last executing test programs: 53.15733302s ago: executing program 3 (id=45): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x90030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100082, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 53.138695702s ago: executing program 3 (id=46): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 53.05562151s ago: executing program 3 (id=48): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000008001000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r3 = gettid() r4 = gettid() tkill(r3, 0x12) tkill(r4, 0x14) 53.033335832s ago: executing program 3 (id=49): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18040, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16, @ANYRESHEX, @ANYRES8, @ANYRES64=0x0, @ANYRESHEX=r0], 0x8, 0x2fe, &(0x7f00000007c0)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x4) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40403, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x402, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0x5]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) 52.634522883s ago: executing program 3 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x58}, 0x1, 0x2}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 52.3609327s ago: executing program 3 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lgetxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@known='com.apple.system.Security\x00', &(0x7f0000003540)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) 52.36061678s ago: executing program 32 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lgetxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@known='com.apple.system.Security\x00', &(0x7f0000003540)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) 51.801887186s ago: executing program 1 (id=65): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 51.66183191s ago: executing program 1 (id=67): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x807f, 0x1000000, 0x4) 50.736646313s ago: executing program 1 (id=81): syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0x58cd, 0x10000, 0x3, 0x400000}, 0x0, 0x0) io_uring_setup(0x5c02, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 49.890692998s ago: executing program 1 (id=91): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@barrier}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) recvmmsg(r0, &(0x7f0000000ac0), 0x0, 0x40000040, 0x0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r2, 0x0, 0x0, 0x1001f3) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 49.562920751s ago: executing program 1 (id=96): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 48.790364119s ago: executing program 1 (id=105): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x202, 0x1, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 48.790092269s ago: executing program 33 (id=105): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x202, 0x1, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 8.091310058s ago: executing program 0 (id=1043): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="08e9e6ad6e45296448d457fb0738492847b0742c634e4e8658a3c8a9555e7dff1ed37420668c8e641a8a0b262bfeaec10e244ee0ad51d68de1aa46e1c24dd9524aa848e5bbb4f6173be4266dac4c807a86045ac1577828cce7825fcfce444b408e00a41902e4d7bfbe203fea658af107644e2e9e4a195b0d5a6354bd84966c7cece53963eca62ee882cb700c7bbce8e1536fcd6c08d7d94cc1bd7f90986d024922e2abd0de2a68bafc8901f6f9e4385c0f72360df1e7c60b416d131438720080800c74eb11f4b0d3ddc23a5782c5dc73cf9f4503a8798d51f91782a22e571224d902de1792f1067b89dc43db3a78cf2431638f7bf822a8c8aaee7fee5b14b628f89b2ae6f582d3f2d701f2841c63c3aa7865079a32912d3e8d106e182f5cede1319bb9fe7549744c60d5212661c81ea1b658db1a8a4f928212f78a949934aec80a0870f7235159c5843a4b933dc7bff86b233bf1473bb7ea07b2c04419d3b996a74f26355be3784d179cea4a241507ef280f1d938f70ce90ded6b6b83ca0ef53ff29dc57a3ceeb4bb69eb23c5f94b481c93e6b2a05db2088957da9a59e3a332b6585419a8c5b91fc46ef3b408327c2c0401a446da9198e3033159a81650b56016e216ae7cb4564cd3332ac2566807812f302553867d7def9fa5fdfddffcbb4ad39b486ed7531e1b20d27af4d42520e8807c2831407b5de30a3d035cac5ee651bad453a88803256322ddf3a89c044eeea9648fd36f8a1a21b854058e92df2c5c4ba8445cf16745d07615f7e4943ee8107a5d815ecfeccc2fe201045a928078c041cdca8a29c56eaa1c12370c5539e084b02e165bb3b89175500829c527c43dfc7e152d0a93771a0ffbf5faec87c62fb01471b7b8a84a96ad1f0df4540a8a11525c39c2f83201dd4e81aeafce2b7eb62fd784e0989a9795bccf6fc7f758a38e7ff2a112326dffbf25c6dbbeb56f21eb4ba30bf479812b428787ea6be0a84cf6850c0e433465181d94c507300ff0b5712ba509cc0b4012753be3087f031bcd3fd64f72d6641df95c061c56b6c5a99e7ad071c06208fc44e7ea2708cb848bb449c316bb293623f7070dbb9a4c62faefd4b758ee4522b6f463e98a041f472fcc1c46ff60b340f2ba97580ddc098daaf0a6694640088ee48a4c6571ee301aca056125b0944efa7de04484bdb63ec7f21f82cbd68ab58a0c4451e958f4112ccda0ac600e62cc75b3e0f7bef56f207b9b63fee572de9ec023b65b02e102d78dd2469442d9c001af1d3f8f5caa71105a609c742cc7e9eb6bad3b2a0e6e0a47f961665b46c06e9462ddb033ee0074290bc3c4a30532266036b6296e6fa0e2dff0429acb55b0956f5a27c8b02401569f0e3208bbf9060de77c3b62011b823062c3ca0faaa12e32cf46383ec72095ce3c44fc57155c6a263576c1dff1e55de6f110a94cd13128d5ea0adeb554ac492abcc3c6f7d04dc4baf1f3c7ccda0a3f054262c3a05feb997f8cc1e71d31371cb4c675ef374d4b8724c439be709a36fdfbc9d97a663b79f49eaedfd1f2a56d37fcd3143feafdf00800000f75dbc35eb1b112eb16e8714da03a234d8d31b784b74cacad310c8f45c49e463c0fde12a012faedc34ab7b04a8dc73b80277986c118e8e76bccca570e905b1ec18bd95f716dbecba2eae96cb5fa826415310bd53610a506ad2341fb1b74e6ca481b6f2583f63a3940cff1b1111a5f30f3bdc0396a559bdf67c6725adfc7785e0794ce65cf31f5aaa988435b1832d8f6197e18a092ba31fe8e32802f82361edb69edcdfb96906dc584f87ad707fd8c58936680f5b8b11c9c50328488743d1d4f7b36213cec96a50b6500bd7cdc5c07ff671be551af117f05331834dbf4e5657adcd46c59244f9bb7d232df0d8cbe5d88e2231a86a68db4b17367e536bd4a66a79b24c9ecdc6603715ec889be04bccb0ee9867cd97ef90e140ddafb9fda2bf56cea41e11b4188d683cc694d438eb687df48e69726107c1c7898c3e121068a8646101a73ef08af48f3a1712de007a2ef459ca1d05e1d279c76cdc27da54340a00c705992e52e3a21c1c45ddfb1f98e316c7e39032e1ae326a5d4b4ced733ffa92f64aa08c32a6d3d19b1ae6ab5249fc9276b47241b103042501b35fc7012f22e44a354a8171e9d022b6ff49dc6fff0ca71a91a11bbfc0ab96a39499b70093e6dc30eccd4e096ab911ceeeafdea4919ac676733e6454e3325a33d6dccb682ea33842ad91cf0d3df7442df42c2e60a27b4aba31b9b9ceef27be0b439482b67b2e3d45ab2250fd49d7ec56ac039265f8324717640897625f722c74856a8c772bfbeced6b6607718743b60e7ae2ae72949b8b75407732828065f4c2ea3b688caa37ab19db980ce241c45e5e2ff0f6b159529661812bfd126f5826d339c7f2f81e0687ebb68652f0fce3a779da643bb557d73fd99a21117ac7ad6def2d0dd158687c47d6c5c4bb34115d0f9f08c6509650b2b3956de30c9dc034498d67c0579557fbe9aa344a69578defbf54af4a2b26aa5663385bf39ee27c3a3bf5eb1ffb94bd6bb128d184f95a226440a299b0abc9a586f5170df064f36327af8d36145cda1c167b3fc25a9a57743ddcf3b80c8d4e96be05d023379afbb15de02755f62551c19032e996107222d5cb800d92f004028f40b874adbb7ddb0f129def7ef58bd536cc29fa7978d660cdb0287d805c385238abf15eabc081f8887896e891c8a1fdc8eb4858bb050a767c3be217f01f13347283c5ce4b830375be8ddc95dd825ccb58c3cc48ae1ff8c472a66e135bd4a73dc5cff51f52831e4180de2385289362dd74aea6e3f8abd62a0730ea33840146bdc0e671d53f3725c3f5d8e69bde1bd7b93fb414b43cacd39792506f61a045c1d1c34c54b3c7392b3bd1545c9c7b8a9e6031ab1d69d28a468185985680d2e63f9377d33394b90466a88c8dc18bef8724eac4377c40b89a220ac734c2ca74e166a6d7ae8d2fb1040c9d5c993f9053800dbd717a083a1aa5a9"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x80800) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) sendmmsg$inet6(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000c80)="c6", 0x1}], 0x1, &(0x7f0000004100)=ANY=[], 0xd8}}], 0x1, 0xc094) recvfrom$unix(r2, &(0x7f00000008c0)=""/239, 0xf9, 0x42, 0x0, 0x4b) 8.078931489s ago: executing program 0 (id=1044): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) 8.013438375s ago: executing program 0 (id=1046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000a40)='./file0/../file0\x00', 0x0, 0x3cdc19, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000000c0), 0x401, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 7.997903227s ago: executing program 0 (id=1047): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7.983947079s ago: executing program 0 (id=1048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xffd, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 7.801048447s ago: executing program 0 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 7.76833665s ago: executing program 34 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 1.554783294s ago: executing program 2 (id=1170): unshare(0x2c020400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c0) 1.462391494s ago: executing program 6 (id=1176): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = gettid() syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r2, 0x1b) 1.327361027s ago: executing program 2 (id=1180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) waitid(0x2, 0x0, 0x0, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) semget(0x0, 0x2, 0x41) 1.326816737s ago: executing program 5 (id=1181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f26) 1.219269978s ago: executing program 5 (id=1184): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 1.203145329s ago: executing program 2 (id=1185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @remote}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x272, 0x0) 1.153543025s ago: executing program 7 (id=1190): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000340), &(0x7f0000000300)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.147234565s ago: executing program 7 (id=1191): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) unshare(0x22020600) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) ioperm(0x4, 0x1, 0x6) unshare(0x2c020400) 1.130988977s ago: executing program 7 (id=1192): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000c10701000000000000000a00000009000200"], 0x7b}}, 0x8000) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) sendfile(r2, r0, 0x0, 0x10000a007) 943.787296ms ago: executing program 7 (id=1193): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 861.601214ms ago: executing program 7 (id=1196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 797.8459ms ago: executing program 7 (id=1197): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 779.921802ms ago: executing program 4 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x980, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0xffff}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x100}, [@TCA_EM_META_HDR={0x5, 0x1, {{0x0, 0x1, 0x2}, {0xffff, 0x8, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 719.355598ms ago: executing program 4 (id=1200): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x28000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 607.9944ms ago: executing program 4 (id=1201): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000a00), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r4}) 607.299939ms ago: executing program 4 (id=1202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) 602.13601ms ago: executing program 6 (id=1203): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 494.024791ms ago: executing program 6 (id=1204): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[], 0x0}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x10) 446.035825ms ago: executing program 6 (id=1205): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000c10701000000000000000a00000009000200"], 0x7b}}, 0x8000) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) sendfile(r2, r0, 0x0, 0x10000a007) 445.701226ms ago: executing program 4 (id=1206): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x88, 0x4}, 0x100203, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0}) 342.615486ms ago: executing program 2 (id=1207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 342.343636ms ago: executing program 4 (id=1208): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 291.574701ms ago: executing program 5 (id=1209): unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004050) syz_emit_ethernet(0x9e, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x68, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}]}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 289.094411ms ago: executing program 2 (id=1210): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97) 258.265535ms ago: executing program 6 (id=1211): r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000a00), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 198.266161ms ago: executing program 2 (id=1212): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 197.212821ms ago: executing program 5 (id=1213): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x401, 0x4}, &(0x7f00000004c0), 0x0, 0x9, 0x80000000, 0x8, 0x8, 0x13, 0x100000001}}], 0x58}, 0x0) 53.954485ms ago: executing program 5 (id=1214): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xfffffffb}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x9) 53.394515ms ago: executing program 5 (id=1215): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0x1, 0xa}, {0x7, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 0s ago: executing program 6 (id=1216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000140)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): v packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.873194][ T3648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.893620][ T3648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.900668][ T3648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.926629][ T3648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.987753][ T3648] hsr_slave_0: entered promiscuous mode [ 36.007524][ T3648] hsr_slave_1: entered promiscuous mode [ 36.033859][ T3648] debugfs: 'hsr0' already exists in 'hsr' [ 36.039673][ T3648] Cannot create hsr debugfs directory [ 36.161255][ T3771] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 36.247674][ T3779] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 36.254398][ T3779] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 36.256932][ T3776] netlink: 'syz.2.82': attribute type 12 has an invalid length. [ 36.262024][ T3779] vhci_hcd vhci_hcd.0: Device attached [ 36.274967][ T3648] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.285934][ T3648] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.300661][ T3648] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.307695][ T3779] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 36.314297][ T3779] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 36.321891][ T3779] vhci_hcd vhci_hcd.0: Device attached [ 36.330360][ T3648] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.334076][ T3779] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 36.349232][ T3779] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 36.363556][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 36.363571][ T29] audit: type=1400 audit(1763152420.525:255): avc: denied { ioctl } for pid=3789 comm="syz.2.83" path="socket:[6237]" dev="sockfs" ino=6237 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.424593][ T3783] vhci_hcd: connection closed [ 36.424761][ T52] vhci_hcd: stop threads [ 36.424830][ T3780] vhci_hcd: connection closed [ 36.429610][ T52] vhci_hcd: release socket [ 36.443153][ T52] vhci_hcd: disconnect device [ 36.450339][ T52] vhci_hcd: stop threads [ 36.454689][ T52] vhci_hcd: release socket [ 36.459801][ T52] vhci_hcd: disconnect device [ 36.460721][ T3790] team0: Port device team_slave_0 removed [ 36.465171][ T29] audit: type=1400 audit(1763152420.605:256): avc: denied { tracepoint } for pid=3794 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.470321][ T9] vhci_hcd: vhci_device speed not set [ 36.511793][ T3648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.527960][ T3648] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.537924][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.545002][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.555977][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.563121][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.639419][ T3648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.752228][ T3648] veth0_vlan: entered promiscuous mode [ 36.760926][ T3648] veth1_vlan: entered promiscuous mode [ 36.775140][ T3648] veth0_macvtap: entered promiscuous mode [ 36.783130][ T3648] veth1_macvtap: entered promiscuous mode [ 36.794521][ T3648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.805935][ T3648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.818583][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.839529][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.850142][ T29] audit: type=1400 audit(1763152421.015:257): avc: denied { mounton } for pid=3648 comm="syz-executor" path="/root/syzkaller.7jMf8V/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.850340][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.905088][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.949311][ T29] audit: type=1326 audit(1763152421.115:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.5.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 36.972538][ T29] audit: type=1326 audit(1763152421.115:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.5.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 37.004899][ T3832] loop1: detected capacity change from 0 to 1024 [ 37.038199][ T3832] EXT4-fs: Ignoring removed orlov option [ 37.067260][ T29] audit: type=1326 audit(1763152421.145:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.5.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 37.091019][ T29] audit: type=1326 audit(1763152421.145:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.5.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 37.114250][ T29] audit: type=1326 audit(1763152421.145:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.5.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 37.138988][ T29] audit: type=1326 audit(1763152421.145:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.5.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 37.162595][ T29] audit: type=1326 audit(1763152421.145:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.5.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 37.192298][ T3832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.256801][ T3832] loop1: detected capacity change from 1024 to 64 [ 37.308275][ T3312] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 37.337061][ T3312] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 37.361667][ T3312] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 37.395442][ T3312] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 37.428992][ T3312] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 37.462928][ T3312] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 37.501263][ T3312] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 37.524994][ T3312] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 37.559628][ T3312] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 37.583410][ T3312] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 37.615181][ T3856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 37.788128][ T12] kworker/u8:0: attempt to access beyond end of device [ 37.788128][ T12] loop1: rw=1, sector=226, nr_sectors = 2 limit=64 [ 37.802010][ T12] kworker/u8:0: attempt to access beyond end of device [ 37.802010][ T12] loop1: rw=1, sector=264, nr_sectors = 2 limit=64 [ 37.815708][ T12] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 37.828568][ T12] Buffer I/O error on device loop1, logical block 132 [ 37.835680][ T12] Buffer I/O error on device loop1, logical block 113 [ 37.843533][ T12] kworker/u8:0: attempt to access beyond end of device [ 37.843533][ T12] loop1: rw=1, sector=264, nr_sectors = 24 limit=64 [ 37.857343][ T12] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 37.870326][ T12] Buffer I/O error on device loop1, logical block 132 [ 37.877160][ T12] Buffer I/O error on device loop1, logical block 133 [ 37.883956][ T12] Buffer I/O error on device loop1, logical block 134 [ 37.890885][ T12] Buffer I/O error on device loop1, logical block 135 [ 37.897892][ T12] Buffer I/O error on device loop1, logical block 136 [ 37.904667][ T12] Buffer I/O error on device loop1, logical block 137 [ 37.911440][ T12] Buffer I/O error on device loop1, logical block 138 [ 37.918635][ T12] Buffer I/O error on device loop1, logical block 139 [ 37.940018][ T1981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.953757][ T12] kworker/u8:0: attempt to access beyond end of device [ 37.953757][ T12] loop1: rw=2057, sector=744, nr_sectors = 24 limit=64 [ 37.968556][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 17 with max blocks 3 with error 5 [ 37.981232][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.981232][ T12] [ 37.993196][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.006571][ T3837] kmmpd-loop1: attempt to access beyond end of device [ 38.006571][ T3837] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 38.020970][ T3837] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 38.030244][ T3882] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.103'. [ 38.039562][ T3882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.103'. [ 38.052135][ T3880] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.067297][ T1981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.130740][ T3880] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.146492][ T1981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.191749][ T3880] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.286679][ T1981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.325072][ T3885] chnl_net:caif_netlink_parms(): no params data found [ 38.368609][ T3880] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.429377][ T3885] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.436524][ T3885] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.444360][ T3885] bridge_slave_0: entered allmulticast mode [ 38.453431][ T3885] bridge_slave_0: entered promiscuous mode [ 38.482093][ T3885] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.489513][ T3885] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.512786][ T3885] bridge_slave_1: entered allmulticast mode [ 38.520053][ T3885] bridge_slave_1: entered promiscuous mode [ 38.563301][ T41] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.584108][ T3885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.593343][ T58] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.611837][ T1981] bridge_slave_1: left allmulticast mode [ 38.617576][ T1981] bridge_slave_1: left promiscuous mode [ 38.623354][ T1981] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.636970][ T1981] bridge_slave_0: left allmulticast mode [ 38.642689][ T1981] bridge_slave_0: left promiscuous mode [ 38.648434][ T1981] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.816594][ T3943] loop2: detected capacity change from 0 to 512 [ 38.830221][ T1981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.831570][ T1981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.832345][ T1981] bond0 (unregistering): Released all slaves [ 38.848223][ T58] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.871148][ T3885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.906850][ T1981] hsr_slave_0: left promiscuous mode [ 38.916463][ T1981] hsr_slave_1: left promiscuous mode [ 38.931237][ T1981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.938892][ T1981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.960455][ T1981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.968155][ T1981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.971212][ T3953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.122'. [ 38.996436][ T1981] veth1_macvtap: left promiscuous mode [ 39.002182][ T1981] veth0_macvtap: left promiscuous mode [ 39.008464][ T1981] veth1_vlan: left promiscuous mode [ 39.013776][ T1981] veth0_vlan: left promiscuous mode [ 39.105104][ T1981] team0 (unregistering): Port device team_slave_1 removed [ 39.105599][ T3964] loop4: detected capacity change from 0 to 1024 [ 39.120163][ T3964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.124737][ T1981] team0 (unregistering): Port device team_slave_0 removed [ 39.144544][ T3964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.190735][ T58] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.203559][ T3951] netlink: 96 bytes leftover after parsing attributes in process `syz.2.121'. [ 39.222912][ T3964] netlink: 132 bytes leftover after parsing attributes in process `syz.4.127'. [ 39.245972][ T3885] team0: Port device team_slave_0 added [ 39.261602][ T3885] team0: Port device team_slave_1 added [ 39.267958][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.302427][ T3979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.133'. [ 39.321275][ T3885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.328366][ T3885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.354428][ T3885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.375316][ T3885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.382356][ T3885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.408559][ T3885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.442303][ T3984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'. [ 39.487896][ T4001] netlink: 'syz.5.136': attribute type 13 has an invalid length. [ 39.566358][ T4001] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.573738][ T4001] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.663832][ T4001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.674081][ T4001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.721667][ T4021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'. [ 39.753136][ T3885] hsr_slave_0: entered promiscuous mode [ 39.759490][ T3885] hsr_slave_1: entered promiscuous mode [ 39.766062][ T3885] debugfs: 'hsr0' already exists in 'hsr' [ 39.771853][ T3885] Cannot create hsr debugfs directory [ 39.780264][ T4015] netlink: 'syz.4.142': attribute type 12 has an invalid length. [ 39.799224][ T58] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.837195][ T58] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.849402][ T4023] loop5: detected capacity change from 0 to 1024 [ 39.853342][ T58] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.858398][ T4023] EXT4-fs: Ignoring removed orlov option [ 39.868335][ T58] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.894965][ T4023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.005379][ T3885] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 40.014981][ T3885] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 40.036902][ T3885] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 40.053149][ T3885] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 40.152480][ T3885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.182853][ T3885] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.233802][ T1981] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.241294][ T1981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.261302][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.268584][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.338115][ T4082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 40.361444][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.375334][ T3885] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.385937][ T3885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.587088][ T3885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.665160][ T4119] loop4: detected capacity change from 0 to 1024 [ 40.677326][ T4119] EXT4-fs: inline encryption not supported [ 40.683181][ T4119] EXT4-fs: Ignoring removed orlov option [ 40.716343][ T4119] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 40.741053][ T4119] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 40.750997][ T4119] System zones: 0-1, 3-12 [ 40.767262][ T4119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.786546][ T3885] veth0_vlan: entered promiscuous mode [ 40.797471][ T3885] veth1_vlan: entered promiscuous mode [ 40.809669][ T4119] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 40.812790][ T3885] veth0_macvtap: entered promiscuous mode [ 40.822492][ T4119] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.822492][ T4119] [ 40.831251][ T3885] veth1_macvtap: entered promiscuous mode [ 40.838080][ T4119] EXT4-fs (loop4): Total free blocks count 0 [ 40.849793][ T4119] EXT4-fs (loop4): Free/Dirty block details [ 40.855777][ T4119] EXT4-fs (loop4): free_blocks=0 [ 40.860927][ T4119] EXT4-fs (loop4): dirty_blocks=0 [ 40.866043][ T4119] EXT4-fs (loop4): Block reservation details [ 40.872119][ T4119] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 40.874187][ T3885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.890824][ T3885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.902346][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.911884][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.922229][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.932623][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.958749][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.979104][ T4141] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.992265][ T4141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.008091][ T4141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.357689][ T4159] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.379716][ T4159] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 41.608800][ T4136] syz.0.170 (4136) used greatest stack depth: 10440 bytes left [ 41.676174][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 41.676240][ T29] audit: type=1400 audit(1763152425.835:487): avc: denied { append } for pid=4169 comm="syz.0.182" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.716519][ T4172] usb usb1: usbfs: process 4172 (syz.0.182) did not claim interface 63 before use [ 41.852290][ T4181] syzkaller0: entered promiscuous mode [ 41.858122][ T4181] syzkaller0: entered allmulticast mode [ 41.866098][ T4184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.906245][ T4184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.003048][ T4196] loop5: detected capacity change from 0 to 1024 [ 42.011828][ T4196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.034455][ T4196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.064772][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.136662][ T4210] siw: device registration error -23 [ 42.231356][ T4212] mmap: syz.4.198 (4212) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.372923][ T29] audit: type=1326 audit(1763152426.535:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.5.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 42.396335][ T29] audit: type=1326 audit(1763152426.535:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.5.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 42.421053][ T29] audit: type=1326 audit(1763152426.565:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.5.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 42.444610][ T29] audit: type=1326 audit(1763152426.565:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.5.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 42.467963][ T29] audit: type=1326 audit(1763152426.565:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.5.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 42.492006][ T29] audit: type=1326 audit(1763152426.565:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.5.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 42.515336][ T29] audit: type=1326 audit(1763152426.565:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.5.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 42.538569][ T29] audit: type=1326 audit(1763152426.565:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.5.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 42.561953][ T29] audit: type=1326 audit(1763152426.565:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.5.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 42.852954][ T4198] syz.2.194 (4198) used greatest stack depth: 10416 bytes left [ 42.864493][ T4226] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.926163][ T4233] __nla_validate_parse: 5 callbacks suppressed [ 42.926173][ T4233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.206'. [ 43.025574][ T4243] loop4: detected capacity change from 0 to 512 [ 43.114636][ T4245] tipc: Started in network mode [ 43.119665][ T4245] tipc: Node identity faed7d3d739c, cluster identity 4711 [ 43.126925][ T4245] tipc: Enabled bearer , priority 0 [ 43.138816][ T4244] tipc: Resetting bearer [ 43.174119][ T4244] tipc: Disabling bearer [ 43.256256][ T4260] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.215'. [ 43.265598][ T4260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.215'. [ 43.369359][ T4273] loop2: detected capacity change from 0 to 4096 [ 43.382813][ T4273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.580892][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.627327][ T4289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 43.638810][ T4291] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 43.646964][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.660161][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.674195][ T4291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.690522][ T4291] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 43.699692][ T4291] bond1: (slave batadv1): making interface the new active one [ 43.708317][ T4291] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 43.940990][ T4315] loop0: detected capacity change from 0 to 1024 [ 43.948086][ T4315] EXT4-fs: inline encryption not supported [ 43.953938][ T4315] EXT4-fs: Ignoring removed orlov option [ 43.976969][ T4315] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 43.988378][ T4319] loop2: detected capacity change from 0 to 256 [ 43.998318][ T4315] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 44.007747][ T4315] System zones: 0-1, 3-12 [ 44.012613][ T4315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.046809][ T4315] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 44.059412][ T4315] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.059412][ T4315] [ 44.069083][ T4315] EXT4-fs (loop0): Total free blocks count 0 [ 44.075241][ T4315] EXT4-fs (loop0): Free/Dirty block details [ 44.081383][ T4315] EXT4-fs (loop0): free_blocks=0 [ 44.086439][ T4315] EXT4-fs (loop0): dirty_blocks=0 [ 44.091688][ T4315] EXT4-fs (loop0): Block reservation details [ 44.097687][ T4315] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 44.154564][ T4317] loop4: detected capacity change from 0 to 32768 [ 44.163627][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.197411][ T3303] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 44.202981][ T3303] loop4: p1 start 460800 is beyond EOD, truncated [ 44.209497][ T3303] loop4: p2 size 83886080 extends beyond EOD, truncated [ 44.240035][ T3303] loop4: p5 start 460800 is beyond EOD, truncated [ 44.246663][ T3303] loop4: p6 size 83886080 extends beyond EOD, truncated [ 44.259811][ T4328] siw: device registration error -23 [ 44.272216][ T4317] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 44.287949][ T4317] loop4: p1 start 460800 is beyond EOD, truncated [ 44.294461][ T4317] loop4: p2 size 83886080 extends beyond EOD, truncated [ 44.313414][ T4317] loop4: p5 start 460800 is beyond EOD, truncated [ 44.320022][ T4317] loop4: p6 size 83886080 extends beyond EOD, truncated [ 44.448289][ T4226] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.569813][ T4226] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.598416][ T4331] udevd[4331]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 44.598543][ T4330] udevd[4330]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 44.609400][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 44.625726][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 44.642813][ T4331] udevd[4331]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 44.653891][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 44.653911][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 44.668096][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.243'. [ 44.674594][ T4330] udevd[4330]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 44.698298][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.758853][ T4226] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.838136][ T4349] loop2: detected capacity change from 0 to 1024 [ 44.850411][ T1981] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.865767][ T4349] EXT4-fs: Ignoring removed orlov option [ 44.876522][ T289] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.894816][ T4349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.909118][ T4351] usb usb1: usbfs: process 4351 (syz.5.249) did not claim interface 63 before use [ 44.926531][ T289] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.941371][ T4353] Zero length message leads to an empty skb [ 44.954352][ T4356] loop0: detected capacity change from 0 to 1024 [ 44.973699][ T289] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.983835][ T4356] EXT4-fs: Ignoring removed orlov option [ 44.990803][ T4358] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.037538][ T4356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.109430][ T4366] loop5: detected capacity change from 0 to 2048 [ 45.147903][ T4331] loop5: p1 < > p4 [ 45.163000][ T4331] loop5: p4 size 8388608 extends beyond EOD, truncated [ 45.193225][ T4366] loop5: p1 < > p4 [ 45.196914][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.197874][ T4366] loop5: p4 size 8388608 extends beyond EOD, truncated [ 45.333964][ T4331] udevd[4331]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 45.348037][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.262'. [ 45.360048][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 45.370882][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.390519][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.474327][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.489352][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.268'. [ 45.545136][ T4394] syzkaller0: entered promiscuous mode [ 45.550773][ T4394] syzkaller0: entered allmulticast mode [ 45.583177][ T4396] team0: Port device team_slave_0 removed [ 45.696107][ T4403] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.271'. [ 45.705364][ T4403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'. [ 46.187135][ T4426] loop5: detected capacity change from 0 to 512 [ 46.194101][ T4426] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.207575][ T4426] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 46.218512][ T4426] EXT4-fs (loop5): 1 truncate cleaned up [ 46.224620][ T4426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.353034][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.667291][ T4446] netlink: 'syz.4.288': attribute type 1 has an invalid length. [ 46.702143][ T4451] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 46.712060][ T4446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.720175][ T4452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 46.746292][ T4451] bond1: entered promiscuous mode [ 46.751556][ T4451] bond1: entered allmulticast mode [ 46.757128][ T4451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.770341][ T4459] bond1: (slave gretap1): making interface the new active one [ 46.778101][ T4459] gretap1: entered promiscuous mode [ 46.783775][ T4459] gretap1: entered allmulticast mode [ 46.789810][ T4459] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 46.800662][ T4452] bond1 (unregistering): Released all slaves [ 46.822840][ T4451] vlan2: entered allmulticast mode [ 46.828596][ T4451] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 46.880172][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 46.880184][ T29] audit: type=1326 audit(1763152431.045:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 46.918542][ T29] audit: type=1326 audit(1763152431.045:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 46.942053][ T29] audit: type=1326 audit(1763152431.045:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 46.965570][ T29] audit: type=1326 audit(1763152431.045:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c33dcf703 code=0x7ffc0000 [ 46.988980][ T29] audit: type=1326 audit(1763152431.055:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c33dcf703 code=0x7ffc0000 [ 47.012247][ T29] audit: type=1326 audit(1763152431.055:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 47.035907][ T29] audit: type=1326 audit(1763152431.055:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 47.059270][ T29] audit: type=1326 audit(1763152431.055:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 47.082867][ T29] audit: type=1326 audit(1763152431.055:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 47.089900][ T4459] syz.2.290 (4459) used greatest stack depth: 9904 bytes left [ 47.106258][ T29] audit: type=1326 audit(1763152431.055:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 47.196622][ T4473] pim6reg1: entered promiscuous mode [ 47.202187][ T4473] pim6reg1: entered allmulticast mode [ 47.344487][ T4474] loop2: detected capacity change from 0 to 32768 [ 47.387119][ T4474] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 47.392687][ T4474] loop2: p1 start 460800 is beyond EOD, truncated [ 47.399243][ T4474] loop2: p2 size 83886080 extends beyond EOD, truncated [ 47.408564][ T4474] loop2: p5 start 460800 is beyond EOD, truncated [ 47.415678][ T4474] loop2: p6 size 83886080 extends beyond EOD, truncated [ 47.597882][ T4495] netlink: 'syz.4.300': attribute type 10 has an invalid length. [ 47.609520][ T4495] team0: Port device dummy0 added [ 47.616573][ T4495] netlink: 'syz.4.300': attribute type 10 has an invalid length. [ 47.625337][ T4495] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.636035][ T4495] team0: Failed to send options change via netlink (err -105) [ 47.643916][ T4495] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.653429][ T4495] team0: Port device dummy0 removed [ 47.660362][ T4495] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.735943][ T4502] loop0: detected capacity change from 0 to 256 [ 47.809321][ T4505] loop2: detected capacity change from 0 to 2048 [ 47.836905][ T4505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.076916][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.149768][ T4536] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.203815][ T4536] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.235147][ T4545] bridge: RTM_NEWNEIGH with invalid ether address [ 48.265041][ T4536] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.360876][ T4536] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.436808][ T4564] loop4: detected capacity change from 0 to 256 [ 48.461313][ T1981] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.488157][ T1981] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.506819][ T1981] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.529527][ T1981] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.721220][ T4576] loop4: detected capacity change from 0 to 1024 [ 48.732825][ T4576] EXT4-fs: Ignoring removed orlov option [ 48.741815][ T4576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.899532][ T4590] loop6: detected capacity change from 0 to 1024 [ 48.929484][ T4590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.961845][ T4590] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 49.006592][ T4594] loop0: detected capacity change from 0 to 164 [ 49.015863][ T4594] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.029965][ T4594] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.035442][ T4597] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1224 with error 28 [ 49.050775][ T4597] EXT4-fs (loop6): This should not happen!! Data will be lost [ 49.050775][ T4597] [ 49.060529][ T4597] EXT4-fs (loop6): Total free blocks count 0 [ 49.066517][ T4597] EXT4-fs (loop6): Free/Dirty block details [ 49.072561][ T4597] EXT4-fs (loop6): free_blocks=20480 [ 49.077925][ T4597] EXT4-fs (loop6): dirty_blocks=2368 [ 49.078960][ T4598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.323'. [ 49.083226][ T4597] EXT4-fs (loop6): Block reservation details [ 49.098778][ T4597] EXT4-fs (loop6): i_reserved_data_blocks=148 [ 49.099275][ T4598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.323'. [ 49.180387][ T4602] netlink: 'syz.5.326': attribute type 1 has an invalid length. [ 49.202597][ T4602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.217805][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.232289][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.326'. [ 49.275033][ T4602] bond1 (unregistering): Released all slaves [ 49.299823][ T4608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 49.396403][ T4616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 49.400912][ T3945] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 49.552967][ T4623] ip6gre1: entered allmulticast mode [ 49.755405][ T4632] netlink: 'syz.2.340': attribute type 15 has an invalid length. [ 49.780905][ T4634] netlink: 'syz.2.341': attribute type 1 has an invalid length. [ 49.804361][ T4634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.834801][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 49.860657][ T4634] bond2 (unregistering): Released all slaves [ 50.053110][ T4650] loop4: detected capacity change from 0 to 512 [ 50.070348][ T4652] ip6gre1: entered allmulticast mode [ 50.093231][ T4650] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.104669][ T4650] EXT4-fs (loop4): 1 truncate cleaned up [ 50.110792][ T4650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.163626][ T4666] netlink: 88 bytes leftover after parsing attributes in process `syz.0.361'. [ 50.179188][ T4665] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.191450][ T4663] netlink: 5 bytes leftover after parsing attributes in process `syz.5.362'. [ 50.217607][ T4663] 0ªî{X¹¦: renamed from gretap0 [ 50.226050][ T4663] 0ªî{X¹¦: entered allmulticast mode [ 50.237135][ T4663] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 50.256963][ T4665] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.300678][ T4665] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.320042][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.349707][ T4665] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.350548][ T4674] loop4: detected capacity change from 0 to 1024 [ 50.371021][ T4678] netlink: 'syz.5.355': attribute type 3 has an invalid length. [ 50.378823][ T4678] netlink: 132 bytes leftover after parsing attributes in process `syz.5.355'. [ 50.407337][ T4674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.432599][ T4674] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.438587][ T41] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.456373][ T4674] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.353: bg 0: block 112: padding at end of block bitmap is not set [ 50.473404][ T41] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.482494][ T41] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.490952][ T3945] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.516053][ T4674] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.353: Freeing blocks not in datazone - block = 0, count = 16 [ 50.571753][ T3945] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 50.584158][ T3945] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.584158][ T3945] [ 50.594299][ T3945] EXT4-fs (loop4): Total free blocks count 0 [ 50.600371][ T3945] EXT4-fs (loop4): Free/Dirty block details [ 50.603133][ T4686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.357'. [ 50.606261][ T3945] EXT4-fs (loop4): free_blocks=16 [ 50.620136][ T3945] EXT4-fs (loop4): dirty_blocks=16 [ 50.625247][ T3945] EXT4-fs (loop4): Block reservation details [ 50.631370][ T3945] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 50.638189][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.647568][ T4686] hsr_slave_0: left promiscuous mode [ 50.657201][ T4697] netlink: 'syz.6.358': attribute type 1 has an invalid length. [ 50.665010][ T4686] hsr_slave_1: left promiscuous mode [ 50.701942][ T4697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.712838][ T4706] bond1 (unregistering): Released all slaves [ 50.785864][ T4713] loop2: detected capacity change from 0 to 1024 [ 50.792976][ T4713] EXT4-fs: Ignoring removed orlov option [ 50.803994][ T4713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.079092][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.103979][ T4741] loop2: detected capacity change from 0 to 164 [ 51.115009][ T4741] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.130849][ T4741] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.170301][ T4746] netlink: 'syz.2.370': attribute type 83 has an invalid length. [ 51.325552][ T4769] loop2: detected capacity change from 0 to 1024 [ 51.335947][ T4771] pim6reg1: entered promiscuous mode [ 51.340535][ T4769] EXT4-fs: Ignoring removed nobh option [ 51.341382][ T4771] pim6reg1: entered allmulticast mode [ 51.347459][ T4769] EXT4-fs: Ignoring removed bh option [ 51.357716][ T4769] EXT4-fs: Ignoring removed i_version option [ 51.379414][ T4769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.403073][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.512184][ T4777] loop2: detected capacity change from 0 to 1024 [ 51.540765][ T4777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.560633][ T4777] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.629587][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.891486][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 51.891570][ T29] audit: type=1400 audit(1763152436.055:992): avc: denied { create } for pid=4798 comm="syz.6.383" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.953907][ T4801] loop0: detected capacity change from 0 to 2048 [ 51.975360][ T29] audit: type=1400 audit(1763152436.135:993): avc: denied { mounton } for pid=4798 comm="syz.6.383" path="/19/file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.033576][ T4801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.104244][ T29] audit: type=1400 audit(1763152436.265:994): avc: denied { unlink } for pid=3885 comm="syz-executor" name="file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.130897][ T4806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4806 comm=syz.6.385 [ 52.286690][ T29] audit: type=1326 audit(1763152436.445:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 52.332982][ T29] audit: type=1326 audit(1763152436.445:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 52.356929][ T29] audit: type=1326 audit(1763152436.455:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 52.380289][ T29] audit: type=1326 audit(1763152436.455:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 52.404252][ T29] audit: type=1326 audit(1763152436.455:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 52.428290][ T29] audit: type=1326 audit(1763152436.455:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 52.451808][ T29] audit: type=1326 audit(1763152436.455:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 52.489833][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.575778][ T4836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.588756][ T4836] bond1 (unregistering): Released all slaves [ 52.624439][ T4845] netlink: 'syz.6.393': attribute type 10 has an invalid length. [ 52.644316][ T4845] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 52.653687][ T4845] team0: Failed to send options change via netlink (err -105) [ 52.661218][ T4845] team0: Port device dummy0 added [ 52.685242][ T4848] pim6reg1: entered promiscuous mode [ 52.690674][ T4848] pim6reg1: entered allmulticast mode [ 52.774069][ T4858] loop4: detected capacity change from 0 to 1024 [ 52.794399][ T4858] EXT4-fs: Ignoring removed orlov option [ 52.825772][ T4858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.072691][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.078469][ T4879] netlink: 'syz.5.417': attribute type 1 has an invalid length. [ 53.105748][ T4879] bond1: entered promiscuous mode [ 53.110872][ T4879] bond1: entered allmulticast mode [ 53.120366][ T4879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.142812][ T4879] bond1: (slave gretap0): making interface the new active one [ 53.150554][ T4879] gretap0: entered promiscuous mode [ 53.155832][ T4879] gretap0: entered allmulticast mode [ 53.162403][ T4879] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 53.189034][ T4879] vlan2: entered allmulticast mode [ 53.194944][ T4879] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 53.291444][ T4879] syz.5.417 (4879) used greatest stack depth: 9712 bytes left [ 53.400993][ T4886] bridge: RTM_NEWNEIGH with invalid ether address [ 53.474150][ T4890] tipc: Started in network mode [ 53.479128][ T4890] tipc: Node identity 22709e4d5f7f, cluster identity 4711 [ 53.486297][ T4890] tipc: Enabled bearer , priority 0 [ 53.494851][ T4889] tipc: Resetting bearer [ 53.508966][ T4889] tipc: Disabling bearer [ 53.864346][ T4912] netlink: 'syz.2.422': attribute type 7 has an invalid length. [ 54.074422][ T4928] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 54.155559][ T4937] loop0: detected capacity change from 0 to 8192 [ 54.418910][ T4956] can0: slcan on ttyS3. [ 54.540934][ T4955] can0 (unregistered): slcan off ttyS3. [ 54.570030][ T4981] __nla_validate_parse: 2 callbacks suppressed [ 54.570047][ T4981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.445'. [ 54.594239][ T4980] loop4: detected capacity change from 0 to 1024 [ 54.627806][ T4980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.649207][ T4989] loop0: detected capacity change from 0 to 1024 [ 54.651398][ T4980] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.672707][ T4989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.704830][ T4989] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.736941][ T4989] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.446: bg 0: block 112: padding at end of block bitmap is not set [ 54.755838][ T4989] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.446: Freeing blocks not in datazone - block = 0, count = 16 [ 54.789720][ T5000] loop2: detected capacity change from 0 to 2048 [ 54.804705][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.819694][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.451'. [ 54.837937][ T5009] bridge_slave_0: left allmulticast mode [ 54.843601][ T5009] bridge_slave_0: left promiscuous mode [ 54.849376][ T5009] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.857537][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.861073][ T3303] Alternate GPT is invalid, using primary GPT. [ 54.869789][ T41] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.869789][ T41] [ 54.869808][ T41] EXT4-fs (loop0): Total free blocks count 0 [ 54.869820][ T41] EXT4-fs (loop0): Free/Dirty block details [ 54.869833][ T41] EXT4-fs (loop0): free_blocks=16 [ 54.869846][ T41] EXT4-fs (loop0): dirty_blocks=16 [ 54.869858][ T41] EXT4-fs (loop0): Block reservation details [ 54.869870][ T41] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 54.907706][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.909750][ T3303] loop2: p2 p3 p7 [ 54.945801][ T5015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.964811][ T5009] bridge_slave_1: left allmulticast mode [ 54.970586][ T5009] bridge_slave_1: left promiscuous mode [ 54.976331][ T5009] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.023716][ T5000] Alternate GPT is invalid, using primary GPT. [ 55.030298][ T5000] loop2: p2 p3 p7 [ 55.081816][ T3003] Alternate GPT is invalid, using primary GPT. [ 55.088353][ T3003] loop2: p2 p3 p7 [ 55.093909][ T5009] bond0: (slave bond_slave_0): Releasing backup interface [ 55.112363][ T5009] bond0: (slave bond_slave_1): Releasing backup interface [ 55.150147][ T5027] netlink: 'syz.2.457': attribute type 10 has an invalid length. [ 55.170749][ T5028] loop6: detected capacity change from 0 to 1024 [ 55.178743][ T5009] team0: Port device team_slave_1 removed [ 55.192163][ T5009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.199753][ T5028] EXT4-fs: inline encryption not supported [ 55.205672][ T5028] EXT4-fs: Ignoring removed orlov option [ 55.213432][ T5009] bond1: (slave gretap0): Releasing active interface [ 55.220267][ T5009] gretap0: left promiscuous mode [ 55.225434][ T5009] gretap0: left allmulticast mode [ 55.231444][ T5028] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 55.290996][ T5024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.291161][ T5028] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 55.313686][ T5028] System zones: 0-1, 3-12 [ 55.325422][ T5028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.347032][ T5024] bond2 (unregistering): Released all slaves [ 55.362501][ T5027] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 55.369617][ T5028] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 55.372249][ T5027] team0: Failed to send options change via netlink (err -105) [ 55.384615][ T5028] EXT4-fs (loop6): This should not happen!! Data will be lost [ 55.384615][ T5028] [ 55.391556][ T5027] team0: Port device dummy0 added [ 55.401232][ T5028] EXT4-fs (loop6): Total free blocks count 0 [ 55.401251][ T5028] EXT4-fs (loop6): Free/Dirty block details [ 55.418904][ T5028] EXT4-fs (loop6): free_blocks=0 [ 55.424011][ T5028] EXT4-fs (loop6): dirty_blocks=0 [ 55.429137][ T5028] EXT4-fs (loop6): Block reservation details [ 55.435120][ T5028] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 55.498722][ T3885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.652925][ T3003] Alternate GPT is invalid, using primary GPT. [ 55.659350][ T3003] loop2: p2 p3 p7 [ 55.803678][ T3003] Alternate GPT is invalid, using primary GPT. [ 55.810156][ T3003] loop2: p2 p3 p7 [ 55.858520][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 55.867393][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 55.881033][ T5060] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.988505][ T5060] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.058882][ T5071] loop0: detected capacity change from 0 to 1024 [ 56.069835][ T5060] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.093796][ T5071] EXT4-fs: Ignoring removed orlov option [ 56.100124][ T5071] EXT4-fs: Ignoring removed orlov option [ 56.148329][ T5060] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.160261][ T5071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.161525][ T3003] Alternate GPT is invalid, using primary GPT. [ 56.179354][ T3003] loop2: p2 p3 p7 [ 56.254516][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.284380][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.310792][ T3003] Alternate GPT is invalid, using primary GPT. [ 56.317320][ T3003] loop2: p2 p3 p7 [ 56.323853][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.338508][ T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.363928][ T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.402391][ T5078] pim6reg1: entered promiscuous mode [ 56.407889][ T5078] pim6reg1: entered allmulticast mode [ 56.461112][ T5083] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.488259][ T3003] Alternate GPT is invalid, using primary GPT. [ 56.494768][ T3003] loop2: p2 p3 p7 [ 56.507931][ T5087] netlink: 'syz.0.476': attribute type 10 has an invalid length. [ 56.544297][ T5083] bond2 (unregistering): Released all slaves [ 56.568849][ T5087] bond0: (slave dummy0): Releasing backup interface [ 56.586601][ T5092] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 56.648769][ T5087] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 56.675200][ T5087] team0: Failed to send options change via netlink (err -105) [ 56.682767][ T5087] team0: Port device dummy0 added [ 56.702044][ T5097] loop2: detected capacity change from 0 to 1024 [ 56.715687][ T5095] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.773120][ T5097] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 56.791788][ T5095] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.812219][ T5101] wg2: entered promiscuous mode [ 56.817774][ T5101] wg2: entered allmulticast mode [ 56.827970][ T5097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.855142][ T5095] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.909938][ T5095] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.020800][ T5112] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.032062][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.095588][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 57.095651][ T29] audit: type=1326 audit(1763152441.255:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 57.127939][ T5112] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.129695][ T5114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.488'. [ 57.179253][ T29] audit: type=1326 audit(1763152441.295:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 57.202726][ T29] audit: type=1326 audit(1763152441.315:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 57.209269][ T5112] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.226757][ T29] audit: type=1326 audit(1763152441.315:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff73a5df703 code=0x7ffc0000 [ 57.259511][ T29] audit: type=1326 audit(1763152441.315:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff73a5df703 code=0x7ffc0000 [ 57.282694][ T29] audit: type=1326 audit(1763152441.315:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 57.307592][ T29] audit: type=1326 audit(1763152441.315:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 57.331524][ T29] audit: type=1326 audit(1763152441.315:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 57.355436][ T29] audit: type=1326 audit(1763152441.315:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 57.379502][ T29] audit: type=1326 audit(1763152441.315:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 57.428971][ T5121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.436455][ T5121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.453145][ T5112] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.473680][ T5123] capability: warning: `syz.6.493' uses deprecated v2 capabilities in a way that may be insecure [ 57.485187][ T5123] GUP no longer grows the stack in syz.6.493 (5123): 200000004000-20000000a000 (200000002000) [ 57.495802][ T5123] CPU: 1 UID: 0 PID: 5123 Comm: syz.6.493 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.495898][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 57.495917][ T5123] Call Trace: [ 57.495922][ T5123] [ 57.495927][ T5123] __dump_stack+0x1d/0x30 [ 57.495996][ T5123] dump_stack_lvl+0xe8/0x140 [ 57.496007][ T5123] dump_stack+0x15/0x1b [ 57.496017][ T5123] __get_user_pages+0x1968/0x1ed0 [ 57.496106][ T5123] get_user_pages_remote+0x1d5/0x6c0 [ 57.496142][ T5123] __access_remote_vm+0x15c/0x590 [ 57.496163][ T5123] access_remote_vm+0x32/0x40 [ 57.496187][ T5123] proc_pid_cmdline_read+0x32b/0x6c0 [ 57.496216][ T5123] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 57.496266][ T5123] vfs_readv+0x3fb/0x690 [ 57.496287][ T5123] __x64_sys_preadv+0xfd/0x1c0 [ 57.496303][ T5123] x64_sys_call+0x282e/0x3000 [ 57.496419][ T5123] do_syscall_64+0xd2/0x200 [ 57.496431][ T5123] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.496459][ T5123] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 57.496550][ T5123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.496563][ T5123] RIP: 0033:0x7fd797e8f6c9 [ 57.496629][ T5123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.496647][ T5123] RSP: 002b:00007fd7968ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 57.496697][ T5123] RAX: ffffffffffffffda RBX: 00007fd7980e5fa0 RCX: 00007fd797e8f6c9 [ 57.496704][ T5123] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 57.496771][ T5123] RBP: 00007fd797f11f91 R08: 0000000000000000 R09: 0000000000000000 [ 57.496792][ T5123] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 57.496803][ T5123] R13: 00007fd7980e6038 R14: 00007fd7980e5fa0 R15: 00007ffd60f21d58 [ 57.496821][ T5123] [ 57.733599][ T1981] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.744892][ T1981] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.753234][ T5125] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 57.765497][ T1981] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.782707][ T1981] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.814927][ T5127] team0: Port device dummy0 removed [ 57.825095][ T5127] bridge_slave_0: left allmulticast mode [ 57.830851][ T5127] bridge_slave_0: left promiscuous mode [ 57.836756][ T5127] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.845843][ T5127] bridge_slave_1: left allmulticast mode [ 57.851604][ T5127] bridge_slave_1: left promiscuous mode [ 57.857590][ T5127] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.869639][ T5127] bond0: (slave bond_slave_0): Releasing backup interface [ 57.880699][ T5127] bond0: (slave bond_slave_1): Releasing backup interface [ 57.892551][ T5127] team0: Port device team_slave_1 removed [ 57.904743][ T5134] syz.6.497 uses obsolete (PF_INET,SOCK_PACKET) [ 57.913591][ T5127] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 58.075338][ T5151] netlink: 'syz.2.503': attribute type 12 has an invalid length. [ 59.166620][ T5195] netlink: 'syz.2.523': attribute type 4 has an invalid length. [ 59.174456][ T5195] netlink: 152 bytes leftover after parsing attributes in process `syz.2.523'. [ 59.229096][ T5195] .`: renamed from bond0 (while UP) [ 59.278744][ T5200] netlink: 'syz.5.526': attribute type 10 has an invalid length. [ 59.288090][ T5200] team0: Port device dummy0 added [ 59.295035][ T5200] netlink: 'syz.5.526': attribute type 10 has an invalid length. [ 59.296693][ T5202] netlink: 'syz.2.525': attribute type 1 has an invalid length. [ 59.303461][ T5200] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 59.320421][ T5200] team0: Failed to send options change via netlink (err -105) [ 59.328199][ T5200] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 59.337307][ T5200] team0: Port device dummy0 removed [ 59.343948][ T5200] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 59.362204][ T5205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.373980][ T5205] bond0: (slave batadv0): making interface the new active one [ 59.382721][ T5205] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 59.754136][ T5255] netlink: 'syz.0.536': attribute type 4 has an invalid length. [ 59.761874][ T5255] netlink: 152 bytes leftover after parsing attributes in process `syz.0.536'. [ 59.774631][ T5255] .`: renamed from bond0 (while UP) [ 59.820548][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.538'. [ 59.830834][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.538'. [ 59.840664][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.538'. [ 59.959949][ T5268] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.969316][ T5268] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.001790][ T5275] tipc: Started in network mode [ 60.006871][ T5275] tipc: Node identity ea93ae918148, cluster identity 4711 [ 60.014022][ T5275] tipc: Enabled bearer , priority 0 [ 60.057362][ T5268] syzkaller0: entered promiscuous mode [ 60.063060][ T5268] syzkaller0: entered allmulticast mode [ 60.069365][ T5268] tipc: Resetting bearer [ 60.080504][ T5267] tipc: Resetting bearer [ 60.088313][ T5267] tipc: Disabling bearer [ 60.098778][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.110354][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.122371][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.137904][ T1981] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.184794][ T5285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5285 comm=syz.6.549 [ 60.199812][ T5286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.547'. [ 60.225912][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 60.246637][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 60.267614][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 60.281281][ T5292] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 60.553266][ T5310] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.622406][ T5312] veth2: entered promiscuous mode [ 60.627784][ T5312] veth2: entered allmulticast mode [ 60.669065][ T5310] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.694519][ T5315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.702490][ T5315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.734854][ T5310] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.810465][ T5310] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.873897][ T1981] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.886317][ T1981] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.897748][ T289] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.909425][ T1981] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.949374][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 60.967462][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 61.073708][ T5333] netlink: 'syz.4.569': attribute type 3 has an invalid length. [ 61.457066][ T3632] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.584662][ T5357] loop0: detected capacity change from 0 to 128 [ 62.092818][ T5369] veth2: entered promiscuous mode [ 62.097972][ T5369] veth2: entered allmulticast mode [ 62.315958][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 62.315975][ T29] audit: type=1400 audit(1763152446.465:1578): avc: denied { sqpoll } for pid=5382 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.440839][ T29] audit: type=1326 audit(1763152446.605:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3600f96567 code=0x7ffc0000 [ 62.464805][ T29] audit: type=1326 audit(1763152446.605:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3600f3b789 code=0x7ffc0000 [ 62.523985][ T29] audit: type=1326 audit(1763152446.605:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3600f96567 code=0x7ffc0000 [ 62.548146][ T29] audit: type=1326 audit(1763152446.605:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3600f3b789 code=0x7ffc0000 [ 62.571635][ T29] audit: type=1326 audit(1763152446.605:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3600f9f6c9 code=0x7ffc0000 [ 62.595688][ T29] audit: type=1326 audit(1763152446.605:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3600f9f6c9 code=0x7ffc0000 [ 62.619831][ T29] audit: type=1326 audit(1763152446.635:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3600f9f6c9 code=0x7ffc0000 [ 62.643301][ T29] audit: type=1326 audit(1763152446.635:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3600f9f6c9 code=0x7ffc0000 [ 62.667351][ T29] audit: type=1326 audit(1763152446.635:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3600f9f6c9 code=0x7ffc0000 [ 62.804150][ T5462] loop0: detected capacity change from 0 to 512 [ 62.842314][ T5462] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.598: Failed to acquire dquot type 1 [ 62.875474][ T5462] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.598: Failed to acquire dquot type 1 [ 62.898292][ T5472] netlink: 'syz.6.601': attribute type 12 has an invalid length. [ 62.901056][ T5462] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.598: bg 0: block 248: padding at end of block bitmap is not set [ 62.937174][ T5462] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 62.957387][ T5462] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.598: Failed to acquire dquot type 1 [ 62.978060][ T5462] EXT4-fs (loop0): 1 orphan inode deleted [ 62.984292][ T5462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.033760][ T5462] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.117287][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.169356][ T5435] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.179151][ T5435] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.194346][ T5435] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.213941][ T5435] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.539874][ T5503] loop5: detected capacity change from 0 to 512 [ 63.636527][ T5503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.649324][ T5503] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.662376][ T5503] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.614: corrupted inode contents [ 63.675285][ T5503] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.614: mark_inode_dirty error [ 63.704423][ T5503] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.614: corrupted inode contents [ 63.740439][ T5510] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.614: corrupted inode contents [ 63.744562][ T5512] loop4: detected capacity change from 0 to 128 [ 63.758729][ T5510] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.614: mark_inode_dirty error [ 63.778076][ T5512] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.786404][ T5510] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.614: corrupted inode contents [ 63.802759][ T5512] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.833305][ T5510] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.614: mark_inode_dirty error [ 63.865698][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.885881][ T5510] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.614: corrupted inode contents [ 63.917076][ T5510] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.614: mark_inode_dirty error [ 63.966234][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.129209][ T5523] veth2: entered promiscuous mode [ 64.134398][ T5523] veth2: entered allmulticast mode [ 64.209474][ T5535] netlink: '+}[@': attribute type 10 has an invalid length. [ 64.596979][ T5580] veth4: entered promiscuous mode [ 64.602070][ T5580] veth4: entered allmulticast mode [ 64.996960][ T5605] loop2: detected capacity change from 0 to 1024 [ 65.003717][ T5605] EXT4-fs: Ignoring removed orlov option [ 65.009954][ T5605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.035485][ T5605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.059906][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.061116][ T5614] tipc: Enabled bearer , priority 0 [ 65.087460][ T5611] tipc: Resetting bearer [ 65.109238][ T5611] tipc: Disabling bearer [ 65.163088][ T5623] netlink: 'syz.2.657': attribute type 10 has an invalid length. [ 65.181483][ T5623] team0: Port device dummy0 added [ 65.183145][ T5626] netlink: 'syz.6.658': attribute type 21 has an invalid length. [ 65.196185][ T5623] netlink: 'syz.2.657': attribute type 10 has an invalid length. [ 65.196220][ T5626] __nla_validate_parse: 4 callbacks suppressed [ 65.196232][ T5626] netlink: 132 bytes leftover after parsing attributes in process `syz.6.658'. [ 65.220088][ T5623] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.254517][ T5623] team0: Failed to send options change via netlink (err -105) [ 65.268980][ T5623] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.287738][ T5623] team0: Port device dummy0 removed [ 65.297351][ T5623] .`: (slave dummy0): Enslaving as an active interface with an up link [ 65.519192][ T5644] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.592065][ T5646] pim6reg1: entered promiscuous mode [ 65.597481][ T5646] pim6reg1: entered allmulticast mode [ 65.622358][ T5644] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.651694][ T5652] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 65.679603][ T5644] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.691368][ T5652] loop6: detected capacity change from 0 to 1024 [ 65.721057][ T5652] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.749960][ T5644] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.760741][ T5652] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 65.769686][ T5652] EXT4-fs (loop6): orphan cleanup on readonly fs [ 65.776323][ T5652] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 65.791231][ T5652] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 65.798943][ T5652] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.669: Freeing blocks not in datazone - block = 0, count = 4096 [ 65.812957][ T5652] EXT4-fs (loop6): Remounting filesystem read-only [ 65.819690][ T5652] EXT4-fs (loop6): 1 truncate cleaned up [ 65.825992][ T5652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.864406][ T5447] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.883678][ T5447] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.906880][ T5447] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.927680][ T5447] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.977985][ T3885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.021395][ T5668] netlink: 60 bytes leftover after parsing attributes in process `syz.6.674'. [ 66.030552][ T5668] IPVS: Unknown mcast interface: [ 66.425624][ T5698] netlink: 660 bytes leftover after parsing attributes in process `syz.6.687'. [ 66.558208][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 66.590189][ T5715] loop4: detected capacity change from 0 to 256 [ 66.597961][ T5712] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 66.638105][ T5712] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 66.721646][ T5723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 66.737639][ T5723] bridge_slave_1: left allmulticast mode [ 66.743317][ T5723] bridge_slave_1: left promiscuous mode [ 66.749073][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.765444][ T5723] bridge_slave_0: left allmulticast mode [ 66.771821][ T5723] bridge_slave_0: left promiscuous mode [ 66.777526][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.983465][ T5752] syz.2.707 (5752): attempted to duplicate a private mapping with mremap. This is not supported. [ 67.317015][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 67.317030][ T29] audit: type=1326 audit(1763152451.485:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.5.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 67.349162][ T29] audit: type=1326 audit(1763152451.515:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.5.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 67.444771][ T5773] ÿ: renamed from bond_slave_0 [ 67.462136][ T5771] wg2: entered promiscuous mode [ 67.467133][ T5771] wg2: entered allmulticast mode [ 67.526138][ T29] audit: type=1326 audit(1763152451.685:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.5.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 67.549778][ T29] audit: type=1326 audit(1763152451.685:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.5.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 67.573253][ T29] audit: type=1326 audit(1763152451.685:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.5.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 67.596762][ T29] audit: type=1326 audit(1763152451.685:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.5.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 67.620287][ T29] audit: type=1326 audit(1763152451.685:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.5.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 67.643710][ T29] audit: type=1326 audit(1763152451.685:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.5.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 67.667281][ T29] audit: type=1326 audit(1763152451.685:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.5.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 67.690801][ T29] audit: type=1326 audit(1763152451.685:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5782 comm="syz.5.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 67.718922][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 67.767440][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 68.214016][ T3003] udevd[3003]: worker [4331] terminated by signal 33 (Unknown signal 33) [ 68.245207][ T3003] udevd[3003]: worker [4331] failed while handling '/devices/virtual/block/loop6' [ 68.294598][ T3306] printk: udevd: 4 output lines suppressed due to ratelimiting [ 68.295264][ T5840] tipc: Enabling of bearer rejected, failed to enable media [ 68.328949][ T5839] bridge0: entered promiscuous mode [ 68.335356][ T5839] macsec1: entered promiscuous mode [ 68.341362][ T5839] bridge0: port 1(macsec1) entered blocking state [ 68.348461][ T5839] bridge0: port 1(macsec1) entered disabled state [ 68.356219][ T5839] macsec1: entered allmulticast mode [ 68.361645][ T5839] bridge0: entered allmulticast mode [ 68.379787][ T5839] macsec1: left allmulticast mode [ 68.384871][ T5839] bridge0: left allmulticast mode [ 68.392665][ T5839] bridge0: left promiscuous mode [ 68.498202][ T5859] tipc: Started in network mode [ 68.503114][ T5859] tipc: Node identity 72a50cfeae7f, cluster identity 4711 [ 68.510963][ T5859] tipc: Enabled bearer , priority 0 [ 68.553407][ T5850] tipc: Resetting bearer [ 68.564383][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.757'. [ 68.594271][ T5869] loop2: detected capacity change from 0 to 2048 [ 68.617998][ T5850] tipc: Disabling bearer [ 68.646815][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.757'. [ 68.667791][ T5869] loop2: p2 < > p4 [ 68.686855][ T5869] loop2: p4 size 262144 extends beyond EOD, truncated [ 68.717483][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 68.872058][ T5899] netlink: 'syz.6.772': attribute type 4 has an invalid length. [ 68.883424][ T5900] ip6tnl0: entered promiscuous mode [ 68.888963][ T5900] ip6tnl0: entered allmulticast mode [ 68.924253][ T5902] netlink: 'syz.6.772': attribute type 4 has an invalid length. [ 69.000050][ T5912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=5912 comm=syz.2.774 [ 69.313562][ T5934] netlink: 'syz.5.786': attribute type 4 has an invalid length. [ 69.568859][ T5953] loop0: detected capacity change from 0 to 1024 [ 69.606768][ T5953] EXT4-fs: Ignoring removed bh option [ 69.622950][ T5953] EXT4-fs: inline encryption not supported [ 69.639942][ T5953] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.669384][ T5953] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 69.688038][ T5953] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.793: lblock 2 mapped to illegal pblock 2 (length 1) [ 69.704024][ T5953] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.793: lblock 0 mapped to illegal pblock 48 (length 1) [ 69.720324][ T5953] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.793: Failed to acquire dquot type 0 [ 69.732080][ T5953] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 69.741637][ T5953] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.793: mark_inode_dirty error [ 69.754491][ T5953] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 69.765887][ T5953] EXT4-fs (loop0): 1 orphan inode deleted [ 69.772535][ T5953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.785977][ T5435] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:43: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.805230][ T5435] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:43: Failed to release dquot type 0 [ 69.853358][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.863206][ T3318] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 69.878336][ T3318] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 69.888155][ T3318] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 70.112404][ T5987] loop4: detected capacity change from 0 to 256 [ 70.182515][ T5987] FAT-fs (loop4): bogus number of FAT sectors [ 70.188735][ T5987] FAT-fs (loop4): Can't find a valid FAT filesystem [ 70.382758][ T6003] __nla_validate_parse: 6 callbacks suppressed [ 70.382776][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 70.416087][ T6007] process 'syz.0.815' launched './file0' with NULL argv: empty string added [ 70.918452][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.825'. [ 70.954039][ T6038] ip6gre1: entered allmulticast mode [ 70.988504][ T6042] pim6reg1: entered promiscuous mode [ 70.993980][ T6042] pim6reg1: entered allmulticast mode [ 71.045262][ T6044] loop0: detected capacity change from 0 to 8192 [ 71.323751][ T6061] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 71.331523][ T6061] FAT-fs (loop0): Filesystem has been set read-only [ 71.360641][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.838'. [ 71.393853][ T6044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 71.430596][ T6063] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 71.446855][ T6044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 71.462605][ T6044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 71.612418][ T3318] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 71.836094][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 71.885803][ T6097] loop2: detected capacity change from 0 to 164 [ 72.043051][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.6.853'. [ 72.065512][ T6105] loop0: detected capacity change from 0 to 4096 [ 72.076387][ T6105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.109718][ T6105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.169691][ T6124] bridge: RTM_NEWNEIGH with invalid ether address [ 72.180801][ T6126] bridge: RTM_NEWNEIGH with invalid ether address [ 72.304228][ T6144] netlink: 16 bytes leftover after parsing attributes in process `syz.6.867'. [ 72.327095][ T6147] xt_connbytes: Forcing CT accounting to be enabled [ 72.373979][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 72.373996][ T29] audit: type=1326 audit(1763152456.535:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6152 comm="syz.6.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 72.404502][ T29] audit: type=1326 audit(1763152456.535:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6152 comm="syz.6.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 72.429079][ T29] audit: type=1326 audit(1763152456.535:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6152 comm="syz.6.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 72.452614][ T29] audit: type=1326 audit(1763152456.535:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6152 comm="syz.6.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 72.467307][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 72.476774][ T29] audit: type=1326 audit(1763152456.535:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6152 comm="syz.6.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 72.515570][ T6156] netlink: 76 bytes leftover after parsing attributes in process `syz.4.869'. [ 72.538556][ T6157] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.619940][ T29] audit: type=1326 audit(1763152456.785:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 72.657211][ T6157] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.676676][ T29] audit: type=1326 audit(1763152456.815:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 72.701121][ T29] audit: type=1326 audit(1763152456.815:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 72.724800][ T29] audit: type=1326 audit(1763152456.815:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 72.748710][ T29] audit: type=1326 audit(1763152456.815:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd797e8f6c9 code=0x7ffc0000 [ 72.838812][ T6157] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.935130][ T6157] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.012314][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.037878][ T5452] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.070571][ T5452] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.095135][ T5452] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.124027][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.271117][ T6194] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.334253][ T6194] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.423963][ T6194] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.489818][ T6194] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.564746][ T6246] unsupported nla_type 46065 [ 74.660320][ T6254] netlink: 96 bytes leftover after parsing attributes in process `syz.4.910'. [ 74.717949][ T6264] loop6: detected capacity change from 0 to 128 [ 74.770066][ T6270] syz.6.918 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.964261][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz.5.924'. [ 74.981443][ T6284] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 75.176325][ T6293] rdma_op ffff888146aff980 conn xmit_rdma 0000000000000000 [ 75.675191][ T6319] __nla_validate_parse: 2 callbacks suppressed [ 75.675222][ T6319] netlink: 3 bytes leftover after parsing attributes in process `syz.4.940'. [ 75.691029][ T6319] 0ªX¹¦À: renamed from caif0 [ 75.699221][ T6319] 0ªX¹¦À: entered allmulticast mode [ 75.704492][ T6319] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 75.928366][ T6330] loop6: detected capacity change from 0 to 512 [ 75.938974][ T6330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.951885][ T6330] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.964541][ T6330] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.945: corrupted inode contents [ 75.977378][ T6330] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.945: mark_inode_dirty error [ 75.989135][ T6330] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.945: corrupted inode contents [ 76.002614][ T6330] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.945: corrupted inode contents [ 76.015094][ T6330] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.945: mark_inode_dirty error [ 76.026627][ T6330] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.945: corrupted inode contents [ 76.038998][ T6330] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.945: mark_inode_dirty error [ 76.050696][ T6330] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.945: corrupted inode contents [ 76.062727][ T6330] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.945: mark_inode_dirty error [ 76.085820][ T3885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.154266][ T6343] loop6: detected capacity change from 0 to 512 [ 76.161255][ T6343] EXT4-fs: Ignoring removed bh option [ 76.179117][ T6343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.191975][ T6343] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.219991][ T6347] loop0: detected capacity change from 0 to 128 [ 76.228390][ T6347] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.241252][ T6347] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.306180][ T5432] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.336072][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.345995][ T5432] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.368151][ T5432] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.382591][ T5432] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.430384][ T6361] Dead loop on virtual device ip6_vti0, fix it urgently! [ 76.456986][ T3885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.497720][ T6363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.958'. [ 76.528807][ T6363] IPVS: Error connecting to the multicast addr [ 76.590839][ T6383] loop0: detected capacity change from 0 to 128 [ 76.810953][ T6399] bridge0: port 1(gretap0) entered blocking state [ 76.818252][ T6399] bridge0: port 1(gretap0) entered disabled state [ 76.834970][ T6399] gretap0: entered allmulticast mode [ 76.841290][ T6399] gretap0: entered promiscuous mode [ 76.848926][ T6399] bridge0: port 1(gretap0) entered blocking state [ 76.855515][ T6399] bridge0: port 1(gretap0) entered forwarding state [ 76.877458][ T6402] 0ªî{X¹¦: left allmulticast mode [ 76.888973][ T6402] bond1: left promiscuous mode [ 76.895180][ T6403] gretap0: left allmulticast mode [ 76.900562][ T6403] gretap0: left promiscuous mode [ 76.905731][ T6403] bridge0: port 1(gretap0) entered disabled state [ 76.917250][ T6405] 9pnet_virtio: no channels available for device 127.0.0.1 [ 77.243600][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'. [ 77.261390][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 77.323732][ T6436] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.436940][ T6450] wg2: left promiscuous mode [ 77.441885][ T6450] wg2: left allmulticast mode [ 77.454446][ T6450] wg2: entered promiscuous mode [ 77.459373][ T6450] wg2: entered allmulticast mode [ 77.488189][ T6456] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1000'. [ 77.598516][ T6465] netlink: 'syz.0.1004': attribute type 10 has an invalid length. [ 77.615761][ T6465] netlink: 'syz.0.1004': attribute type 10 has an invalid length. [ 77.627117][ T6465] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 77.640083][ T6465] team0: Port device dummy0 removed [ 77.650083][ T6465] .`: (slave dummy0): Enslaving as an active interface with an up link [ 77.685256][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 77.685270][ T29] audit: type=1400 audit(1763152461.845:2212): avc: denied { create } for pid=6472 comm="syz.4.1007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=vsock_socket permissive=1 [ 77.733720][ T29] audit: type=1326 audit(1763152461.895:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 77.757908][ T29] audit: type=1326 audit(1763152461.895:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 77.815111][ T29] audit: type=1326 audit(1763152461.955:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 77.839523][ T29] audit: type=1326 audit(1763152461.955:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 77.863202][ T29] audit: type=1326 audit(1763152461.955:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 77.887475][ T29] audit: type=1326 audit(1763152461.955:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 77.911053][ T29] audit: type=1326 audit(1763152461.955:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 77.935393][ T29] audit: type=1326 audit(1763152461.955:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 77.959548][ T29] audit: type=1326 audit(1763152461.955:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c33dcf6c9 code=0x7ffc0000 [ 77.983608][ T6486] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.1012'. [ 78.019698][ T6489] loop6: detected capacity change from 0 to 512 [ 78.038842][ T6493] wg2: entered promiscuous mode [ 78.038858][ T6489] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 78.043830][ T6493] wg2: entered allmulticast mode [ 78.057702][ T6489] EXT4-fs (loop6): orphan cleanup on readonly fs [ 78.066509][ T6489] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1015: corrupted inode contents [ 78.079361][ T6489] EXT4-fs (loop6): Remounting filesystem read-only [ 78.086044][ T6489] EXT4-fs (loop6): 1 truncate cleaned up [ 78.091932][ T5401] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.102563][ T5401] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.113604][ T5401] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 78.124274][ T6489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.157713][ T3885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.202109][ T6506] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 78.225671][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1022'. [ 78.246071][ T6508] team0: Port device team_slave_1 removed [ 78.355788][ T6514] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 78.357292][ T6516] bridge0: port 3(syz_tun) entered blocking state [ 78.370716][ T6516] bridge0: port 3(syz_tun) entered disabled state [ 78.378228][ T6516] syz_tun: entered allmulticast mode [ 78.384125][ T6516] syz_tun: entered promiscuous mode [ 78.389831][ T6514] hsr_slave_0: left promiscuous mode [ 78.395755][ T6514] hsr_slave_1: left promiscuous mode [ 78.406664][ T6518] loop6: detected capacity change from 0 to 128 [ 78.414296][ T6518] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 78.547370][ T6526] vhci_hcd: invalid port number 0 [ 78.651213][ T6539] loop4: detected capacity change from 0 to 1024 [ 78.658191][ T6539] EXT4-fs: Ignoring removed nobh option [ 78.668633][ T6539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.701368][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.055890][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1053'. [ 79.147331][ T6579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1056'. [ 79.275716][ T6592] loop6: detected capacity change from 0 to 512 [ 79.283380][ T6584] loop4: detected capacity change from 0 to 8192 [ 79.307989][ T6592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.313164][ T3314] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 79.328382][ T3314] FAT-fs (loop4): Filesystem has been set read-only [ 79.347004][ T6592] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.380561][ T6580] chnl_net:caif_netlink_parms(): no params data found [ 79.422331][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.430118][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.437465][ T6580] bridge_slave_0: entered allmulticast mode [ 79.443991][ T6580] bridge_slave_0: entered promiscuous mode [ 79.451046][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.458841][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.466111][ T6580] bridge_slave_1: entered allmulticast mode [ 79.472639][ T6580] bridge_slave_1: entered promiscuous mode [ 79.490806][ T6580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.501313][ T6580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.522551][ T6580] team0: Port device team_slave_0 added [ 79.529208][ T6580] team0: Port device team_slave_1 added [ 79.546560][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.554220][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.580161][ T6580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.591915][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.599114][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.625036][ T6580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.654206][ T6580] hsr_slave_0: entered promiscuous mode [ 79.660849][ T6580] hsr_slave_1: entered promiscuous mode [ 79.763249][ T6580] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 79.779100][ T6580] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 79.788046][ T6580] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 79.800821][ T6580] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 79.825129][ T5401] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.835242][ T5401] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.851719][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.858896][ T6580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.866322][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.873489][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.883066][ T5401] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.891537][ T5401] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.921424][ T6580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.933509][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.943537][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.961465][ T6580] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.978751][ T5433] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.986176][ T5433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.997205][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.004437][ T5432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.024621][ T6580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.035189][ T6580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.094679][ T6657] bridge0: port 3(syz_tun) entered blocking state [ 80.101282][ T6657] bridge0: port 3(syz_tun) entered disabled state [ 80.108281][ T6657] syz_tun: entered allmulticast mode [ 80.122722][ T6657] syz_tun: entered promiscuous mode [ 80.147977][ T6657] bridge0: port 3(syz_tun) entered blocking state [ 80.154547][ T6657] bridge0: port 3(syz_tun) entered listening state [ 80.163841][ T3885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.190900][ T6580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.481714][ T5433] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.506746][ T5433] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.526143][ T5433] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.542765][ T6580] veth0_vlan: entered promiscuous mode [ 80.553686][ T6580] veth1_vlan: entered promiscuous mode [ 80.566467][ T5433] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.582671][ T6580] veth0_macvtap: entered promiscuous mode [ 80.595740][ T6580] veth1_macvtap: entered promiscuous mode [ 80.647175][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.664885][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.690420][ T5446] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.725102][ T5446] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.751978][ T5446] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.795986][ T5446] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.873907][ T6715] loop4: detected capacity change from 0 to 256 [ 81.147951][ T6720] loop7: detected capacity change from 0 to 2048 [ 81.229444][ T6720] loop7: p2 < > p4 [ 81.257385][ T6720] loop7: p4 size 262144 extends beyond EOD, truncated [ 81.423595][ T6728] __nla_validate_parse: 7 callbacks suppressed [ 81.423611][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1097'. [ 81.462700][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1097'. [ 81.482659][ T6734] ip6tnl0: entered promiscuous mode [ 81.487951][ T6734] ip6tnl0: entered allmulticast mode [ 81.521613][ T6738] netlink: 'syz.5.1101': attribute type 4 has an invalid length. [ 81.542145][ T6738] netlink: 'syz.5.1101': attribute type 4 has an invalid length. [ 81.594449][ T6744] tipc: Enabling of bearer rejected, failed to enable media [ 81.724733][ T6755] loop7: detected capacity change from 0 to 128 [ 82.079762][ T6780] netlink: 'syz.7.1118': attribute type 4 has an invalid length. [ 82.091882][ T6780] netlink: 'syz.7.1118': attribute type 4 has an invalid length. [ 82.130366][ T6782] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.266224][ T6787] netlink: 1276 bytes leftover after parsing attributes in process `syz.5.1122'. [ 82.783783][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 82.874970][ T6799] wg2: entered promiscuous mode [ 82.880453][ T6799] wg2: entered allmulticast mode [ 82.974102][ T6804] netlink: 'syz.2.1129': attribute type 4 has an invalid length. [ 83.002473][ T6806] loop2: detected capacity change from 0 to 1024 [ 83.009805][ T6806] EXT4-fs: inline encryption not supported [ 83.028855][ T6806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.052076][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.075284][ T6813] loop2: detected capacity change from 0 to 512 [ 83.088663][ T6813] __quota_error: 110 callbacks suppressed [ 83.088677][ T6813] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 83.105183][ T6813] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.113989][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1132'. [ 83.123375][ T6813] EXT4-fs (loop2): mount failed [ 83.141974][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1132'. [ 83.170053][ T29] audit: type=1326 audit(1763152467.335:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.2.1133" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc42656f6c9 code=0x0 [ 83.222804][ T6820] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1133'. [ 83.231904][ T6820] 0ªX¹¦À: renamed from caif0 [ 83.238814][ T6820] 0ªX¹¦À: entered allmulticast mode [ 83.244133][ T6820] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 83.779459][ T6782] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.010789][ T6782] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.080763][ T6782] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.165430][ T5401] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.188383][ T5401] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.232559][ T6855] loop7: detected capacity change from 0 to 512 [ 84.259385][ T6855] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 84.270897][ T6855] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.286509][ T6855] EXT4-fs (loop7): mount failed [ 84.303983][ T5401] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.332342][ T5401] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.387026][ T6859] loop2: detected capacity change from 0 to 8192 [ 84.549001][ T6873] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 84.556598][ T6873] FAT-fs (loop2): Filesystem has been set read-only [ 84.576447][ T6880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6880 comm=syz.4.1156 [ 84.593196][ T6878] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 84.601894][ T6859] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 84.621183][ T6859] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 84.742228][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1160'. [ 84.780279][ T3325] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 84.805209][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1160'. [ 84.825071][ T6890] loop7: detected capacity change from 0 to 1024 [ 84.851328][ T6893] loop6: detected capacity change from 0 to 512 [ 84.867030][ T6890] EXT4-fs: Ignoring removed orlov option [ 84.872886][ T6890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.900108][ T6893] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 84.914507][ T6890] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.930130][ T6893] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.996998][ T29] audit: type=1326 audit(1763152469.155:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 85.020607][ T29] audit: type=1326 audit(1763152469.155:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 85.044047][ T29] audit: type=1326 audit(1763152469.155:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 85.067658][ T29] audit: type=1326 audit(1763152469.155:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 85.091643][ T29] audit: type=1326 audit(1763152469.165:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 85.119691][ T6893] EXT4-fs (loop6): mount failed [ 85.130897][ T6903] loop2: detected capacity change from 0 to 512 [ 85.151057][ T29] audit: type=1326 audit(1763152469.295:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7ff73a5df6c9 code=0x7ffc0000 [ 85.175632][ T6903] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1164: Failed to acquire dquot type 1 [ 85.188174][ T6903] EXT4-fs (loop2): 1 truncate cleaned up [ 85.194268][ T6903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.207319][ T6903] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.229883][ T6580] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.254465][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.286016][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1167'. [ 85.365828][ T6919] bridge: RTM_NEWNEIGH with invalid ether address [ 85.485779][ T6940] loop4: detected capacity change from 0 to 512 [ 85.508666][ T6940] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.527935][ T6940] EXT4-fs (loop4): mount failed [ 85.555213][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.562814][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.570514][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.578099][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.585673][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.588672][ T6954] bridge: RTM_NEWNEIGH with invalid ether address [ 85.593240][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.607427][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.614881][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.622404][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.629849][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.638395][ T3395] hid-generic 0000:0000:0000.0001: hidraw0: HID vffffff.fd Device [syz1] on syz1 [ 86.015608][ T6982] netlink: 'syz.7.1196': attribute type 10 has an invalid length. [ 86.026834][ T6982] team0: Port device dummy0 added [ 86.033498][ T6982] netlink: 'syz.7.1196': attribute type 10 has an invalid length. [ 86.044387][ T6982] team0: Port device dummy0 removed [ 86.052104][ T6982] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 86.417612][ T7001] vhci_hcd: invalid port number 0 [ 86.532150][ T7006] loop4: detected capacity change from 0 to 128 [ 86.540114][ T7008] __nla_validate_parse: 4 callbacks suppressed [ 86.540131][ T7008] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1207'. [ 86.678049][ T7018] atomic_op ffff888119c26128 conn xmit_atomic 0000000000000000 [ 86.782621][ T7021] loop6: detected capacity change from 0 to 512 [ 86.821410][ T7021] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.836617][ T7021] EXT4-fs (loop6): mount failed [ 86.878593][ T7032] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 86.892571][ T5401] ================================================================== [ 86.900651][ T5401] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 86.910094][ T5401] [ 86.912421][ T5401] write to 0xffff88815799535b of 2 bytes by task 7013 on cpu 1: [ 86.920051][ T5401] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 86.925960][ T5401] generic_perform_write+0x2c2/0x490 [ 86.931256][ T5401] __generic_file_write_iter+0x9e/0x120 [ 86.936897][ T5401] generic_file_write_iter+0x8d/0x2f0 [ 86.942280][ T5401] iter_file_splice_write+0x666/0xa60 [ 86.947829][ T5401] direct_splice_actor+0x156/0x2a0 [ 86.952932][ T5401] splice_direct_to_actor+0x312/0x680 [ 86.958293][ T5401] do_splice_direct+0xda/0x150 [ 86.963140][ T5401] do_sendfile+0x380/0x650 [ 86.967554][ T5401] __x64_sys_sendfile64+0x105/0x150 [ 86.972753][ T5401] x64_sys_call+0x2bb4/0x3000 [ 86.977456][ T5401] do_syscall_64+0xd2/0x200 [ 86.982062][ T5401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.987939][ T5401] [ 86.990245][ T5401] read to 0xffff888157995000 of 2048 bytes by task 5401 on cpu 0: [ 86.998030][ T5401] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 87.003912][ T5401] generic_perform_write+0x2c2/0x490 [ 87.009181][ T5401] shmem_file_write_iter+0xc5/0xf0 [ 87.014282][ T5401] lo_rw_aio+0x6a0/0x760 [ 87.018519][ T5401] loop_process_work+0x52d/0xa60 [ 87.023532][ T5401] loop_workfn+0x31/0x40 [ 87.027772][ T5401] process_scheduled_works+0x4ce/0x9d0 [ 87.033234][ T5401] worker_thread+0x582/0x770 [ 87.037823][ T5401] kthread+0x489/0x510 [ 87.041884][ T5401] ret_from_fork+0x122/0x1b0 [ 87.046463][ T5401] ret_from_fork_asm+0x1a/0x30 [ 87.051224][ T5401] [ 87.053527][ T5401] Reported by Kernel Concurrency Sanitizer on: [ 87.059662][ T5401] CPU: 0 UID: 0 PID: 5401 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.069679][ T5401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.079724][ T5401] Workqueue: loop4 loop_workfn [ 87.084668][ T5401] ================================================================== [ 87.267251][ T7013] ================================================================== [ 87.275632][ T7013] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 87.283634][ T7013] [ 87.285952][ T7013] write to 0xffff8881073b1628 of 4 bytes by task 7006 on cpu 0: [ 87.293582][ T7013] writeback_single_inode+0x150/0x3f0 [ 87.298966][ T7013] sync_inode_metadata+0x5b/0x90 [ 87.303918][ T7013] __generic_file_fsync+0xf8/0x140 [ 87.309023][ T7013] fat_file_fsync+0x49/0x100 [ 87.313627][ T7013] vfs_fsync_range+0x10d/0x130 [ 87.318389][ T7013] generic_file_write_iter+0x1b8/0x2f0 [ 87.323848][ T7013] iter_file_splice_write+0x666/0xa60 [ 87.329313][ T7013] direct_splice_actor+0x156/0x2a0 [ 87.334438][ T7013] splice_direct_to_actor+0x312/0x680 [ 87.339813][ T7013] do_splice_direct+0xda/0x150 [ 87.344607][ T7013] do_sendfile+0x380/0x650 [ 87.349028][ T7013] __x64_sys_sendfile64+0x105/0x150 [ 87.354229][ T7013] x64_sys_call+0x2bb4/0x3000 [ 87.358910][ T7013] do_syscall_64+0xd2/0x200 [ 87.363426][ T7013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.369315][ T7013] [ 87.371635][ T7013] read to 0xffff8881073b1628 of 4 bytes by task 7013 on cpu 1: [ 87.379254][ T7013] vfs_fsync_range+0x9b/0x130 [ 87.383931][ T7013] generic_file_write_iter+0x1b8/0x2f0 [ 87.389383][ T7013] iter_file_splice_write+0x666/0xa60 [ 87.394756][ T7013] direct_splice_actor+0x156/0x2a0 [ 87.399865][ T7013] splice_direct_to_actor+0x312/0x680 [ 87.405241][ T7013] do_splice_direct+0xda/0x150 [ 87.409999][ T7013] do_sendfile+0x380/0x650 [ 87.414413][ T7013] __x64_sys_sendfile64+0x105/0x150 [ 87.419621][ T7013] x64_sys_call+0x2bb4/0x3000 [ 87.424312][ T7013] do_syscall_64+0xd2/0x200 [ 87.428821][ T7013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.434710][ T7013] [ 87.437018][ T7013] value changed: 0x00000070 -> 0x00000042 [ 87.442817][ T7013] [ 87.445131][ T7013] Reported by Kernel Concurrency Sanitizer on: [ 87.451275][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.4.1208 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.461247][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.471304][ T7013] ================================================================== [ 87.488373][ T5401] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.498258][ T5401] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.529310][ T5401] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.539196][ T5401] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.578047][ T5401] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.587975][ T5401] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.637920][ T5401] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.647794][ T5401] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.798442][ T5401] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.807944][ T5401] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.817384][ T5401] .` (unregistering): (slave dummy0): Releasing backup interface [ 87.825924][ T5401] .` (unregistering): Released all slaves [ 87.834909][ T5401] bond1 (unregistering): (slave batadv1): Releasing active interface [ 87.843715][ T5401] bond1 (unregistering): Released all slaves [ 87.910228][ T5401] hsr_slave_0: left promiscuous mode [ 87.915842][ T5401] hsr_slave_1: left promiscuous mode [ 87.921478][ T5401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.928893][ T5401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.937771][ T5401] veth1_macvtap: left promiscuous mode [ 87.943351][ T5401] veth0_macvtap: left promiscuous mode [ 87.948948][ T5401] veth1_vlan: left promiscuous mode [ 87.954228][ T5401] veth0_vlan: left promiscuous mode [ 88.002407][ T5401] team0 (unregistering): Port device team_slave_1 removed [ 88.012330][ T5401] team0 (unregistering): Port device team_slave_0 removed [ 95.686874][ C0] bridge0: port 3(syz_tun) entered learning state