseeded on system resumption [ 305.202800][T28968] $H: renamed from .` (while UP) [ 305.255920][T28975] netlink: 87 bytes leftover after parsing attributes in process `syz.8.11011'. [ 305.381803][T28992] netlink: 'syz.5.11010': attribute type 3 has an invalid length. [ 305.889370][T29046] loop8: detected capacity change from 0 to 764 [ 305.908560][T29046] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 306.088734][T29069] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 306.369666][T29097] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11058'. [ 306.380461][T29098] rdma_op ffff888119579980 conn xmit_rdma 0000000000000000 [ 306.398317][T29094] hub 8-0:1.0: USB hub found [ 306.406215][T29094] hub 8-0:1.0: 8 ports detected [ 306.438658][T29104] lo speed is unknown, defaulting to 1000 [ 306.530041][T29115] netlink: 340 bytes leftover after parsing attributes in process `syz.3.11063'. [ 306.572521][T29121] siw: device registration error -23 [ 306.640353][T29131] sd 0:0:1:0: device reset [ 306.658441][T29135] rdma_op ffff888126761180 conn xmit_rdma 0000000000000000 [ 306.675904][T29129] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29129 comm=syz.2.11069 [ 306.742118][T29151] siw: device registration error -23 [ 306.805520][T29159] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29159 comm=syz.3.11084 [ 306.818258][T29159] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=29159 comm=syz.3.11084 [ 307.030409][T29194] netlink: 'syz.1.11097': attribute type 1 has an invalid length. [ 307.616113][T29238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.691651][T29248] netlink: 176 bytes leftover after parsing attributes in process `syz.5.11122'. [ 307.748215][T29257] netlink: 'syz.5.11128': attribute type 10 has an invalid length. [ 307.760948][T29257] team0: Port device dummy0 added [ 307.775677][T29257] netlink: 'syz.5.11128': attribute type 10 has an invalid length. [ 307.786916][T29257] team0: Port device dummy0 removed [ 307.798441][T29257] dummy0: entered promiscuous mode [ 307.804534][T29257] $H: (slave dummy0): Enslaving as an active interface with an up link [ 308.024359][T29299] netlink: 'syz.8.11145': attribute type 10 has an invalid length. [ 308.038001][T29299] team0: Port device dummy0 added [ 308.052001][T29299] netlink: 'syz.8.11145': attribute type 10 has an invalid length. [ 308.062574][T29299] team0: Port device dummy0 removed [ 308.070552][T29299] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 308.353873][T29345] IPv6: Can't replace route, no match found [ 308.391690][T29351] sd 0:0:1:0: device reset [ 308.413208][T29354] netlink: 'syz.1.11172': attribute type 10 has an invalid length. [ 308.423501][T29354] bond0: (slave dummy0): Releasing backup interface [ 308.441359][T29354] team0: Port device dummy0 added [ 308.454277][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 308.454294][ T29] audit: type=1326 audit(2000525590.148:11847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29357 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 308.484317][ T29] audit: type=1326 audit(2000525590.148:11848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29357 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 308.508219][ T29] audit: type=1326 audit(2000525590.148:11849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29357 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 308.531955][ T29] audit: type=1326 audit(2000525590.148:11850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29357 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 308.555720][ T29] audit: type=1326 audit(2000525590.148:11851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29357 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 308.579463][ T29] audit: type=1326 audit(2000525590.148:11852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29357 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 308.603248][ T29] audit: type=1326 audit(2000525590.148:11853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29357 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 308.605579][T29361] netlink: 'syz.1.11172': attribute type 10 has an invalid length. [ 308.631136][ T29] audit: type=1326 audit(2000525590.159:11854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29357 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 308.658909][ T29] audit: type=1326 audit(2000525590.159:11855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29357 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 308.682616][ T29] audit: type=1326 audit(2000525590.159:11856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29357 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6788eaeec9 code=0x7ffc0000 [ 308.706817][T29361] team0: Port device dummy0 removed [ 308.715468][T29361] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 308.853388][T29378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11181'. [ 309.177197][T29395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11198'. [ 309.186246][T29395] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11198'. [ 309.195390][T29395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11198'. [ 309.204362][T29395] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11198'. [ 309.221345][T29395] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11198'. [ 309.557525][T29428] netlink: 'syz.2.11204': attribute type 10 has an invalid length. [ 309.606295][T29428] netlink: 'syz.2.11204': attribute type 10 has an invalid length. [ 309.638528][T29428] dummy0: entered promiscuous mode [ 309.644653][T29428] $H: (slave dummy0): Enslaving as an active interface with an up link [ 309.851446][T29451] sctp: [Deprecated]: syz.1.11216 (pid 29451) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.851446][T29451] Use struct sctp_sack_info instead [ 309.877066][T29457] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 309.887134][T29457] SELinux: failed to load policy [ 309.949977][T29462] loop5: detected capacity change from 0 to 512 [ 309.959562][T29462] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 309.979523][T29462] EXT4-fs (loop5): 1 truncate cleaned up [ 309.987193][T29462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.009605][T29462] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.11231: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 310.029945][T29462] EXT4-fs (loop5): Remounting filesystem read-only [ 310.048788][T27212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.067604][T29477] IPv6: Can't replace route, no match found [ 310.103321][T29482] netlink: 'syz.2.11228': attribute type 1 has an invalid length. [ 310.111185][T29482] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.11228'. [ 310.115826][T29480] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 310.135934][T29484] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 310.136287][T29480] SELinux: failed to load policy [ 310.432874][T29525] 9pnet: p9_errstr2errno: server reported unknown error 1 [ 310.631667][T29558] netlink: 'syz.5.11261': attribute type 29 has an invalid length. [ 310.640647][T29558] netlink: 'syz.5.11261': attribute type 29 has an invalid length. [ 310.649687][T29558] netlink: 500 bytes leftover after parsing attributes in process `syz.5.11261'. [ 310.848113][T29589] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11273'. [ 310.871265][T29589] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11273'. [ 310.899954][T29591] lo speed is unknown, defaulting to 1000 [ 311.080749][T29622] netlink: 'syz.1.11287': attribute type 10 has an invalid length. [ 311.098211][T29622] bond0: (slave dummy0): Releasing backup interface [ 311.108270][T29622] team0: Port device dummy0 added [ 311.128213][T29622] netlink: 'syz.1.11287': attribute type 10 has an invalid length. [ 311.143221][T29622] team0: Port device dummy0 removed [ 311.162263][T29622] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 311.238655][T29638] netlink: 'syz.3.11303': attribute type 10 has an invalid length. [ 311.249047][T29638] .`: (slave dummy0): Releasing backup interface [ 311.257857][T29638] dummy0: left promiscuous mode [ 311.262955][T29638] dummy0: left allmulticast mode [ 311.269948][T29638] dummy0: entered promiscuous mode [ 311.275414][T29638] dummy0: entered allmulticast mode [ 311.281005][T29638] team0: Port device dummy0 added [ 311.301610][T29638] netlink: 'syz.3.11303': attribute type 10 has an invalid length. [ 311.311383][T29638] dummy0: left promiscuous mode [ 311.316545][T29638] dummy0: left allmulticast mode [ 311.322159][T29638] team0: Port device dummy0 removed [ 311.330518][T29638] dummy0: entered promiscuous mode [ 311.336930][T29638] dummy0: entered allmulticast mode [ 311.343305][T29638] .`: (slave dummy0): Enslaving as an active interface with an up link [ 311.380540][ T3388] hid_parser_main: 54 callbacks suppressed [ 311.380562][ T3388] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 311.395721][ T3388] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 311.455915][T29649] netlink: 'syz.3.11309': attribute type 10 has an invalid length. [ 311.473313][T29649] .`: (slave dummy0): Releasing backup interface [ 311.481053][T29649] dummy0: left promiscuous mode [ 311.487188][T29649] dummy0: left allmulticast mode [ 311.494655][T29649] dummy0: entered promiscuous mode [ 311.499898][T29649] dummy0: entered allmulticast mode [ 311.506020][T29649] team0: Port device dummy0 added [ 311.521295][T29649] dummy0: left promiscuous mode [ 311.527526][T29649] dummy0: left allmulticast mode [ 311.533229][T29649] team0: Port device dummy0 removed [ 311.542493][T29649] dummy0: entered promiscuous mode [ 311.547729][T29649] dummy0: entered allmulticast mode [ 311.553645][T29649] .`: (slave dummy0): Enslaving as an active interface with an up link [ 311.695951][T29664] pimreg: entered allmulticast mode [ 311.701778][T29662] pim6reg1: entered promiscuous mode [ 311.707160][T29662] pim6reg1: entered allmulticast mode [ 311.714464][T29664] pimreg: left allmulticast mode [ 311.840153][T29687] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 311.947521][T29701] vlan2: entered allmulticast mode [ 311.987431][T29706] vlan2: entered allmulticast mode [ 312.132699][T29730] loop8: detected capacity change from 0 to 256 [ 312.161082][T29736] 0{X: renamed from gretap0 (while UP) [ 312.179873][T29736] 0{X: left promiscuous mode [ 312.185134][T29736] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 312.394899][T29769] smc: net device bond0 applied user defined pnetid SYZ0 [ 312.407575][T29769] smc: net device bond0 erased user defined pnetid SYZ0 [ 313.054654][T29839] IPv6: Can't replace route, no match found [ 313.231545][T29858] loop8: detected capacity change from 0 to 1024 [ 313.239779][T29858] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 313.250823][T29858] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 313.263473][T29858] JBD2: no valid journal superblock found [ 313.269286][T29858] EXT4-fs (loop8): Could not load journal inode [ 313.282014][T29858] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 313.315394][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 313.315423][ T29] audit: type=1326 audit(2000525595.261:12066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.3.11396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 313.371781][ T29] audit: type=1326 audit(2000525595.292:12067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.3.11396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 313.395551][ T29] audit: type=1326 audit(2000525595.292:12068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.3.11396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 313.419347][ T29] audit: type=1326 audit(2000525595.292:12069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.3.11396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 313.443324][ T29] audit: type=1326 audit(2000525595.292:12070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.3.11396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 313.467149][ T29] audit: type=1326 audit(2000525595.292:12071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.3.11396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 313.491193][ T29] audit: type=1326 audit(2000525595.292:12072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.3.11396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 313.514957][ T29] audit: type=1326 audit(2000525595.292:12073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.3.11396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 313.538739][ T29] audit: type=1326 audit(2000525595.303:12074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.3.11396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 313.562644][ T29] audit: type=1326 audit(2000525595.303:12075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.3.11396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 313.630494][T29885] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.776793][T29908] loop8: detected capacity change from 0 to 512 [ 313.795884][T29908] EXT4-fs (loop8): orphan cleanup on readonly fs [ 313.816741][T29908] EXT4-fs error (device loop8): ext4_quota_enable:7128: comm syz.8.11413: inode #218103808: comm syz.8.11413: iget: illegal inode # [ 313.835175][T29908] EXT4-fs error (device loop8): ext4_quota_enable:7131: comm syz.8.11413: Bad quota inode: 218103808, type: 2 [ 313.848432][T29908] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 313.867956][T29908] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 313.875420][T29908] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 313.895753][T29908] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 313.925009][T29908] EXT4-fs error (device loop8): ext4_quota_enable:7128: comm syz.8.11413: inode #218103808: comm syz.8.11413: iget: illegal inode # [ 313.947875][T29908] EXT4-fs error (device loop8): ext4_quota_enable:7131: comm syz.8.11413: Bad quota inode: 218103808, type: 2 [ 313.962054][T29908] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 314.005387][T29937] block device autoloading is deprecated and will be removed. [ 314.014476][T27173] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.139897][T29955] loop5: detected capacity change from 0 to 512 [ 314.190141][T29955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.204321][T29955] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.220008][T29967] loop1: detected capacity change from 0 to 128 [ 314.244284][T29972] sd 0:0:1:0: device reset [ 314.318464][T27212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.381929][T29984] SELinux: failed to load policy [ 314.392609][T29983] bridge0: entered promiscuous mode [ 314.399809][T29983] macsec1: entered promiscuous mode [ 314.414275][T29983] bridge0: port 3(macsec1) entered blocking state [ 314.420864][T29983] bridge0: port 3(macsec1) entered disabled state [ 314.436391][T29983] macsec1: entered allmulticast mode [ 314.441735][T29983] bridge0: entered allmulticast mode [ 314.455649][T29983] macsec1: left allmulticast mode [ 314.460724][T29983] bridge0: left allmulticast mode [ 314.513978][T29983] bridge0: left promiscuous mode [ 314.645353][T30002] lo speed is unknown, defaulting to 1000 [ 314.752087][T30012] __nla_validate_parse: 6 callbacks suppressed [ 314.752235][T30012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11458'. [ 314.932952][T30028] loop3: detected capacity change from 0 to 256 [ 314.946506][T30032] loop5: detected capacity change from 0 to 164 [ 314.951451][T30028] msdos: Bad value for 'fmask' [ 314.960919][T30032] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 315.239170][T30065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11480'. [ 315.278306][T30065] xfrm1: entered promiscuous mode [ 315.283295][T30069] 9pnet: p9_errstr2errno: server reported unknown error  [ 315.290634][T30065] xfrm1: entered allmulticast mode [ 315.303153][T30065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11480'. [ 315.352588][T30072] random: crng reseeded on system resumption [ 315.368409][T30073] loop5: detected capacity change from 0 to 512 [ 315.410862][T30073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.443587][T30081] ALSA: seq fatal error: cannot create timer (-22) [ 315.466544][T30073] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.600600][T27212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.708245][T30116] ALSA: seq fatal error: cannot create timer (-22) [ 315.756810][T30121] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30121 comm=syz.5.11507 [ 315.830344][T30128] loop1: detected capacity change from 0 to 2048 [ 315.845367][T30132] pim6reg: entered allmulticast mode [ 315.856965][T30128] loop1: p1 p3 p4 [ 315.858022][T30132] pim6reg: left allmulticast mode [ 315.862859][T30128] loop1: p4 size 589824 extends beyond EOD, truncated [ 315.957188][T30142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30142 comm=syz.8.11516 [ 316.038911][T30147] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11518'. [ 316.101550][T30151] loop8: detected capacity change from 0 to 1024 [ 316.109935][T30153] 9pnet_fd: p9_fd_create_tcp (30153): problem connecting socket to 127.0.0.1 [ 316.118428][T30151] EXT4-fs: Ignoring removed nobh option [ 316.124373][T30151] EXT4-fs: inline encryption not supported [ 316.145111][T30151] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.212308][T30151] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.11530: Allocating blocks 497-513 which overlap fs metadata [ 316.249826][T30151] EXT4-fs (loop8): pa ffff88810727dc40: logic 16, phys. 129, len 24 [ 316.257947][T30151] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 316.286293][T30168] loop1: detected capacity change from 0 to 2048 [ 316.303075][T30171] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30171 comm=syz.3.11527 [ 316.304245][T27173] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.315831][T30171] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30171 comm=syz.3.11527 [ 316.346009][T30168] loop1: p2 p3 p7 [ 316.465008][T30191] $H: renamed from .` (while UP) [ 316.472587][T30191] $H: left allmulticast mode [ 316.481492][T30191] dummy0: left allmulticast mode [ 316.546141][T30211] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 316.546141][T30211] program syz.3.11541 not setting count and/or reply_len properly [ 316.648358][T30221] vhci_hcd: invalid port number 96 [ 316.653521][T30221] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 316.869017][T30245] $H: renamed from bond0 (while UP) [ 316.878128][T30245] $H: entered promiscuous mode [ 316.883180][T30245] bond_slave_0: entered promiscuous mode [ 316.888990][T30245] bond_slave_1: entered promiscuous mode [ 316.894890][T30245] dummy0: entered promiscuous mode [ 317.025319][T30252] SELinux: failed to load policy [ 317.071188][T30255] netlink: 340 bytes leftover after parsing attributes in process `syz.1.11561'. [ 317.258946][T30232] validate_nla: 6 callbacks suppressed [ 317.258964][T30232] netlink: 'syz.5.11549': attribute type 1 has an invalid length. [ 317.372762][T30279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.383160][T30279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.393861][T30277] vhci_hcd: invalid port number 96 [ 317.399071][T30277] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 317.426767][T30289] netlink: 340 bytes leftover after parsing attributes in process `syz.8.11573'. [ 317.454627][T30293] loop2: detected capacity change from 0 to 512 [ 317.461341][T30293] EXT4-fs: Ignoring removed mblk_io_submit option [ 317.468245][T30293] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 317.478921][T30293] EXT4-fs (loop2): 1 truncate cleaned up [ 317.485065][T30293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.644085][T30300] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11578'. [ 317.759581][T30307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30307 comm=syz.1.11581 [ 317.772325][T30307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30307 comm=syz.1.11581 [ 318.269053][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 318.269093][ T29] audit: type=1400 audit(2000525600.457:12318): avc: denied { allowed } for pid=30314 comm="syz.8.11583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 318.322882][ T29] audit: type=1400 audit(2000525600.489:12319): avc: denied { create } for pid=30314 comm="syz.8.11583" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 318.344571][ T29] audit: type=1400 audit(2000525600.489:12320): avc: denied { map } for pid=30314 comm="syz.8.11583" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=96120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 318.369162][ T29] audit: type=1400 audit(2000525600.489:12321): avc: denied { read write } for pid=30314 comm="syz.8.11583" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=96120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 318.394453][ T29] audit: type=1400 audit(2000525600.499:12322): avc: denied { connect } for pid=30314 comm="syz.8.11583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.521200][T30331] loop5: detected capacity change from 0 to 512 [ 318.529419][T30331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 318.532591][ T29] audit: type=1400 audit(2000525600.720:12323): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 318.563428][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.563426][T30331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.586701][T30331] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.603003][ T29] audit: type=1400 audit(2000525600.804:12324): avc: denied { bind } for pid=30334 comm="syz.3.11592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.622834][ T29] audit: type=1400 audit(2000525600.804:12325): avc: denied { setopt } for pid=30334 comm="syz.3.11592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.642739][ T29] audit: type=1400 audit(2000525600.804:12326): avc: denied { write } for pid=30334 comm="syz.3.11592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.671003][T30339] netlink: 'syz.2.11591': attribute type 12 has an invalid length. [ 318.681106][T30341] loop8: detected capacity change from 0 to 164 [ 318.705862][T30341] Unable to read rock-ridge attributes [ 318.713630][T30341] Unable to read rock-ridge attributes [ 318.728061][T27212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.756848][ T29] audit: type=1400 audit(2000525600.898:12327): avc: denied { read } for pid=30330 comm="syz.5.11590" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 318.947819][T30374] loop8: detected capacity change from 0 to 512 [ 318.974854][T30374] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.024128][T30374] ext4 filesystem being mounted at /269/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.113315][T30374] loop8: detected capacity change from 512 to 0 [ 319.126014][T30397] EXT4-fs error (device loop8): ext4_write_dquot:6917: comm syz.8.11619: Failed to commit dquot type 0 [ 319.137640][T30397] buffer_io_error: 4 callbacks suppressed [ 319.137724][T30397] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 319.166337][T30397] EXT4-fs (loop8): I/O error while writing superblock [ 319.175101][T30397] EXT4-fs error (device loop8): ext4_write_dquot:6917: comm syz.8.11619: Failed to commit dquot type 1 [ 319.186680][T30397] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 319.196235][T30397] EXT4-fs (loop8): I/O error while writing superblock [ 319.203205][T30397] EXT4-fs error (device loop8): ext4_get_inode_loc:4999: inode #18: block 35: comm syz.8.11619: unable to read itable block [ 319.216467][T30397] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 319.225012][T30397] EXT4-fs (loop8): I/O error while writing superblock [ 319.231884][T30397] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: IO failure [ 319.241380][T30397] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 319.250722][T30397] EXT4-fs (loop8): I/O error while writing superblock [ 319.257586][T30397] EXT4-fs error (device loop8): ext4_ext_truncate:4475: inode #18: comm syz.8.11619: mark_inode_dirty error [ 319.285043][T30397] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 319.294456][T30397] EXT4-fs (loop8): I/O error while writing superblock [ 319.301663][T30397] EXT4-fs error (device loop8): ext4_get_inode_loc:4999: inode #18: block 35: comm syz.8.11619: unable to read itable block [ 319.314943][T30397] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 319.337748][T30397] EXT4-fs (loop8): I/O error while writing superblock [ 319.344605][T30397] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: IO failure [ 319.354757][T30397] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 319.363157][T30397] EXT4-fs (loop8): I/O error while writing superblock [ 319.369967][T30397] EXT4-fs error (device loop8): ext4_truncate:4666: inode #18: comm syz.8.11619: mark_inode_dirty error [ 319.392453][T30397] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 319.402172][T30397] EXT4-fs (loop8): I/O error while writing superblock [ 319.441528][T27173] EXT4-fs error (device loop8): ext4_get_inode_loc:4999: inode #2: block 34: comm syz-executor: unable to read itable block [ 319.455183][T27173] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 319.463918][T27173] EXT4-fs (loop8): I/O error while writing superblock [ 319.470955][T27173] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: IO failure [ 319.482902][T27173] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 319.519218][T30423] loop2: detected capacity change from 0 to 164 [ 319.525904][T30423] iso9660: Unknown parameter '18446744073709551615' [ 319.582817][T30425] loop2: detected capacity change from 0 to 128 [ 319.590582][T30425] FAT-fs (loop2): bogus number of FAT structure [ 319.596861][T30425] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 319.606247][T30425] FAT-fs (loop2): Can't find a valid FAT filesystem [ 319.701764][T30427] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 319.735386][ T51] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.783346][ T51] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.881999][ T51] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.913676][T30434] geneve0: entered allmulticast mode [ 319.956277][ T51] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.985263][T30438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11641'. [ 320.051616][ T51] bridge_slave_1: left allmulticast mode [ 320.057552][ T51] bridge_slave_1: left promiscuous mode [ 320.063303][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.076164][ T51] bridge_slave_0: left allmulticast mode [ 320.081925][ T51] bridge_slave_0: left promiscuous mode [ 320.087659][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.168247][T30450] loop3: detected capacity change from 0 to 128 [ 320.178456][T30451] loop1: detected capacity change from 0 to 512 [ 320.187379][T30450] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 320.190319][T30451] EXT4-fs: Ignoring removed mblk_io_submit option [ 320.210173][T30450] ext4 filesystem being mounted at /1409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 320.242581][T30451] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 320.269627][T30414] syz.5.11627 (30414) used greatest stack depth: 7288 bytes left [ 320.278226][T30451] EXT4-fs (loop1): 1 truncate cleaned up [ 320.284407][T30451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.321548][T15635] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.393871][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.404560][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.414746][ T51] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 320.424623][ T51] bond0 (unregistering): Released all slaves [ 320.481942][ T51] hsr_slave_0: left promiscuous mode [ 320.527538][ T51] hsr_slave_1: left promiscuous mode [ 320.550393][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.557856][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.579203][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.586764][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.651632][ T51] veth1_macvtap: left promiscuous mode [ 320.657930][ T51] veth0_macvtap: left promiscuous mode [ 320.663619][ T51] veth1_vlan: left promiscuous mode [ 320.669409][ T51] veth0_vlan: left promiscuous mode [ 320.746783][ T51] team0 (unregistering): Port device team_slave_1 removed [ 320.758925][ T51] team0 (unregistering): Port device team_slave_0 removed [ 320.808153][ T3385] lo speed is unknown, defaulting to 1000 [ 320.814031][ T3385] infiniband syz2: ib_query_port failed (-19) [ 320.892199][T30494] loop2: detected capacity change from 0 to 128 [ 320.912783][T30494] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 320.939960][T30494] ext4 filesystem being mounted at /2409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 320.939991][T30439] chnl_net:caif_netlink_parms(): no params data found [ 320.985052][T30499] netlink: 'syz.3.11667': attribute type 3 has an invalid length. [ 321.059989][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 321.089217][T30439] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.096623][T30439] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.105459][T30504] ALSA: seq fatal error: cannot create timer (-22) [ 321.109713][T27171] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.121707][T30439] bridge_slave_0: entered allmulticast mode [ 321.129973][T30439] bridge_slave_0: entered promiscuous mode [ 321.139667][T30439] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.146841][T30439] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.161814][T30439] bridge_slave_1: entered allmulticast mode [ 321.169081][T30439] bridge_slave_1: entered promiscuous mode [ 321.195293][T30439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.215102][T30439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.240984][T30514] IPv6: sit2: Disabled Multicast RS [ 321.241098][T30516] ALSA: seq fatal error: cannot create timer (-19) [ 321.247853][T30514] sit2: entered allmulticast mode [ 321.280096][T30439] team0: Port device team_slave_0 added [ 321.286585][T30519] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 321.286886][ T37] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 321.302756][T30439] team0: Port device team_slave_1 added [ 321.335403][T30439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.342380][T30439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.368459][T30439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.380592][T30439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.387555][T30439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.413537][T30439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.443527][T30439] hsr_slave_0: entered promiscuous mode [ 321.450016][T30439] hsr_slave_1: entered promiscuous mode [ 321.456045][T30439] debugfs: 'hsr0' already exists in 'hsr' [ 321.461797][T30439] Cannot create hsr debugfs directory [ 321.672642][T30439] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 321.681359][T30439] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 321.690191][T30439] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 321.698998][T30439] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 321.718116][T30439] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.725206][T30439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.732468][T30439] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.739644][T30439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.765580][T30439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.776864][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.785142][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.797440][T30439] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.806651][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.813962][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.824324][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.831440][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.890824][T30439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.992041][T30439] veth0_vlan: entered promiscuous mode [ 321.999645][T30439] veth1_vlan: entered promiscuous mode [ 322.013954][T30439] veth0_macvtap: entered promiscuous mode [ 322.021713][T30439] veth1_macvtap: entered promiscuous mode [ 322.032558][T30439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.043392][T30439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.053787][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.064908][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.073819][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.085009][ T5811] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.130424][T30551] 9pnet: p9_errstr2errno: server reported unknown error 9YTPX: [ 322.196945][T30563] loop7: detected capacity change from 0 to 128 [ 322.211160][T30563] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 322.225141][T30563] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 322.260808][T30566] loop5: detected capacity change from 0 to 512 [ 322.272859][T30566] EXT4-fs: Ignoring removed mblk_io_submit option [ 322.287126][T30571] loop3: detected capacity change from 0 to 128 [ 322.293857][T30566] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 322.294567][T30439] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 322.320324][T30571] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 322.328342][T30571] FAT-fs (loop3): Filesystem has been set read-only [ 322.340390][T30566] EXT4-fs (loop5): 1 truncate cleaned up [ 322.346293][T30571] syz.3.11675: attempt to access beyond end of device [ 322.346293][T30571] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 322.371094][T30566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.376916][T30571] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 322.391188][T30571] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 322.401248][T30581] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 322.417779][T30581] syz.3.11675: attempt to access beyond end of device [ 322.417779][T30581] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 322.453208][T30571] syz.3.11675: attempt to access beyond end of device [ 322.453208][T30571] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 322.525025][T30581] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 322.533019][T30581] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 322.543264][T30571] syz.3.11675: attempt to access beyond end of device [ 322.543264][T30571] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 322.556734][T30581] syz.3.11675: attempt to access beyond end of device [ 322.556734][T30581] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 322.586684][T30581] syz.3.11675: attempt to access beyond end of device [ 322.586684][T30581] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 322.611359][T30571] syz.3.11675: attempt to access beyond end of device [ 322.611359][T30571] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 322.634195][T30581] syz.3.11675: attempt to access beyond end of device [ 322.634195][T30581] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 322.665667][T30581] syz.3.11675: attempt to access beyond end of device [ 322.665667][T30581] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 322.679282][T30571] syz.3.11675: attempt to access beyond end of device [ 322.679282][T30571] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 323.075154][T27212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.166336][T30619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11700'. [ 323.180176][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 323.180212][ T29] audit: type=1400 audit(2000525605.601:12469): avc: denied { create } for pid=30613 comm="syz.5.11700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 323.267993][ T29] audit: type=1400 audit(2000525605.696:12470): avc: denied { create } for pid=30626 comm="syz.5.11706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 323.292723][ T29] audit: type=1400 audit(2000525605.727:12471): avc: denied { write } for pid=30626 comm="syz.5.11706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 323.318998][T30623] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11703'. [ 323.339975][T30627] infiniband !yz!: set active [ 323.341307][ T29] audit: type=1400 audit(2000525605.780:12472): avc: denied { unmount } for pid=15635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 323.344750][T30627] infiniband !yz!: added team_slave_0 [ 323.383676][T30627] RDS/IB: !yz!: added [ 323.394376][T30627] smc: adding ib device !yz! with port count 1 [ 323.401110][T30627] smc: ib device !yz! port 1 has pnetid [ 323.507897][ T29] audit: type=1400 audit(2000525605.895:12473): avc: denied { shutdown } for pid=30630 comm="syz.7.11707" laddr=fe80::f lport=60891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 323.530275][ T29] audit: type=1400 audit(2000525605.916:12474): avc: denied { read } for pid=30639 comm="syz.1.11711" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 323.553983][ T29] audit: type=1400 audit(2000525605.916:12475): avc: denied { open } for pid=30639 comm="syz.1.11711" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 323.577994][ T29] audit: type=1326 audit(2000525605.948:12476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30646 comm="syz.3.11714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 323.601760][ T29] audit: type=1326 audit(2000525605.948:12477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30646 comm="syz.3.11714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 323.625567][ T29] audit: type=1326 audit(2000525605.958:12478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30646 comm="syz.3.11714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb247dfeec9 code=0x7ffc0000 [ 323.718760][T30654] syzkaller1: entered promiscuous mode [ 323.724391][T30654] syzkaller1: entered allmulticast mode [ 323.763095][T30664] netlink: 'syz.1.11722': attribute type 10 has an invalid length. [ 323.771075][T30664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11722'. [ 323.785562][T30664] batman_adv: batadv0: Adding interface: veth1_vlan [ 323.792218][T30664] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.820521][T30664] batman_adv: batadv0: Interface activated: veth1_vlan [ 323.919176][T30682] loop7: detected capacity change from 0 to 2048 [ 323.968924][T30682] Alternate GPT is invalid, using primary GPT. [ 323.975533][T30682] loop7: p2 p3 p7 [ 324.192836][T30708] netlink: 'syz.5.11743': attribute type 1 has an invalid length. [ 324.200774][T30708] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.11743'. [ 324.313459][T30722] loop3: detected capacity change from 0 to 512 [ 324.329579][T30722] EXT4-fs: Ignoring removed mblk_io_submit option [ 324.337408][T30722] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 324.350053][T30722] EXT4-fs (loop3): 1 truncate cleaned up [ 324.356597][T30722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.404843][T30731] loop2: detected capacity change from 0 to 512 [ 324.434619][T30731] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 324.499586][T30731] EXT4-fs (loop2): 1 truncate cleaned up [ 324.508256][T30731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.543868][T30731] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.11751: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 324.572280][T30731] EXT4-fs (loop2): Remounting filesystem read-only [ 324.632092][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.652684][T30740] loop1: detected capacity change from 0 to 2048 [ 324.687204][T30740] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.728835][T30738] loop5: detected capacity change from 0 to 8192 [ 324.755423][T27171] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 324.987033][T30733] ================================================================== [ 324.995170][T30733] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 325.003212][T30733] [ 325.005541][T30733] write to 0xffff888119e73b04 of 4 bytes by task 30722 on cpu 1: [ 325.013263][T30733] xas_set_mark+0x12b/0x140 [ 325.017792][T30733] __folio_start_writeback+0x1dd/0x440 [ 325.023276][T30733] ext4_bio_write_folio+0x5ad/0x9f0 [ 325.028505][T30733] mpage_process_page_bufs+0x4a1/0x620 [ 325.033972][T30733] mpage_prepare_extent_to_map+0x786/0xc00 [ 325.039800][T30733] ext4_do_writepages+0xa05/0x2750 [ 325.044947][T30733] ext4_writepages+0x176/0x300 [ 325.049719][T30733] do_writepages+0x1c3/0x310 [ 325.054327][T30733] filemap_write_and_wait_range+0x144/0x340 [ 325.060258][T30733] filemap_invalidate_pages+0xa4/0x1a0 [ 325.065726][T30733] kiocb_invalidate_pages+0x6e/0x80 [ 325.070929][T30733] __iomap_dio_rw+0x5d4/0x1250 [ 325.075712][T30733] iomap_dio_rw+0x40/0x90 [ 325.080062][T30733] ext4_file_write_iter+0xad9/0xf00 [ 325.085295][T30733] iter_file_splice_write+0x666/0xa60 [ 325.090691][T30733] direct_splice_actor+0x156/0x2a0 [ 325.095818][T30733] splice_direct_to_actor+0x312/0x680 [ 325.101219][T30733] do_splice_direct+0xda/0x150 [ 325.106011][T30733] do_sendfile+0x380/0x650 [ 325.110448][T30733] __x64_sys_sendfile64+0x105/0x150 [ 325.115670][T30733] x64_sys_call+0x2bb0/0x2ff0 [ 325.120360][T30733] do_syscall_64+0xd2/0x200 [ 325.124882][T30733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.130801][T30733] [ 325.133133][T30733] read to 0xffff888119e73b04 of 4 bytes by task 30733 on cpu 0: [ 325.140767][T30733] file_write_and_wait_range+0x10e/0x2c0 [ 325.146419][T30733] generic_buffers_fsync_noflush+0x45/0x120 [ 325.152324][T30733] ext4_sync_file+0x1ab/0x690 [ 325.157006][T30733] vfs_fsync_range+0x10a/0x130 [ 325.161779][T30733] ext4_buffered_write_iter+0x34f/0x3c0 [ 325.167348][T30733] ext4_file_write_iter+0xdbf/0xf00 [ 325.172565][T30733] iter_file_splice_write+0x666/0xa60 [ 325.177943][T30733] direct_splice_actor+0x156/0x2a0 [ 325.183061][T30733] splice_direct_to_actor+0x312/0x680 [ 325.188448][T30733] do_splice_direct+0xda/0x150 [ 325.193218][T30733] do_sendfile+0x380/0x650 [ 325.197652][T30733] __x64_sys_sendfile64+0x105/0x150 [ 325.202864][T30733] x64_sys_call+0x2bb0/0x2ff0 [ 325.207554][T30733] do_syscall_64+0xd2/0x200 [ 325.212094][T30733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.217999][T30733] [ 325.220325][T30733] value changed: 0x0a000021 -> 0x04000021 [ 325.226045][T30733] [ 325.228372][T30733] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 325.229147][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 325.234528][T30733] CPU: 0 UID: 0 PID: 30733 Comm: syz.3.11749 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 325.253435][T30733] Tainted: [W]=WARN [ 325.257242][T30733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 325.267302][T30733] ================================================================== [ 325.660443][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.670872][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.728002][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.738466][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.794890][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.805320][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.814403][T30722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.850629][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.861015][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.088279][ T37] $H (unregistering): (slave dummy0): Releasing backup interface [ 326.096604][ T37] dummy0: left promiscuous mode [ 326.102050][ T37] $H (unregistering): Released all slaves [ 326.110288][ T37] bond0 (unregistering): Released all slaves [ 326.118893][ T37] bond1 (unregistering): Released all slaves [ 326.155214][ T37] tipc: Disabling bearer [ 326.162001][ T37] tipc: Left network mode [ 326.186096][ T37] hsr_slave_0: left promiscuous mode [ 326.192360][ T37] hsr_slave_1: left promiscuous mode [ 326.198921][ T37] veth1_macvtap: left promiscuous mode [ 326.204461][ T37] veth0_macvtap: left promiscuous mode [ 326.488297][ T37] IPVS: stop unused estimator thread 0... [ 326.547936][ T37] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.594514][ T37] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.650761][ T37] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.717858][ T37] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.940107][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.965637][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.014313][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.060967][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.141914][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.193818][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.232071][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.298898][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.357587][ T37] bridge_slave_1: left allmulticast mode [ 327.363358][ T37] bridge_slave_1: left promiscuous mode [ 327.369038][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.376750][ T37] bridge_slave_0: left allmulticast mode [ 327.382461][ T37] bridge_slave_0: left promiscuous mode [ 327.388164][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.397358][ T37] bridge_slave_1: left allmulticast mode [ 327.403050][ T37] bridge_slave_1: left promiscuous mode [ 327.408696][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.416478][ T37] bridge_slave_0: left promiscuous mode [ 327.422140][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.431140][ T37] bridge_slave_1: left allmulticast mode [ 327.436815][ T37] bridge_slave_1: left promiscuous mode [ 327.442808][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.450573][ T37] bridge_slave_0: left promiscuous mode [ 327.456227][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.603425][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.613171][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.622594][ T37] bond0 (unregistering): Released all slaves [ 327.735908][ T37] $H (unregistering): (slave dummy0): Releasing backup interface [ 327.744402][ T37] dummy0: left promiscuous mode [ 327.749958][ T37] $H (unregistering): Released all slaves [ 327.758341][ T37] bond0 (unregistering): Released all slaves [ 327.888889][ T37] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.897761][ T37] bond_slave_0: left promiscuous mode [ 327.904255][ T37] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.912984][ T37] bond_slave_1: left promiscuous mode [ 327.919580][ T37] $H (unregistering): (slave dummy0): Releasing backup interface [ 327.927838][ T37] dummy0: left promiscuous mode [ 327.933501][ T37] $H (unregistering): Released all slaves [ 327.994375][ T37] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.003104][ T37] bond_slave_0: left promiscuous mode [ 328.009898][ T37] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.018939][ T37] bond_slave_1: left promiscuous mode [ 328.025676][ T37] $H (unregistering): (slave dummy0): Releasing backup interface [ 328.034124][ T37] dummy0: left promiscuous mode [ 328.039790][ T37] $H (unregistering): Released all slaves [ 328.048320][ T37] bond1 (unregistering): Released all slaves [ 328.159278][ T37] hsr_slave_0: left promiscuous mode [ 328.165834][ T37] hsr_slave_1: left promiscuous mode [ 328.171598][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.179191][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.187635][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.195069][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.204442][ T37] hsr_slave_0: left promiscuous mode [ 328.210037][ T37] hsr_slave_1: left promiscuous mode [ 328.215711][ T37] batman_adv: batadv0: Removing interface: veth1_vlan [ 328.224599][ T37] hsr_slave_0: left promiscuous mode [ 328.230173][ T37] hsr_slave_1: left promiscuous mode [ 328.235700][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.243177][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.250599][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.258013][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.265441][ T37] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 328.272607][ T37] batman_adv: batadv0: Removing interface: veth1_vlan [ 328.283548][ T37] hsr_slave_0: left promiscuous mode [ 328.289275][ T37] hsr_slave_1: left promiscuous mode [ 328.294968][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.302402][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.310071][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.317485][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.330146][ T37] veth1_macvtap: left promiscuous mode [ 328.335770][ T37] veth0_macvtap: left promiscuous mode [ 328.341304][ T37] veth1_vlan: left promiscuous mode [ 328.346542][ T37] veth0_vlan: left promiscuous mode [ 328.352343][ T37] veth1_macvtap: left promiscuous mode [ 328.357955][ T37] veth0_macvtap: left promiscuous mode [ 328.363589][ T37] veth1_vlan: left promiscuous mode [ 328.368818][ T37] veth0_vlan: left promiscuous mode [ 328.374649][ T37] veth1_macvtap: left promiscuous mode [ 328.380114][ T37] veth0_macvtap: left promiscuous mode [ 328.385641][ T37] veth1_vlan: left promiscuous mode [ 328.390904][ T37] veth0_vlan: left promiscuous mode [ 328.523412][ T37] team0 (unregistering): Port device team_slave_1 removed [ 328.532689][ T37] team0 (unregistering): Port device team_slave_0 removed [ 328.631409][ T37] team0 (unregistering): Port device team_slave_1 removed [ 328.641143][ T37] team0 (unregistering): Port device team_slave_0 removed [ 328.694650][ T37] team0 (unregistering): Port device team_slave_1 removed [ 328.704739][ T37] team0 (unregistering): Port device team_slave_0 removed [ 328.712870][ T5843] smc: removing ib device !yz! [ 329.550835][ T37] IPVS: stop unused estimator thread 0...