last executing test programs: 2m48.845841518s ago: executing program 1 (id=992): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000500)=[@ioring_restriction_register_op={0x0, 0xb}, @ioring_restriction_sqe_op={0x1, 0x7}, @ioring_restriction_sqe_flags_required={0x3, 0x1b}], 0x3) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32], 0x60}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x600) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x13, r1, 0x6f20c000) connect$inet6(r8, &(0x7f0000000380)={0xa, 0x4e21, 0x0, @remote, 0x3}, 0x1c) write$binfmt_misc(r8, &(0x7f0000000100), 0xfdef) 2m48.687632474s ago: executing program 1 (id=993): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x100000001}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 2m48.578432905s ago: executing program 1 (id=995): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 2m48.449278208s ago: executing program 1 (id=996): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@nombcache}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000000)=0x14) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$eJzs289rHFUcAPDvTH60tT8Sa/3RWjVahKCYNGnVHrwoCh4qCnqox5hsS+i2kSaKLcWmIvUiSEHP4lHwL/AmgqgnwatePEmhaC+tniIzO9NuttnUmE0mZj8fmOx7M2933jdvfrx5bzeArjWU/UkidkTELxEx0MguLjDUeLlx7fzkX9fOTyaxsPD6H0le7vq185Nl0fJ924vMcBqRfpgUO1ls9uy5kxP1eu1MkR+dO/X26OzZc0+9e2riRO1E7fT4kSOHD409+8z40x2JM4vr+r73Z/bvffnNy69MHrv81g9fZfXdUWxvjqNThrLA/1zItW57vNM7q9jOpnTSW2FFWJGeiMiaqy8//weiJ2413kC89EGllQPWVHZv2tJ+8/wCsIklUXUNgGqUN/rs+bdc1qnrsSFcfb7xAJTFfaNYGlt6Iy3K9LU833bSUEQcm//782yJNRqHAABo9vHkZ0f7m/odt/ofadyXv/6W/02KOZTBiLg7InZHxD0RsSci7o3Iy94fEQ+ssj6393/SK6v8yGVl/b/nirmtxf2/svcXgz1Fbmcef19yfLpeOxgRuyJiOPq2ZPmxZfbxzYs/f9JuW3P/L1uy/Zd9waIeV3pbBuimJuYm8k5pB1y9GLGvd6n4k5szAVnb742IfSv76F1lYvqJL/e3K3Tn+JfRgXmmhS+y8Oaz+OejJf5S0jw/OX3b/OTo1qjXDo6WR8Xtfvzp0mvt9r+q+Dvgaq3x2tT+rUUGk+b52tmV7+PSrx+1fab5j8d/2p+8kc8z9xfr3puYmzszFtGfHM3zi9aP33pvmS/LZ8f/8IGlz//dxXuy+B+MiOwgfigiHo6IR4q6PxoRj0XEgWXi//6F9tvK+COtqP0vRkwtef27efy3tP/KEz0nv/u63f7/XfsfzlPDxZr8+ncHS1Unu1y0VnA1/zsAAAD4v0jz78An6cjNdJqOjDS+w78n7krrM7NzTx6feef0VOO78oPRl5YjXQPFeGh9ul4bS+aLT2yMj44XY8XleOmhYtz4055teX5kcqY+VXHs0O22tzn/M7/3VF07YI1tW3LteP+6VwSoQOs8ero4e+HVcDGAzcrvtaF73eH8T9erHsD6c/+H7rXU+X+hJW8uADYn93/oXs5/6FLpt1XXAKiQ+z90pdX8rn8NE1s3RjWqSWzURskTEWUi3RD1kVijRNVXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74JwAA///SqekQ") 2m48.151333819s ago: executing program 1 (id=1001): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x0, &(0x7f00000004c0), 0x0, 0x7, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x288ce, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3e47}, 0x94) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f1"], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9) 2m47.320454493s ago: executing program 1 (id=1009): r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0x1, 0xa85}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r2, @ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8}, 0x18) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1d, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000400), &(0x7f00000005c0)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0xfe8e, 0x12) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r9, 0x400, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x8000000ffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000000100)=0x0) timer_settime(r13, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r10, 0x0, r11, 0x0, 0x7ffff000, 0x100000000000000) 2m47.264893369s ago: executing program 32 (id=1009): r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0x1, 0xa85}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r2, @ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8}, 0x18) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1d, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000400), &(0x7f00000005c0)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0xfe8e, 0x12) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r9, 0x400, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x8000000ffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000000100)=0x0) timer_settime(r13, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r10, 0x0, r11, 0x0, 0x7ffff000, 0x100000000000000) 5.599404848s ago: executing program 5 (id=2851): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000004e00)={&(0x7f0000003c40)={0xa, 0x4e22, 0x43, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000004d80)=[@flowinfo={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x30}, 0x240000c0) 5.527090855s ago: executing program 5 (id=2852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)={[{@grpquota}, {@block_validity}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0xa, 0x5, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x32ef7) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401110016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8", 0x57}], 0x1, 0x0, 0x0, 0x7400}, 0x0) set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0xff03, 0x3c8, 0x1f8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0xff, 0x0, 0x0, 0xff, 0x1fe]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x0, 0x6, 0x3, 0x8, 0x1000, 'nr0\x00', 'vlan1\x00', {0xff}, {}, 0x0, 0x400}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@broadcast, @private=0xa010102, 0xff, 0x0, 0x8, 0xd, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x5, 0x9, 0xffff, 0x8, 0x65c, 'veth0_to_bond\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x488}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @remote, 0x4}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@multicast, {[0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x9ee8, 0x4f, 0x4, 0xfff, 0x2, 0x1, 'veth0_to_batadv\x00', 'rose0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x78, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10) 5.318248827s ago: executing program 5 (id=2854): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f00000001c0), 0x37) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r7, 0x0, 0x40008003}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 5.179289351s ago: executing program 5 (id=2855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00022abd7000fedbdf250600000006001a004e2400000c001000000000000000000014001f00fe8000000000000000000000000000bb08000b000200000006001b004e2400000c000f000600000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8064}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.59660376s ago: executing program 5 (id=2861): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, 0x0, 0x240000c0) 4.515149239s ago: executing program 5 (id=2862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="993b972bf7e4b64b3e102589970b43b82e2e15d1fcf90548751106d02393741f13ebef9c8fcdce6b8653bab9c3cebbd444d50177c886cd421d72b64c63c3e1af4ac299b450a5954b5538f88897e1b008024954a7865926eb620a3f7318a314fc7912d5cb5486d920ccb8e5592b80ae916eb16aff373c097df7037f54d6b1760b6dee1a725129bb2e89cc804b3d864e11a0ab2a6169431b5234cf52dfcfb487d04e734a7470eddda688fddb84d2b0ab99c1731da488b2a1a3e2243cdf683ad4c0aba9f146d53560fa708ab11f2df7e8f0226b6527efe780a399b0686175", @ANYRES16=r1, @ANYBLOB="00022abd7000fedbdf250600000006001a004e2400000c001000000000000000000014001f00fe8000000000000000000000000000bb08000b000200000006001b004e2400000c000f000600000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8064}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000580), r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) close(r5) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000c00)={0x1ff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="2800000020200000000000004579808a7342739e7c7ffbed28f1dc2497b312882363d6c54db9cc6555e8962569d70b0ec5d5bbc67650eea97ef357bf7a85e1075748287aaa21c54a2e1cacd8f14637be2340ae822007ee4b2f7e031320768b5e661a1900c26d28ff4b8d9bf8107871448e0908b6f98fc478411b4a535c500a7991be670de76e03653ba6", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x34, 0x0, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}}, 0x18) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r9, 0x0, 0x343}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.591408925s ago: executing program 0 (id=2892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000003c0)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") 2.262286469s ago: executing program 2 (id=2896): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) process_mrelease(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getpgrp(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000007c0)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./bus/file0\x00', 0x1100) 1.904402346s ago: executing program 4 (id=2901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="993b972bf7e4b64b3e102589970b43b82e2e15d1fcf90548751106d02393741f13ebef9c8fcdce6b8653bab9c3cebbd444d50177c886cd421d72b64c63c3e1af4ac299b450a5954b5538f88897e1b008024954a7865926eb620a3f7318a314fc7912d5cb5486d920ccb8e5592b80ae916eb16aff373c097df7037f54d6b1760b6dee1a725129bb2e89cc804b3d864e11a0ab2a6169431b5234cf52dfcfb487d04e734a7470eddda688fddb84d2b0ab99c1731da488b2a1a3e2243cdf683ad4c0aba9f146d53560fa708ab11f2df7e8f0", @ANYRES16=r1, @ANYBLOB="00022abd7000fedbdf250600000006001a004e2400000c001000000000000000000014001f00fe8000000000000000000000000000bb08000b000200000006001b004e2400000c000f000600000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8064}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.688439708s ago: executing program 0 (id=2907): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000001440)={[{@nombcache}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@jqfmt_vfsold}, {@quota}], [{@subj_type={'subj_type', 0x3d, '-'}}, {@smackfshat={'smackfshat', 0x3d, 'mb_optimize_scan'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'trusted.overlay.upper\x00'}}, {@fsname={'fsname', 0x3d, 'GPL\x00'}}]}, 0x2, 0x447, &(0x7f0000000500)="$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") sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f40)=ANY=[@ANYBLOB="b001000019000100"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x5, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000400), &(0x7f0000000640)=ANY=[@ANYBLOB="00fbaa010927ab381bda043c2a57e580e8b49a81b394531509b6f13a89b8891f9bfa66e00a7725f8b7561c35b0ee6d138930577d05e603b6f846bc7d4bdd05495ae283714a735da32c2d7be4f3955e2ed44279d8c75068b1f1ea46d8a4a5b9972630184c8a45e686a7a56e359db831d7d2ec4bc58bdafa993e7f3f7f6822d3df52b9136420091b9abcf3e0e158753d20d8dde2bfef6b194c8779577e869df3e4bf1972a8d16c66d69803f1e3e5fe086ad4b63b93c6a8eaa03623c27a0fc25110f5d9b1811b2aa135eebe6181e6bd93078e839f50f1a2fbc44abcbed43f162019c68f1ce7b04d8a79bc16efbf6686694a76cec3488e91bea93bc9ff0932b8288982452e4ce0b1899821700d0060a3a1177b8cb1e6791311a29a78506918ec1346a5b0e0fc356779c7626bd8d65a84857f643bbbdbb6bb96da4ddd5d9cc4efc3171f20bd43a81c23ceb4e4ed77a996d5d3b32f73694814a01f6378267e95ae3a9fb55a54742f19"], 0xaa, 0x3) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) io_setup(0x239f, &(0x7f0000000380)=0x0) r5 = eventfd2(0x5, 0x1) io_submit(r4, 0x5, &(0x7f0000001800)=[&(0x7f0000000d40)={0x0, 0x0, 0x0, 0x3, 0x3, r3, &(0x7f00000004c0)="26a35a90edbe", 0x6}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000000d80)="8a84e5950e02e411629be7b54a88f8f02ff7963b49f6c0b217e35e3965c32ac3c733257286e1c3f1860c1afd401542f11f2759862c284df83ac2c5587aacc8605e3f1491d0674444638f0ebc96fa96110739dc6d761b63d2d48ea91a0a75d797777dc9abe938879c70f293d9ced10832ab8c3a5222a214fa33e65477b0aa2085e624e890304ef60b7a3254ab52cf69ead026c94846813def18fc4dfaf823413136f8a46b2851085e7997ec8381558b363c6883c50a559fd25978ea7d5976921a7512fa78059e", 0xc6, 0xfffffffffffffff8, 0x0, 0x2}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x7, 0x1, r3, &(0x7f0000001340)="24ca6ca7443b02e7947eb3d1a01ea409d73a92c7648367f52df53fcf04cf5dff9bed4a4e97e5a345d7ff0d4a77cc037554836c3be0d9d9da807c2404d88c77ec7b633295304ecd1e53a53b79a1b6462f8bf34bde3d3661462d35cf0e978faf666465703fe884ab281589c32f0f0aa557590d079bbafe88f0b2e4ad518f4f6fed36a6c1d66b0c510581ce76df697d0eecac7e", 0x92, 0x0, 0x0, 0x2}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000016c0)="044c62be744d5061853df77ac52f5feba769c416e550a878d0e00092811fe9a8a064b08d509e71f2dc6a9050f9a16bf16329289b96d2699fa7df6dcc6e9e29682ee0c4ba3bc911d8d87278567ee91d1b32c105fc9036734bcdb1d2c1b4b46e938f494ed27e5ae6bd054e8ef7f98f86cc23b8431f1aee341e708f4f237ad227d108f741d92088ccfe8c4ce34cfb413118efca287e59724a20e9df4889b36dd82d9ce83138a3", 0xa5, 0x5, 0x0, 0x2, r5}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000001780)="f2b26c6b584f37e54c0648a13c89606e3f27c236524f94356a67157e4a9c808ff1fadd19ab4d1d0f920b94d9d7b93cdeadf0e93257af0dbb5eb6da9ce7e1cb1655137b5bc310eae9b95a4f7d287f21dbb985f11f6f5e214c6e2598407606fcf5b4a2482885ef617b88d52d8c7fd3d2d8b966e4ad8fc98a20ce", 0xffffffffffffff39, 0x8001, 0x0, 0x1}]) r6 = eventfd2(0x5, 0x80c01) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ec8ff90f4a8364c24900fa68b16f48bb88b488f1798bc3b139625bcad350e4522185b4e99b358a67ed2c453eb9d18d08ccc2bb47bab60dbe5e747fe5537812c0e045d346eedcd51b71313df6ff1e0e2c229627baa8ee26da4a521dcf840ecf4d3c5a16f5dcc467c0833e1e2318c8dc8c79adc0b83d0190b2db204827dec63e0cb587b87e993cf30e88a269f51f174e9b7af8058a761aed13dd5a4b2f0b6bfef14529846b5aec612ae35b09782dd906d64f0e0219832b5085a26667f7ee78f23a48402539e699cef1b5ecf4"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) io_submit(r4, 0x2, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000001540)="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", 0x16e, 0xfa37, 0x0, 0x1, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x7, r5, &(0x7f0000000280)="15fc1f75dbeb515b39328d6e6d3ecc33acf2cf2d7010f73a7923ef783b7594d25057486833a3a2212f2e3a6190d0638a42a37fbdb400cef2d13b003b4b918de7f1988fa273443f26c8b099895295320a0d6b9e9cf6632fa3ebe7191749da66ffd98b94e2734b3fc2996279ee25daf6ebdbeb1f7abf7b12fa5da669743f0052e66a5bfabf52ca460b1c9d50b79a06f4e7fb8b3864720dcf52d69f", 0x9a, 0x8000000000000000, 0x0, 0x2}]) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0xc}}], 0x2, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x12, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 1.559864911s ago: executing program 4 (id=2910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) 1.548658112s ago: executing program 3 (id=2911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000004c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ustat(0x8a1a, &(0x7f0000000500)) 1.487832628s ago: executing program 0 (id=2912): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='xen_mc_entry_alloc\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES8=r1], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x0) r3 = creat(0x0, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], &(0x7f00000002c0)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) openat(r3, &(0x7f0000000280)='./file1\x00', 0x2240, 0x180) syz_emit_ethernet(0xfa, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x4040001) fsync(r5) r6 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000fa03010000000000000000000500000a34000000030a050000000000000000000100000614000480080001400000feffffff024075a160470a000700726f757465000000140000001100010000000000000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) 1.409945056s ago: executing program 3 (id=2913): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa8000000001400078008001240000000000500150001000000050001000600000005000500020000000500040000000000090002007379"], 0x60}}, 0x0) 1.398614817s ago: executing program 2 (id=2914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='io_uring_complete\x00', r5}, 0x18) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x6e2, 0x3900, 0x3, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000080), &(0x7f00000019c0)) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) preadv2(r4, 0x0, 0x0, 0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0900000002000000040000000c00000000000000", @ANYRES32=r9, @ANYBLOB="0017d138f2d2d25839fdf2780000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00'}, 0x18) syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x5, 0xd6}, &(0x7f0000000100), &(0x7f00000000c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010026bd7000d6dbdf250900020073797a3100000010080041007278650014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.393739938s ago: executing program 4 (id=2915): socket(0x2b, 0x80801, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.326019945s ago: executing program 3 (id=2916): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') 1.315471926s ago: executing program 0 (id=2917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000003c0)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") 1.228216495s ago: executing program 3 (id=2918): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) 1.213518536s ago: executing program 3 (id=2919): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='xen_mc_entry_alloc\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES8=r1], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x0) r3 = creat(0x0, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYBLOB="0000000000000000b7080000"], &(0x7f00000002c0)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) openat(r3, &(0x7f0000000280)='./file1\x00', 0x2240, 0x180) syz_emit_ethernet(0xfa, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x4040001) fsync(r5) r6 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000fa03010000000000000000000500000a34000000030a050000000000000000000100000614000480080001400000feffffff024075a160470a000700726f757465000000140000001100010000000000000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) 1.162745712s ago: executing program 4 (id=2920): r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0x1, 0xa85}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r2, @ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000400), &(0x7f00000005c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000000100)=0x0) timer_settime(r10, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r7, 0x0, r8, 0x0, 0x7ffff000, 0x100000000000000) 1.113041957s ago: executing program 3 (id=2921): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 509.164018ms ago: executing program 2 (id=2923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000004c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ustat(0x8a1a, &(0x7f0000000500)) 484.738851ms ago: executing program 2 (id=2924): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 421.765947ms ago: executing program 0 (id=2925): fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/softnet_stat\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') fcntl$notify(r1, 0x402, 0xc0000001) getdents64(r0, &(0x7f0000000140)=""/208, 0xd0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00eacec1576e1f409058762b7e200300000000000000000006000000000000000000faffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000040)="c5c849197767ac03e0b3363f2290040000200000650000000000a3eeaca43e", &(0x7f0000000380)=""/50}, 0x20) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) setns(r5, 0x66020000) syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0) 420.913167ms ago: executing program 2 (id=2926): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa8000000001400078008001240000000000500150001000000050001000600000005000500020000000500040000000000090002007379"], 0x60}}, 0x0) 386.349131ms ago: executing program 2 (id=2927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="993b972bf7e4b64b3e102589970b43b82e2e15d1fcf90548751106d02393741f13ebef9c8fcdce6b8653bab9c3cebbd444d50177c886cd421d72b64c63c3e1af4ac299b450a5954b5538f88897e1b008024954a7865926eb620a3f7318a314fc7912d5cb5486d920ccb8e5592b80ae916eb16aff373c097df7037f54d6b1760b6dee1a725129bb2e89cc804b3d864e11a0ab2a6169431b5234cf52dfcfb487d04e734a7470eddda688fddb84d2b0ab99c1731da488b2a1a3e2243cdf683ad4c0aba9", @ANYRES16=r1, @ANYBLOB="00022abd7000fedbdf250600000006001a004e2400000c001000000000000000000014001f00fe8000000000000000000000000000bb08000b000200000006001b004e2400000c000f000600000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8064}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 284.890771ms ago: executing program 4 (id=2928): fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/softnet_stat\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') fcntl$notify(r1, 0x402, 0xc0000001) getdents64(r0, &(0x7f0000000140)=""/208, 0xd0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00eacec1576e1f409058762b7e200300000000000000000006000000000000000000faffffff", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000040)="c5c849197767ac03e0b3363f2290040000200000650000000000a3eeaca43e", &(0x7f0000000380)=""/50}, 0x20) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) setns(r5, 0x66020000) syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0) 84.547372ms ago: executing program 0 (id=2929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 0s ago: executing program 4 (id=2930): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = syz_io_uring_setup(0x893, &(0x7f0000000380)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000240)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, 0x0, 0x64, 0x0, 0x12345, {0x0, r4}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0x4}, 0x18) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r11, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r12}}], 0x20, 0x2400e044}, 0x0) kernel console output (not intermixed with test programs): 232.339980][T10559] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.357025][T10553] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #13: comm syz.2.2320: mark_inode_dirty error [ 232.390991][T10553] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2320: corrupted inode contents [ 232.403400][T10553] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.2320: mark_inode_dirty error [ 232.416361][T10553] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2320: corrupted inode contents [ 232.431779][T10559] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.442268][T10553] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 232.451093][T10553] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2320: corrupted inode contents [ 232.490400][T10553] EXT4-fs error (device loop2): ext4_truncate:4635: inode #13: comm syz.2.2320: mark_inode_dirty error [ 232.501931][T10553] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 232.534817][T10553] EXT4-fs (loop2): 1 truncate cleaned up [ 232.541373][T10553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.557422][T10559] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.629955][T10553] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 232.646755][ T1405] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.658450][ T1405] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.675253][ T1405] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.693986][ T1405] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.727663][T10573] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.750103][T10576] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2329: Failed to acquire dquot type 0 [ 232.762324][T10576] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 232.777524][T10576] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2329: corrupted inode contents [ 232.790106][T10576] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #13: comm syz.4.2329: mark_inode_dirty error [ 232.802104][T10576] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2329: corrupted inode contents [ 232.815380][T10576] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2329: mark_inode_dirty error [ 232.829177][T10576] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2329: corrupted inode contents [ 232.842162][T10578] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10578 comm=syz.5.2330 [ 232.854972][T10576] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 232.866995][T10576] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2329: corrupted inode contents [ 232.879520][T10576] EXT4-fs error (device loop4): ext4_truncate:4635: inode #13: comm syz.4.2329: mark_inode_dirty error [ 232.896044][T10576] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 232.905690][T10576] EXT4-fs (loop4): 1 truncate cleaned up [ 232.912244][T10576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.927254][T10576] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 232.939587][T10584] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 232.952262][T10584] EXT4-fs (loop5): 1 truncate cleaned up [ 232.958287][T10584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.993951][ T6446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.105969][T10589] IPVS: set_ctl: invalid protocol: 10 255.255.255.255:20003 [ 233.215653][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.252240][T10594] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.261528][T10594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.359054][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.445012][T10599] pimreg: entered allmulticast mode [ 233.462350][T10599] pimreg: left allmulticast mode [ 233.808822][T10615] lo speed is unknown, defaulting to 1000 [ 233.866280][T10618] set_capacity_and_notify: 8 callbacks suppressed [ 233.866294][T10618] loop2: detected capacity change from 0 to 512 [ 233.880461][T10618] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 233.917580][T10618] EXT4-fs (loop2): 1 truncate cleaned up [ 234.036550][T10624] IPVS: set_ctl: invalid protocol: 10 255.255.255.255:20003 [ 234.140505][T10629] loop4: detected capacity change from 0 to 512 [ 234.160203][T10629] ext4: Unknown parameter 'subj_type' [ 234.222791][T10629] loop4: detected capacity change from 0 to 512 [ 234.240216][T10629] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 234.265348][T10629] EXT4-fs (loop4): 1 truncate cleaned up [ 234.466853][T10637] option changes via remount are deprecated (pid=10631 comm=syz.5.2348) [ 234.475378][T10637] cgroup: option or name mismatch, new: 0x0 "kmem_cache_free", old: 0x0 "" [ 234.485742][T10636] loop2: detected capacity change from 0 to 2048 [ 234.526644][T10642] IPVS: set_ctl: invalid protocol: 10 255.255.255.255:20003 [ 234.556002][T10636] EXT4-fs (loop2): failed to initialize system zone (-117) [ 234.563366][T10636] EXT4-fs (loop2): mount failed [ 234.632300][T10649] lo speed is unknown, defaulting to 1000 [ 234.737665][T10662] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10662 comm=syz.2.2357 [ 234.766312][T10664] loop2: detected capacity change from 0 to 256 [ 234.874577][T10666] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10666 comm=syz.4.2359 [ 234.880100][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2358'. [ 234.896384][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2358'. [ 234.905359][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2358'. [ 234.925650][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2358'. [ 234.934720][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2358'. [ 234.943734][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2358'. [ 234.977924][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2358'. [ 234.986945][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2358'. [ 234.995889][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2358'. [ 235.397821][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 235.397836][ T29] audit: type=1326 audit(2000000342.446:10499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 235.417471][T10680] pimreg: entered allmulticast mode [ 235.436643][ T29] audit: type=1326 audit(2000000342.486:10500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 235.460405][ T29] audit: type=1326 audit(2000000342.486:10501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 235.484082][ T29] audit: type=1326 audit(2000000342.486:10502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 235.507724][ T29] audit: type=1326 audit(2000000342.486:10503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 235.531331][ T29] audit: type=1326 audit(2000000342.486:10504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 235.542984][T10682] loop3: detected capacity change from 0 to 4096 [ 235.555042][ T29] audit: type=1326 audit(2000000342.486:10505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4c6ad5f783 code=0x7ffc0000 [ 235.585300][T10683] pimreg: left allmulticast mode [ 235.592928][ T29] audit: type=1326 audit(2000000342.536:10506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c6ad5e1ff code=0x7ffc0000 [ 235.616425][ T29] audit: type=1326 audit(2000000342.566:10507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4c6ad5f7d7 code=0x7ffc0000 [ 235.616466][ T29] audit: type=1326 audit(2000000342.586:10508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c6ad5df90 code=0x7ffc0000 [ 235.641754][T10682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.769794][T10687] loop2: detected capacity change from 0 to 4096 [ 235.776996][T10687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.878476][T10692] lo speed is unknown, defaulting to 1000 [ 235.959418][T10701] loop2: detected capacity change from 0 to 1024 [ 235.968444][T10701] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2368: Failed to acquire dquot type 0 [ 235.980625][T10701] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 235.996710][T10701] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2368: corrupted inode contents [ 236.009386][T10701] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #13: comm syz.2.2368: mark_inode_dirty error [ 236.021319][T10701] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2368: corrupted inode contents [ 236.034007][T10701] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.2368: mark_inode_dirty error [ 236.045774][T10701] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2368: corrupted inode contents [ 236.058097][T10701] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 236.066988][T10701] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2368: corrupted inode contents [ 236.079539][T10701] EXT4-fs error (device loop2): ext4_truncate:4635: inode #13: comm syz.2.2368: mark_inode_dirty error [ 236.107269][T10701] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 236.110424][T10709] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2371'. [ 236.117483][T10701] EXT4-fs (loop2): 1 truncate cleaned up [ 236.142705][T10701] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 236.169267][T10709] loop4: detected capacity change from 0 to 512 [ 236.204130][T10709] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.233597][T10719] loop5: detected capacity change from 0 to 1024 [ 236.240918][T10719] EXT4-fs: Ignoring removed bh option [ 236.271897][T10719] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 236.287293][T10719] EXT4-fs (loop5): Remounting filesystem read-only [ 236.293839][T10719] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 236.310136][T10721] EXT4-fs (loop3): failed to initialize system zone (-117) [ 236.322410][T10721] EXT4-fs (loop3): mount failed [ 236.355258][T10731] IPVS: set_ctl: invalid protocol: 10 255.255.255.255:20003 [ 236.368656][T10733] IPVS: set_ctl: invalid protocol: 10 255.255.255.255:20003 [ 236.490829][T10745] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2385: Failed to acquire dquot type 0 [ 236.503033][T10745] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 236.518006][T10745] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2385: corrupted inode contents [ 236.530304][T10745] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.2385: mark_inode_dirty error [ 236.541989][T10745] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2385: corrupted inode contents [ 236.554091][T10745] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2385: mark_inode_dirty error [ 236.566827][T10745] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2385: corrupted inode contents [ 236.579067][T10745] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 236.588128][T10745] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2385: corrupted inode contents [ 236.603544][T10745] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.2385: mark_inode_dirty error [ 236.614855][T10745] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 236.624179][T10745] EXT4-fs (loop5): 1 truncate cleaned up [ 236.718206][T10763] IPVS: set_ctl: invalid protocol: 10 255.255.255.255:20003 [ 236.747786][T10761] EXT4-fs (loop5): failed to initialize system zone (-117) [ 236.755441][T10761] EXT4-fs (loop5): mount failed [ 236.772980][T10768] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2394: Failed to acquire dquot type 0 [ 236.785883][T10768] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 236.804153][T10768] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2394: corrupted inode contents [ 236.816678][T10768] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #13: comm syz.2.2394: mark_inode_dirty error [ 236.828552][T10768] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2394: corrupted inode contents [ 236.840807][T10768] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.2394: mark_inode_dirty error [ 236.852416][T10768] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2394: corrupted inode contents [ 236.864995][T10768] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 236.873953][T10768] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2394: corrupted inode contents [ 236.886159][T10768] EXT4-fs error (device loop2): ext4_truncate:4635: inode #13: comm syz.2.2394: mark_inode_dirty error [ 236.897595][T10768] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 236.907033][T10768] EXT4-fs (loop2): 1 truncate cleaned up [ 236.915409][T10768] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 236.958065][T10776] lo speed is unknown, defaulting to 1000 [ 237.012598][T10785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.070030][T10794] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.379625][T10821] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.754922][T10857] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.766893][T10857] EXT4-fs (loop2): 1 truncate cleaned up [ 237.826745][ T6400] page_pool_release_retry() stalled pool shutdown: id 56, 1 inflight 60 sec [ 237.845475][T10860] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10860 comm=syz.2.2426 [ 237.893862][T10866] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.928772][T10866] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.989351][T10866] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.049109][T10866] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.128954][ T2276] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.143882][ T1405] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.158781][ T1405] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.173756][ T1405] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.210282][T10874] IPVS: set_ctl: invalid protocol: 10 255.255.255.255:20003 [ 238.272601][T10884] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.388259][T10884] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.442238][T10889] EXT4-fs (loop4): failed to initialize system zone (-117) [ 238.459079][T10884] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.461338][T10889] EXT4-fs (loop4): mount failed [ 238.478507][T10885] lo speed is unknown, defaulting to 1000 [ 238.516872][T10884] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.570025][T10897] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10897 comm=syz.4.2439 [ 238.593106][T10901] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.607569][ T1405] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.620025][T10902] FAULT_INJECTION: forcing a failure. [ 238.620025][T10902] name failslab, interval 1, probability 0, space 0, times 0 [ 238.632878][T10902] CPU: 0 UID: 0 PID: 10902 Comm: syz.0.2438 Not tainted syzkaller #0 PREEMPT(voluntary) [ 238.632944][T10902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.632962][T10902] Call Trace: [ 238.632970][T10902] [ 238.632980][T10902] __dump_stack+0x1d/0x30 [ 238.633014][T10902] dump_stack_lvl+0x95/0xd0 [ 238.633110][T10902] dump_stack+0x15/0x1b [ 238.633171][T10902] should_fail_ex+0x265/0x280 [ 238.633199][T10902] should_failslab+0x8c/0xb0 [ 238.633220][T10902] kmem_cache_alloc_noprof+0x69/0x4b0 [ 238.633240][T10902] ? alloc_empty_file+0x76/0x200 [ 238.633267][T10902] alloc_empty_file+0x76/0x200 [ 238.633332][T10902] path_openat+0x63/0x23b0 [ 238.633370][T10902] ? __rcu_read_unlock+0x34/0x70 [ 238.633392][T10902] ? filemap_map_pages+0xc0e/0xe50 [ 238.633421][T10902] ? css_rstat_updated+0xbb/0x280 [ 238.633540][T10902] ? kstrtouint+0x76/0xc0 [ 238.633565][T10902] do_filp_open+0x109/0x230 [ 238.633617][T10902] do_sys_openat2+0xa6/0x150 [ 238.633680][T10902] __x64_sys_openat+0xf2/0x120 [ 238.633715][T10902] x64_sys_call+0x2b07/0x3000 [ 238.633743][T10902] do_syscall_64+0xca/0x2b0 [ 238.633839][T10902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.633865][T10902] RIP: 0033:0x7f268d9fdf90 [ 238.633883][T10902] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 238.633989][T10902] RSP: 002b:00007f268c41cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 238.634014][T10902] RAX: ffffffffffffffda RBX: 0000000000103301 RCX: 00007f268d9fdf90 [ 238.634036][T10902] RDX: 0000000000103301 RSI: 00007f268c41cc10 RDI: 00000000ffffff9c [ 238.634048][T10902] RBP: 00007f268c41cc10 R08: 0000000000000000 R09: 0000000000000000 [ 238.634060][T10902] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 238.634083][T10902] R13: 00007f268dc56218 R14: 00007f268dc56180 R15: 00007ffd4282a5e8 [ 238.634105][T10902] [ 238.634506][ T1405] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.879942][ T2276] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.890331][T10901] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.927355][ T2276] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.040811][T10901] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.108687][T10901] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.781192][T10934] lo speed is unknown, defaulting to 1000 [ 240.048195][T10941] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.087589][T10943] set_capacity_and_notify: 10 callbacks suppressed [ 240.087608][T10943] loop3: detected capacity change from 0 to 2048 [ 240.107585][T10943] EXT4-fs (loop3): failed to initialize system zone (-117) [ 240.114939][T10943] EXT4-fs (loop3): mount failed [ 240.127548][T10941] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.200657][T10941] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.290284][T10941] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.291339][T10961] option changes via remount are deprecated (pid=10956 comm=syz.4.2457) [ 240.308561][T10961] cgroup: option or name mismatch, new: 0x0 "kmem_cache_free", old: 0x0 "" [ 240.336343][T10959] lo speed is unknown, defaulting to 1000 [ 240.384581][ T1405] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.396536][ T1405] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.411346][ T1405] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.420027][ T1405] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.649573][T10975] __nla_validate_parse: 5 callbacks suppressed [ 240.649642][T10975] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2463'. [ 240.669022][T10975] loop3: detected capacity change from 0 to 512 [ 240.711001][T10975] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.721740][ T1038] page_pool_release_retry() stalled pool shutdown: id 57, 1 inflight 61 sec [ 240.990325][T10979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10979 comm=syz.0.2464 [ 241.049208][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 241.049294][ T29] audit: type=1326 audit(2000000348.096:10881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.0.2466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f268d9ff749 code=0x0 [ 241.107548][ T29] audit: type=1326 audit(2000000348.156:10882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.0.2466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f268d9ff749 code=0x0 [ 241.150684][ T29] audit: type=1326 audit(2000000348.196:10883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm="syz.4.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbda98f749 code=0x7ffc0000 [ 241.190811][ T29] audit: type=1326 audit(2000000348.196:10884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm="syz.4.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbda98f749 code=0x7ffc0000 [ 241.214481][ T29] audit: type=1326 audit(2000000348.196:10885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm="syz.4.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbda98f749 code=0x7ffc0000 [ 241.238233][ T29] audit: type=1326 audit(2000000348.196:10886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm="syz.4.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbda98f749 code=0x7ffc0000 [ 241.261921][ T29] audit: type=1326 audit(2000000348.196:10887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm="syz.4.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbda98f749 code=0x7ffc0000 [ 241.285576][ T29] audit: type=1326 audit(2000000348.196:10888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm="syz.4.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fdbda98f749 code=0x7ffc0000 [ 241.386115][T10990] loop5: detected capacity change from 0 to 1024 [ 241.438357][T10990] EXT4-fs: Ignoring removed bh option [ 241.499686][T10994] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.647083][T10996] lo speed is unknown, defaulting to 1000 [ 241.672336][T10994] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.728906][T10994] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.788788][T10994] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.874876][ T4762] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.900155][ T4762] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.918690][ T4762] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.927044][ T4762] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.998714][ T29] audit: type=1326 audit(2000000349.046:10889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.0.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268d9ff749 code=0x7ffc0000 [ 242.076592][ T29] audit: type=1326 audit(2000000349.086:10890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.0.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f268d9ff749 code=0x7ffc0000 [ 242.081662][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2471'. [ 242.313932][T11020] vlan2: entered allmulticast mode [ 242.700055][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.731546][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.764188][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.795196][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.803885][T11028] IPVS: Unknown mcast interface: hsr0 [ 242.814260][T11030] loop4: detected capacity change from 0 to 1024 [ 242.821396][T11030] EXT4-fs: Ignoring removed bh option [ 242.851388][T11025] lo speed is unknown, defaulting to 1000 [ 242.875055][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2481'. [ 242.934257][T11035] loop5: detected capacity change from 0 to 1024 [ 242.975574][T11038] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 242.994321][T11038] bond3 (unregistering): Released all slaves [ 243.007232][T11036] lo speed is unknown, defaulting to 1000 [ 243.055885][T11050] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.077867][T11052] loop3: detected capacity change from 0 to 4096 [ 243.085103][T11052] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.120934][T11050] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.204294][T11050] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.226636][T11059] loop2: detected capacity change from 0 to 8192 [ 243.312946][T11050] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.328396][T11071] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11071 comm=syz.0.2493 [ 243.455884][T11087] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2495'. [ 243.483385][ T4762] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.511714][ T4762] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.523843][T11087] loop2: detected capacity change from 0 to 512 [ 243.560949][ T4762] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.589881][T11091] loop4: detected capacity change from 0 to 2048 [ 243.591663][ T4762] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.620503][T11087] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.653495][T11091] EXT4-fs (loop4): failed to initialize system zone (-117) [ 243.661331][T11091] EXT4-fs (loop4): mount failed [ 243.716316][T11102] loop4: detected capacity change from 0 to 4096 [ 243.724243][T11102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.786241][T11105] lo speed is unknown, defaulting to 1000 [ 243.821330][T11105] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 243.832764][T11105] EXT4-fs (loop3): 1 truncate cleaned up [ 243.861881][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2502'. [ 244.057222][T11112] /dev/loop5: Can't open blockdev [ 244.313463][T11127] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2511: Failed to acquire dquot type 0 [ 244.325584][T11127] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 244.340697][T11127] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2511: corrupted inode contents [ 244.352931][T11127] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #13: comm syz.4.2511: mark_inode_dirty error [ 244.365298][T11127] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2511: corrupted inode contents [ 244.377874][T11127] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2511: mark_inode_dirty error [ 244.390319][T11132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2512'. [ 244.399524][T11132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2512'. [ 244.408522][T11132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2512'. [ 244.417748][T11127] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2511: corrupted inode contents [ 244.430230][T11127] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 244.439128][T11127] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2511: corrupted inode contents [ 244.451641][T11127] EXT4-fs error (device loop4): ext4_truncate:4635: inode #13: comm syz.4.2511: mark_inode_dirty error [ 244.463148][T11127] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 244.473188][T11127] EXT4-fs (loop4): 1 truncate cleaned up [ 244.482003][T11132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2512'. [ 244.491105][T11132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2512'. [ 244.500768][T11127] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 244.510040][T11134] EXT4-fs (loop2): failed to initialize system zone (-117) [ 244.517897][T11134] EXT4-fs (loop2): mount failed [ 244.548455][T11142] EXT4-fs: Ignoring removed bh option [ 244.643099][T11155] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 244.654632][T11155] EXT4-fs (loop2): 1 truncate cleaned up [ 244.713655][T11161] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 244.739524][T11166] vlan2: entered allmulticast mode [ 245.015724][T11175] lo speed is unknown, defaulting to 1000 [ 245.161203][T11178] set_capacity_and_notify: 7 callbacks suppressed [ 245.161223][T11178] loop5: detected capacity change from 0 to 512 [ 245.267612][T11178] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 245.309537][T11182] loop3: detected capacity change from 0 to 1024 [ 245.359921][T11182] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2526: Failed to acquire dquot type 0 [ 245.373008][T11178] EXT4-fs (loop5): 1 truncate cleaned up [ 245.390908][T11182] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 245.413372][T11177] lo speed is unknown, defaulting to 1000 [ 245.424234][T11182] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2526: corrupted inode contents [ 245.467144][T11182] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.2526: mark_inode_dirty error [ 245.521468][T11182] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2526: corrupted inode contents [ 245.571213][T11182] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.2526: mark_inode_dirty error [ 245.583450][T11182] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2526: corrupted inode contents [ 245.595740][T11182] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 245.604489][T11182] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2526: corrupted inode contents [ 245.623800][T11188] loop4: detected capacity change from 0 to 1024 [ 245.630823][T11188] EXT4-fs: Ignoring removed bh option [ 245.660502][T11182] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.2526: mark_inode_dirty error [ 245.702964][T11182] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 245.742673][T11182] EXT4-fs (loop3): 1 truncate cleaned up [ 245.774062][T11182] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 245.783364][T11196] __nla_validate_parse: 5 callbacks suppressed [ 245.783383][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2529'. [ 245.851998][T11196] loop2: detected capacity change from 0 to 1024 [ 245.873172][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2531'. [ 245.932742][T11207] loop4: detected capacity change from 0 to 4096 [ 245.950604][T11211] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2533'. [ 245.960650][T11207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.021082][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 246.106064][T11214] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11214 comm=syz.2.2534 [ 246.141743][T11222] loop2: detected capacity change from 0 to 1024 [ 246.148736][T11222] EXT4-fs: Ignoring removed bh option [ 246.169854][T11219] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 246.201829][T11230] siw: device registration error -23 [ 246.395565][T11238] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2540'. [ 246.568913][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2543'. [ 246.795732][T11245] lo speed is unknown, defaulting to 1000 [ 246.857418][T11245] loop2: detected capacity change from 0 to 512 [ 246.865546][T11245] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 246.877614][T11245] EXT4-fs (loop2): 1 truncate cleaned up [ 246.956625][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 246.956648][ T29] audit: type=1326 audit(2000000353.986:11269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53410f749 code=0x7ffc0000 [ 246.986621][ T29] audit: type=1326 audit(2000000353.986:11270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53410f749 code=0x7ffc0000 [ 247.010461][ T29] audit: type=1326 audit(2000000353.986:11271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc53410f749 code=0x7ffc0000 [ 247.033984][ T29] audit: type=1326 audit(2000000353.986:11272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53410f749 code=0x7ffc0000 [ 247.057976][ T29] audit: type=1326 audit(2000000353.986:11273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc53410f749 code=0x7ffc0000 [ 247.081640][ T29] audit: type=1326 audit(2000000353.986:11274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc53410f783 code=0x7ffc0000 [ 247.186696][ T29] audit: type=1326 audit(2000000354.196:11275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc53410e1ff code=0x7ffc0000 [ 247.228176][T11250] loop5: detected capacity change from 0 to 4096 [ 247.240742][T11250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.247846][ T29] audit: type=1326 audit(2000000354.276:11276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc53410f7d7 code=0x7ffc0000 [ 247.271682][ T29] audit: type=1326 audit(2000000354.276:11277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc53410df90 code=0x7ffc0000 [ 247.295392][ T29] audit: type=1326 audit(2000000354.276:11278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc53410f34b code=0x7ffc0000 [ 247.340726][T11252] lo speed is unknown, defaulting to 1000 [ 247.450626][T11256] lo speed is unknown, defaulting to 1000 [ 247.854483][T11268] loop3: detected capacity change from 0 to 8192 [ 247.910969][T11273] vlan2: entered allmulticast mode [ 247.993734][T11276] loop3: detected capacity change from 0 to 512 [ 248.005060][T11276] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 248.019987][T11278] FAULT_INJECTION: forcing a failure. [ 248.019987][T11278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.033352][T11278] CPU: 0 UID: 0 PID: 11278 Comm: syz.5.2554 Not tainted syzkaller #0 PREEMPT(voluntary) [ 248.033410][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.033435][T11278] Call Trace: [ 248.033448][T11278] [ 248.033458][T11278] __dump_stack+0x1d/0x30 [ 248.033517][T11278] dump_stack_lvl+0x95/0xd0 [ 248.033541][T11278] dump_stack+0x15/0x1b [ 248.033561][T11278] should_fail_ex+0x265/0x280 [ 248.033649][T11278] should_fail+0xb/0x20 [ 248.033751][T11278] should_fail_usercopy+0x1a/0x20 [ 248.033778][T11278] _copy_from_user+0x1c/0xb0 [ 248.033839][T11278] do_handle_open+0x3da/0x710 [ 248.033877][T11278] __x64_sys_open_by_handle_at+0x44/0x50 [ 248.033938][T11278] x64_sys_call+0x2b6a/0x3000 [ 248.034026][T11278] do_syscall_64+0xca/0x2b0 [ 248.034064][T11278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.034158][T11278] RIP: 0033:0x7fc53410f749 [ 248.034173][T11278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.034193][T11278] RSP: 002b:00007fc532b77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 248.034217][T11278] RAX: ffffffffffffffda RBX: 00007fc534365fa0 RCX: 00007fc53410f749 [ 248.034231][T11278] RDX: 0000000000408100 RSI: 0000200000000100 RDI: 0000000000000005 [ 248.034267][T11278] RBP: 00007fc532b77090 R08: 0000000000000000 R09: 0000000000000000 [ 248.034280][T11278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.034300][T11278] R13: 00007fc534366038 R14: 00007fc534365fa0 R15: 00007ffc847b1c38 [ 248.034325][T11278] [ 248.035984][T11276] EXT4-fs (loop3): 1 truncate cleaned up [ 248.221220][T11282] msdos: Unknown parameter 'dqbug' [ 248.256043][T11283] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 248.281556][T11285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.323720][T11283] EXT4-fs (loop4): 1 truncate cleaned up [ 248.362486][T11280] lo speed is unknown, defaulting to 1000 [ 248.499844][T11296] FAULT_INJECTION: forcing a failure. [ 248.499844][T11296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.512984][T11296] CPU: 1 UID: 0 PID: 11296 Comm: syz.3.2559 Not tainted syzkaller #0 PREEMPT(voluntary) [ 248.513020][T11296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.513060][T11296] Call Trace: [ 248.513069][T11296] [ 248.513079][T11296] __dump_stack+0x1d/0x30 [ 248.513111][T11296] dump_stack_lvl+0x95/0xd0 [ 248.513134][T11296] dump_stack+0x15/0x1b [ 248.513154][T11296] should_fail_ex+0x265/0x280 [ 248.513184][T11296] should_fail+0xb/0x20 [ 248.513256][T11296] should_fail_usercopy+0x1a/0x20 [ 248.513289][T11296] _copy_from_user+0x1c/0xb0 [ 248.513321][T11296] do_handle_open+0x3da/0x710 [ 248.513360][T11296] __x64_sys_open_by_handle_at+0x44/0x50 [ 248.513473][T11296] x64_sys_call+0x2b6a/0x3000 [ 248.513501][T11296] do_syscall_64+0xca/0x2b0 [ 248.513540][T11296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.513569][T11296] RIP: 0033:0x7f4c6ad5f749 [ 248.513653][T11296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.513695][T11296] RSP: 002b:00007f4c697bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 248.513714][T11296] RAX: ffffffffffffffda RBX: 00007f4c6afb5fa0 RCX: 00007f4c6ad5f749 [ 248.513728][T11296] RDX: 0000000000408100 RSI: 0000200000000100 RDI: 0000000000000005 [ 248.513804][T11296] RBP: 00007f4c697bf090 R08: 0000000000000000 R09: 0000000000000000 [ 248.513820][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.513837][T11296] R13: 00007f4c6afb6038 R14: 00007f4c6afb5fa0 R15: 00007ffcccb9c448 [ 248.513924][T11296] [ 248.677189][T11297] option changes via remount are deprecated (pid=11293 comm=syz.2.2558) [ 248.685604][T11297] cgroup: option or name mismatch, new: 0x0 "kmem_cache_free", old: 0x0 "" [ 249.195279][T11311] vlan2: entered allmulticast mode [ 249.221240][T11313] siw: device registration error -23 [ 249.461158][T11322] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.482037][ T3323] EXT4-fs unmount: 72 callbacks suppressed [ 249.482055][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.519201][T11320] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11320 comm=syz.0.2568 [ 249.548495][T11322] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.581116][T11326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.600140][T11322] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.638961][T11326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.690103][T11322] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.739856][T11332] pimreg: entered allmulticast mode [ 249.745692][T11332] pimreg: left allmulticast mode [ 249.770176][ T1405] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.789281][ T1405] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.832950][ T1405] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.842949][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.873427][ T1405] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.970183][T11327] lo speed is unknown, defaulting to 1000 [ 250.025373][T11334] lo speed is unknown, defaulting to 1000 [ 250.133768][T11339] lo speed is unknown, defaulting to 1000 [ 250.313259][T11351] siw: device registration error -23 [ 250.355027][T11352] option changes via remount are deprecated (pid=11348 comm=syz.3.2576) [ 250.363587][T11352] cgroup: option or name mismatch, new: 0x0 "kmem_cache_free", old: 0x0 "" [ 250.456073][T11358] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 250.472968][T11360] option changes via remount are deprecated (pid=11355 comm=syz.4.2579) [ 250.481743][T11360] cgroup: option or name mismatch, new: 0x0 "kmem_cache_free", old: 0x0 "" [ 250.784085][T11364] set_capacity_and_notify: 4 callbacks suppressed [ 250.784098][T11364] loop5: detected capacity change from 0 to 256 [ 250.797387][T11364] vfat: Unknown parameter './file0' [ 250.806213][T11364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.816456][T11366] loop2: detected capacity change from 0 to 764 [ 250.824067][T11366] rock: directory entry would overflow storage [ 250.830296][T11366] rock: sig=0x4654, size=5, remaining=4 [ 250.913845][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2587'. [ 250.927362][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2587'. [ 251.082257][T11382] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11382 comm=syz.2.2588 [ 251.207016][T11385] loop2: detected capacity change from 0 to 8192 [ 251.230409][T11387] lo speed is unknown, defaulting to 1000 [ 251.523844][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'. [ 251.598114][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2595'. [ 251.615084][T11400] loop3: detected capacity change from 0 to 1024 [ 251.636022][T11400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.667146][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.858887][T11406] lo speed is unknown, defaulting to 1000 [ 251.999240][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 251.999257][ T29] audit: type=1326 audit(2000000359.046:11462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11415 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 252.054927][ T29] audit: type=1326 audit(2000000359.046:11463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11415 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 252.078638][ T29] audit: type=1326 audit(2000000359.046:11464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11415 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 252.102703][ T29] audit: type=1326 audit(2000000359.086:11465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11415 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 252.126274][ T29] audit: type=1326 audit(2000000359.086:11466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11415 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 252.149952][ T29] audit: type=1326 audit(2000000359.086:11467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11415 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 252.208878][T11430] loop3: detected capacity change from 0 to 1024 [ 252.218617][T11430] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 252.227912][T11430] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 252.237412][T11430] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2606: Failed to acquire dquot type 0 [ 252.271454][T11430] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 252.327749][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'. [ 252.356728][T11433] loop4: detected capacity change from 0 to 1024 [ 252.366572][T11430] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2606: corrupted inode contents [ 252.378997][T11430] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.2606: mark_inode_dirty error [ 252.381564][T11433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.390790][T11430] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2606: corrupted inode contents [ 252.414752][T11430] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.2606: mark_inode_dirty error [ 252.443395][T11430] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2606: corrupted inode contents [ 252.456712][T11430] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 252.465497][T11430] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2606: corrupted inode contents [ 252.477838][T11430] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.2606: mark_inode_dirty error [ 252.489257][T11430] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 252.491014][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.514141][T11437] loop5: detected capacity change from 0 to 2048 [ 252.516720][T11430] EXT4-fs (loop3): 1 truncate cleaned up [ 252.535653][T11439] FAULT_INJECTION: forcing a failure. [ 252.535653][T11439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.537787][T11430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.548858][T11439] CPU: 1 UID: 0 PID: 11439 Comm: syz.4.2609 Not tainted syzkaller #0 PREEMPT(voluntary) [ 252.548954][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.549020][T11439] Call Trace: [ 252.549066][T11439] [ 252.549172][T11439] __dump_stack+0x1d/0x30 [ 252.549270][T11439] dump_stack_lvl+0x95/0xd0 [ 252.549343][T11439] dump_stack+0x15/0x1b [ 252.549408][T11439] should_fail_ex+0x265/0x280 [ 252.549490][T11439] should_fail+0xb/0x20 [ 252.549584][T11439] should_fail_usercopy+0x1a/0x20 [ 252.549666][T11439] _copy_from_user+0x1c/0xb0 [ 252.549794][T11439] ___sys_sendmsg+0xc1/0x1d0 [ 252.550104][T11439] __sys_sendmmsg+0x178/0x300 [ 252.550250][T11439] __x64_sys_sendmmsg+0x57/0x70 [ 252.550354][T11439] x64_sys_call+0x1e28/0x3000 [ 252.550508][T11439] do_syscall_64+0xca/0x2b0 [ 252.550628][T11439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.550701][T11439] RIP: 0033:0x7fdbda98f749 [ 252.550756][T11439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.550838][T11439] RSP: 002b:00007fdbd93ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 252.550895][T11439] RAX: ffffffffffffffda RBX: 00007fdbdabe5fa0 RCX: 00007fdbda98f749 [ 252.550939][T11439] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 252.551015][T11439] RBP: 00007fdbd93ef090 R08: 0000000000000000 R09: 0000000000000000 [ 252.551051][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.551093][T11439] R13: 00007fdbdabe6038 R14: 00007fdbdabe5fa0 R15: 00007ffdc1e79b28 [ 252.551148][T11439] [ 252.641192][T11437] EXT4-fs (loop5): failed to initialize system zone (-117) [ 252.736756][T11437] EXT4-fs (loop5): mount failed [ 252.743309][T11430] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 252.823042][T11452] siw: device registration error -23 [ 252.911113][ T29] audit: type=1326 audit(2000000359.946:11468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11455 comm="syz.5.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53410f749 code=0x7ffc0000 [ 252.934815][ T29] audit: type=1326 audit(2000000359.946:11469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11455 comm="syz.5.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fc53410f749 code=0x7ffc0000 [ 252.989619][T11458] netlink: 'syz.5.2616': attribute type 12 has an invalid length. [ 253.027771][T11454] lo speed is unknown, defaulting to 1000 [ 253.047044][T11461] raw_sendmsg: syz.5.2617 forgot to set AF_INET. Fix it! [ 253.181032][T11465] lo speed is unknown, defaulting to 1000 [ 253.226119][T11464] loop5: detected capacity change from 0 to 1024 [ 253.277208][T11464] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2618: Failed to acquire dquot type 0 [ 253.308697][T11464] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 253.382814][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.402150][T11464] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2618: corrupted inode contents [ 253.481594][T11464] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.2618: mark_inode_dirty error [ 253.539887][T11464] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2618: corrupted inode contents [ 253.598311][T11464] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2618: mark_inode_dirty error [ 253.632210][T11470] loop4: detected capacity change from 0 to 4096 [ 253.646882][T11464] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2618: corrupted inode contents [ 253.659630][T11470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.688312][T11470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.711242][T11464] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 253.725726][T11464] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2618: corrupted inode contents [ 253.756806][T11464] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.2618: mark_inode_dirty error [ 253.779990][T11464] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 253.802538][T11464] EXT4-fs (loop5): 1 truncate cleaned up [ 253.822140][T11464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.850445][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.874999][T11464] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 253.920330][T11483] loop4: detected capacity change from 0 to 2048 [ 253.930222][T11486] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.958974][T11483] EXT4-fs (loop4): failed to initialize system zone (-117) [ 253.966263][T11483] EXT4-fs (loop4): mount failed [ 253.988989][T11486] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.049266][T11486] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.053496][T11498] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 254.129004][T11486] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.217688][ T1405] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.225977][ T1405] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.234775][ T1405] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.243352][ T1405] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.300763][T11504] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.308232][T11504] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.327631][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2632'. [ 254.361163][T11504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.371114][T11504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.395898][T11504] bond1: left promiscuous mode [ 254.402043][T11504] vlan1: left allmulticast mode [ 254.409531][ T3901] syb2: Port: 1 Link DOWN [ 254.409580][ T1405] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.433428][ T1405] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.448982][ T6446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.462388][ T1405] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.480846][ T1405] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.570274][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2634'. [ 254.607124][T11515] loop5: p1 p2 p4 [ 254.611095][T11515] loop5: p1 start 4227858436 is beyond EOD, truncated [ 254.617920][T11515] loop5: p2 start 4259584 is beyond EOD, truncated [ 254.624472][T11515] loop5: p4 start 2147483392 is beyond EOD, truncated [ 254.643538][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2633'. [ 254.867915][T11531] EXT4-fs (loop3): failed to initialize system zone (-117) [ 254.883547][T11531] EXT4-fs (loop3): mount failed [ 255.070922][T11541] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2641'. [ 255.314757][T11549] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2644: Failed to acquire dquot type 0 [ 255.396561][T11549] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 255.416634][T11549] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2644: corrupted inode contents [ 255.429676][T11549] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.2644: mark_inode_dirty error [ 255.431924][T11556] option changes via remount are deprecated (pid=11553 comm=syz.5.2646) [ 255.449693][T11556] cgroup: option or name mismatch, new: 0x0 "kmem_cache_free", old: 0x0 "" [ 255.461144][T11549] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2644: corrupted inode contents [ 255.476830][T11549] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.2644: mark_inode_dirty error [ 255.512446][T11549] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2644: corrupted inode contents [ 255.536584][T11549] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 255.591857][T11549] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2644: corrupted inode contents [ 255.626383][T11549] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.2644: mark_inode_dirty error [ 255.656136][T11549] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 255.666441][T11549] EXT4-fs (loop3): 1 truncate cleaned up [ 255.672800][T11549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.688644][T11549] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 255.723844][T11568] ext4: Unknown parameter 'subj_type' [ 255.748750][T11568] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 255.762546][T11568] EXT4-fs (loop4): 1 truncate cleaned up [ 255.769013][T11568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.892509][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.919351][T11572] set_capacity_and_notify: 5 callbacks suppressed [ 255.919388][T11572] loop4: detected capacity change from 0 to 512 [ 255.934929][T11572] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.2652: invalid block [ 255.948049][T11572] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2652: invalid indirect mapped block 4294967295 (level 1) [ 255.962554][T11572] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2652: invalid indirect mapped block 4294967295 (level 1) [ 255.978010][T11572] EXT4-fs (loop4): 2 truncates cleaned up [ 255.984288][T11572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.028873][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.061678][T11577] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2654'. [ 256.161967][T11579] lo speed is unknown, defaulting to 1000 [ 256.216798][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.278662][T11596] loop2: detected capacity change from 0 to 512 [ 256.335104][T11596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 256.337535][T11592] lo speed is unknown, defaulting to 1000 [ 256.381999][T11596] EXT4-fs (loop2): 1 truncate cleaned up [ 256.398640][T11596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.448320][T11605] loop4: detected capacity change from 0 to 512 [ 256.455570][T11605] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 256.473103][T11607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2667'. [ 256.483854][T11605] EXT4-fs (loop4): 1 truncate cleaned up [ 256.490824][T11605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.516123][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.698933][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.889415][T11626] lo speed is unknown, defaulting to 1000 [ 256.996842][T11631] sit0: left allmulticast mode [ 257.007339][T11630] loop3: detected capacity change from 0 to 2048 [ 257.047588][T11631] vlan2: left allmulticast mode [ 257.052635][T11631] team1: left allmulticast mode [ 257.356892][T11634] loop5: detected capacity change from 0 to 1024 [ 257.488533][T11634] __quota_error: 149 callbacks suppressed [ 257.488550][T11634] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 257.503590][T11634] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 257.513102][T11634] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2676: Failed to acquire dquot type 0 [ 257.527846][T11625] lo speed is unknown, defaulting to 1000 [ 257.534287][T11630] EXT4-fs (loop3): failed to initialize system zone (-117) [ 257.542047][T11634] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 257.578152][T11630] EXT4-fs (loop3): mount failed [ 257.587445][T11634] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2676: corrupted inode contents [ 257.634987][T11634] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.2676: mark_inode_dirty error [ 257.656780][T11634] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2676: corrupted inode contents [ 257.681727][T11642] loop3: detected capacity change from 0 to 512 [ 257.698388][T11634] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2676: mark_inode_dirty error [ 257.722936][T11642] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 257.733912][T11634] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2676: corrupted inode contents [ 257.757446][T11642] EXT4-fs (loop3): 1 truncate cleaned up [ 257.763659][T11642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.807160][T11634] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 257.816400][T11634] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2676: corrupted inode contents [ 257.828716][T11634] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.2676: mark_inode_dirty error [ 257.866805][T11634] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 257.886988][T11634] EXT4-fs (loop5): 1 truncate cleaned up [ 257.893185][T11634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.927445][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.937163][T11634] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 258.041095][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2681'. [ 258.259894][T11654] lo speed is unknown, defaulting to 1000 [ 258.354984][T11668] loop3: detected capacity change from 0 to 8192 [ 258.461768][ T29] audit: type=1326 audit(2000000365.506:11615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.3.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 258.497641][ T29] audit: type=1326 audit(2000000365.506:11616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.3.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 258.521350][ T29] audit: type=1326 audit(2000000365.506:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.3.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 258.545096][ T29] audit: type=1326 audit(2000000365.506:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.3.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 258.614464][T11674] lo speed is unknown, defaulting to 1000 [ 258.652081][T11674] loop2: detected capacity change from 0 to 512 [ 258.683925][T11674] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 258.722232][ T6446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.777288][T11674] EXT4-fs (loop2): 1 truncate cleaned up [ 258.783532][T11674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.225556][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.294287][ T29] audit: type=1326 audit(2000000366.326:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.0.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268d9ff749 code=0x7ffc0000 [ 259.318073][ T29] audit: type=1326 audit(2000000366.326:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.0.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f268d9ff749 code=0x7ffc0000 [ 259.341878][ T29] audit: type=1326 audit(2000000366.326:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.0.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268d9ff749 code=0x7ffc0000 [ 259.365756][ T29] audit: type=1326 audit(2000000366.326:11622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.0.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f268d9ff749 code=0x7ffc0000 [ 259.374109][T11706] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11706 comm=syz.3.2700 [ 259.451908][T11709] loop2: detected capacity change from 0 to 1024 [ 259.460762][T11709] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2702: Failed to acquire dquot type 0 [ 259.500844][T11709] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 259.516266][T11709] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2702: corrupted inode contents [ 259.528793][T11709] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #13: comm syz.2.2702: mark_inode_dirty error [ 259.540988][T11709] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2702: corrupted inode contents [ 259.553144][T11709] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.2702: mark_inode_dirty error [ 259.565883][T11714] netlink: 148 bytes leftover after parsing attributes in process `+}[@'. [ 259.566452][T11707] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11707 comm=syz.4.2701 [ 259.594197][T11709] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2702: corrupted inode contents [ 259.622442][T11716] IPVS: nq: FWM 3 0x00000003 - no destination available [ 259.641491][T11709] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 259.659632][T11709] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2702: corrupted inode contents [ 259.692466][T11709] EXT4-fs error (device loop2): ext4_truncate:4635: inode #13: comm syz.2.2702: mark_inode_dirty error [ 259.694512][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2704'. [ 259.720533][T11709] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 259.739729][T11709] EXT4-fs (loop2): 1 truncate cleaned up [ 259.749361][T11709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.768024][T11709] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 260.070057][T11736] lo speed is unknown, defaulting to 1000 [ 260.104203][T11736] loop4: detected capacity change from 0 to 512 [ 260.167031][T11736] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 260.207490][T11736] EXT4-fs (loop4): 1 truncate cleaned up [ 260.213962][T11736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.309250][T11744] rdma_rxe: rxe_newlink: failed to add bond0 [ 260.357612][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.461868][T11747] vlan2: entered allmulticast mode [ 260.561456][T11753] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11753 comm=syz.2.2714 [ 260.634877][T11759] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2718: Failed to acquire dquot type 0 [ 260.647107][T11759] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 260.661994][T11759] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2718: corrupted inode contents [ 260.675109][T11759] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.2718: mark_inode_dirty error [ 260.687554][T11759] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2718: corrupted inode contents [ 260.699787][T11759] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2718: mark_inode_dirty error [ 260.715086][T11759] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2718: corrupted inode contents [ 260.745131][T11756] lo speed is unknown, defaulting to 1000 [ 260.751841][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.766368][T11759] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 260.787053][T11759] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2718: corrupted inode contents [ 260.836135][T11759] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.2718: mark_inode_dirty error [ 260.885915][T11759] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 260.906846][T11759] EXT4-fs (loop5): 1 truncate cleaned up [ 260.913308][T11759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.972800][T11759] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 260.999396][ T6446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.108502][T11767] lo speed is unknown, defaulting to 1000 [ 261.326124][T11783] lo speed is unknown, defaulting to 1000 [ 261.352280][T11767] chnl_net:caif_netlink_parms(): no params data found [ 261.513323][T11767] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.520531][T11767] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.557059][T11767] bridge_slave_0: entered allmulticast mode [ 261.608234][T11767] bridge_slave_0: entered promiscuous mode [ 261.615298][T11794] lo speed is unknown, defaulting to 1000 [ 261.626324][T11767] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.633501][T11767] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.668218][T11767] bridge_slave_1: entered allmulticast mode [ 261.674980][T11767] bridge_slave_1: entered promiscuous mode [ 261.738907][T11767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.772721][T11767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.846930][T11806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11806 comm=syz.3.2728 [ 261.886169][T11767] team0: Port device team_slave_0 added [ 261.928853][T11767] team0: Port device team_slave_1 added [ 261.948566][ T4762] bridge_slave_1: left allmulticast mode [ 261.954282][ T4762] bridge_slave_1: left promiscuous mode [ 261.960072][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.999340][ T4762] bridge_slave_0: left promiscuous mode [ 262.005151][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.070858][ T4762] dvmrp8 (unregistering): left allmulticast mode [ 262.087202][ T4762] team0: Port device bridge0 removed [ 262.118349][ T4762] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.142082][ T4762] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.163141][ T4762] .` (unregistering): Released all slaves [ 262.180600][ T4762] bond1 (unregistering): Released all slaves [ 262.235254][T11767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.242436][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.268443][T11767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.420490][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.428377][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.447003][ T4762] pimreg (unregistering): left allmulticast mode [ 262.606809][ T4762] team0 (unregistering): Port device team_slave_1 removed [ 262.626313][T11828] set_capacity_and_notify: 2 callbacks suppressed [ 262.626400][T11828] loop3: detected capacity change from 0 to 512 [ 262.640320][T11828] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 262.653416][T11828] EXT4-fs (loop3): 1 truncate cleaned up [ 262.659722][T11828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.672285][ T4762] team0 (unregistering): Port device team_slave_0 removed [ 262.757807][T11843] loop5: detected capacity change from 0 to 1024 [ 262.760033][T11767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.771777][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.797812][T11767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.827060][T11843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.865990][T11767] hsr_slave_0: entered promiscuous mode [ 262.877396][T11767] hsr_slave_1: entered promiscuous mode [ 262.887945][ T6446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.911028][T11827] lo speed is unknown, defaulting to 1000 [ 262.972375][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.011512][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 263.011531][ T29] audit: type=1326 audit(2000000370.056:11732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8557a2f749 code=0x7ffc0000 [ 263.026715][T11824] lo speed is unknown, defaulting to 1000 [ 263.056729][ T29] audit: type=1326 audit(2000000370.096:11733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8557a2f749 code=0x7ffc0000 [ 263.080620][ T29] audit: type=1326 audit(2000000370.096:11734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8557a2f749 code=0x7ffc0000 [ 263.104269][ T29] audit: type=1326 audit(2000000370.096:11735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8557a2f749 code=0x7ffc0000 [ 263.127905][ T29] audit: type=1326 audit(2000000370.096:11736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8557a2f749 code=0x7ffc0000 [ 263.151673][ T29] audit: type=1326 audit(2000000370.096:11737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8557a2f749 code=0x7ffc0000 [ 263.175286][ T29] audit: type=1326 audit(2000000370.096:11738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8557a2f749 code=0x7ffc0000 [ 263.186612][T11851] loop2: detected capacity change from 0 to 4096 [ 263.199009][ T29] audit: type=1326 audit(2000000370.096:11739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8557a2f749 code=0x7ffc0000 [ 263.218981][T11851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.228972][ T29] audit: type=1326 audit(2000000370.096:11740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8557a2f783 code=0x7ffc0000 [ 263.297964][T11851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.307350][ T29] audit: type=1326 audit(2000000370.156:11741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8557a2e1ff code=0x7ffc0000 [ 263.409318][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2747'. [ 263.484529][ T4762] IPVS: stop unused estimator thread 0... [ 263.495592][T11865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2748'. [ 263.638563][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.695635][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2750'. [ 263.728896][T11767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.739033][T11767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.751360][T11767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.789384][T11767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.869778][T11881] loop3: detected capacity change from 0 to 1024 [ 263.905868][T11881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.989359][T11767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.997947][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.013663][T11767] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.101492][T11896] loop2: detected capacity change from 0 to 1024 [ 264.114228][T11896] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2756: Failed to acquire dquot type 0 [ 264.128523][T11896] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 264.155870][T11896] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2756: corrupted inode contents [ 264.168421][T11888] lo speed is unknown, defaulting to 1000 [ 264.176017][T11896] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #13: comm syz.2.2756: mark_inode_dirty error [ 264.189046][ T1706] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.189746][T11896] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2756: corrupted inode contents [ 264.196115][ T1706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.210334][T11896] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.2756: mark_inode_dirty error [ 264.218811][ T1706] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.228117][T11896] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2756: corrupted inode contents [ 264.233574][ T1706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.246064][T11896] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 264.266889][T11896] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2756: corrupted inode contents [ 264.279037][T11896] EXT4-fs error (device loop2): ext4_truncate:4635: inode #13: comm syz.2.2756: mark_inode_dirty error [ 264.292127][T11896] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 264.306811][T11896] EXT4-fs (loop2): 1 truncate cleaned up [ 264.313069][T11896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.378902][T11896] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 264.444016][T11767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.739365][T11767] veth0_vlan: entered promiscuous mode [ 264.779572][T11767] veth1_vlan: entered promiscuous mode [ 264.795793][T11767] veth0_macvtap: entered promiscuous mode [ 264.850766][T11934] lo speed is unknown, defaulting to 1000 [ 264.886857][T11934] loop3: detected capacity change from 0 to 512 [ 264.896077][T11934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 264.909435][T11934] EXT4-fs (loop3): 1 truncate cleaned up [ 264.915591][T11934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.930717][T11767] veth1_macvtap: entered promiscuous mode [ 264.943118][T11767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.962590][T11767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.989124][ T187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.025769][ T187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.072240][ T187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.102539][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.127610][ T187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.167575][T11941] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 265.182588][T11944] loop5: detected capacity change from 0 to 512 [ 265.193183][T11944] ext4: Unknown parameter 'subj_type' [ 265.201664][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2766'. [ 265.235968][T11944] loop5: detected capacity change from 0 to 512 [ 265.243835][T11944] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 265.256353][T11944] EXT4-fs (loop5): 1 truncate cleaned up [ 265.262695][T11944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.417662][ T6446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.464387][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.485775][T11953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2765'. [ 265.608206][T11957] vlan2: entered allmulticast mode [ 265.674338][T11959] loop3: detected capacity change from 0 to 512 [ 265.683193][T11959] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 265.695653][T11959] EXT4-fs (loop3): 1 truncate cleaned up [ 265.702325][T11959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.733386][T11962] loop2: detected capacity change from 0 to 2048 [ 265.749691][T11962] EXT4-fs (loop2): failed to initialize system zone (-117) [ 265.759915][T11962] EXT4-fs (loop2): mount failed [ 265.770858][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.860876][T11977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2773'. [ 265.870225][T11977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2773'. [ 265.879441][T11977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2773'. [ 265.890349][T11976] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.905176][T11977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2773'. [ 265.914297][T11977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2773'. [ 265.978948][T11976] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.059873][T11976] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.109608][T11976] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.161245][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.174070][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.186189][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.199232][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.248498][T11995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.257717][T11995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.310163][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.399653][T12007] rock: directory entry would overflow storage [ 266.405882][T12007] rock: sig=0x4654, size=5, remaining=4 [ 266.448201][T12009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.479612][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.634929][T12025] pimreg: entered allmulticast mode [ 266.667317][T12025] pimreg: left allmulticast mode [ 267.227515][T12042] bond_slave_0: entered promiscuous mode [ 267.233289][T12042] bond_slave_1: entered promiscuous mode [ 267.238982][T12042] dummy0: entered promiscuous mode [ 267.290436][T12043] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2800: Failed to acquire dquot type 0 [ 267.304622][T12042] macvlan2: entered promiscuous mode [ 267.310005][T12042] bond0: entered promiscuous mode [ 267.317659][T12045] EXT4-fs (loop5): failed to initialize system zone (-117) [ 267.326209][T12043] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 267.349538][T12045] EXT4-fs (loop5): mount failed [ 267.364623][T12042] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 267.394128][T12043] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2800: corrupted inode contents [ 267.472099][T12043] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #13: comm syz.4.2800: mark_inode_dirty error [ 267.559687][T12043] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2800: corrupted inode contents [ 267.597208][T12043] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2800: mark_inode_dirty error [ 267.626871][T12043] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2800: corrupted inode contents [ 267.653855][T12043] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 267.662811][T12043] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2800: corrupted inode contents [ 267.678025][T12043] EXT4-fs error (device loop4): ext4_truncate:4635: inode #13: comm syz.4.2800: mark_inode_dirty error [ 267.689458][T12043] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 267.701009][T12043] EXT4-fs (loop4): 1 truncate cleaned up [ 267.709496][T12043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.730237][T12065] set_capacity_and_notify: 7 callbacks suppressed [ 267.730255][T12065] loop5: detected capacity change from 0 to 1024 [ 267.748003][T12043] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 267.771649][T12065] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2807: Failed to acquire dquot type 0 [ 267.791126][T12065] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 267.819729][T12067] pimreg: entered allmulticast mode [ 267.828975][T12065] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2807: corrupted inode contents [ 267.842766][T12065] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.2807: mark_inode_dirty error [ 267.850219][T12067] pimreg: left allmulticast mode [ 267.859301][T12065] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2807: corrupted inode contents [ 267.872058][T12065] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2807: mark_inode_dirty error [ 267.884177][T12065] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2807: corrupted inode contents [ 267.896525][T12065] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 267.905382][T12065] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2807: corrupted inode contents [ 267.917849][T12065] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.2807: mark_inode_dirty error [ 267.929409][T12065] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 267.938949][T12065] EXT4-fs (loop5): 1 truncate cleaned up [ 267.945250][T12065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.968295][T12065] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 268.109373][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 268.109393][ T29] audit: type=1326 audit(2000000375.156:11888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12072 comm="syz.0.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268d9ff749 code=0x7ffc0000 [ 268.139391][ T29] audit: type=1326 audit(2000000375.156:11889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12072 comm="syz.0.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268d9ff749 code=0x7ffc0000 [ 268.163092][ T29] audit: type=1326 audit(2000000375.156:11890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12072 comm="syz.0.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f268d9ff749 code=0x7ffc0000 [ 268.186916][ T29] audit: type=1326 audit(2000000375.156:11891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12072 comm="syz.0.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f268d9ff749 code=0x7ffc0000 [ 268.293566][T11767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.314833][ T29] audit: type=1326 audit(2000000375.356:11892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83cdf749 code=0x7ffc0000 [ 268.339355][ T29] audit: type=1326 audit(2000000375.356:11893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83cdf749 code=0x7ffc0000 [ 268.363183][ T29] audit: type=1326 audit(2000000375.356:11894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a83cdf749 code=0x7ffc0000 [ 268.386844][ T29] audit: type=1326 audit(2000000375.356:11895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83cdf749 code=0x7ffc0000 [ 268.388311][T12077] loop4: detected capacity change from 0 to 4096 [ 268.410737][ T29] audit: type=1326 audit(2000000375.356:11896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83cdf749 code=0x7ffc0000 [ 268.419287][T12077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.440725][ T29] audit: type=1326 audit(2000000375.356:11897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a83cdf749 code=0x7ffc0000 [ 268.476929][T12077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.506355][ T6446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.553279][T12082] loop5: detected capacity change from 0 to 1024 [ 268.573548][T12082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.602844][ T6446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.613474][T12090] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.633939][T11767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.703709][T12090] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.749433][T12094] loop5: detected capacity change from 0 to 2048 [ 268.761402][T12090] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.781416][T12094] EXT4-fs (loop5): failed to initialize system zone (-117) [ 268.797067][T12094] EXT4-fs (loop5): mount failed [ 268.822310][T12090] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.875758][T12101] pimreg: entered allmulticast mode [ 268.893320][T12101] pimreg: left allmulticast mode [ 268.952606][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.973010][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.060109][T12104] pimreg: entered allmulticast mode [ 269.160127][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.175571][T12104] pimreg: left allmulticast mode [ 269.241208][T12109] loop3: detected capacity change from 0 to 512 [ 269.275089][T12109] ext4: Unknown parameter 'subj_type' [ 269.309473][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.370410][T12109] loop3: detected capacity change from 0 to 512 [ 269.407645][T12109] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 269.467881][T12109] EXT4-fs (loop3): 1 truncate cleaned up [ 269.519270][T12109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.668073][T12121] loop5: detected capacity change from 0 to 512 [ 269.733414][T12127] loop3: detected capacity change from 0 to 128 [ 269.755864][T12121] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.841758][T12132] lo speed is unknown, defaulting to 1000 [ 269.849770][T12133] rdma_rxe: rxe_newlink: failed to add bond0 [ 270.131816][T12140] loop4: detected capacity change from 0 to 4096 [ 270.139001][T12140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.543253][T12157] loop5: detected capacity change from 0 to 1024 [ 270.555354][T12157] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2837: Failed to acquire dquot type 0 [ 270.569495][T12157] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 270.584371][T12157] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2837: corrupted inode contents [ 270.599900][T12157] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.2837: mark_inode_dirty error [ 270.619258][T12144] lo speed is unknown, defaulting to 1000 [ 270.642120][T12157] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2837: corrupted inode contents [ 270.681127][T12164] ext4: Unknown parameter 'subj_type' [ 270.746949][T12164] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 270.758428][T12157] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2837: mark_inode_dirty error [ 270.770778][T12157] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2837: corrupted inode contents [ 270.783855][T12157] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 270.793272][T12157] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2837: corrupted inode contents [ 270.813348][T12157] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.2837: mark_inode_dirty error [ 270.839299][T12164] EXT4-fs (loop3): 1 truncate cleaned up [ 270.851232][T12144] chnl_net:caif_netlink_parms(): no params data found [ 270.872295][T12157] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 270.892118][T12157] EXT4-fs (loop5): 1 truncate cleaned up [ 270.910249][T12157] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 270.997238][ T4762] bridge_slave_1: left allmulticast mode [ 271.002956][ T4762] bridge_slave_1: left promiscuous mode [ 271.008689][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.056055][ T4762] bridge_slave_0: left promiscuous mode [ 271.061946][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.070375][T12184] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2845: invalid block [ 271.083899][T12184] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2845: invalid indirect mapped block 4294967295 (level 1) [ 271.127931][T12184] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2845: invalid indirect mapped block 4294967295 (level 1) [ 271.149214][ T4762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.161929][ T4762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.177502][T12184] EXT4-fs (loop3): 2 truncates cleaned up [ 271.183941][ T4762] bond0 (unregistering): Released all slaves [ 271.201447][ T4762] bond1 (unregistering): Released all slaves [ 271.219796][ T4762] bond2 (unregistering): Released all slaves [ 271.237003][T12144] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.244159][T12144] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.263080][T12144] bridge_slave_0: entered allmulticast mode [ 271.269990][T12144] bridge_slave_0: entered promiscuous mode [ 271.287918][T12180] lo speed is unknown, defaulting to 1000 [ 271.294152][T12144] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.301355][T12144] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.309455][T12144] bridge_slave_1: entered allmulticast mode [ 271.316011][T12144] bridge_slave_1: entered promiscuous mode [ 271.378272][T12144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.389874][T12144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.452061][ T4762] tipc: Disabling bearer [ 271.457281][ T4762] tipc: Disabling bearer [ 271.462678][ T4762] tipc: Left network mode [ 271.468602][T12144] team0: Port device team_slave_0 added [ 271.525797][T12198] __nla_validate_parse: 6 callbacks suppressed [ 271.525879][T12198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2850'. [ 271.575648][T12144] team0: Port device team_slave_1 added [ 271.588532][T12198] bond_slave_0: entered promiscuous mode [ 271.594247][T12198] bond_slave_1: entered promiscuous mode [ 271.626623][T12198] macvlan2: entered promiscuous mode [ 271.631992][T12198] bond0: entered promiscuous mode [ 271.667447][T12198] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 271.747515][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.748750][T12202] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2852: invalid block [ 271.771290][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.779187][T12202] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2852: invalid indirect mapped block 4294967295 (level 1) [ 271.813574][T12202] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2852: invalid indirect mapped block 4294967295 (level 1) [ 271.844024][ T4762] team0 (unregistering): Port device team_slave_1 removed [ 271.844419][T12202] EXT4-fs (loop5): 2 truncates cleaned up [ 271.859568][ T4762] team0 (unregistering): Port device team_slave_0 removed [ 271.921230][T12144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.928327][T12144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.954365][T12144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.970942][T12206] ext4: Unknown parameter 'subj_type' [ 271.980584][T12144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.987705][T12144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.013689][T12144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.021115][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2853'. [ 272.056009][T12208] vlan2: entered allmulticast mode [ 272.080052][T12144] hsr_slave_0: entered promiscuous mode [ 272.086291][T12144] hsr_slave_1: entered promiscuous mode [ 272.092370][T12144] debugfs: 'hsr0' already exists in 'hsr' [ 272.098228][T12144] Cannot create hsr debugfs directory [ 272.128487][T12206] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 272.140101][T12210] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.151164][T12206] EXT4-fs (loop4): 1 truncate cleaned up [ 272.200284][T12210] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.229575][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2856'. [ 272.238688][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2856'. [ 272.247731][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2856'. [ 272.269768][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2856'. [ 272.278858][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2856'. [ 272.287988][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2856'. [ 272.310307][T12210] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.345411][T12221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.360250][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2856'. [ 272.369381][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2856'. [ 272.398813][T12210] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.443391][T12228] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2859: Failed to acquire dquot type 0 [ 272.455664][T12228] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 272.471203][T12228] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2859: corrupted inode contents [ 272.483430][T12228] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #13: comm syz.4.2859: mark_inode_dirty error [ 272.495238][T12228] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2859: corrupted inode contents [ 272.508427][T12228] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2859: mark_inode_dirty error [ 272.520071][T12228] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2859: corrupted inode contents [ 272.532609][ T4762] IPVS: stop unused estimator thread 0... [ 272.537105][T12228] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 272.548510][T12231] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.557004][T12228] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2859: corrupted inode contents [ 272.570535][T12228] EXT4-fs error (device loop4): ext4_truncate:4635: inode #13: comm syz.4.2859: mark_inode_dirty error [ 272.581894][T12228] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 272.591347][T12228] EXT4-fs (loop4): 1 truncate cleaned up [ 272.599889][T12228] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 272.608747][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.618822][T12231] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.632164][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.640742][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.651799][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.679268][T12231] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.702316][T12144] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.712758][T12144] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.722130][T12144] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.731250][T12144] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.752573][T12231] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.767509][T12241] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.807256][ T2315] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.825024][ T2315] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.836505][ T2315] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.848072][T12144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.857297][ T2315] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.869873][T12241] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.889456][T12144] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.899429][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.906595][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.907638][T12244] set_capacity_and_notify: 10 callbacks suppressed [ 272.907682][T12244] loop3: detected capacity change from 0 to 1024 [ 272.925400][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.932871][T12244] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2863: Failed to acquire dquot type 0 [ 272.933957][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.947678][T12244] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 272.968658][T12244] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2863: corrupted inode contents [ 272.970048][T12241] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.991138][T12244] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.2863: mark_inode_dirty error [ 273.002946][T12244] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2863: corrupted inode contents [ 273.012241][T12144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.025155][T12144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.025598][T12244] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.2863: mark_inode_dirty error [ 273.048551][T12244] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2863: corrupted inode contents [ 273.060836][T12244] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 273.069703][T12244] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2863: corrupted inode contents [ 273.084216][T12244] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.2863: mark_inode_dirty error [ 273.086047][T12241] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.100767][T12244] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 273.117433][T12244] EXT4-fs (loop3): 1 truncate cleaned up [ 273.138187][T12244] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 273.206050][T12144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.260484][T12255] loop4: detected capacity change from 0 to 8192 [ 273.297056][T12255] loop4: p1 p2 p4 [ 273.300942][T12144] veth0_vlan: entered promiscuous mode [ 273.301559][T12255] loop4: p1 start 4227858436 is beyond EOD, truncated [ 273.313244][T12144] veth1_vlan: entered promiscuous mode [ 273.313326][T12255] loop4: p2 start 4259584 is beyond EOD, truncated [ 273.313345][T12255] loop4: p4 start 2147483392 is beyond EOD, truncated [ 273.348640][T12144] veth0_macvtap: entered promiscuous mode [ 273.356369][T12144] veth1_macvtap: entered promiscuous mode [ 273.369511][T12144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.381979][T12144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.394529][ T187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.457954][ T187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.486813][ T187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.508679][ T187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.657954][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 273.657979][ T29] audit: type=1326 audit(2000000380.606:12081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7859df749 code=0x7ffc0000 [ 273.687872][ T29] audit: type=1326 audit(2000000380.606:12082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fc7859df749 code=0x7ffc0000 [ 273.711606][ T29] audit: type=1326 audit(2000000380.606:12083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7859df749 code=0x7ffc0000 [ 273.787140][T12292] loop4: detected capacity change from 0 to 8192 [ 274.073460][T12300] loop3: detected capacity change from 0 to 8192 [ 274.470301][T12311] loop4: detected capacity change from 0 to 512 [ 274.488157][T12311] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 274.507381][T12311] EXT4-fs (loop4): 1 truncate cleaned up [ 274.516121][T12317] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.589801][T12317] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.608538][ T1038] IPVS: starting estimator thread 0... [ 274.615853][T12328] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 274.624281][T12328] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 274.639721][T12317] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.696721][T12329] IPVS: using max 2112 ests per chain, 105600 per kthread [ 274.706683][T12317] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.723699][T12334] rdma_rxe: rxe_newlink: failed to add bond0 [ 274.746440][T12333] loop4: detected capacity change from 0 to 8192 [ 274.817104][T12333] loop4: p1 p2 p4 [ 274.821065][T12333] loop4: p1 start 4227858436 is beyond EOD, truncated [ 274.827922][T12333] loop4: p2 start 4259584 is beyond EOD, truncated [ 274.834449][T12333] loop4: p4 start 2147483392 is beyond EOD, truncated [ 274.864390][ T2315] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.878190][ T187] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.890195][ T187] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.945122][T12337] lo speed is unknown, defaulting to 1000 [ 274.970843][ T187] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.985732][T12339] loop4: detected capacity change from 0 to 512 [ 274.992607][T12339] ext4: Unknown parameter 'subj_type' [ 275.018160][T12339] loop4: detected capacity change from 0 to 512 [ 275.025056][T12339] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 275.037777][T12339] EXT4-fs (loop4): 1 truncate cleaned up [ 275.056724][T12349] loop2: detected capacity change from 0 to 1024 [ 275.065292][T12349] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 275.074547][T12349] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 275.083985][T12349] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2896: Failed to acquire dquot type 0 [ 275.095991][T12349] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 275.110621][T12349] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2896: corrupted inode contents [ 275.123755][T12349] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #13: comm syz.2.2896: mark_inode_dirty error [ 275.135466][T12349] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2896: corrupted inode contents [ 275.148349][T12349] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.2896: mark_inode_dirty error [ 275.159919][T12349] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2896: corrupted inode contents [ 275.172326][T12349] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 275.181266][T12349] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.2896: corrupted inode contents [ 275.193629][T12349] EXT4-fs error (device loop2): ext4_truncate:4635: inode #13: comm syz.2.2896: mark_inode_dirty error [ 275.204951][T12349] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 275.216413][T12349] EXT4-fs (loop2): 1 truncate cleaned up [ 275.243116][T12349] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 275.255756][T12352] loop4: detected capacity change from 0 to 1024 [ 275.367595][T12362] EXT4-fs (loop4): failed to initialize system zone (-117) [ 275.374921][T12362] EXT4-fs (loop4): mount failed [ 275.402554][T12366] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.440213][T12366] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.501416][T12366] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.540144][T12366] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.631782][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.654001][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.667094][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.680370][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.680408][T12382] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2909: invalid block [ 275.700890][T12382] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2909: invalid indirect mapped block 4294967295 (level 1) [ 275.715346][T12382] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2909: invalid indirect mapped block 4294967295 (level 1) [ 275.729932][T12382] EXT4-fs (loop3): 2 truncates cleaned up [ 275.759676][ T29] audit: type=1326 audit(2000000382.806:12084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12386 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 275.783374][ T29] audit: type=1326 audit(2000000382.806:12085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12386 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 275.816566][ T29] audit: type=1326 audit(2000000382.856:12086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12386 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 275.840329][ T29] audit: type=1326 audit(2000000382.856:12087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12386 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 275.864022][ T29] audit: type=1326 audit(2000000382.856:12088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12386 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6ad5f749 code=0x7ffc0000 [ 275.942380][T12389] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12389 comm=syz.0.2912 [ 276.044194][T12401] rdma_rxe: rxe_newlink: failed to add bond0 [ 276.159866][T12406] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12406 comm=syz.3.2919 [ 276.204059][T12405] lo speed is unknown, defaulting to 1000 [ 276.403871][T12415] lo speed is unknown, defaulting to 1000 [ 276.461899][T12415] chnl_net:caif_netlink_parms(): no params data found [ 276.514120][T12415] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.521417][T12415] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.531582][T12415] bridge_slave_0: entered allmulticast mode [ 276.538336][T12415] bridge_slave_0: entered promiscuous mode [ 276.545232][T12415] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.552492][T12415] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.560335][T12415] bridge_slave_1: entered allmulticast mode [ 276.566920][T12415] bridge_slave_1: entered promiscuous mode [ 276.585810][T12415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.596485][T12415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.617940][T12415] team0: Port device team_slave_0 added [ 276.624680][T12415] team0: Port device team_slave_1 added [ 276.641816][T12415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.648925][T12415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.675093][T12415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.686843][T12415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.693961][T12415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.719906][T12415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.747788][T12415] hsr_slave_0: entered promiscuous mode [ 276.753969][T12415] hsr_slave_1: entered promiscuous mode [ 276.760047][T12415] debugfs: 'hsr0' already exists in 'hsr' [ 276.765893][T12415] Cannot create hsr debugfs directory [ 276.840911][T12415] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.884793][T12436] __nla_validate_parse: 11 callbacks suppressed [ 276.884809][T12436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2926'. [ 276.920754][T12415] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.935795][T12439] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.957820][T12437] lo speed is unknown, defaulting to 1000 [ 277.003720][T12415] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.017891][T12439] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.069526][T12415] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.082329][T12439] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.097098][T12442] lo speed is unknown, defaulting to 1000 [ 277.147518][ T2276] bridge_slave_1: left allmulticast mode [ 277.153226][ T2276] bridge_slave_1: left promiscuous mode [ 277.158942][ T2276] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.173942][ T2276] bridge_slave_0: left promiscuous mode [ 277.180258][ T2276] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.339202][ T2276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.349690][ T2276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.358753][T12448] ================================================================== [ 277.366961][T12448] BUG: KCSAN: data-race in io_submit_sqes / prepare_creds [ 277.374120][T12448] [ 277.376474][T12448] write to 0xffff8881031a6b28 of 4 bytes by task 12447 on cpu 1: [ 277.384210][T12448] io_submit_sqes+0x68b/0x11b0 [ 277.389084][T12448] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 277.394673][T12448] __x64_sys_io_uring_enter+0x78/0x90 [ 277.400066][T12448] x64_sys_call+0x27e4/0x3000 [ 277.404756][T12448] do_syscall_64+0xca/0x2b0 [ 277.409295][T12448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.415237][T12448] [ 277.417588][T12448] read to 0xffff8881031a6a80 of 184 bytes by task 12448 on cpu 0: [ 277.425418][T12448] prepare_creds+0x6e/0x550 [ 277.429974][T12448] copy_creds+0x8f/0x340 [ 277.434244][T12448] copy_process+0x638/0x1ef0 [ 277.438870][T12448] kernel_clone+0x16c/0x5c0 [ 277.443407][T12448] __x64_sys_clone+0xe6/0x120 [ 277.448136][T12448] x64_sys_call+0x12d0/0x3000 [ 277.452856][T12448] do_syscall_64+0xca/0x2b0 [ 277.457402][T12448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.463337][T12448] [ 277.465685][T12448] Reported by Kernel Concurrency Sanitizer on: [ 277.472213][T12448] CPU: 0 UID: 0 PID: 12448 Comm: syz.4.2930 Not tainted syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 277.482047][T12448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.492572][T12448] ================================================================== [ 277.511039][ T2276] bond0 (unregistering): Released all slaves [ 277.542813][ T2276] bond1 (unregistering): Released all slaves [ 277.581054][ T2276] bond2 (unregistering): Released all slaves [ 277.873942][T12445] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.892822][T12439] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.903665][ T2276] tipc: Disabling bearer [ 277.909202][ T2276] tipc: Left network mode [ 277.930112][T12445] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.952748][ T1706] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.964850][ T2276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.972715][ T2276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.987505][ T2276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.994928][ T2276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.005638][ T2276] team_slave_0: left promiscuous mode [ 278.011122][ T2276] team_slave_1: left promiscuous mode [ 278.016808][ T2276] veth1_macvtap: left promiscuous mode [ 278.022291][ T2276] veth0_macvtap: left promiscuous mode [ 278.027971][ T2276] veth1_vlan: left promiscuous mode [ 278.033204][ T2276] veth0_vlan: left promiscuous mode [ 278.081468][ T2276] pimreg (unregistering): left allmulticast mode [ 278.124546][ T2276] team0 (unregistering): Port device team_slave_1 removed [ 278.134360][ T2276] team0 (unregistering): Port device team_slave_0 removed [ 278.170086][ T2276] team0 (unregistering): Port device dummy0 removed [ 278.186023][ T1706] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.197827][ T6400] lo speed is unknown, defaulting to 1000 [ 278.203627][ T6400] infiniband syz2: ib_query_port failed (-19) [ 278.214062][T12445] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.225885][ T4762] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.236803][ T4762] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.292224][T12445] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.344982][ T4762] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.356380][ T4762] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.368907][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.380875][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.401238][ T2276] IPVS: stop unused estimator thread 0... [ 278.694259][ T2276] bridge_slave_1: left allmulticast mode [ 278.700013][ T2276] bridge_slave_1: left promiscuous mode [ 278.705674][ T2276] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.714896][ T2276] bridge_slave_0: left allmulticast mode [ 278.720665][ T2276] bridge_slave_0: left promiscuous mode [ 278.726513][ T2276] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.789699][ T2276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.799488][ T2276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.808973][ T2276] bond0 (unregistering): Released all slaves [ 278.945163][ T2276] hsr_slave_0: left promiscuous mode [ 278.951510][ T2276] hsr_slave_1: left promiscuous mode [ 278.958232][ T2276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.965850][ T2276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.005465][ T2276] team0 (unregistering): Port device team_slave_1 removed [ 279.015314][ T2276] team0 (unregistering): Port device team_slave_0 removed [ 279.144680][ T4762] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.156439][ T4762] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.168140][ T4762] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.179899][ T4762] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.270150][ T37] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.318799][ T37] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.369054][ T37] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.409141][ T37] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.463741][ T37] bridge_slave_1: left allmulticast mode [ 280.469479][ T37] bridge_slave_1: left promiscuous mode [ 280.475129][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.483026][ T37] bridge_slave_0: left allmulticast mode [ 280.488805][ T37] bridge_slave_0: left promiscuous mode [ 280.494445][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.599273][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.609416][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.619260][ T37] bond0 (unregistering): Released all slaves [ 280.677914][ T37] hsr_slave_0: left promiscuous mode [ 280.683712][ T37] hsr_slave_1: left promiscuous mode [ 280.689431][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.697318][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.705015][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.712777][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.723840][ T37] veth1_macvtap: left promiscuous mode [ 280.729426][ T37] veth0_macvtap: left promiscuous mode [ 280.734991][ T37] veth1_vlan: left promiscuous mode [ 280.740458][ T37] veth0_vlan: left promiscuous mode [ 280.820295][ T37] team0 (unregistering): Port device team_slave_1 removed [ 280.830250][ T37] team0 (unregistering): Port device team_slave_0 removed [ 281.199507][ T37] IPVS: stop unused estimator thread 0... [ 281.779637][ T2276] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.838854][ T2276] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.898553][ T2276] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.968658][ T2276] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.043880][ T2276] bridge_slave_1: left allmulticast mode [ 282.049740][ T2276] bridge_slave_1: left promiscuous mode [ 282.055462][ T2276] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.063531][ T2276] bridge_slave_0: left promiscuous mode [ 282.069280][ T2276] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.148359][ T2276] bond0 (unregistering): left promiscuous mode [ 282.154531][ T2276] bond_slave_0: left promiscuous mode [ 282.160125][ T2276] bond_slave_1: left promiscuous mode [ 282.168400][ T31] smc: removing ib device syz1 [ 282.173504][ T2276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.183642][ T2276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.193171][ T2276] bond0 (unregistering): Released all slaves [ 282.201965][ T2276] bond1 (unregistering): Released all slaves [ 282.310818][ T2276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.318273][ T2276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.325754][ T2276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.333374][ T2276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.343587][ T2276] veth1_macvtap: left promiscuous mode [ 282.349224][ T2276] veth0_macvtap: left promiscuous mode [ 282.354731][ T2276] veth1_vlan: left promiscuous mode [ 282.360207][ T2276] veth0_vlan: left promiscuous mode [ 282.432336][ T2276] team0 (unregistering): Port device team_slave_1 removed [ 282.447960][ T2276] team0 (unregistering): Port device team_slave_0 removed [ 282.819812][ T2276] IPVS: stop unused estimator thread 0... [ 282.871109][ T2276] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.938073][ T2276] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.988452][ T2276] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.038117][ T2276] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.100681][ T2276] bridge_slave_1: left allmulticast mode [ 283.106335][ T2276] bridge_slave_1: left promiscuous mode [ 283.112122][ T2276] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.120164][ T2276] bridge_slave_0: left allmulticast mode [ 283.125810][ T2276] bridge_slave_0: left promiscuous mode [ 283.131603][ T2276] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.209274][ T2276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.219487][ T2276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.228954][ T2276] bond0 (unregistering): Released all slaves [ 283.300395][ T2276] hsr_slave_0: left promiscuous mode [ 283.306150][ T2276] hsr_slave_1: left promiscuous mode [ 283.311843][ T2276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.319304][ T2276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.327085][ T2276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.334532][ T2276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.344408][ T2276] veth1_macvtap: left promiscuous mode [ 283.349964][ T2276] veth0_macvtap: left promiscuous mode [ 283.355503][ T2276] veth1_vlan: left promiscuous mode [ 283.360786][ T2276] veth0_vlan: left promiscuous mode [ 283.427570][ T2276] team0 (unregistering): Port device team_slave_1 removed [ 283.437601][ T2276] team0 (unregistering): Port device team_slave_0 removed [ 283.729352][ T2276] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.797829][ T2276] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.838115][ T2276] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.878185][ T2276] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.960806][ T2276] bridge_slave_1: left allmulticast mode [ 283.966533][ T2276] bridge_slave_1: left promiscuous mode [ 283.972241][ T2276] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.980015][ T2276] bridge_slave_0: left promiscuous mode [ 283.985711][ T2276] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.058488][ T2276] team0: Port device bridge1 removed [ 284.097734][ T2276] team0: Port device bridge2 removed [ 284.138052][ T2276] bond0 (unregistering): left promiscuous mode [ 284.144230][ T2276] bond_slave_0: left promiscuous mode [ 284.149768][ T2276] bond_slave_1: left promiscuous mode [ 284.155235][ T2276] dummy0: left promiscuous mode [ 284.163554][ T2276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.173777][ T2276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.183485][ T2276] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 284.192516][ T2276] bond0 (unregistering): Released all slaves [ 284.271804][ T2276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.279252][ T2276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.286899][ T2276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.294331][ T2276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.303138][ T2276] veth1_macvtap: left promiscuous mode [ 284.308678][ T2276] veth0_macvtap: left promiscuous mode [ 284.314228][ T2276] veth1_vlan: left promiscuous mode [ 284.319581][ T2276] veth0_vlan: left promiscuous mode [ 284.381477][ T2276] team0 (unregistering): Port device team_slave_1 removed [ 284.391486][ T2276] team0 (unregistering): Port device team_slave_0 removed [ 284.859649][ T2276] IPVS: stop unused estimator thread 0...