last executing test programs: 24.221710912s ago: executing program 4 (id=943): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="d402000020000000180000000000000000000000000000009500"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095", @ANYRES64=r0, @ANYRES64, @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000280)='module_load\x00', r1}, 0x18) kexec_load(0x0, 0x0, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x800448d2, &(0x7f0000000100)) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getpeername$l2tp(r5, &(0x7f00000004c0), 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r11 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB='A\x00', @ANYRES32=r12, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 23.082504083s ago: executing program 4 (id=973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="1441c05465f0006fc8afa8e488a8", 0xe, 0x4000000, &(0x7f00000000c0)={0x11, 0xf6, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 23.017471234s ago: executing program 4 (id=975): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r1 = dup(0xffffffffffffffff) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000007000046009d"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 22.961369844s ago: executing program 4 (id=977): epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x60, &(0x7f00000002c0), 0x10}, 0x80) r3 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0), 0x84, 0x4f3, &(0x7f00000012c0)="$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") ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) splice(r3, &(0x7f0000000040)=0x7, r3, &(0x7f00000000c0)=0x7fffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10003, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r5 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1d, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000240)={0x88dc, r5, 'id0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4040400) syncfs(0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x2000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0) 22.397101771s ago: executing program 4 (id=982): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000007000046009d"], 0x53) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 20.200255463s ago: executing program 0 (id=1016): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, 0x0, 0x4000) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 20.118084674s ago: executing program 0 (id=1020): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018001b6c2e04000000000000000000000a0000000061005f616158300000"], 0x0, 0x22}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, 0x0, &(0x7f0000000200)) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 19.864537196s ago: executing program 2 (id=1028): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x4) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 19.781749697s ago: executing program 2 (id=1029): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) 19.741477258s ago: executing program 2 (id=1031): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, 0x0, 0x4000) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 19.651538488s ago: executing program 2 (id=1034): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0), 0x84, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") splice(r0, &(0x7f0000000040)=0x7, r0, &(0x7f00000000c0)=0x7fffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 19.51463788s ago: executing program 2 (id=1036): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 19.252260833s ago: executing program 2 (id=1040): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[], 0x14}}, 0x0) 19.251621743s ago: executing program 0 (id=1041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRESDEC=r3, @ANYRES8=r1], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000d8cc80400ecd8aff83b5a5cb113b3535e009c94c5ed5", @ANYBLOB="000000000000000071000000000000009500000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x2d, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000c9de00000000000000000000000018520000", @ANYRES32, @ANYRES64=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x25, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) read(0xffffffffffffffff, &(0x7f00000002c0)=""/183, 0xeb) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000000080)) 19.228269923s ago: executing program 32 (id=1040): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[], 0x14}}, 0x0) 19.178179434s ago: executing program 0 (id=1044): epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x60, &(0x7f00000002c0), 0x10}, 0x80) r3 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0), 0x84, 0x4f3, &(0x7f00000012c0)="$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") ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) splice(r3, &(0x7f0000000040)=0x7, r3, &(0x7f00000000c0)=0x7fffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10003, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r5 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1d, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000240)={0x88dc, r5, 'id0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4040400) syncfs(0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x2000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 19.004759695s ago: executing program 0 (id=1046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{&(0x7f0000000000)=@in={0x2, 0xfff0, @local}, 0x10, 0x0, 0x0, &(0x7f00000013c0)=[@init={0x18, 0x84, 0x0, {0x8, 0x1ee, 0x7, 0x2800}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x2, 0x7, 0x6}}, @init={0x18, 0x84, 0x0, {0xfff, 0x619c, 0x2, 0xb2b}}], 0x50, 0x24000010}], 0x1, 0x40) 18.829263767s ago: executing program 4 (id=1047): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0), 0x84, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") splice(r0, &(0x7f0000000040)=0x7, r0, &(0x7f00000000c0)=0x7fffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 18.829023127s ago: executing program 33 (id=1047): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0), 0x84, 0x4f3, &(0x7f00000012c0)="$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") splice(r0, &(0x7f0000000040)=0x7, r0, &(0x7f00000000c0)=0x7fffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 18.821436297s ago: executing program 0 (id=1049): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x2003a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 18.778691798s ago: executing program 34 (id=1049): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x2003a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 3.315350406s ago: executing program 3 (id=1202): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4640}, 0x2}, 0x2c004000) 3.193155987s ago: executing program 3 (id=1205): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 3.046028759s ago: executing program 3 (id=1209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="1441c05465f0006fc8afa8e488a8", 0xe, 0x4000000, &(0x7f00000000c0)={0x11, 0xf6, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.9380719s ago: executing program 3 (id=1210): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a"], 0x40}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x100000001}, 0x18) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r8, &(0x7f0000000040)='\x00', 0x1, 0x1300) sendmsg$rds(r6, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x7fff}, &(0x7f0000000000)=0x100000000, 0x0, 0x80000000, 0x3, 0x8001, 0x9, 0x4c, 0x100000001}}], 0x58}, 0x200000000000000) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") mlockall(0x1) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0xf, 0x6, 0xd, 0x1}, {0x3, 0x9, 0x9, 0x7dc}]}) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local}}}}, &(0x7f0000000040)={0x0, 0x2, [0x745, 0x398, 0xf22, 0x9c]}) 2.360038945s ago: executing program 6 (id=1213): syslog(0x2, &(0x7f0000000200)=""/4096, 0x1000) unlink(&(0x7f0000000180)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="54010000100001000000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000fffd000000200000000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000004d56c000000fe8000f5ffffff00000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000feffffffffffffff00000000ffffffff000000002bbd700000000000020000002200000000000000480003006c7a7300"/213], 0x154}}, 0x0) 1.809237532s ago: executing program 6 (id=1221): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, 0x0, 0xfffffeea) 1.720576372s ago: executing program 6 (id=1224): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4000) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bridge0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 1.561593874s ago: executing program 3 (id=1226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz72NwkAUBODx2WtfdDVcSBN0AbUQ8idED3QAAS0Q0gtNgCzjgAIQQvq+ZGe0u0964aPaxWvfnrv+OAytKtVqvJk0acb8m9Ql+cmt+9+tSzJt+1lJrpvj7PnovkxK6lL1Zfxa57L/G2KTzE/v3Q4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvsMjAAD//wv/C64=") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x134, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x104, 0x2, [@TCA_CGROUP_EMATCHES={0x100, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf0, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_DATA={0xc2, 0x5, "2749ee06725648f29cd63b6772c88c721fda4100d61006f39e93e153bb1e08a575bea346786f506fe7c5e294888869e96c700cc7edebc4fea584b13f65cceb6f496a4ea5bf0413a7bcda7240ec1a9ac273fb4d1578b664004e39d2db2e44a386690aa7dc9b7b11b613d85e744fe0e153cb901cce529a9702fc60580479fa35abb1982fb73a8e9c7aac1cf3014d66b51f7ce3c121376e549072522c26612da849c30642b01f502668b0307452d8f7ba73b55486c41c79fe2b85988394ceda"}, @TCA_EM_IPT_MATCH_NAME={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "489b"}]}}]}]}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r5 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r8, 0x1, 0x1, &(0x7f0000000100)=""/86, &(0x7f0000000000)=0x56) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000016000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) 1.501436324s ago: executing program 6 (id=1228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00'}, 0x18) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 1.071156999s ago: executing program 3 (id=1231): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file2/file0\x00', 0x2fcd56, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1212, &(0x7f0000002b00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x7}, 0x18) io_setup(0x7, &(0x7f0000000380)) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = socket(0x15, 0x80005, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) r4 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xa0a2, 0x8}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={r4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) connect$rxrpc(r7, &(0x7f00000002c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a183000000000000000005000000080003"], 0x78}}, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffd8ef}, 0x10) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 922.984791ms ago: executing program 7 (id=1235): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, 0x0, 0x4000) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYRES32=r3], 0x90}}, 0x0) 886.361491ms ago: executing program 1 (id=1236): r0 = perf_event_open$cgroup(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x9, 0x48, 0xf8, 0x0, 0x6e9, 0x18018, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={&(0x7f0000000400), 0x8}, 0x5e19, 0xe, 0x1, 0x7, 0x1, 0xffff7d41, 0x1000, 0x0, 0x101, 0x0, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x5, 0x4, 0x1, 0x1, 0x0, 0x9, 0x30100, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff4cdc, 0x2, @perf_bp={&(0x7f0000000180)}, 0x100001, 0x7, 0x12fc0000, 0x9, 0x2, 0x8, 0x7, 0x0, 0x3, 0x0, 0x9}, 0x0, 0xc, r0, 0x7) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)=""/99, 0xf9, 0x63, 0x0, 0xfff, 0x10000}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000440)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000540)="f74987af021511db01ccec829d3a5fc1089c5c28bbe46ceb922d9d3dc60391eb0fe051c77dfa97efc0fa7ac199f5aebfcefccab7422319796d03e2bc4a4c9ddc251e18a3c91e43a2f17081be6e5e31d46271884d16fef2fa89b4b16454a49b9c8381ed041a2bb95ed9bb76d4a7d4178ced7a788ee669703ac513", 0x7a}], 0x1, &(0x7f0000000600)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x5, 0x200, 0x7}}], 0x20, 0x41}, 0x4004080) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 850.784241ms ago: executing program 5 (id=1237): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd000000080002", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 840.062651ms ago: executing program 6 (id=1238): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00'], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) fcntl$dupfd(r0, 0x0, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(&(0x7f0000000000), 0x0, 0x7) 814.210052ms ago: executing program 1 (id=1239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 813.578802ms ago: executing program 7 (id=1240): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000006c0)={r1, 0x8, 0x7fff, 0x0, 0x7, 0x10b, 0x4a, 0xffff, {r1, @in={{0x2, 0x4e23, @remote}}, 0xd989, 0x1, 0x2, 0x800, 0x9}}, &(0x7f0000000780)=0xb0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) lstat(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000ca77a80d00000100000900000001001b81", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r6}, 0x38) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000580)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 758.412042ms ago: executing program 1 (id=1241): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x7, 0x0, &(0x7f00000002c0)) (fail_nth: 2) 444.935445ms ago: executing program 5 (id=1242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="1441c05465f0006fc8afa8e488a8", 0xe, 0x4000000, &(0x7f00000000c0)={0x11, 0xf6, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 397.366876ms ago: executing program 1 (id=1243): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 396.908966ms ago: executing program 5 (id=1244): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c801", @ANYRES16, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="54010000100001000000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000fffd000000200000000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000004d56c000000fe8000f5ffffff00000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/122], 0x154}}, 0x0) 396.099396ms ago: executing program 7 (id=1245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0xfe80, @loopback, 0xffffffff}, 0x1c) 363.828976ms ago: executing program 1 (id=1246): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 363.019866ms ago: executing program 5 (id=1247): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_io_uring_setup(0x70ca, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040800000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000e00, 0x48, 0x0, &(0x7f0000000300)="63eced0c388206cd7c8e0000000000081000b912ce99a86cb9ead538b5f9e3c3150b9754cb47905eb8b0f528eacc85fad6f7e0f7ac0fa22447cec9ebc19b8f9b64d4dacf65049f92", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x100}, 0x50) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8df00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500d136c030655da3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket(0x1e, 0x4, 0x0) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getgroups(0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r11, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 362.401286ms ago: executing program 6 (id=1248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e9001c0400000000000000eaebfd26d4eef2", 0x27}, {&(0x7f0000000100)="051ae2ff0d8c60c2730369b7", 0xc}, {&(0x7f0000000600)="37a8a6c41e646a566a4ce01f972bef63842ee3b291da39d1977010", 0x1b}], 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000340), &(0x7f0000000380)=0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="00000000000021f3b708000000101374d58ef20000107b8af8ff0000007502a200000000000007020000f8ffff19b80c000008000000b70400000000925e850000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, &(0x7f0000000100)={'veth1_to_team\x00', {0x2, 0x0, @dev}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x26, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000000200)=0x7, 0x4) 276.304177ms ago: executing program 7 (id=1249): r0 = socket$inet6(0xa, 0x2, 0x2003a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 185.308368ms ago: executing program 5 (id=1250): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', r2, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) write$nci(r0, 0x0, 0xfffffeea) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r10, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r12, 0x0, 0x200000000000006}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) 157.948968ms ago: executing program 1 (id=1251): syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trqyan']) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000680)=0x2) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000020a00000100000009500007b00000000850000001300000095"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x92, &(0x7f0000000240)=""/146}, 0x94) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/121, 0x0, 0x79, 0x0, 0x20000}, 0x28) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="500100001000130428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x804) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 138.268658ms ago: executing program 7 (id=1252): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 114.998849ms ago: executing program 7 (id=1253): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 0s ago: executing program 5 (id=1254): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x50121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0xc0}, 0xa010, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf2511000018080003ce7b086464274ee8cb73442e00", @ANYRES32=r7, @ANYBLOB="0c009900020000000b000000"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 3310][ T5099] loop3: p1 p2 p3 [ 71.161573][ T5130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.645'. [ 71.170680][ T5130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.645'. [ 71.205145][ T5134] FAULT_INJECTION: forcing a failure. [ 71.205145][ T5134] name failslab, interval 1, probability 0, space 0, times 0 [ 71.218025][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: syz.0.646 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 71.218061][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.218078][ T5134] Call Trace: [ 71.218087][ T5134] [ 71.218097][ T5134] __dump_stack+0x1d/0x30 [ 71.218195][ T5134] dump_stack_lvl+0xe8/0x140 [ 71.218221][ T5134] dump_stack+0x15/0x1b [ 71.218243][ T5134] should_fail_ex+0x265/0x280 [ 71.218282][ T5134] should_failslab+0x8c/0xb0 [ 71.218388][ T5134] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 71.218428][ T5134] ? security_context_to_sid_core+0x69/0x3b0 [ 71.218459][ T5134] kmemdup_nul+0x36/0xc0 [ 71.218485][ T5134] security_context_to_sid_core+0x69/0x3b0 [ 71.218516][ T5134] ? avc_has_perm_noaudit+0x1b1/0x200 [ 71.218563][ T5134] security_context_to_sid+0x2e/0x40 [ 71.218590][ T5134] sel_write_context+0xf8/0x200 [ 71.218688][ T5134] selinux_transaction_write+0xc6/0x110 [ 71.218728][ T5134] ? __pfx_selinux_transaction_write+0x10/0x10 [ 71.218765][ T5134] vfs_write+0x266/0x8e0 [ 71.218847][ T5134] ? __rcu_read_unlock+0x4f/0x70 [ 71.218877][ T5134] ? __fget_files+0x184/0x1c0 [ 71.218905][ T5134] ksys_write+0xda/0x1a0 [ 71.218945][ T5134] __x64_sys_write+0x40/0x50 [ 71.219021][ T5134] x64_sys_call+0x2cdd/0x2fb0 [ 71.219051][ T5134] do_syscall_64+0xd2/0x200 [ 71.219075][ T5134] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.219160][ T5134] ? clear_bhb_loop+0x40/0x90 [ 71.219182][ T5134] ? clear_bhb_loop+0x40/0x90 [ 71.219251][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.219274][ T5134] RIP: 0033:0x7f77fd88e929 [ 71.219293][ T5134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.219317][ T5134] RSP: 002b:00007f77fbef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.219341][ T5134] RAX: ffffffffffffffda RBX: 00007f77fdab5fa0 RCX: 00007f77fd88e929 [ 71.219358][ T5134] RDX: 000000000000001b RSI: 0000200000000380 RDI: 0000000000000003 [ 71.219491][ T5134] RBP: 00007f77fbef7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.219504][ T5134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.219518][ T5134] R13: 0000000000000000 R14: 00007f77fdab5fa0 R15: 00007ffd191778f8 [ 71.219542][ T5134] [ 71.615450][ T5147] 8021q: adding VLAN 0 to HW filter on device bond10 [ 71.629554][ T5147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.653'. [ 71.638575][ T5147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.653'. [ 71.658234][ T5151] netlink: 'syz.3.654': attribute type 2 has an invalid length. [ 71.665986][ T5151] netlink: 132 bytes leftover after parsing attributes in process `syz.3.654'. [ 71.679657][ T5151] loop3: detected capacity change from 0 to 128 [ 71.710350][ T5151] loop3: detected capacity change from 0 to 512 [ 71.771627][ T5151] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 71.809178][ T5160] 9pnet_fd: Insufficient options for proto=fd [ 71.816375][ T5151] EXT4-fs (loop3): 1 truncate cleaned up [ 71.822553][ T5151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.851983][ T5151] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 71.861392][ T5156] loop1: detected capacity change from 0 to 128 [ 71.886651][ T5151] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.654: Logical block already allocated [ 71.934808][ T5151] EXT4-fs (loop3): Remounting filesystem read-only [ 71.961670][ T5167] loop4: detected capacity change from 0 to 512 [ 71.971570][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.003797][ T5167] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 72.038088][ T5167] EXT4-fs (loop4): 1 truncate cleaned up [ 72.050838][ T5167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.106432][ T5175] loop0: detected capacity change from 0 to 512 [ 72.113322][ T5175] ext4: Unknown parameter 'permit_directio' [ 72.128851][ T5167] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 72.140273][ T5182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.187872][ T5185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.198812][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.212426][ T5187] 9pnet_fd: Insufficient options for proto=fd [ 72.237083][ T5185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.256109][ T5182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.287612][ T5191] loop4: detected capacity change from 0 to 512 [ 72.295182][ T5193] netlink: 'syz.1.674': attribute type 2 has an invalid length. [ 72.318118][ T5193] loop1: detected capacity change from 0 to 128 [ 72.334778][ T5193] loop1: detected capacity change from 0 to 512 [ 72.344208][ T5191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.369402][ T5182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.372276][ T5198] loop0: detected capacity change from 0 to 128 [ 72.381514][ T5191] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.401910][ T5193] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 72.449638][ T5182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.455414][ T5193] EXT4-fs (loop1): 1 truncate cleaned up [ 72.500446][ T5193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.519571][ T5193] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 72.533893][ T5204] atomic_op ffff888118ed8928 conn xmit_atomic 0000000000000000 [ 72.537551][ T5182] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.555444][ T5182] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.569974][ T5182] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.579532][ T5207] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 72.587721][ T5204] loop0: detected capacity change from 0 to 2048 [ 72.610402][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.620583][ T5182] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.635915][ T3522] Alternate GPT is invalid, using primary GPT. [ 72.642383][ T3522] loop0: p1 p2 p3 [ 72.698265][ T5204] Alternate GPT is invalid, using primary GPT. [ 72.704680][ T5204] loop0: p1 p2 p3 [ 72.751814][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.928213][ T5217] loop1: detected capacity change from 0 to 512 [ 72.951173][ T5217] ext4: Unknown parameter 'permit_directio' [ 73.012421][ T5225] loop4: detected capacity change from 0 to 2048 [ 73.029079][ T5227] 9pnet_fd: Insufficient options for proto=fd [ 73.066185][ T5225] Alternate GPT is invalid, using primary GPT. [ 73.072630][ T5225] loop4: p1 p2 p3 [ 73.162006][ T5234] loop1: detected capacity change from 0 to 128 [ 73.253745][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 73.253764][ T29] audit: type=1326 audit(1751347633.869:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 73.302554][ T29] audit: type=1326 audit(1751347633.869:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 73.326242][ T29] audit: type=1326 audit(1751347633.919:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 73.349820][ T29] audit: type=1326 audit(1751347633.919:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 73.373185][ T29] audit: type=1326 audit(1751347633.919:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 73.399841][ T29] audit: type=1326 audit(1751347633.919:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 73.424107][ T29] audit: type=1326 audit(1751347633.959:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 73.448080][ T29] audit: type=1326 audit(1751347633.969:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 73.471469][ T29] audit: type=1326 audit(1751347633.989:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 73.494878][ T29] audit: type=1326 audit(1751347634.009:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 73.541178][ T5238] 8021q: adding VLAN 0 to HW filter on device bond7 [ 73.639873][ T5247] 8021q: adding VLAN 0 to HW filter on device bond8 [ 73.673489][ T5247] bridge0: port 11(bond8) entered blocking state [ 73.680029][ T5247] bridge0: port 11(bond8) entered disabled state [ 73.694617][ T5247] bond8: entered allmulticast mode [ 73.701797][ T5247] bond8: entered promiscuous mode [ 73.707489][ T5247] bridge0: port 11(bond8) entered blocking state [ 73.713083][ T5256] loop2: detected capacity change from 0 to 512 [ 73.714004][ T5247] bridge0: port 11(bond8) entered forwarding state [ 73.729798][ T5256] ext4: Unknown parameter 'permit_directio' [ 73.765879][ T3443] bridge0: port 11(bond8) entered disabled state [ 73.819174][ T5263] 9pnet_fd: Insufficient options for proto=fd [ 73.887712][ T5265] atomic_op ffff888119cbf928 conn xmit_atomic 0000000000000000 [ 73.904776][ T5265] loop0: detected capacity change from 0 to 2048 [ 73.933123][ T5273] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 73.966762][ T3522] Alternate GPT is invalid, using primary GPT. [ 73.973147][ T3522] loop0: p1 p2 p3 [ 73.987591][ T5271] netlink: 'syz.3.698': attribute type 2 has an invalid length. [ 74.006226][ T5271] loop3: detected capacity change from 0 to 128 [ 74.033491][ T5271] loop3: detected capacity change from 0 to 512 [ 74.040466][ T5265] Alternate GPT is invalid, using primary GPT. [ 74.047402][ T5265] loop0: p1 p2 p3 [ 74.152984][ T5271] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 74.185333][ T5271] EXT4-fs (loop3): 1 truncate cleaned up [ 74.222326][ T5271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.377029][ T5271] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 74.422411][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.478167][ T5294] loop3: detected capacity change from 0 to 512 [ 74.502632][ T5294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.525458][ T5298] __nla_validate_parse: 13 callbacks suppressed [ 74.525477][ T5298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.708'. [ 74.541191][ T5298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.708'. [ 74.563414][ T5294] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.705245][ T5285] udevd[5285]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 74.806381][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.913467][ T5320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'. [ 74.922505][ T5320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'. [ 74.950803][ T5324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.720'. [ 74.959798][ T5324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.720'. [ 74.986860][ T5326] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 74.996103][ T5328] loop0: detected capacity change from 0 to 512 [ 75.006967][ T5328] ext4: Unknown parameter 'permit_directio' [ 75.231095][ T5359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.737'. [ 75.240110][ T5359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.737'. [ 75.240196][ T5360] loop4: detected capacity change from 0 to 512 [ 75.264018][ T5362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.733'. [ 75.278164][ T5351] loop2: detected capacity change from 0 to 128 [ 75.290819][ T5360] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 75.307402][ T5360] EXT4-fs (loop4): 1 truncate cleaned up [ 75.313931][ T5360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.342016][ T5360] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 75.363662][ T5368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.738'. [ 75.378453][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.439806][ T5375] 8021q: adding VLAN 0 to HW filter on device bond8 [ 75.453080][ T5375] bridge0: port 10(bond8) entered blocking state [ 75.459690][ T5375] bridge0: port 10(bond8) entered disabled state [ 75.466586][ T5375] bond8: entered allmulticast mode [ 75.472318][ T5377] loop4: detected capacity change from 0 to 512 [ 75.475496][ T5375] bond8: entered promiscuous mode [ 75.484377][ T5375] bridge0: port 10(bond8) entered blocking state [ 75.490814][ T5375] bridge0: port 10(bond8) entered forwarding state [ 75.493189][ T5380] loop2: detected capacity change from 0 to 512 [ 75.499231][ T5377] ext4: Unknown parameter 'permit_directio' [ 75.515271][ T5380] ext4: Unknown parameter 'permit_directio' [ 75.596623][ T5386] loop1: detected capacity change from 0 to 512 [ 75.661940][ T5386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.687063][ T5386] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.707006][ T5401] loop2: detected capacity change from 0 to 512 [ 75.724789][ T5402] bond0: entered promiscuous mode [ 75.729972][ T5402] bond_slave_0: entered promiscuous mode [ 75.735851][ T5402] bond_slave_1: entered promiscuous mode [ 75.745124][ T5401] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 75.756005][ T5402] bond0: left promiscuous mode [ 75.760846][ T5402] bond_slave_0: left promiscuous mode [ 75.766461][ T5402] bond_slave_1: left promiscuous mode [ 75.772526][ T5401] EXT4-fs (loop2): 1 truncate cleaned up [ 75.779720][ T5401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.797197][ T12] bridge0: port 10(bond8) entered disabled state [ 75.805196][ T5401] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 75.833766][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.852603][ T5408] 8021q: adding VLAN 0 to HW filter on device bond8 [ 75.860893][ T5408] bridge0: port 9(bond8) entered blocking state [ 75.867609][ T5408] bridge0: port 9(bond8) entered disabled state [ 75.874265][ T5408] bond8: entered allmulticast mode [ 75.880954][ T5408] bond8: entered promiscuous mode [ 75.886534][ T5408] bridge0: port 9(bond8) entered blocking state [ 75.892840][ T5408] bridge0: port 9(bond8) entered forwarding state [ 75.946717][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.978299][ T5414] loop2: detected capacity change from 0 to 512 [ 75.985323][ T5414] ext4: Unknown parameter 'permit_directio' [ 76.068265][ T5429] netlink: 'syz.4.764': attribute type 2 has an invalid length. [ 76.079361][ T5422] 8021q: adding VLAN 0 to HW filter on device bond9 [ 76.097808][ T5429] loop4: detected capacity change from 0 to 128 [ 76.106244][ T5434] atomic_op ffff888122501d28 conn xmit_atomic 0000000000000000 [ 76.123575][ T5436] dummy0: entered promiscuous mode [ 76.130472][ T5436] dummy0: left promiscuous mode [ 76.253744][ T5427] loop2: detected capacity change from 0 to 2048 [ 76.306158][ T3522] Alternate GPT is invalid, using primary GPT. [ 76.312595][ T3522] loop2: p1 p2 p3 [ 76.316603][ T5452] loop0: detected capacity change from 0 to 512 [ 76.326507][ T5452] ext4: Unknown parameter 'permit_directio' [ 76.330648][ T5448] loop4: detected capacity change from 0 to 128 [ 76.366730][ T5427] Alternate GPT is invalid, using primary GPT. [ 76.373156][ T5427] loop2: p1 p2 p3 [ 76.444822][ T2996] Alternate GPT is invalid, using primary GPT. [ 76.451331][ T2996] loop2: p1 p2 p3 [ 76.593996][ T5473] 8021q: adding VLAN 0 to HW filter on device bond10 [ 76.602219][ T5473] bridge0: port 12(bond10) entered blocking state [ 76.608999][ T5473] bridge0: port 12(bond10) entered disabled state [ 76.616919][ T5473] bond10: entered allmulticast mode [ 76.624329][ T5473] bond10: entered promiscuous mode [ 76.630040][ T5473] bridge0: port 12(bond10) entered blocking state [ 76.636570][ T5473] bridge0: port 12(bond10) entered forwarding state [ 76.787036][ T5490] IPv6: Can't replace route, no match found [ 76.845727][ T3443] bridge0: port 9(bond8) entered disabled state [ 76.855575][ T3443] bridge0: port 12(bond10) entered disabled state [ 77.257539][ T5513] 8021q: adding VLAN 0 to HW filter on device bond11 [ 77.276507][ T5513] bridge0: port 13(bond11) entered blocking state [ 77.283067][ T5513] bridge0: port 13(bond11) entered disabled state [ 77.293695][ T5513] bond11: entered allmulticast mode [ 77.318773][ T5513] bond11: entered promiscuous mode [ 77.334542][ T5513] bridge0: port 13(bond11) entered blocking state [ 77.341473][ T5513] bridge0: port 13(bond11) entered forwarding state [ 77.366533][ T5521] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 77.421002][ T5523] netlink: 'syz.3.802': attribute type 2 has an invalid length. [ 77.431536][ T5523] loop3: detected capacity change from 0 to 128 [ 77.464934][ T5523] loop3: detected capacity change from 0 to 512 [ 77.496446][ T5523] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 77.520203][ T5523] EXT4-fs (loop3): 1 truncate cleaned up [ 77.552467][ T5523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.622397][ T5523] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 77.649766][ T5523] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.802: Logical block already allocated [ 77.679217][ T5523] EXT4-fs (loop3): Remounting filesystem read-only [ 77.706706][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.786617][ T5545] 8021q: adding VLAN 0 to HW filter on device bond11 [ 77.855582][ T51] bridge0: port 13(bond11) entered disabled state [ 77.874149][ T5552] 8021q: adding VLAN 0 to HW filter on device bond9 [ 77.884682][ T5552] bridge0: port 10(bond9) entered blocking state [ 77.891208][ T5552] bridge0: port 10(bond9) entered disabled state [ 77.899216][ T5552] bond9: entered allmulticast mode [ 77.912726][ T5552] bond9: entered promiscuous mode [ 77.927657][ T5552] bridge0: port 10(bond9) entered blocking state [ 77.934176][ T5552] bridge0: port 10(bond9) entered forwarding state [ 78.084376][ T5570] loop2: detected capacity change from 0 to 128 [ 78.923865][ T5587] loop4: detected capacity change from 0 to 512 [ 78.930974][ T3443] bridge0: port 10(bond9) entered disabled state [ 78.965980][ T5587] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 78.979785][ T5590] 8021q: adding VLAN 0 to HW filter on device bond12 [ 78.993667][ T5587] EXT4-fs (loop4): 1 truncate cleaned up [ 79.000253][ T5587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.030271][ T5587] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 79.072521][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.117474][ T5599] loop2: detected capacity change from 0 to 512 [ 79.136629][ T5599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.155274][ T5599] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.178065][ T5602] loop4: detected capacity change from 0 to 512 [ 79.193798][ T5607] loop0: detected capacity change from 0 to 512 [ 79.218765][ T5602] ext4: Unknown parameter 'permit_directio' [ 79.250950][ T5607] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 79.265897][ T5607] EXT4-fs (loop0): 1 truncate cleaned up [ 79.279239][ T5607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.309206][ T5607] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 79.345331][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.423709][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.449330][ T5620] siw: device registration error -23 [ 79.458410][ T5620] loop2: detected capacity change from 0 to 512 [ 79.465253][ T5620] EXT4-fs: Ignoring removed orlov option [ 79.471174][ T5620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.478238][ T5620] ext4: Unknown parameter 'fsname' [ 79.533540][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 79.533559][ T29] audit: type=1326 audit(1751347640.149:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.2.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 79.565101][ T29] audit: type=1326 audit(1751347640.149:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.2.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 79.588736][ T29] audit: type=1326 audit(1751347640.149:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.2.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 79.612285][ T29] audit: type=1326 audit(1751347640.149:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.2.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 79.636119][ T29] audit: type=1326 audit(1751347640.149:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.2.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 79.659766][ T29] audit: type=1326 audit(1751347640.149:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.2.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 79.683344][ T29] audit: type=1326 audit(1751347640.149:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.2.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 79.706654][ T29] audit: type=1326 audit(1751347640.149:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.2.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 79.730150][ T29] audit: type=1326 audit(1751347640.149:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.2.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 79.730187][ T29] audit: type=1326 audit(1751347640.149:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.2.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd5c2fae929 code=0x7ffc0000 [ 80.155270][ T5645] 9pnet: p9_errstr2errno: server reported unknown error [ 80.282836][ T5653] loop3: detected capacity change from 0 to 512 [ 80.289277][ T5655] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 80.307000][ T5653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.319976][ T5653] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.425065][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.457218][ T5661] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 80.467687][ T5663] loop2: detected capacity change from 0 to 512 [ 80.478701][ T5663] ext4: Unknown parameter 'permit_directio' [ 80.651596][ T5677] __nla_validate_parse: 25 callbacks suppressed [ 80.651610][ T5677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.864'. [ 80.667185][ T5677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.864'. [ 80.678562][ T5677] dummy0: entered promiscuous mode [ 80.686181][ T5677] dummy0: left promiscuous mode [ 80.794347][ T5684] netlink: 'syz.0.867': attribute type 2 has an invalid length. [ 80.803633][ T5684] netlink: 132 bytes leftover after parsing attributes in process `syz.0.867'. [ 80.815893][ T5684] loop0: detected capacity change from 0 to 128 [ 80.830770][ T5684] loop0: detected capacity change from 0 to 512 [ 80.841091][ T5684] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 80.850961][ T5684] EXT4-fs (loop0): 1 truncate cleaned up [ 80.857432][ T5684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.875338][ T5684] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 80.886515][ T5684] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.867: Logical block already allocated [ 80.899289][ T5684] EXT4-fs (loop0): Remounting filesystem read-only [ 80.917490][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.937174][ T5687] 9pnet: p9_errstr2errno: server reported unknown error [ 81.012904][ T5691] 8021q: adding VLAN 0 to HW filter on device bond12 [ 81.021223][ T5691] bridge0: port 14(bond12) entered blocking state [ 81.027808][ T5691] bridge0: port 14(bond12) entered disabled state [ 81.036245][ T5691] bond12: entered allmulticast mode [ 81.046708][ T5691] bond12: entered promiscuous mode [ 81.052227][ T5691] bridge0: port 14(bond12) entered blocking state [ 81.055939][ T5694] loop4: detected capacity change from 0 to 512 [ 81.058849][ T5691] bridge0: port 14(bond12) entered forwarding state [ 81.066009][ T5694] ext4: Unknown parameter 'permit_directio' [ 81.095946][ T5691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.870'. [ 81.104928][ T5691] netlink: 'syz.0.870': attribute type 1 has an invalid length. [ 81.113288][ T5691] netlink: 'syz.0.870': attribute type 2 has an invalid length. [ 81.230271][ T5706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'. [ 81.258736][ T5706] loop0: detected capacity change from 0 to 128 [ 81.364595][ T5711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.876'. [ 81.373658][ T5711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.876'. [ 81.431892][ T5715] 8021q: adding VLAN 0 to HW filter on device bond13 [ 81.451901][ T5715] bridge0: port 15(bond13) entered blocking state [ 81.458901][ T5715] bridge0: port 15(bond13) entered disabled state [ 81.489094][ T5715] bond13: entered allmulticast mode [ 81.494960][ T5717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.878'. [ 81.504031][ T5717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.878'. [ 81.513514][ T5715] bond13: entered promiscuous mode [ 81.531641][ T5715] bridge0: port 15(bond13) entered blocking state [ 81.538259][ T5715] bridge0: port 15(bond13) entered forwarding state [ 81.565318][ T5725] loop3: detected capacity change from 0 to 512 [ 81.587264][ T5725] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 81.618540][ T5730] 8021q: adding VLAN 0 to HW filter on device bond13 [ 81.618695][ T5725] EXT4-fs (loop3): 1 truncate cleaned up [ 81.632697][ T5730] bridge0: port 11(bond13) entered blocking state [ 81.636505][ T5725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.639533][ T5730] bridge0: port 11(bond13) entered disabled state [ 81.660148][ T5730] bond13: entered allmulticast mode [ 81.662662][ T5734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'. [ 81.667358][ T5730] bond13: entered promiscuous mode [ 81.682130][ T5730] bridge0: port 11(bond13) entered blocking state [ 81.688706][ T5730] bridge0: port 11(bond13) entered forwarding state [ 81.705233][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.763910][ T5743] atomic_op ffff888122434128 conn xmit_atomic 0000000000000000 [ 81.781091][ T5743] loop3: detected capacity change from 0 to 2048 [ 81.836885][ T3522] Alternate GPT is invalid, using primary GPT. [ 81.843616][ T3522] loop3: p1 p2 p3 [ 81.862237][ T5743] Alternate GPT is invalid, using primary GPT. [ 81.869081][ T5743] loop3: p1 p2 p3 [ 81.890492][ T5752] loop1: detected capacity change from 0 to 512 [ 81.914193][ T5752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.932804][ T5752] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.047158][ T3443] bridge0: port 14(bond12) entered disabled state [ 82.091138][ T3443] bridge0: port 15(bond13) entered disabled state [ 82.117744][ T3443] bridge0: port 11(bond13) entered disabled state [ 82.196985][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.280553][ T5771] 8021q: adding VLAN 0 to HW filter on device bond7 [ 82.289228][ T5771] bridge0: port 7(bond7) entered blocking state [ 82.295700][ T5771] bridge0: port 7(bond7) entered disabled state [ 82.303399][ T5771] bond7: entered allmulticast mode [ 82.310034][ T5771] bond7: entered promiscuous mode [ 82.316913][ T5771] bridge0: port 7(bond7) entered blocking state [ 82.323231][ T5771] bridge0: port 7(bond7) entered forwarding state [ 82.337668][ T5770] 8021q: adding VLAN 0 to HW filter on device bond9 [ 82.347213][ T5770] bridge0: port 11(bond9) entered blocking state [ 82.353657][ T5770] bridge0: port 11(bond9) entered disabled state [ 82.361390][ T5770] bond9: entered allmulticast mode [ 82.370111][ T5770] bond9: entered promiscuous mode [ 82.376280][ T5770] bridge0: port 11(bond9) entered blocking state [ 82.382722][ T5770] bridge0: port 11(bond9) entered forwarding state [ 82.491925][ T5785] loop3: detected capacity change from 0 to 128 [ 82.561864][ T5793] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.607243][ T5798] 9pnet: p9_errstr2errno: server reported unknown error [ 82.610691][ T5800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.637826][ T5800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.653386][ T5793] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.701137][ T5806] loop2: detected capacity change from 0 to 512 [ 82.722244][ T5806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.725557][ T5804] 8021q: adding VLAN 0 to HW filter on device bond10 [ 82.751243][ T5804] bridge0: port 12(bond10) entered blocking state [ 82.757801][ T5804] bridge0: port 12(bond10) entered disabled state [ 82.764551][ T5804] bond10: entered allmulticast mode [ 82.765088][ T5806] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.773485][ T5804] bond10: entered promiscuous mode [ 82.786083][ T5804] bridge0: port 12(bond10) entered blocking state [ 82.792845][ T5804] bridge0: port 12(bond10) entered forwarding state [ 82.806923][ T5818] loop4: detected capacity change from 0 to 512 [ 82.813422][ T5810] 8021q: adding VLAN 0 to HW filter on device bond14 [ 82.823285][ T5818] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 82.830400][ T5810] bridge0: port 16(bond14) entered blocking state [ 82.834547][ T5818] EXT4-fs (loop4): 1 truncate cleaned up [ 82.838076][ T5810] bridge0: port 16(bond14) entered disabled state [ 82.850598][ T5810] bond14: entered allmulticast mode [ 82.857092][ T5810] bond14: entered promiscuous mode [ 82.862671][ T5810] bridge0: port 16(bond14) entered blocking state [ 82.869206][ T5810] bridge0: port 16(bond14) entered forwarding state [ 82.870485][ T5818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.891172][ T5793] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.914656][ T5818] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 82.937547][ T5793] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.948368][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.963491][ T5824] siw: device registration error -23 [ 82.973702][ T5824] loop1: detected capacity change from 0 to 512 [ 82.980884][ T5824] EXT4-fs: Ignoring removed orlov option [ 82.987143][ T5824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.993993][ T5824] ext4: Unknown parameter 'fsname' [ 83.013242][ T5793] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.037895][ T5793] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.086270][ T5793] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.116159][ T31] bridge0: port 7(bond7) entered disabled state [ 83.130184][ T31] bridge0: port 11(bond9) entered disabled state [ 83.137390][ T5834] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 83.139593][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.163121][ T31] bridge0: port 12(bond10) entered disabled state [ 83.171734][ T31] bridge0: port 16(bond14) entered disabled state [ 83.186439][ T5836] netlink: 'syz.1.927': attribute type 2 has an invalid length. [ 83.198949][ T5793] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.229596][ T5836] loop1: detected capacity change from 0 to 128 [ 83.303495][ T5836] loop1: detected capacity change from 0 to 512 [ 83.352085][ T5836] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 83.365754][ T5836] EXT4-fs (loop1): 1 truncate cleaned up [ 83.372613][ T5836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.407506][ T5836] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 83.432524][ T5836] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.927: Logical block already allocated [ 83.444980][ T5836] EXT4-fs (loop1): Remounting filesystem read-only [ 83.463241][ T5853] siw: device registration error -23 [ 83.482414][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.493832][ T5853] loop2: detected capacity change from 0 to 512 [ 83.502825][ T5853] EXT4-fs: Ignoring removed orlov option [ 83.509014][ T5853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.516242][ T5853] ext4: Unknown parameter 'fsname' [ 83.551157][ T5864] loop1: detected capacity change from 0 to 512 [ 83.585684][ T5864] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 83.597464][ T5864] EXT4-fs (loop1): 1 truncate cleaned up [ 83.597670][ T5867] netlink: 'syz.4.939': attribute type 32 has an invalid length. [ 83.603613][ T5864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.631567][ T5867] loop4: detected capacity change from 0 to 128 [ 83.638351][ T5864] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 83.683073][ T5873] 8021q: adding VLAN 0 to HW filter on device bond14 [ 83.691592][ T5873] bridge0: port 12(bond14) entered blocking state [ 83.698295][ T5873] bridge0: port 12(bond14) entered disabled state [ 83.705489][ T5873] bond14: entered allmulticast mode [ 83.707482][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.712252][ T5873] bond14: entered promiscuous mode [ 83.726561][ T5873] bridge0: port 12(bond14) entered blocking state [ 83.733143][ T5873] bridge0: port 12(bond14) entered forwarding state [ 83.775530][ T5881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.815869][ T5885] 9pnet: p9_errstr2errno: server reported unknown error [ 83.836624][ T5889] netlink: 'syz.3.948': attribute type 2 has an invalid length. [ 83.854293][ T5881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.865730][ T5889] loop3: detected capacity change from 0 to 128 [ 83.885384][ T5889] loop3: detected capacity change from 0 to 512 [ 83.897064][ T5889] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 83.908798][ T5889] EXT4-fs (loop3): 1 truncate cleaned up [ 83.916831][ T5889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.951226][ T5881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.966740][ T5889] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 83.975148][ T5898] loop1: detected capacity change from 0 to 512 [ 83.984547][ T5895] netlink: 'syz.0.951': attribute type 32 has an invalid length. [ 83.989009][ T5898] ext4: Unknown parameter 'permit_directio' [ 84.001196][ T5889] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.948: Logical block already allocated [ 84.036685][ T5895] loop0: detected capacity change from 0 to 128 [ 84.037198][ T5881] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.061180][ T5889] EXT4-fs (loop3): Remounting filesystem read-only [ 84.127611][ T5904] lo speed is unknown, defaulting to 1000 [ 84.137421][ T51] bridge0: port 12(bond14) entered disabled state [ 84.153602][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.185351][ T5881] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.219104][ T5881] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.231062][ T5904] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.233988][ T5905] lo speed is unknown, defaulting to 1000 [ 84.251331][ T5881] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.270378][ T5881] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.317504][ T5924] capability: warning: `wÞ£ÿ' uses deprecated v2 capabilities in a way that may be insecure [ 84.419545][ T5935] loop1: detected capacity change from 0 to 512 [ 84.426116][ T5938] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 84.441339][ T5935] ext4: Unknown parameter 'permit_directio' [ 84.487051][ T5944] loop1: detected capacity change from 0 to 512 [ 84.526793][ T5944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.539785][ T5944] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.654408][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.717454][ T5958] loop2: detected capacity change from 0 to 164 [ 84.736139][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 84.736154][ T29] audit: type=1400 audit(1751347645.359:2428): avc: denied { mount } for pid=5957 comm="syz.2.971" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 84.777857][ T5958] bridge_slave_0: left allmulticast mode [ 84.783679][ T5958] bridge_slave_0: left promiscuous mode [ 84.790683][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.837146][ T5958] bridge_slave_1: left allmulticast mode [ 84.842844][ T29] audit: type=1400 audit(1751347645.449:2429): avc: denied { cpu } for pid=5957 comm="syz.2.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 84.843205][ T5958] bridge_slave_1: left promiscuous mode [ 84.869219][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.897214][ T5971] 9pnet_fd: Insufficient options for proto=fd [ 84.916840][ T5958] bond0: (slave bond_slave_0): Releasing backup interface [ 84.937302][ T5973] loop1: detected capacity change from 0 to 512 [ 84.944037][ T5958] bond0: (slave bond_slave_1): Releasing backup interface [ 84.958782][ T5977] loop4: detected capacity change from 0 to 512 [ 84.959317][ T5958] team_slave_0: left promiscuous mode [ 84.974484][ T5958] team0: Port device team_slave_0 removed [ 84.976194][ T5973] ext4: Unknown parameter 'permit_directio' [ 84.998319][ T5977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.030801][ T5958] team_slave_1: left promiscuous mode [ 85.037941][ T5977] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.051357][ T5958] team0: Port device team_slave_1 removed [ 85.059370][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.067926][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.086094][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.094053][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.114140][ T5958] bond1: left allmulticast mode [ 85.119397][ T5958] bond1: left promiscuous mode [ 85.124677][ T5958] bridge0: port 3(bond1) entered disabled state [ 85.127944][ T29] audit: type=1326 audit(1751347645.749:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3918e929 code=0x7ffc0000 [ 85.159751][ T5958] bond2: left allmulticast mode [ 85.161372][ T5977] loop9: detected capacity change from 0 to 7 [ 85.164795][ T5958] bond2: left promiscuous mode [ 85.165116][ T5958] bridge0: port 4(bond2) entered disabled state [ 85.187298][ T5977] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.192719][ T29] audit: type=1326 audit(1751347645.779:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa3918d290 code=0x7ffc0000 [ 85.218978][ T5977] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.220105][ T29] audit: type=1326 audit(1751347645.779:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3918e929 code=0x7ffc0000 [ 85.228142][ T5977] loop9: unable to read partition table [ 85.245186][ T5977] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 85.245186][ T5977] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 85.252658][ T29] audit: type=1326 audit(1751347645.779:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa3918e929 code=0x7ffc0000 [ 85.261376][ T5285] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.273492][ T29] audit: type=1326 audit(1751347645.779:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3918e929 code=0x7ffc0000 [ 85.333424][ T29] audit: type=1326 audit(1751347645.779:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffa3918e929 code=0x7ffc0000 [ 85.338494][ T5285] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.357667][ T29] audit: type=1326 audit(1751347645.779:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3918e929 code=0x7ffc0000 [ 85.357713][ T29] audit: type=1326 audit(1751347645.779:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa3918e929 code=0x7ffc0000 [ 85.411855][ T5285] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.437827][ T5285] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.447987][ T5958] bond3: left allmulticast mode [ 85.452991][ T5958] bond3: left promiscuous mode [ 85.458313][ T5958] bridge0: port 5(bond3) entered disabled state [ 85.469480][ T5958] bond5: left allmulticast mode [ 85.474668][ T5958] bond5: left promiscuous mode [ 85.479885][ T5958] bridge0: port 6(bond5) entered disabled state [ 85.490633][ T5285] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.499720][ T5285] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.515748][ T5285] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.524042][ T5285] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.541040][ T5991] loop3: detected capacity change from 0 to 128 [ 85.581291][ T5958] bond6: left allmulticast mode [ 85.586381][ T5958] bond6: left promiscuous mode [ 85.591484][ T5958] bridge0: port 7(bond6) entered disabled state [ 85.606668][ T5958] bond7: left allmulticast mode [ 85.611624][ T5958] bond7: left promiscuous mode [ 85.616966][ T5958] bridge0: port 8(bond7) entered disabled state [ 85.625475][ T5958] bond8: left allmulticast mode [ 85.630420][ T5958] bond8: left promiscuous mode [ 85.635783][ T5958] bridge0: port 9(bond8) entered disabled state [ 85.644557][ T5958] bond9: left allmulticast mode [ 85.649597][ T5958] bond9: left promiscuous mode [ 85.655007][ T5958] bridge0: port 10(bond9) entered disabled state [ 85.666579][ T5958] bond13: left allmulticast mode [ 85.671705][ T5958] bond13: left promiscuous mode [ 85.677248][ T5958] bridge0: port 11(bond13) entered disabled state [ 85.685812][ T5958] bond14: left allmulticast mode [ 85.691078][ T5958] bond14: left promiscuous mode [ 85.696587][ T5958] bridge0: port 12(bond14) entered disabled state [ 85.724133][ T5997] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.740068][ T5969] lo speed is unknown, defaulting to 1000 [ 85.773328][ T6002] __nla_validate_parse: 18 callbacks suppressed [ 85.773348][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.986'. [ 85.789817][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.986'. [ 85.802350][ T6002] bond0: entered promiscuous mode [ 85.809653][ T6002] bond0: left promiscuous mode [ 85.842233][ T5997] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.917533][ T5997] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.967024][ T6011] atomic_op ffff888119409528 conn xmit_atomic 0000000000000000 [ 85.986008][ T6011] loop2: detected capacity change from 0 to 2048 [ 85.997238][ T5997] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.018624][ T5285] Alternate GPT is invalid, using primary GPT. [ 86.025259][ T5285] loop2: p1 p2 p3 [ 86.038348][ T6011] Alternate GPT is invalid, using primary GPT. [ 86.046346][ T6011] loop2: p1 p2 p3 [ 86.065857][ T6008] syz.0.988 (6008) used greatest stack depth: 10192 bytes left [ 86.109407][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.991'. [ 86.118883][ T6018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.991'. [ 86.357605][ T6027] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 86.413702][ T6031] 8021q: adding VLAN 0 to HW filter on device bond15 [ 86.434230][ T6031] bridge0: port 17(bond15) entered blocking state [ 86.441405][ T6031] bridge0: port 17(bond15) entered disabled state [ 86.452507][ T6031] bond15: entered allmulticast mode [ 86.460923][ T6031] bond15: entered promiscuous mode [ 86.476791][ T6035] netlink: 92 bytes leftover after parsing attributes in process `syz.0.997'. [ 86.486895][ T6031] bridge0: port 17(bond15) entered blocking state [ 86.490837][ T6037] netlink: 100 bytes leftover after parsing attributes in process `syz.1.999'. [ 86.494155][ T6031] bridge0: port 17(bond15) entered forwarding state [ 86.549333][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1000'. [ 86.558951][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1000'. [ 86.624012][ T6046] FAULT_INJECTION: forcing a failure. [ 86.624012][ T6046] name failslab, interval 1, probability 0, space 0, times 0 [ 86.625674][ T6043] 8021q: adding VLAN 0 to HW filter on device bond16 [ 86.636780][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: syz.2.1002 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 86.636827][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.636848][ T6046] Call Trace: [ 86.636858][ T6046] [ 86.636871][ T6046] __dump_stack+0x1d/0x30 [ 86.636895][ T6046] dump_stack_lvl+0xe8/0x140 [ 86.636925][ T6046] dump_stack+0x15/0x1b [ 86.636951][ T6046] should_fail_ex+0x265/0x280 [ 86.637003][ T6046] should_failslab+0x8c/0xb0 [ 86.637118][ T6046] kmem_cache_alloc_noprof+0x50/0x310 [ 86.637164][ T6046] ? security_file_alloc+0x32/0x100 [ 86.637189][ T6046] security_file_alloc+0x32/0x100 [ 86.637219][ T6046] init_file+0x5c/0x1d0 [ 86.637258][ T6046] alloc_empty_file+0x8b/0x200 [ 86.637321][ T6046] path_openat+0x68/0x2170 [ 86.637440][ T6046] ? should_fail_ex+0x30/0x280 [ 86.637486][ T6046] ? xas_load+0x413/0x430 [ 86.637555][ T6046] ? xas_load+0x413/0x430 [ 86.637604][ T6046] ? __rcu_read_unlock+0x4f/0x70 [ 86.637649][ T6046] ? xa_load+0xb1/0xe0 [ 86.637677][ T6046] ? try_charge_memcg+0x200/0x9e0 [ 86.637775][ T6046] ? css_rstat_updated+0xcd/0x5b0 [ 86.637827][ T6046] do_filp_open+0x109/0x230 [ 86.637885][ T6046] io_openat2+0x272/0x390 [ 86.637958][ T6046] io_openat+0x1b/0x30 [ 86.637987][ T6046] __io_issue_sqe+0xfb/0x2e0 [ 86.638042][ T6046] ? io_wq_submit_work+0x5b2/0x5f0 [ 86.638155][ T6046] io_issue_sqe+0x53/0x970 [ 86.638196][ T6046] ? io_openat_prep+0x26a/0x2b0 [ 86.638230][ T6046] io_submit_sqes+0x667/0xfd0 [ 86.638395][ T6046] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 86.638449][ T6046] ? 0xffffffff81000000 [ 86.638470][ T6046] ? __rcu_read_unlock+0x4f/0x70 [ 86.638503][ T6046] ? get_pid_task+0x96/0xd0 [ 86.638611][ T6046] ? proc_fail_nth_write+0x12d/0x160 [ 86.638665][ T6046] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 86.638769][ T6046] ? vfs_write+0x75e/0x8e0 [ 86.638818][ T6046] ? __rcu_read_unlock+0x4f/0x70 [ 86.638852][ T6046] ? __fget_files+0x184/0x1c0 [ 86.638892][ T6046] ? fput+0x8f/0xc0 [ 86.638932][ T6046] __x64_sys_io_uring_enter+0x78/0x90 [ 86.638981][ T6046] x64_sys_call+0x28c8/0x2fb0 [ 86.639093][ T6046] do_syscall_64+0xd2/0x200 [ 86.639121][ T6046] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.639183][ T6046] ? clear_bhb_loop+0x40/0x90 [ 86.639216][ T6046] ? clear_bhb_loop+0x40/0x90 [ 86.639250][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.639286][ T6046] RIP: 0033:0x7fd5c2fae929 [ 86.639334][ T6046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.639362][ T6046] RSP: 002b:00007fd5c1617038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 86.639392][ T6046] RAX: ffffffffffffffda RBX: 00007fd5c31d5fa0 RCX: 00007fd5c2fae929 [ 86.639423][ T6046] RDX: 000000000000addf RSI: 0000000000003518 RDI: 0000000000000004 [ 86.639476][ T6046] RBP: 00007fd5c1617090 R08: 0000000000000000 R09: 0000000000000000 [ 86.639518][ T6046] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 86.639535][ T6046] R13: 0000000000000000 R14: 00007fd5c31d5fa0 R15: 00007ffe7b7e0b38 [ 86.639564][ T6046] [ 86.697042][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1003'. [ 86.701380][ T6043] bridge0: port 18(bond16) entered blocking state [ 86.705569][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1003'. [ 86.711083][ T6043] bridge0: port 18(bond16) entered disabled state [ 87.016321][ T6043] bond16: entered allmulticast mode [ 87.023109][ T6043] bond16: entered promiscuous mode [ 87.028624][ T6043] bridge0: port 18(bond16) entered blocking state [ 87.035180][ T6043] bridge0: port 18(bond16) entered forwarding state [ 87.047391][ T51] bridge0: port 17(bond15) entered disabled state [ 87.055067][ T51] bridge0: port 18(bond16) entered disabled state [ 87.068857][ T5997] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.081110][ T5997] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.093920][ T5997] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.108869][ T5997] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.519197][ T6069] 8021q: adding VLAN 0 to HW filter on device bond17 [ 87.527446][ T6069] bridge0: port 19(bond17) entered blocking state [ 87.533951][ T6069] bridge0: port 19(bond17) entered disabled state [ 87.540714][ T6069] bond17: entered allmulticast mode [ 87.548064][ T6069] bond17: entered promiscuous mode [ 87.553487][ T6069] bridge0: port 19(bond17) entered blocking state [ 87.560092][ T6069] bridge0: port 19(bond17) entered forwarding state [ 87.575389][ T6073] loop1: detected capacity change from 0 to 512 [ 87.606944][ T6073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.619957][ T6073] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.748617][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.838141][ T6097] loop3: detected capacity change from 0 to 128 [ 87.839607][ T6092] 8021q: adding VLAN 0 to HW filter on device bond11 [ 87.855314][ T6092] bridge0: port 13(bond11) entered blocking state [ 87.861842][ T6092] bridge0: port 13(bond11) entered disabled state [ 87.868674][ T6092] bond11: entered allmulticast mode [ 87.875745][ T6092] bond11: entered promiscuous mode [ 87.881279][ T6092] bridge0: port 13(bond11) entered blocking state [ 87.887992][ T6092] bridge0: port 13(bond11) entered forwarding state [ 87.914470][ T6101] 8021q: adding VLAN 0 to HW filter on device bond10 [ 87.923165][ T6101] bridge0: port 11(bond10) entered blocking state [ 87.929991][ T6101] bridge0: port 11(bond10) entered disabled state [ 87.936802][ T6101] bond10: entered allmulticast mode [ 87.943490][ T6101] bond10: entered promiscuous mode [ 87.949044][ T6101] bridge0: port 11(bond10) entered blocking state [ 87.955635][ T6101] bridge0: port 11(bond10) entered forwarding state [ 88.008521][ T6108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.032113][ T6110] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 88.055740][ T3443] bridge0: port 19(bond17) entered disabled state [ 88.063268][ T3443] bridge0: port 13(bond11) entered disabled state [ 88.071019][ T3443] bridge0: port 11(bond10) entered disabled state [ 88.080817][ T6108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.129113][ T6108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.173091][ T6118] bond0: entered promiscuous mode [ 88.190056][ T6118] bond0: left promiscuous mode [ 88.201774][ T6108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.263868][ T6108] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.264929][ T6126] loop2: detected capacity change from 0 to 512 [ 88.282641][ T6108] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.296978][ T6108] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.309136][ T6108] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.347028][ T6126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.360214][ T6126] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.538302][ T6137] loop3: detected capacity change from 0 to 128 [ 88.616555][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.627318][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.661959][ T6139] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 88.687921][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.732087][ T6144] loop0: detected capacity change from 0 to 512 [ 88.746468][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.758931][ T6144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.775093][ T6144] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.797492][ T6144] loop9: detected capacity change from 0 to 7 [ 88.804362][ T5285] loop9: unable to read partition table [ 88.812803][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.823224][ T6144] loop9: unable to read partition table [ 88.829125][ T6144] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 88.829125][ T6144] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 88.982941][ T6168] atomic_op ffff8881047e5d28 conn xmit_atomic 0000000000000000 [ 88.998087][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.014437][ T6168] loop1: detected capacity change from 0 to 2048 [ 89.028700][ T12] bond0 (unregistering): Released all slaves [ 89.046847][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.047567][ T12] bond1 (unregistering): Released all slaves [ 89.078546][ T5285] Alternate GPT is invalid, using primary GPT. [ 89.085109][ T5285] loop1: p1 p2 p3 [ 89.092219][ T12] bond2 (unregistering): Released all slaves [ 89.110061][ T6168] Alternate GPT is invalid, using primary GPT. [ 89.116485][ T6168] loop1: p1 p2 p3 [ 89.122878][ T12] bond3 (unregistering): Released all slaves [ 89.140128][ T12] bond4 (unregistering): Released all slaves [ 89.149613][ T12] bond5 (unregistering): Released all slaves [ 89.158725][ T2996] Alternate GPT is invalid, using primary GPT. [ 89.165067][ T2996] loop1: p1 p2 p3 [ 89.177816][ T12] bond6 (unregistering): Released all slaves [ 89.213614][ T12] bond7 (unregistering): Released all slaves [ 89.233451][ T12] bond8 (unregistering): Released all slaves [ 89.254367][ T12] bond9 (unregistering): Released all slaves [ 89.268613][ T12] bond10 (unregistering): Released all slaves [ 89.283433][ T12] bond11 (unregistering): Released all slaves [ 89.302547][ T12] bond12 (unregistering): Released all slaves [ 89.313561][ T12] bond13 (unregistering): Released all slaves [ 89.322576][ T12] bond14 (unregistering): Released all slaves [ 89.347819][ T6145] lo speed is unknown, defaulting to 1000 [ 89.433678][ T12] dummy0: left promiscuous mode [ 89.452143][ T12] team0: left promiscuous mode [ 89.467775][ T12] hsr_slave_0: left promiscuous mode [ 89.478699][ T12] hsr_slave_1: left promiscuous mode [ 89.488453][ T12] veth1_macvtap: left promiscuous mode [ 89.493992][ T12] veth0_macvtap: left promiscuous mode [ 89.501022][ T12] veth1_vlan: left promiscuous mode [ 89.506419][ T12] veth0_vlan: left promiscuous mode [ 89.712477][ T6178] lo speed is unknown, defaulting to 1000 [ 89.759575][ T6181] lo speed is unknown, defaulting to 1000 [ 89.788061][ T6145] chnl_net:caif_netlink_parms(): no params data found [ 89.888822][ T6178] chnl_net:caif_netlink_parms(): no params data found [ 89.911034][ T6237] loop1: detected capacity change from 0 to 128 [ 89.944610][ T12] IPVS: stop unused estimator thread 0... [ 89.947014][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.957613][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.966563][ T6145] bridge_slave_0: entered allmulticast mode [ 89.973321][ T6145] bridge_slave_0: entered promiscuous mode [ 90.006882][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.014038][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.023325][ T6145] bridge_slave_1: entered allmulticast mode [ 90.030386][ T6145] bridge_slave_1: entered promiscuous mode [ 90.055828][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.062977][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.070350][ T6178] bridge_slave_0: entered allmulticast mode [ 90.077034][ T6178] bridge_slave_0: entered promiscuous mode [ 90.077461][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.091729][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.108028][ T6244] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.121022][ T6145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.130780][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.138068][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.147167][ T6178] bridge_slave_1: entered allmulticast mode [ 90.154198][ T6178] bridge_slave_1: entered promiscuous mode [ 90.171616][ T6145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.182247][ T6244] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.214785][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.234464][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.247519][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.262315][ T6244] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.285981][ T6181] chnl_net:caif_netlink_parms(): no params data found [ 90.296318][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.308313][ T6145] team0: Port device team_slave_0 added [ 90.323815][ T6244] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.335658][ T6145] team0: Port device team_slave_1 added [ 90.342193][ T6178] team0: Port device team_slave_0 added [ 90.368621][ T6178] team0: Port device team_slave_1 added [ 90.384192][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.397643][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.404743][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.431005][ T6145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.460206][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.467242][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.493720][ T6145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.511600][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.518621][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.545341][ T6178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.556788][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.563776][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.590138][ T6178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.608401][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.637476][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.644656][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.652298][ T6181] bridge_slave_0: entered allmulticast mode [ 90.659436][ T6181] bridge_slave_0: entered promiscuous mode [ 90.682381][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.689661][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.703310][ T6181] bridge_slave_1: entered allmulticast mode [ 90.710146][ T6181] bridge_slave_1: entered promiscuous mode [ 90.720888][ T6145] hsr_slave_0: entered promiscuous mode [ 90.727339][ T6145] hsr_slave_1: entered promiscuous mode [ 90.735473][ T6145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.743128][ T6145] Cannot create hsr debugfs directory [ 90.758125][ T6178] hsr_slave_0: entered promiscuous mode [ 90.770015][ T6178] hsr_slave_1: entered promiscuous mode [ 90.776138][ T6178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.783764][ T6178] Cannot create hsr debugfs directory [ 90.819151][ T6181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.851694][ T6181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.879557][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.924526][ T6181] team0: Port device team_slave_0 added [ 90.932136][ T6181] team0: Port device team_slave_1 added [ 90.948403][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.980550][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.987634][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.013675][ T6181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.025085][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.032607][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.058883][ T6181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.093597][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.131430][ T6181] hsr_slave_0: entered promiscuous mode [ 91.139579][ T6181] hsr_slave_1: entered promiscuous mode [ 91.147045][ T6181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.154764][ T6181] Cannot create hsr debugfs directory [ 91.164193][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.204177][ T6178] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 91.220013][ T6178] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 91.241985][ T6178] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 91.263421][ T6178] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 91.319552][ T12] bond17: left allmulticast mode [ 91.324667][ T12] bond17: left promiscuous mode [ 91.329950][ T12] bridge0: port 19(bond17) entered disabled state [ 91.337286][ T12] bond16: left allmulticast mode [ 91.342320][ T12] bond16: left promiscuous mode [ 91.347381][ T12] bridge0: port 18(bond16) entered disabled state [ 91.354719][ T12] bond15: left allmulticast mode [ 91.359821][ T12] bond15: left promiscuous mode [ 91.364946][ T12] bridge0: port 17(bond15) entered disabled state [ 91.372175][ T12] bond14: left allmulticast mode [ 91.377316][ T12] bond14: left promiscuous mode [ 91.382323][ T12] bridge0: port 16(bond14) entered disabled state [ 91.389753][ T12] bond13: left allmulticast mode [ 91.394754][ T12] bond13: left promiscuous mode [ 91.399835][ T12] bridge0: port 15(bond13) entered disabled state [ 91.407078][ T12] bond12: left allmulticast mode [ 91.412193][ T12] bond12: left promiscuous mode [ 91.417404][ T12] bridge0: port 14(bond12) entered disabled state [ 91.424617][ T12] bond11: left allmulticast mode [ 91.429668][ T12] bond11: left promiscuous mode [ 91.434624][ T12] bridge0: port 13(bond11) entered disabled state [ 91.442035][ T12] bond10: left allmulticast mode [ 91.447125][ T12] bond10: left promiscuous mode [ 91.452198][ T12] bridge0: port 12(bond10) entered disabled state [ 91.459629][ T12] bond8: left allmulticast mode [ 91.464559][ T12] bond8: left promiscuous mode [ 91.469583][ T12] bridge0: port 11(bond8) entered disabled state [ 91.476859][ T12] bond7: left allmulticast mode [ 91.481747][ T12] bond7: left promiscuous mode [ 91.486822][ T12] bridge0: port 10(bond7) entered disabled state [ 91.493870][ T12] bond6: left allmulticast mode [ 91.498887][ T12] bond6: left promiscuous mode [ 91.503883][ T12] bridge0: port 9(bond6) entered disabled state [ 91.511146][ T12] bond5: left allmulticast mode [ 91.516085][ T12] bond5: left promiscuous mode [ 91.520968][ T12] bridge0: port 8(bond5) entered disabled state [ 91.528237][ T12] bond4: left allmulticast mode [ 91.533150][ T12] bond4: left promiscuous mode [ 91.538485][ T12] bridge0: port 7(bond4) entered disabled state [ 91.545919][ T12] bond3: left allmulticast mode [ 91.551362][ T12] bond3: left promiscuous mode [ 91.557025][ T12] bridge0: port 6(bond3) entered disabled state [ 91.564148][ T12] hsr1: left allmulticast mode [ 91.568999][ T12] team0: left allmulticast mode [ 91.574101][ T12] team_slave_0: left allmulticast mode [ 91.579729][ T12] team_slave_1: left allmulticast mode [ 91.585461][ T12] bond0: left allmulticast mode [ 91.591150][ T12] bond_slave_0: left allmulticast mode [ 91.596783][ T12] bond_slave_1: left allmulticast mode [ 91.602580][ T12] hsr1: left promiscuous mode [ 91.607615][ T12] bridge0: port 5(hsr1) entered disabled state [ 91.614672][ T12] bond2: left allmulticast mode [ 91.619640][ T12] bond2: left promiscuous mode [ 91.624704][ T12] bridge0: port 4(bond2) entered disabled state [ 91.631844][ T6312] loop3: detected capacity change from 0 to 512 [ 91.640986][ T12] bond1: left allmulticast mode [ 91.646081][ T12] bond1: left promiscuous mode [ 91.651041][ T12] bridge0: port 3(bond1) entered disabled state [ 91.651109][ T6312] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 91.666473][ T6312] EXT4-fs (loop3): 1 truncate cleaned up [ 91.672381][ T12] bridge_slave_1: left allmulticast mode [ 91.672715][ T6312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.678105][ T12] bridge_slave_1: left promiscuous mode [ 91.696848][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.704528][ T6312] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 91.713463][ T12] bridge_slave_0: left allmulticast mode [ 91.716522][ T6312] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.1059: Logical block already allocated [ 91.719213][ T12] bridge_slave_0: left promiscuous mode [ 91.732308][ T6312] EXT4-fs (loop3): Remounting filesystem read-only [ 91.736264][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.751579][ T12] bond7: left allmulticast mode [ 91.756539][ T12] bond7: left promiscuous mode [ 91.761482][ T12] bridge0: port 7(bond7) entered disabled state [ 91.768495][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.768741][ T12] bond5: left allmulticast mode [ 91.782527][ T12] bond5: left promiscuous mode [ 91.787601][ T12] bridge0: port 6(bond5) entered disabled state [ 91.794775][ T12] bond4: left allmulticast mode [ 91.799763][ T12] bond4: left promiscuous mode [ 91.804764][ T12] bridge0: port 5(bond4) entered disabled state [ 91.816449][ T12] bond3: left allmulticast mode [ 91.821571][ T12] bond3: left promiscuous mode [ 91.826677][ T12] bridge0: port 4(bond3) entered disabled state [ 91.829625][ T6316] netlink: 'syz.3.1060': attribute type 32 has an invalid length. [ 91.841965][ T12] bond2: left allmulticast mode [ 91.846999][ T12] bond2: left promiscuous mode [ 91.851991][ T12] bridge0: port 3(bond2) entered disabled state [ 91.859504][ T12] bridge_slave_1: left allmulticast mode [ 91.865366][ T12] bridge_slave_1: left promiscuous mode [ 91.871241][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.879880][ T12] bridge_slave_0: left allmulticast mode [ 91.885761][ T12] bridge_slave_0: left promiscuous mode [ 91.891579][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.927600][ T6320] loop3: detected capacity change from 0 to 164 [ 91.998923][ T12] bond0 (unregistering): left promiscuous mode [ 92.005223][ T12] bond_slave_0: left promiscuous mode [ 92.010762][ T12] bond_slave_1: left promiscuous mode [ 92.017447][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.027833][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.038409][ T12] bond0 (unregistering): Released all slaves [ 92.047509][ T12] bond1 (unregistering): Released all slaves [ 92.056440][ T12] bond2 (unregistering): Released all slaves [ 92.065897][ T12] bond3 (unregistering): Released all slaves [ 92.075358][ T12] bond4 (unregistering): Released all slaves [ 92.083881][ T12] bond5 (unregistering): Released all slaves [ 92.093423][ T12] bond6 (unregistering): Released all slaves [ 92.102187][ T12] bond7 (unregistering): Released all slaves [ 92.111213][ T12] bond8 (unregistering): Released all slaves [ 92.120003][ T12] bond9 (unregistering): Released all slaves [ 92.128776][ T12] bond10 (unregistering): Released all slaves [ 92.138051][ T12] bond11 (unregistering): Released all slaves [ 92.147340][ T12] bond12 (unregistering): Released all slaves [ 92.156958][ T12] bond13 (unregistering): Released all slaves [ 92.165909][ T12] bond14 (unregistering): Released all slaves [ 92.175001][ T12] bond15 (unregistering): Released all slaves [ 92.183879][ T12] bond16 (unregistering): Released all slaves [ 92.192550][ T12] bond17 (unregistering): Released all slaves [ 92.257515][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.268087][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.277862][ T12] bond0 (unregistering): Released all slaves [ 92.287037][ T12] bond1 (unregistering): Released all slaves [ 92.296423][ T12] bond2 (unregistering): Released all slaves [ 92.305477][ T12] bond3 (unregistering): Released all slaves [ 92.314156][ T12] bond4 (unregistering): Released all slaves [ 92.323027][ T12] bond5 (unregistering): Released all slaves [ 92.331989][ T12] bond6 (unregistering): Released all slaves [ 92.340929][ T12] bond7 (unregistering): Released all slaves [ 92.351750][ T6145] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.360989][ T6145] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.370237][ T6145] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.380286][ T6145] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.405091][ T6320] bond0: (slave dummy0): Releasing backup interface [ 92.412296][ T6320] dummy0: left promiscuous mode [ 92.417320][ T6320] dummy0: left allmulticast mode [ 92.428442][ T6320] bridge_slave_0: left allmulticast mode [ 92.434262][ T6320] bridge_slave_0: left promiscuous mode [ 92.440150][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.449246][ T6320] bridge_slave_1: left allmulticast mode [ 92.455008][ T6320] bridge_slave_1: left promiscuous mode [ 92.460714][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.470608][ T6320] bond0: (slave bond_slave_0): Releasing backup interface [ 92.478973][ T6320] bond_slave_0: left promiscuous mode [ 92.484544][ T6320] bond_slave_0: left allmulticast mode [ 92.492457][ T6320] bond0: (slave bond_slave_1): Releasing backup interface [ 92.501247][ T6320] bond_slave_1: left promiscuous mode [ 92.507152][ T6320] bond_slave_1: left allmulticast mode [ 92.514172][ T6320] team_slave_0: left promiscuous mode [ 92.519787][ T6320] team_slave_0: left allmulticast mode [ 92.527474][ T6320] team0: Port device team_slave_0 removed [ 92.534278][ T6320] team_slave_1: left promiscuous mode [ 92.539796][ T6320] team_slave_1: left allmulticast mode [ 92.547637][ T6320] team0: Port device team_slave_1 removed [ 92.554423][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.561934][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.570835][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.578359][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.596236][ T6320] bond1: left allmulticast mode [ 92.601153][ T6320] bond1: left promiscuous mode [ 92.606239][ T6320] bridge0: port 3(bond1) entered disabled state [ 92.614197][ T6320] hsr1: left allmulticast mode [ 92.619092][ T6320] team0: left allmulticast mode [ 92.624079][ T6320] bond0: left allmulticast mode [ 92.629052][ T6320] hsr1: left promiscuous mode [ 92.633957][ T6320] bridge0: port 4(hsr1) entered disabled state [ 92.644138][ T6320] bond4: left allmulticast mode [ 92.649139][ T6320] bond4: left promiscuous mode [ 92.654291][ T6320] bridge0: port 5(bond4) entered disabled state [ 92.662509][ T6320] bond5: left allmulticast mode [ 92.667590][ T6320] bond5: left promiscuous mode [ 92.672566][ T6320] bridge0: port 6(bond5) entered disabled state [ 92.680773][ T6320] bond6: left allmulticast mode [ 92.685797][ T6320] bond6: left promiscuous mode [ 92.690832][ T6320] bridge0: port 7(bond6) entered disabled state [ 92.698774][ T6320] bond7: left allmulticast mode [ 92.703731][ T6320] bond7: left promiscuous mode [ 92.708796][ T6320] bridge0: port 8(bond7) entered disabled state [ 92.717210][ T6320] bond8: left allmulticast mode [ 92.722169][ T6320] bond8: left promiscuous mode [ 92.727147][ T6320] bridge0: port 9(bond8) entered disabled state [ 92.735064][ T6320] bond9: left allmulticast mode [ 92.740157][ T6320] bond9: left promiscuous mode [ 92.746370][ T6320] bridge0: port 10(bond9) entered disabled state [ 92.754575][ T6320] bond10: left allmulticast mode [ 92.759669][ T6320] bond10: left promiscuous mode [ 92.764707][ T6320] bridge0: port 11(bond10) entered disabled state [ 92.782321][ T6244] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.795747][ T6244] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.818820][ T6244] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.834743][ T6244] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.858422][ T12] team0: left promiscuous mode [ 92.863370][ T12] team_slave_0: left promiscuous mode [ 92.869107][ T12] team_slave_1: left promiscuous mode [ 92.870382][ T6330] __nla_validate_parse: 17 callbacks suppressed [ 92.870404][ T6330] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1063'. [ 92.892676][ T12] hsr_slave_0: left promiscuous mode [ 92.900488][ T12] hsr_slave_1: left promiscuous mode [ 92.906561][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.914212][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.923395][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.923879][ T6332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1064'. [ 92.931002][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.940069][ T6332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1064'. [ 92.957063][ T12] dummy0: left promiscuous mode [ 92.962433][ T12] team0: left promiscuous mode [ 92.967516][ T12] team_slave_0: left promiscuous mode [ 92.973358][ T12] team_slave_1: left promiscuous mode [ 92.981478][ T12] hsr_slave_0: left promiscuous mode [ 92.987364][ T12] hsr_slave_1: left promiscuous mode [ 92.993645][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.001152][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.009070][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.016636][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.029754][ T12] veth1_macvtap: left promiscuous mode [ 93.035401][ T12] veth0_macvtap: left promiscuous mode [ 93.041178][ T12] veth1_vlan: left promiscuous mode [ 93.046793][ T12] veth0_vlan: left promiscuous mode [ 93.052647][ T12] veth1_macvtap: left promiscuous mode [ 93.058388][ T12] veth0_macvtap: left promiscuous mode [ 93.063936][ T12] veth1_vlan: left promiscuous mode [ 93.069337][ T12] veth0_vlan: left promiscuous mode [ 93.171273][ T12] team0 (unregistering): Port device team_slave_1 removed [ 93.182107][ T12] team0 (unregistering): Port device team_slave_0 removed [ 93.239512][ T12] team0 (unregistering): Port device team_slave_1 removed [ 93.249765][ T12] team0 (unregistering): Port device team_slave_0 removed [ 93.310990][ T2959] lo speed is unknown, defaulting to 1000 [ 93.316863][ T2959] infiniband syz0: ib_query_port failed (-19) [ 93.347476][ T6178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.366237][ T6145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.374434][ T6181] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 93.397000][ T6145] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.416566][ T6181] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 93.442327][ T6178] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.478461][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.485631][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.508096][ T6352] loop3: detected capacity change from 0 to 512 [ 93.508808][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.514808][ T6352] EXT4-fs: Ignoring removed orlov option [ 93.521567][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.533124][ T6352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.566212][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.571206][ T6352] ext4: Unknown parameter 'fsname' [ 93.573348][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.610009][ T6181] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 93.621511][ T6344] lo speed is unknown, defaulting to 1000 [ 93.638343][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.645670][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.669825][ T6181] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 93.686957][ T6344] lo speed is unknown, defaulting to 1000 [ 93.692914][ T6145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.692941][ T6145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.738939][ T6344] lo speed is unknown, defaulting to 1000 [ 93.748462][ T6344] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 93.786870][ T6344] lo speed is unknown, defaulting to 1000 [ 93.799097][ T6344] lo speed is unknown, defaulting to 1000 [ 93.824372][ T6344] lo speed is unknown, defaulting to 1000 [ 93.848980][ T6344] lo speed is unknown, defaulting to 1000 [ 93.865477][ T6344] lo speed is unknown, defaulting to 1000 [ 93.866631][ T6178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.924234][ T6145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.943382][ T12] IPVS: stop unused estimator thread 0... [ 93.951733][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.966934][ T12] IPVS: stop unused estimator thread 0... [ 94.011580][ T6181] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.042274][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.049547][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.082887][ T6394] loop3: detected capacity change from 0 to 512 [ 94.090987][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.098193][ T3443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.113227][ T6394] ext4: Unknown parameter 'permit_directio' [ 94.163194][ T6181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.173807][ T6181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.310526][ T6181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.442618][ T6145] veth0_vlan: entered promiscuous mode [ 94.462630][ T6178] veth0_vlan: entered promiscuous mode [ 94.470927][ T6178] veth1_vlan: entered promiscuous mode [ 94.515750][ T6145] veth1_vlan: entered promiscuous mode [ 94.529842][ T6178] veth0_macvtap: entered promiscuous mode [ 94.537503][ T6447] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.556355][ T6178] veth1_macvtap: entered promiscuous mode [ 94.574242][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.574539][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.582833][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.601014][ T6145] veth0_macvtap: entered promiscuous mode [ 94.613216][ T6447] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.626584][ T6145] veth1_macvtap: entered promiscuous mode [ 94.634811][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.648701][ T6178] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.657598][ T6178] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.666464][ T6178] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.675247][ T6178] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.693221][ T6447] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.708442][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.732610][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 94.732645][ T29] audit: type=1400 audit(1751347655.349:2548): avc: denied { mounton } for pid=6178 comm="syz-executor" path="/root/syzkaller.IkiSRK/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 94.766116][ T6447] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.779686][ T29] audit: type=1400 audit(1751347655.389:2549): avc: denied { mount } for pid=6178 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.802082][ T29] audit: type=1400 audit(1751347655.399:2550): avc: denied { mount } for pid=6178 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 94.824109][ T29] audit: type=1400 audit(1751347655.399:2551): avc: denied { mounton } for pid=6178 comm="syz-executor" path="/root/syzkaller.IkiSRK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 94.851224][ T29] audit: type=1400 audit(1751347655.399:2552): avc: denied { mounton } for pid=6178 comm="syz-executor" path="/root/syzkaller.IkiSRK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 94.879442][ T29] audit: type=1400 audit(1751347655.399:2553): avc: denied { mounton } for pid=6178 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 94.902508][ T29] audit: type=1400 audit(1751347655.399:2554): avc: denied { mount } for pid=6178 comm="syz-executor" name="/" dev="gadgetfs" ino=3985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 94.942240][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.963149][ T6181] veth0_vlan: entered promiscuous mode [ 94.973829][ T6145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.982928][ T6145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.991875][ T6145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.000732][ T6145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.011302][ T6475] loop6: detected capacity change from 0 to 512 [ 95.022950][ T6181] veth1_vlan: entered promiscuous mode [ 95.037068][ T6475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.052588][ T6475] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.070238][ T6181] veth0_macvtap: entered promiscuous mode [ 95.086134][ T6181] veth1_macvtap: entered promiscuous mode [ 95.113534][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.125478][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.135370][ T6181] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.144148][ T6181] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.153040][ T6181] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.161997][ T6181] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.328730][ T6492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.349939][ T6500] loop3: detected capacity change from 0 to 512 [ 95.351776][ T6492] bridge0: port 3(bond1) entered blocking state [ 95.362877][ T6492] bridge0: port 3(bond1) entered disabled state [ 95.370192][ T6492] bond1: entered allmulticast mode [ 95.372414][ T6178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.376765][ T6492] bond1: entered promiscuous mode [ 95.387795][ T6501] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1050'. [ 95.398731][ T6492] bridge0: port 3(bond1) entered blocking state [ 95.405185][ T6492] bridge0: port 3(bond1) entered forwarding state [ 95.416152][ T2767] bridge0: port 3(bond1) entered disabled state [ 95.445547][ T6504] loop5: detected capacity change from 0 to 512 [ 95.456971][ T6504] ext4: Unknown parameter 'permit_directio' [ 95.470376][ T6500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.511093][ T6500] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.559309][ T6500] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.1075: corrupted inode contents [ 95.602509][ T6500] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.1075: mark_inode_dirty error [ 95.618291][ T29] audit: type=1400 audit(1751347656.239:2555): avc: denied { bind } for pid=6517 comm="syz.7.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.637858][ T29] audit: type=1400 audit(1751347656.239:2556): avc: denied { name_bind } for pid=6517 comm="syz.7.1080" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 95.659923][ T29] audit: type=1400 audit(1751347656.239:2557): avc: denied { node_bind } for pid=6517 comm="syz.7.1080" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 95.684738][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1081'. [ 95.708443][ T6500] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.1075: corrupted inode contents [ 95.751080][ T6500] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.1075: mark_inode_dirty error [ 95.764312][ T6500] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.1075: mark inode dirty (error -117) [ 95.779457][ T6500] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 95.804616][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.821356][ T6527] atomic_op ffff888104271528 conn xmit_atomic 0000000000000000 [ 95.867681][ T6527] loop6: detected capacity change from 0 to 2048 [ 95.875555][ T6532] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 95.893452][ T6535] loop7: detected capacity change from 0 to 512 [ 95.917635][ T3887] Alternate GPT is invalid, using primary GPT. [ 95.924102][ T3887] loop6: p1 p2 p3 [ 95.947806][ T6535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.009206][ T6535] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.058503][ T6527] Alternate GPT is invalid, using primary GPT. [ 96.064985][ T6527] loop6: p1 p2 p3 [ 96.227759][ T6564] 8021q: adding VLAN 0 to HW filter on device bond11 [ 96.257324][ T6181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.272114][ T6564] bridge0: port 1(bond11) entered blocking state [ 96.278705][ T6564] bridge0: port 1(bond11) entered disabled state [ 96.280547][ T6568] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1089'. [ 96.285790][ T6564] bond11: entered allmulticast mode [ 96.302680][ T6564] bond11: entered promiscuous mode [ 96.310858][ T6564] bridge0: port 1(bond11) entered blocking state [ 96.317430][ T6564] bridge0: port 1(bond11) entered forwarding state [ 96.326365][ T12] bridge0: port 1(bond11) entered disabled state [ 96.753024][ T6603] random: crng reseeded on system resumption [ 96.783381][ T6603] Restarting kernel threads ... [ 96.795279][ T6603] Done restarting kernel threads. [ 97.049118][ T6447] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.062935][ T6624] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1100'. [ 97.081482][ T6447] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.107825][ T6624] loop7: detected capacity change from 0 to 128 [ 97.136934][ T6447] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.180524][ T6636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 97.189770][ T6636] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1102'. [ 97.204372][ T6635] loop7: detected capacity change from 0 to 512 [ 97.212441][ T6638] siw: device registration error -23 [ 97.226373][ T6630] 8021q: adding VLAN 0 to HW filter on device bond12 [ 97.253825][ T6630] bridge0: port 2(bond12) entered blocking state [ 97.260346][ T6630] bridge0: port 2(bond12) entered disabled state [ 97.267551][ T6630] bond12: entered allmulticast mode [ 97.274782][ T6630] bond12: entered promiscuous mode [ 97.280332][ T6643] loop5: detected capacity change from 0 to 512 [ 97.281158][ T6630] bridge0: port 2(bond12) entered blocking state [ 97.293208][ T6630] bridge0: port 2(bond12) entered forwarding state [ 97.301455][ T6643] EXT4-fs: Ignoring removed orlov option [ 97.307432][ T6643] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.307553][ T31] bridge0: port 2(bond12) entered disabled state [ 97.314118][ T6643] ext4: Unknown parameter 'fsname' [ 97.325121][ T6635] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 97.352520][ T6635] EXT4-fs (loop7): 1 truncate cleaned up [ 97.377804][ T6635] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.398836][ T6447] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.433520][ T6635] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 97.453789][ T6635] EXT4-fs error (device loop7): ext4_append:79: inode #2: comm syz.7.1103: Logical block already allocated [ 97.474128][ T6635] EXT4-fs (loop7): Remounting filesystem read-only [ 97.498071][ T6181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.573418][ T6656] loop3: detected capacity change from 0 to 4096 [ 97.617644][ T6656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.632870][ T6665] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 97.688391][ T6680] loop6: detected capacity change from 0 to 512 [ 97.772334][ T6680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.802237][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.818936][ T6680] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.917343][ T6694] FAULT_INJECTION: forcing a failure. [ 97.917343][ T6694] name failslab, interval 1, probability 0, space 0, times 0 [ 97.930075][ T6694] CPU: 0 UID: 0 PID: 6694 Comm: syz.5.1113 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 97.930129][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.930149][ T6694] Call Trace: [ 97.930158][ T6694] [ 97.930169][ T6694] __dump_stack+0x1d/0x30 [ 97.930196][ T6694] dump_stack_lvl+0xe8/0x140 [ 97.930217][ T6694] dump_stack+0x15/0x1b [ 97.930276][ T6694] should_fail_ex+0x265/0x280 [ 97.930316][ T6694] should_failslab+0x8c/0xb0 [ 97.930356][ T6694] kmem_cache_alloc_noprof+0x50/0x310 [ 97.930447][ T6694] ? skb_clone+0x151/0x1f0 [ 97.930471][ T6694] skb_clone+0x151/0x1f0 [ 97.930498][ T6694] __netlink_deliver_tap+0x2c9/0x500 [ 97.930608][ T6694] netlink_unicast+0x64c/0x670 [ 97.930650][ T6694] netlink_sendmsg+0x58b/0x6b0 [ 97.930675][ T6694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.930777][ T6694] __sock_sendmsg+0x145/0x180 [ 97.930811][ T6694] ____sys_sendmsg+0x31e/0x4e0 [ 97.930856][ T6694] ___sys_sendmsg+0x17b/0x1d0 [ 97.930940][ T6694] __x64_sys_sendmsg+0xd4/0x160 [ 97.930984][ T6694] x64_sys_call+0x2999/0x2fb0 [ 97.931010][ T6694] do_syscall_64+0xd2/0x200 [ 97.931032][ T6694] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 97.931123][ T6694] ? clear_bhb_loop+0x40/0x90 [ 97.931149][ T6694] ? clear_bhb_loop+0x40/0x90 [ 97.931175][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.931200][ T6694] RIP: 0033:0x7f41e075e929 [ 97.931217][ T6694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.931279][ T6694] RSP: 002b:00007f41ded85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.931301][ T6694] RAX: ffffffffffffffda RBX: 00007f41e0986160 RCX: 00007f41e075e929 [ 97.931316][ T6694] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 97.931374][ T6694] RBP: 00007f41ded85090 R08: 0000000000000000 R09: 0000000000000000 [ 97.931388][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.931403][ T6694] R13: 0000000000000000 R14: 00007f41e0986160 R15: 00007fffde2d6948 [ 97.931425][ T6694] [ 97.931688][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1113'. [ 98.297982][ T6704] loop3: detected capacity change from 0 to 128 [ 98.355807][ T6708] siw: device registration error -23 [ 98.388250][ T6708] loop1: detected capacity change from 0 to 512 [ 98.410228][ T6708] EXT4-fs: Ignoring removed orlov option [ 98.427093][ T6708] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.452781][ T6708] ext4: Unknown parameter 'fsname' [ 98.558630][ T6715] 8021q: adding VLAN 0 to HW filter on device bond12 [ 98.586902][ T6715] bridge0: port 14(bond12) entered blocking state [ 98.593434][ T6715] bridge0: port 14(bond12) entered disabled state [ 98.626612][ T6721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1117'. [ 98.635896][ T6721] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1117'. [ 98.676835][ T6715] bond12: entered allmulticast mode [ 98.684036][ T6715] bond12: entered promiscuous mode [ 98.703143][ T6726] loop7: detected capacity change from 0 to 512 [ 98.718694][ T6715] bridge0: port 14(bond12) entered blocking state [ 98.725502][ T6715] bridge0: port 14(bond12) entered forwarding state [ 98.848282][ T51] bridge0: port 14(bond12) entered disabled state [ 98.901808][ T6697] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.1112: corrupted inode contents [ 98.914378][ T6697] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm syz.6.1112: mark_inode_dirty error [ 98.930514][ T6697] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.1112: corrupted inode contents [ 98.946341][ T6697] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.1112: mark_inode_dirty error [ 98.959927][ T6697] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.1112: mark inode dirty (error -117) [ 98.973951][ T6697] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 98.996387][ T6736] vhci_hcd: invalid port number 236 [ 99.006838][ T6178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.467582][ T6726] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 99.488329][ T6726] EXT4-fs (loop7): 1 truncate cleaned up [ 99.536906][ T6726] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 99.556986][ T6726] EXT4-fs error (device loop7): ext4_append:79: inode #2: comm syz.7.1118: Logical block already allocated [ 99.577353][ T6746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1122'. [ 99.597075][ T6726] EXT4-fs (loop7): Remounting filesystem read-only [ 99.611138][ T6739] loop5: detected capacity change from 0 to 164 [ 99.637541][ T6750] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1123'. [ 99.647847][ T6739] Unable to read rock-ridge attributes [ 99.716491][ T6739] Unable to read rock-ridge attributes [ 99.723647][ T6739] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 99.742006][ T6763] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 99.773652][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 99.773671][ T29] audit: type=1326 audit(1751347660.389:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c914e929 code=0x7ffc0000 [ 99.858574][ T29] audit: type=1326 audit(1751347660.429:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9c914e929 code=0x7ffc0000 [ 99.871710][ T6779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.882226][ T29] audit: type=1326 audit(1751347660.429:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c914e929 code=0x7ffc0000 [ 99.898290][ T6779] bridge0: port 3(bond1) entered blocking state [ 99.912741][ T29] audit: type=1326 audit(1751347660.429:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9c914e929 code=0x7ffc0000 [ 99.918929][ T6779] bridge0: port 3(bond1) entered disabled state [ 99.942391][ T29] audit: type=1326 audit(1751347660.429:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c914e929 code=0x7ffc0000 [ 99.948854][ T6779] bond1: entered allmulticast mode [ 99.972144][ T29] audit: type=1326 audit(1751347660.429:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9c914e929 code=0x7ffc0000 [ 99.972180][ T29] audit: type=1326 audit(1751347660.429:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c914e929 code=0x7ffc0000 [ 99.972250][ T29] audit: type=1326 audit(1751347660.429:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9c914e929 code=0x7ffc0000 [ 99.972292][ T29] audit: type=1326 audit(1751347660.439:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c914e929 code=0x7ffc0000 [ 99.972326][ T29] audit: type=1326 audit(1751347660.449:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9c914e929 code=0x7ffc0000 [ 100.027434][ T6782] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1129'. [ 100.100103][ T6779] bond1: entered promiscuous mode [ 100.104920][ T6782] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1129'. [ 100.119701][ T6779] bridge0: port 3(bond1) entered blocking state [ 100.126717][ T6779] bridge0: port 3(bond1) entered forwarding state [ 100.223610][ T6799] atomic_op ffff888120e54528 conn xmit_atomic 0000000000000000 [ 100.254350][ T6799] loop7: detected capacity change from 0 to 2048 [ 100.300130][ T6812] loop3: detected capacity change from 0 to 128 [ 100.308358][ T6799] Alternate GPT is invalid, using primary GPT. [ 100.314727][ T6799] loop7: p1 p2 p3 [ 100.371991][ T2996] Alternate GPT is invalid, using primary GPT. [ 100.378429][ T2996] loop7: p1 p2 p3 [ 100.405831][ T6820] loop1: detected capacity change from 0 to 512 [ 100.467426][ T6831] loop5: detected capacity change from 0 to 1024 [ 100.478259][ T6834] netlink: 'syz.3.1137': attribute type 1 has an invalid length. [ 100.485824][ T6831] EXT4-fs: Ignoring removed orlov option [ 100.486081][ T6834] netlink: 'syz.3.1137': attribute type 4 has an invalid length. [ 100.499521][ T6834] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1137'. [ 100.566464][ T6825] netlink: 'syz.3.1137': attribute type 1 has an invalid length. [ 100.574350][ T6825] netlink: 'syz.3.1137': attribute type 4 has an invalid length. [ 100.582329][ T6825] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1137'. [ 100.618917][ T6820] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 100.632027][ T6825] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1137'. [ 100.641358][ T6825] unsupported nla_type 65024 [ 100.646765][ T6820] EXT4-fs (loop1): 1 truncate cleaned up [ 100.699351][ T6820] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 100.715845][ T6820] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.1136: Logical block already allocated [ 100.786746][ T6820] EXT4-fs (loop1): Remounting filesystem read-only [ 100.928760][ T31] bridge0: port 3(bond1) entered disabled state [ 101.042854][ T6869] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 101.152610][ T6883] loop1: detected capacity change from 0 to 128 [ 101.441496][ T6915] loop5: detected capacity change from 0 to 512 [ 101.484859][ T6915] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 101.493510][ T6915] EXT4-fs (loop5): 1 truncate cleaned up [ 101.510392][ T6915] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 101.551912][ T6915] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.1152: Logical block already allocated [ 101.569868][ T6915] EXT4-fs (loop5): Remounting filesystem read-only [ 102.704205][ T6996] loop5: detected capacity change from 0 to 128 [ 102.745062][ T6999] loop6: detected capacity change from 0 to 1024 [ 102.753568][ T6999] EXT4-fs: Ignoring removed orlov option [ 102.777904][ T6999] EXT4-fs mount: 8 callbacks suppressed [ 102.777923][ T6999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.846394][ T6178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.949365][ T7023] loop5: detected capacity change from 0 to 128 [ 103.081457][ T7029] netlink: 'syz.3.1175': attribute type 32 has an invalid length. [ 103.173667][ T7036] loop3: detected capacity change from 0 to 128 [ 103.248743][ T7040] loop3: detected capacity change from 0 to 512 [ 103.278064][ T7040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.292452][ T7040] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.360407][ T7049] loop7: detected capacity change from 0 to 512 [ 103.377274][ T7049] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.417039][ T7049] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.517408][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.589464][ T7055] loop6: detected capacity change from 0 to 128 [ 103.621890][ T6181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.687522][ T7064] __nla_validate_parse: 3 callbacks suppressed [ 103.687543][ T7064] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1186'. [ 103.757668][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1188'. [ 103.766913][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1188'. [ 103.782440][ T7068] loop3: detected capacity change from 0 to 128 [ 103.981496][ T7085] loop3: detected capacity change from 0 to 512 [ 104.024653][ T7085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.096837][ T7085] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.254020][ T7100] netlink: 'syz.5.1196': attribute type 32 has an invalid length. [ 104.346049][ T7105] atomic_op ffff888122442528 conn xmit_atomic 0000000000000000 [ 104.378241][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.391159][ T7105] loop5: detected capacity change from 0 to 2048 [ 104.426435][ T5285] Alternate GPT is invalid, using primary GPT. [ 104.432809][ T5285] loop5: p1 p2 p3 [ 104.443567][ T7105] Alternate GPT is invalid, using primary GPT. [ 104.450977][ T7105] loop5: p1 p2 p3 [ 104.557458][ T7123] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1200'. [ 104.566598][ T7123] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1200'. [ 104.654007][ T7131] loop7: detected capacity change from 0 to 128 [ 104.786831][ T7136] loop7: detected capacity change from 0 to 512 [ 104.855575][ T7136] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.940962][ T7136] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.045217][ T7148] atomic_op ffff88812250f928 conn xmit_atomic 0000000000000000 [ 105.063965][ T7148] loop3: detected capacity change from 0 to 2048 [ 105.115639][ T5285] Alternate GPT is invalid, using primary GPT. [ 105.122299][ T5285] loop3: p1 p2 p3 [ 105.161086][ T7148] Alternate GPT is invalid, using primary GPT. [ 105.168215][ T7148] loop3: p1 p2 p3 [ 105.430216][ T6181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.617060][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 105.617077][ T29] audit: type=1326 audit(1751347666.239:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.1.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424d1be929 code=0x7ffc0000 [ 105.660459][ T7172] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1213'. [ 105.683877][ T29] audit: type=1326 audit(1751347666.299:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.1.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424d1be929 code=0x7ffc0000 [ 105.707826][ T29] audit: type=1326 audit(1751347666.299:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.1.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424d1be929 code=0x7ffc0000 [ 105.709614][ T7173] netlink: 'syz.7.1216': attribute type 1 has an invalid length. [ 105.731521][ T29] audit: type=1326 audit(1751347666.299:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.1.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424d1be929 code=0x7ffc0000 [ 105.739394][ T7173] netlink: 'syz.7.1216': attribute type 4 has an invalid length. [ 105.764038][ T29] audit: type=1326 audit(1751347666.299:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.1.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424d1be929 code=0x7ffc0000 [ 105.764078][ T29] audit: type=1326 audit(1751347666.299:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.1.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424d1be929 code=0x7ffc0000 [ 105.771929][ T7173] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1216'. [ 105.830008][ T29] audit: type=1326 audit(1751347666.299:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.1.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424d1be929 code=0x7ffc0000 [ 105.853944][ T29] audit: type=1326 audit(1751347666.299:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.1.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424d1be929 code=0x7ffc0000 [ 105.877684][ T29] audit: type=1326 audit(1751347666.299:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.1.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424d1be929 code=0x7ffc0000 [ 105.901723][ T29] audit: type=1326 audit(1751347666.299:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.1.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424d1be929 code=0x7ffc0000 [ 105.928743][ T7177] netlink: 'syz.7.1216': attribute type 1 has an invalid length. [ 105.936652][ T7177] netlink: 'syz.7.1216': attribute type 4 has an invalid length. [ 105.944491][ T7177] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1216'. [ 106.029792][ T7182] loop1: detected capacity change from 0 to 512 [ 106.066474][ T7182] ext4: Unknown parameter 'permit_directio' [ 106.197463][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1224'. [ 106.206963][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1224'. [ 106.228407][ T7199] bond0: entered promiscuous mode [ 106.234920][ T7199] bond_slave_0: entered promiscuous mode [ 106.240824][ T7199] bond_slave_1: entered promiscuous mode [ 106.288333][ T7199] bond0: left promiscuous mode [ 106.293293][ T7199] bond_slave_0: left promiscuous mode [ 106.299544][ T7199] bond_slave_1: left promiscuous mode [ 106.313662][ T7204] loop1: detected capacity change from 0 to 512 [ 106.322780][ T7204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.410983][ T7213] loop6: detected capacity change from 0 to 512 [ 106.422438][ T7204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.445703][ T7204] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.477209][ T7204] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1225: corrupted xattr block 19: overlapping e_value [ 106.506350][ T7210] loop3: detected capacity change from 0 to 8192 [ 106.539917][ T7222] loop7: detected capacity change from 0 to 512 [ 106.554093][ T7204] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 106.572225][ T7213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.598413][ T7204] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1225: corrupted xattr block 19: overlapping e_value [ 106.618288][ T7213] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.629901][ T7210] loop3: p1 < > p2 p4 [ 106.630406][ T7222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.634291][ T7210] loop3: partition table partially beyond EOD, truncated [ 106.653220][ T7222] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.666661][ T7204] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 106.677854][ T7204] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1225: corrupted xattr block 19: overlapping e_value [ 106.695394][ T7210] loop3: p1 start 408832 is beyond EOD, truncated [ 106.702434][ T7210] loop3: p2 size 8388352 extends beyond EOD, truncated [ 106.758852][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.922762][ T5285] udevd[5285]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 106.933102][ T3522] udevd[3522]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 106.975833][ T6181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.004198][ T7249] loop3: detected capacity change from 0 to 8192 [ 107.063752][ T6178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.120401][ T7276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.143359][ T7276] bridge0: port 4(bond2) entered blocking state [ 107.149916][ T7276] bridge0: port 4(bond2) entered disabled state [ 107.156683][ T7276] bond2: entered allmulticast mode [ 107.164288][ T7276] bond2: entered promiscuous mode [ 107.170818][ T7276] bridge0: port 4(bond2) entered blocking state [ 107.177200][ T7276] bridge0: port 4(bond2) entered forwarding state [ 107.198871][ T7284] FAULT_INJECTION: forcing a failure. [ 107.198871][ T7284] name failslab, interval 1, probability 0, space 0, times 0 [ 107.211678][ T7284] CPU: 1 UID: 0 PID: 7284 Comm: syz.1.1241 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 107.211775][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.211790][ T7284] Call Trace: [ 107.211798][ T7284] [ 107.211836][ T7284] __dump_stack+0x1d/0x30 [ 107.211862][ T7284] dump_stack_lvl+0xe8/0x140 [ 107.211885][ T7284] dump_stack+0x15/0x1b [ 107.211979][ T7284] should_fail_ex+0x265/0x280 [ 107.212092][ T7284] should_failslab+0x8c/0xb0 [ 107.212118][ T7284] kmem_cache_alloc_node_noprof+0x57/0x320 [ 107.212189][ T7284] ? __alloc_skb+0x101/0x320 [ 107.212224][ T7284] __alloc_skb+0x101/0x320 [ 107.212306][ T7284] ? audit_log_start+0x365/0x6c0 [ 107.212344][ T7284] audit_log_start+0x380/0x6c0 [ 107.212385][ T7284] audit_seccomp+0x48/0x100 [ 107.212463][ T7284] ? __seccomp_filter+0x68c/0x10d0 [ 107.212490][ T7284] __seccomp_filter+0x69d/0x10d0 [ 107.212517][ T7284] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 107.212559][ T7284] ? vfs_write+0x75e/0x8e0 [ 107.212624][ T7284] ? __rcu_read_unlock+0x4f/0x70 [ 107.212648][ T7284] ? __fget_files+0x184/0x1c0 [ 107.212673][ T7284] __secure_computing+0x82/0x150 [ 107.212711][ T7284] syscall_trace_enter+0xcf/0x1e0 [ 107.212812][ T7284] do_syscall_64+0xac/0x200 [ 107.212833][ T7284] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.212861][ T7284] ? clear_bhb_loop+0x40/0x90 [ 107.212956][ T7284] ? clear_bhb_loop+0x40/0x90 [ 107.212981][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.213005][ T7284] RIP: 0033:0x7f424d1be929 [ 107.213023][ T7284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.213055][ T7284] RSP: 002b:00007f424b827038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 107.213076][ T7284] RAX: ffffffffffffffda RBX: 00007f424d3e5fa0 RCX: 00007f424d1be929 [ 107.213125][ T7284] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000007 [ 107.213140][ T7284] RBP: 00007f424b827090 R08: 0000000000000000 R09: 0000000000000000 [ 107.213153][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.213167][ T7284] R13: 0000000000000000 R14: 00007f424d3e5fa0 R15: 00007ffdd603b5e8 [ 107.213189][ T7284] [ 107.525189][ T7249] infiniband syz!: set down [ 107.529761][ T7249] infiniband syz!: added team_slave_0 [ 107.570950][ T7249] RDS/IB: syz!: added [ 107.575867][ T2767] bridge0: port 4(bond2) entered disabled state [ 107.577226][ T7249] smc: adding ib device syz! with port count 1 [ 107.612341][ T7249] smc: ib device syz! port 1 has pnetid [ 107.802646][ T7329] loop7: detected capacity change from 0 to 128 [ 107.816821][ T7319] netlink: 'syz.5.1250': attribute type 1 has an invalid length. [ 107.824693][ T7319] netlink: 'syz.5.1250': attribute type 4 has an invalid length. [ 107.851982][ T7319] netlink: 'syz.5.1250': attribute type 1 has an invalid length. [ 107.859815][ T7319] netlink: 'syz.5.1250': attribute type 4 has an invalid length. [ 107.899532][ T2996] ================================================================== [ 107.907815][ T2996] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 107.915054][ T2996] [ 107.917424][ T2996] write to 0xffff888119934b70 of 8 bytes by task 5285 on cpu 1: [ 107.925075][ T2996] dentry_unlink_inode+0x65/0x260 [ 107.930128][ T2996] d_delete+0x164/0x180 [ 107.934306][ T2996] d_delete_notify+0x32/0x100 [ 107.939011][ T2996] vfs_unlink+0x30b/0x420 [ 107.943372][ T2996] do_unlinkat+0x28e/0x4c0 [ 107.947815][ T2996] __x64_sys_unlink+0x2e/0x40 [ 107.952523][ T2996] x64_sys_call+0x22a6/0x2fb0 [ 107.957223][ T2996] do_syscall_64+0xd2/0x200 [ 107.961836][ T2996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.967778][ T2996] [ 107.970117][ T2996] read to 0xffff888119934b70 of 8 bytes by task 2996 on cpu 0: [ 107.977680][ T2996] step_into+0x122/0x820 [ 107.981944][ T2996] walk_component+0x162/0x220 [ 107.986650][ T2996] path_lookupat+0xfe/0x2a0 [ 107.991189][ T2996] filename_lookup+0x147/0x340 [ 107.996005][ T2996] do_readlinkat+0x7d/0x320 [ 108.000537][ T2996] __x64_sys_readlink+0x47/0x60 [ 108.005415][ T2996] x64_sys_call+0x2cf3/0x2fb0 [ 108.010115][ T2996] do_syscall_64+0xd2/0x200 [ 108.014632][ T2996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.020547][ T2996] [ 108.023065][ T2996] value changed: 0xffff888118ef11f0 -> 0x0000000000000000 [ 108.030204][ T2996] [ 108.032546][ T2996] Reported by Kernel Concurrency Sanitizer on: [ 108.038796][ T2996] CPU: 0 UID: 0 PID: 2996 Comm: udevd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 108.050797][ T2996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.060875][ T2996] ================================================================== [ 108.168566][ T7355] loop5: detected capacity change from 0 to 128