last executing test programs: 6m50.474828727s ago: executing program 32 (id=1853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0xf792, 0x80, 0x9, 0x201}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x62, 0x0, 0xb3c5}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6m44.650926542s ago: executing program 33 (id=1996): r0 = syz_io_uring_setup(0x2ad6, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8004, 0x1bf}, &(0x7f0000000440)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x2001064, 0x1000, 0x7, 0x40227}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_enter(r0, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 5m52.95470536s ago: executing program 34 (id=3580): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 5m25.565343554s ago: executing program 35 (id=4100): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f00000008c0)=""/4096, 0x1000) 5m24.000745783s ago: executing program 0 (id=4562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 5m23.949544883s ago: executing program 0 (id=4564): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 5m23.856051744s ago: executing program 0 (id=4566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4b3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) acct(0x0) 5m8.744057374s ago: executing program 36 (id=4566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4b3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) acct(0x0) 4m50.932227011s ago: executing program 37 (id=5514): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) unshare(0x20060400) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 4m36.602628446s ago: executing program 38 (id=5937): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9d}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000100), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 4m9.046799561s ago: executing program 39 (id=7019): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000005740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m22.294445538s ago: executing program 40 (id=10022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r3 = syz_io_uring_setup(0x2ca4, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x2e}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r2, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r3, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 1m39.434039754s ago: executing program 5 (id=11899): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m39.273376265s ago: executing program 5 (id=11905): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m39.175699936s ago: executing program 5 (id=11907): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x3) 1m39.162755095s ago: executing program 5 (id=11910): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) 1m38.749958338s ago: executing program 5 (id=11921): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) 1m38.706844708s ago: executing program 41 (id=11921): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) 1m36.250041683s ago: executing program 0 (id=11922): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x3) 1m36.232675573s ago: executing program 0 (id=11985): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 1m34.244591945s ago: executing program 0 (id=12043): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 1m34.232448855s ago: executing program 42 (id=12043): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 1m24.634939582s ago: executing program 1 (id=12322): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) 1m23.780894587s ago: executing program 1 (id=12341): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42982, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) 1m23.716247478s ago: executing program 1 (id=12342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9482, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x9, 0x4) sendto$inet6(r1, &(0x7f0000000180)="c412", 0xffe6, 0x40, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) recvmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x30}], 0x1, 0x2140, 0x0) 1m23.646712569s ago: executing program 1 (id=12345): socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={[0x0]}, 0x0, 0x100) 1m23.596190919s ago: executing program 3 (id=12348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) 1m23.533684269s ago: executing program 3 (id=12350): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r2) 1m23.533261319s ago: executing program 3 (id=12351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r2, 0xffffffffffffffff, 0x0) 1m23.43456451s ago: executing program 3 (id=12352): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1m23.37896396s ago: executing program 3 (id=12353): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) 1m22.782896434s ago: executing program 1 (id=12367): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x4a000200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000040)={'mangle\x00', 0x0, [0xf6, 0x400000, 0x6, 0xffff, 0x1]}, &(0x7f0000000140)=0x54) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1m22.781496194s ago: executing program 1 (id=12368): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x12000051) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x22) 1m22.742507554s ago: executing program 43 (id=12368): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x12000051) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x22) 1m22.301687666s ago: executing program 3 (id=12371): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x1103, 0x4, @private2, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r2, 0x8, 0x1, "e3"}, 0x9) 1m22.299954707s ago: executing program 44 (id=12371): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x1103, 0x4, @private2, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r2, 0x8, 0x1, "e3"}, 0x9) 5.00563906s ago: executing program 9 (id=14084): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) accept$unix(r0, &(0x7f0000000000)=@abs, 0x0) 4.91505182s ago: executing program 9 (id=14086): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.600153672s ago: executing program 9 (id=14097): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 4.487986773s ago: executing program 9 (id=14099): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) 4.398675403s ago: executing program 9 (id=14110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 4.234970085s ago: executing program 9 (id=14103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 4.234750974s ago: executing program 45 (id=14103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 2.670778714s ago: executing program 2 (id=14104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x49b, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r2, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES64], 0x38}}, 0x20000004) 2.630500034s ago: executing program 2 (id=14127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r4, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 2.601094925s ago: executing program 7 (id=14132): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@minixdf}, {@debug}, {@lazytime}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.499869685s ago: executing program 8 (id=14135): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r2) accept4(r1, 0x0, 0x0, 0x80800) 2.435061795s ago: executing program 8 (id=14136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xffff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 2.353091186s ago: executing program 8 (id=14143): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa}) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4004001}, 0x1) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xffffeff8, 0x0, 0x3, 0xe, "00121b9a0c6dfaba8b00000001000000800040"}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 2.213869037s ago: executing program 6 (id=14144): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0x9}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 2.054558518s ago: executing program 6 (id=14145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) fdatasync(0xffffffffffffffff) open(0x0, 0x80140, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) 1.993118459s ago: executing program 7 (id=14146): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0xff}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@remote, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.948220339s ago: executing program 7 (id=14147): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, 0x0, &(0x7f0000000140)) 1.947610308s ago: executing program 8 (id=14157): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r0, &(0x7f0000000100)='\x00', 0x9001) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.867031549s ago: executing program 8 (id=14148): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.866387109s ago: executing program 7 (id=14159): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0xfffffffe, 0xb, 0x1, 0xffffffff, 0xffff, 0x5, 0x7, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) 1.863129359s ago: executing program 4 (id=14149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x8814) 1.841739159s ago: executing program 2 (id=14150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r2) 1.815845999s ago: executing program 4 (id=14151): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.76306983s ago: executing program 2 (id=14152): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x1) unlink(&(0x7f0000000180)='./file1\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.7629142s ago: executing program 4 (id=14153): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 1.76269053s ago: executing program 2 (id=14154): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/19, 0x13}, 0x7fffffff}], 0x1, 0x60008229, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000001440)="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", 0x5ad, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.760605489s ago: executing program 6 (id=14155): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000019ffffff0000000001290200180100002020732500000000002020207b0af8f700000000bf"], &(0x7f0000000040)='GPL\x00', 0xe, 0xfd4, &(0x7f0000001e00)=""/4052, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.75138791s ago: executing program 4 (id=14156): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa}) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4004001}, 0x1) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xffffeff8, 0x0, 0x3, 0xe, "00121b9a0c6dfaba8b00000001000000800040"}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.73638501s ago: executing program 7 (id=14158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x2c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xa, 0x7}, {}, {0xc, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x40010) 1.70063484s ago: executing program 8 (id=14160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000440)="5f62f632763c84825847145170282f67ba6d5dadf0baf131d503e93a17ee56040920c825d923318fd574b1924b0903b91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc341e165b51bf8f73bf1a7c158d8905e518e8000000000000000000000000c3849a51e2fc0a5a29a1175f55fdae2bc796d4315d2f916decb710fc46c2da99d015b9f4a88d5d994502ebd04907e875e002a34c2f5e5eee6e5f3c4e916a", 0xe0}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="ac05df87c6e89abd7ae7e6b8550f9923917c9d38e14a4effff3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623aed6cdae245fd4b3cb9946a98f5c0030983d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f69", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc34}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 1.70040292s ago: executing program 6 (id=14161): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) open(&(0x7f0000000380)='./bus\x00', 0x143c62, 0x48) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.7001469s ago: executing program 46 (id=14160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000440)="5f62f632763c84825847145170282f67ba6d5dadf0baf131d503e93a17ee56040920c825d923318fd574b1924b0903b91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc341e165b51bf8f73bf1a7c158d8905e518e8000000000000000000000000c3849a51e2fc0a5a29a1175f55fdae2bc796d4315d2f916decb710fc46c2da99d015b9f4a88d5d994502ebd04907e875e002a34c2f5e5eee6e5f3c4e916a", 0xe0}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="ac05df87c6e89abd7ae7e6b8550f9923917c9d38e14a4effff3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623aed6cdae245fd4b3cb9946a98f5c0030983d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f69", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea23d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069aa0c21d792129132d59d12cd4417583dc967d7d44f392770da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e38524cd1a81e16b948672329bd111f7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d5ffaf49c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09f1bf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696894953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb0ab5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac96280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a6971d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa85f29d3c8a7e70d58b1228e8376c212ffb76f895aadedcf3f70bddcc347473dba5602d7734c4e9a2054cd3763acbb7fe82155d4a50e6a72d917b22b16ea8abd987834b4b1b04556e5442b1b643fa842a08ab5d860715b2504", 0xc34}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 1.70001833s ago: executing program 6 (id=14170): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) rseq(0x0, 0x0, 0x0, 0x0) 1.69959656s ago: executing program 4 (id=14171): recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199, 0xc7}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f0000000700)=""/80, 0x50}], 0x5, &(0x7f0000000580)=""/80, 0x50}}], 0x1, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 18.89754ms ago: executing program 5 (id=14162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x1, {0x0, 0xff, 0x1}, 0x3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 18.4626ms ago: executing program 2 (id=14174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x8) splice(r3, 0x0, r1, 0x0, 0x6, 0xb) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 16.10444ms ago: executing program 6 (id=14175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 15.46911ms ago: executing program 7 (id=14176): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 0s ago: executing program 4 (id=14177): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @empty, 0xff000000, 0xffffff00, 'veth0_vlan\x00', 'ip6erspan0\x00', {0xff}, {}, 0x21, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x0, 0xa, [0x15, 0x1d, 0x3, 0x3b, 0x5, 0x16, 0x26, 0xa, 0x2b, 0x20, 0x29, 0x3, 0x25, 0x15, 0x32, 0x24], 0x0, 0x100, 0x10001}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xffffff00, 'veth1\x00', 'batadv0\x00', {0xff}, {0xff}, 0x16, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x0, 0x5, 0x2], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x5, 0x7, 0x2, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r1 = open(0x0, 0x64842, 0x389b0d52417bb201) pwritev2(r1, 0x0, 0x0, 0x7000, 0x0, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'erspan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) kernel console output (not intermixed with test programs): 448.627627][ T31] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.732681][ T2827] bond3: entered allmulticast mode [ 448.738032][ T2827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 448.775818][ T2829] bond3: (slave ip6gretap1): making interface the new active one [ 448.783767][ T2829] ip6gretap1: entered allmulticast mode [ 448.798091][ T2831] loop7: detected capacity change from 0 to 512 [ 448.806610][ T2829] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 448.827374][ T2831] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 448.847214][ T2831] EXT4-fs (loop7): 1 truncate cleaned up [ 448.856605][ T2831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.901033][ T925] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.106889][ T2844] netlink: 'syz.9.13094': attribute type 10 has an invalid length. [ 449.108929][ T2844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.124023][ T2844] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 449.127037][ T2844] netlink: 'syz.9.13094': attribute type 10 has an invalid length. [ 449.140921][ T2844] netlink: 40 bytes leftover after parsing attributes in process `syz.9.13094'. [ 449.150547][ T2844] batadv0: entered promiscuous mode [ 449.155766][ T2844] batadv0: entered allmulticast mode [ 449.161974][ T2844] bond0: (slave batadv0): Releasing backup interface [ 449.164027][ T2844] bridge0: port 3(batadv0) entered blocking state [ 449.164078][ T2844] bridge0: port 3(batadv0) entered disabled state [ 449.208492][ T2849] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.260928][ T2849] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.310759][ T2849] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.361956][ T2849] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.393165][ T2859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13101'. [ 449.393467][ T2859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13101'. [ 449.403328][ T142] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 449.403343][ T142] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 449.451003][ T31] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.454804][ T31] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.458880][ T31] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.471263][ T142] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.542880][ T2853] loop8: detected capacity change from 0 to 8192 [ 449.985596][ T2885] loop9: detected capacity change from 0 to 512 [ 450.006675][ T2885] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.13110: EA inode hash validation failed [ 450.020036][ T2885] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #15: comm syz.9.13110: corrupted inode contents [ 450.035294][ T2885] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #15: comm syz.9.13110: mark_inode_dirty error [ 450.050088][ T2887] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13112'. [ 450.059214][ T2887] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13112'. [ 450.089231][ T2885] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #15: comm syz.9.13110: corrupted inode contents [ 450.119328][ T2885] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2996: inode #15: comm syz.9.13110: mark_inode_dirty error [ 450.168442][ T2885] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.13110: mark inode dirty (error -117) [ 450.182977][ T2885] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 450.192113][ T2885] EXT4-fs (loop9): 1 orphan inode deleted [ 450.198493][ T2885] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.219982][ T2885] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.807256][ T2911] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13122'. [ 450.807483][ T2913] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.895064][ T2913] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.935199][ T2920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13125'. [ 450.962764][ T2913] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.072323][ T2913] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.128534][ T3914] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.141921][ T3914] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.156236][ T3914] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.169463][ T3914] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.324640][ T2955] lo speed is unknown, defaulting to 1000 [ 451.552572][ T2973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.576261][ T2973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.608478][ T29] kauditd_printk_skb: 4469 callbacks suppressed [ 451.608494][ T29] audit: type=1326 audit(2503.602:20275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.7.13146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 451.660141][ T29] audit: type=1326 audit(2503.642:20276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.7.13146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 451.683290][ T29] audit: type=1326 audit(2503.642:20277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.7.13146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 451.706408][ T29] audit: type=1326 audit(2503.642:20278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.7.13146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 451.729464][ T29] audit: type=1326 audit(2503.642:20279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.7.13146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 451.752520][ T29] audit: type=1326 audit(2503.642:20280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.7.13146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 451.775543][ T29] audit: type=1326 audit(2503.642:20281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.7.13146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 451.798658][ T29] audit: type=1326 audit(2503.642:20282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.7.13146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 451.821660][ T29] audit: type=1326 audit(2503.642:20283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.7.13146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 451.844699][ T29] audit: type=1326 audit(2503.642:20284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.7.13146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 451.911084][ T2994] netlink: 19 bytes leftover after parsing attributes in process `syz.8.13151'. [ 451.926831][ T2996] sd 0:0:1:0: device reset [ 451.962055][ T3005] lo: entered allmulticast mode [ 451.976631][ T3005] tunl0: entered allmulticast mode [ 451.983918][ T3005] gre0: entered allmulticast mode [ 451.989957][ T3005] gretap0: entered allmulticast mode [ 451.997002][ T3005] erspan0: entered allmulticast mode [ 452.003845][ T3005] ip_vti0: entered allmulticast mode [ 452.009850][ T3005] ip6_vti0: entered allmulticast mode [ 452.015791][ T3005] sit0: entered allmulticast mode [ 452.021434][ T3005] ip6tnl0: entered allmulticast mode [ 452.030071][ T3001] loop8: detected capacity change from 0 to 1024 [ 452.035832][ T3005] ip6gre0: entered allmulticast mode [ 452.042727][ T3005] syz_tun: entered allmulticast mode [ 452.048500][ T3005] ip6gretap0: entered allmulticast mode [ 452.054427][ T3005] .`: entered allmulticast mode [ 452.060083][ T3005] team0: entered allmulticast mode [ 452.061587][ T3001] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.066890][ T3005] dummy0: entered allmulticast mode [ 452.084149][ T3005] nlmon0: entered allmulticast mode [ 452.090149][ T3005] caif0: entered allmulticast mode [ 452.096193][ T3005] veth0: entered allmulticast mode [ 452.111960][ T3005] veth1: entered allmulticast mode [ 452.133889][ T3005] wg1: entered allmulticast mode [ 452.139410][ T3005] veth0_to_bridge: entered allmulticast mode [ 452.145863][ T3005] veth1_to_bridge: entered allmulticast mode [ 452.152129][ T3005] bridge_slave_1: entered allmulticast mode [ 452.158312][ T3005] veth0_to_bond: entered allmulticast mode [ 452.164395][ T3005] bond_slave_0: entered allmulticast mode [ 452.170393][ T3005] veth1_to_bond: entered allmulticast mode [ 452.176427][ T3005] bond_slave_1: entered allmulticast mode [ 452.182577][ T3001] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.13154: Allocating blocks 449-513 which overlap fs metadata [ 452.182635][ T3005] veth0_to_team: entered allmulticast mode [ 452.182868][ T3005] team_slave_0: entered allmulticast mode [ 452.208931][ T3005] veth1_to_team: entered allmulticast mode [ 452.215116][ T3005] team_slave_1: entered allmulticast mode [ 452.221129][ T3005] veth0_to_batadv: entered allmulticast mode [ 452.234077][ T3000] EXT4-fs (loop8): pa ffff888106e02700: logic 32, phys. 161, len 22 [ 452.242209][ T3000] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 452.253832][ T3005] batadv_slave_0: entered allmulticast mode [ 452.261070][ T3005] veth1_to_batadv: entered allmulticast mode [ 452.267438][ T3005] batadv_slave_1: entered allmulticast mode [ 452.273641][ T3005] xfrm0: entered allmulticast mode [ 452.279634][ T3005] veth0_to_hsr: entered allmulticast mode [ 452.285629][ T3005] hsr_slave_0: entered allmulticast mode [ 452.291664][ T3005] veth1_virt_wifi: entered allmulticast mode [ 452.292635][ T849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.297926][ T3005] veth0_virt_wifi: entered allmulticast mode [ 452.317385][ T3020] loop9: detected capacity change from 0 to 512 [ 452.325359][ T3020] EXT4-fs: Ignoring removed i_version option [ 452.332062][ T3020] EXT4-fs: Ignoring removed bh option [ 452.338540][ T3005] veth1_vlan: entered allmulticast mode [ 452.344643][ T3005] veth0_vlan: entered allmulticast mode [ 452.350919][ T3005] : entered allmulticast mode [ 452.355985][ T3005] vlan1: entered allmulticast mode [ 452.362556][ T3005] macvlan0: entered allmulticast mode [ 452.369709][ T3005] macvlan1: entered allmulticast mode [ 452.375485][ T3005] ipvlan0: entered allmulticast mode [ 452.381465][ T3005] ipvlan1: entered allmulticast mode [ 452.381726][ T3020] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.387324][ T3005] veth1_macvtap: entered allmulticast mode [ 452.406082][ T3005] veth0_macvtap: entered allmulticast mode [ 452.412246][ T3005] macvtap0: entered allmulticast mode [ 452.417998][ T3005] macsec0: entered allmulticast mode [ 452.423816][ T3005] geneve0: entered allmulticast mode [ 452.430145][ T3005] geneve1: entered allmulticast mode [ 452.435730][ T3005] sit1: entered allmulticast mode [ 452.441193][ T3005] veth2: entered allmulticast mode [ 452.446806][ T3005] batadv1: entered allmulticast mode [ 452.452585][ T3005] batadv2: entered allmulticast mode [ 452.453559][ T867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.458211][ T3005] bridge1: entered allmulticast mode [ 452.472982][ T3005] bridge2: entered allmulticast mode [ 452.478881][ T3005] bridge3: entered allmulticast mode [ 452.485434][ T3005] veth5: entered allmulticast mode [ 452.491803][ T3005] vxlan0: entered allmulticast mode [ 452.507898][ T3005] veth6: entered allmulticast mode [ 452.513369][ T3005] veth7: entered allmulticast mode [ 452.518768][ T3005] bridge4: entered allmulticast mode [ 452.519054][ T3033] loop8: detected capacity change from 0 to 512 [ 452.524338][ T3005] bridge5: entered allmulticast mode [ 452.535949][ T3005] bridge6: entered allmulticast mode [ 452.542176][ T3005] gre1: entered allmulticast mode [ 452.547583][ T3005] veth8: entered allmulticast mode [ 452.552991][ T3005] veth9: entered allmulticast mode [ 452.557003][ T3033] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.569634][ T3005] bond1: entered allmulticast mode [ 452.575975][ T3005] veth10: entered allmulticast mode [ 452.591453][ T3005] veth11: entered allmulticast mode [ 452.597107][ T3005] veth12: entered allmulticast mode [ 452.598009][ T849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.602667][ T3005] veth13: entered allmulticast mode [ 452.617429][ T3005] bond2: entered allmulticast mode [ 452.622949][ T3005] veth14: entered allmulticast mode [ 452.628599][ T3005] veth15: entered allmulticast mode [ 452.635379][ T3005] bridge0: entered allmulticast mode [ 452.642198][ T3005] bridge7: entered allmulticast mode [ 452.648125][ T3005] sit2: entered allmulticast mode [ 452.653349][ T3005] veth16: entered allmulticast mode [ 452.658727][ T3005] veth17: entered allmulticast mode [ 452.664309][ T3005] veth19: entered allmulticast mode [ 452.670305][ T3005] bridge8: entered allmulticast mode [ 452.676052][ T3005] ip6tnl1: entered allmulticast mode [ 452.681595][ T3005] bridge9: entered allmulticast mode [ 452.687436][ T3005] bridge10: entered allmulticast mode [ 452.693526][ T3005] sit3: entered allmulticast mode [ 452.698715][ T3005] veth20: entered allmulticast mode [ 452.704740][ T3005] veth21: entered allmulticast mode [ 452.710401][ T3005] bond0: entered allmulticast mode [ 452.715645][ T3005] bridge11: entered allmulticast mode [ 452.721913][ T3005] bond3: entered allmulticast mode [ 452.728191][ T3005] bond4: entered allmulticast mode [ 452.734880][ T3005] bond5: entered allmulticast mode [ 452.745015][ T3005] netdevsim netdevsim4 eth0: entered allmulticast mode [ 452.752299][ T3005] netdevsim netdevsim4 eth1: entered allmulticast mode [ 452.759854][ T3005] netdevsim netdevsim4 eth2: entered allmulticast mode [ 452.767028][ T3005] netdevsim netdevsim4 eth3: entered allmulticast mode [ 452.774451][ T3042] bridge0: port 3(gretap0) entered blocking state [ 452.780929][ T3042] bridge0: port 3(gretap0) entered disabled state [ 452.787611][ T3042] gretap0: entered allmulticast mode [ 452.794123][ T3042] gretap0: entered promiscuous mode [ 452.799556][ T3042] bridge0: port 3(gretap0) entered blocking state [ 452.806034][ T3042] bridge0: port 3(gretap0) entered forwarding state [ 452.826119][ T3037] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.837847][ T3043] gretap0: left allmulticast mode [ 452.842979][ T3043] gretap0: left promiscuous mode [ 452.848126][ T3043] bridge0: port 3(gretap0) entered disabled state [ 452.891497][ T3037] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.961190][ T3037] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.040881][ T3037] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.113729][ T1717] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.144022][ T1717] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.160310][ T1717] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.168848][ T1717] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.394109][ T3067] loop7: detected capacity change from 0 to 164 [ 453.402226][ T3067] bio_check_eod: 143 callbacks suppressed [ 453.402240][ T3067] syz.7.13180: attempt to access beyond end of device [ 453.402240][ T3067] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 453.422262][ T3067] syz.7.13180: attempt to access beyond end of device [ 453.422262][ T3067] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 453.535333][ T3082] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.13183'. [ 453.544661][ T3082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13183'. [ 453.653232][ T3088] loop9: detected capacity change from 0 to 512 [ 453.680949][ T3088] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.704561][ T3088] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.13189: corrupted inode contents [ 453.717238][ T3088] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.13189: mark_inode_dirty error [ 453.728874][ T3088] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.13189: corrupted inode contents [ 453.741650][ T3088] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.13189: mark_inode_dirty error [ 453.754453][ T3088] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13189'. [ 453.786482][ T867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.865604][ T3096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3096 comm=syz.9.13190 [ 453.901814][ T3096] vlan2: entered allmulticast mode [ 454.318376][ T3100] lo speed is unknown, defaulting to 1000 [ 454.423318][ T3109] SET target dimension over the limit! [ 454.560794][ T3118] netlink: 'syz.4.13200': attribute type 12 has an invalid length. [ 454.581814][ T3121] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.773610][ T3121] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.971039][ T3121] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.029997][ T3165] loop8: detected capacity change from 0 to 128 [ 455.039539][ T3121] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.054540][ T3165] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.120919][ T849] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 455.131811][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.152456][ T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.172755][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.188195][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.215499][ T3183] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13228'. [ 455.249545][ T3187] binfmt_misc: register: failed to install interpreter file ./file2 [ 455.278941][ T3191] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.353885][ T3191] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.377702][ T3209] loop9: detected capacity change from 0 to 256 [ 455.385049][ T3209] FAT-fs (loop9): bogus number of FAT sectors [ 455.391223][ T3209] FAT-fs (loop9): Can't find a valid FAT filesystem [ 455.479654][ T3191] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.550994][ T3191] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.581074][ T3228] loop6: detected capacity change from 0 to 2048 [ 455.592710][ T3228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.782182][ T3247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13255'. [ 455.793721][ T3247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13255'. [ 455.975750][ T3240] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 455.992607][ T3228] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 18 with max blocks 2048 with error 28 [ 456.005163][ T3228] EXT4-fs (loop6): This should not happen!! Data will be lost [ 456.005163][ T3228] [ 456.014990][ T3228] EXT4-fs (loop6): Total free blocks count 0 [ 456.021146][ T3228] EXT4-fs (loop6): Free/Dirty block details [ 456.027046][ T3228] EXT4-fs (loop6): free_blocks=66060288 [ 456.032699][ T3228] EXT4-fs (loop6): dirty_blocks=8208 [ 456.037964][ T3228] EXT4-fs (loop6): Block reservation details [ 456.044004][ T3228] EXT4-fs (loop6): i_reserved_data_blocks=513 [ 456.088148][ T3904] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2068 with max blocks 2048 with error 28 [ 456.246342][ T3272] netlink: 200 bytes leftover after parsing attributes in process `syz.6.13261'. [ 456.278787][ T3276] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.353289][ T3276] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.430981][ T3276] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.490512][ T3276] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.046714][ T3937] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.058568][ T3937] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.072218][ T3937] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.083972][ T3937] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.152797][ T3369] loop7: detected capacity change from 0 to 256 [ 457.219985][ T3379] netlink: 'syz.9.13282': attribute type 10 has an invalid length. [ 457.227717][ T3384] loop8: detected capacity change from 0 to 1024 [ 457.227929][ T3379] netlink: 40 bytes leftover after parsing attributes in process `syz.9.13282'. [ 457.243816][ T3379] dummy0: entered promiscuous mode [ 457.246837][ T3384] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 457.249929][ T3379] bridge0: port 4(dummy0) entered blocking state [ 457.263735][ T3379] bridge0: port 4(dummy0) entered disabled state [ 457.266976][ T29] kauditd_printk_skb: 3489 callbacks suppressed [ 457.266993][ T29] audit: type=1326 audit(2509.272:23774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3382 comm="syz.8.13284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 457.271070][ T3379] dummy0: entered allmulticast mode [ 457.301321][ T29] audit: type=1326 audit(2509.302:23775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3382 comm="syz.8.13284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 457.329041][ T29] audit: type=1326 audit(2509.302:23776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3382 comm="syz.8.13284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 457.352208][ T29] audit: type=1326 audit(2509.302:23777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3382 comm="syz.8.13284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 457.365405][ T3379] bridge0: port 4(dummy0) entered blocking state [ 457.381621][ T3379] bridge0: port 4(dummy0) entered forwarding state [ 457.383558][ T3384] netlink: 240 bytes leftover after parsing attributes in process `syz.8.13284'. [ 457.399102][ T29] audit: type=1326 audit(2509.382:23778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3382 comm="syz.8.13284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f357b4ed810 code=0x7ffc0000 [ 457.422240][ T29] audit: type=1326 audit(2509.382:23779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3382 comm="syz.8.13284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f357b4f07f7 code=0x7ffc0000 [ 457.445346][ T29] audit: type=1326 audit(2509.382:23780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3382 comm="syz.8.13284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 457.468414][ T29] audit: type=1326 audit(2509.382:23781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3382 comm="syz.8.13284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f357b4f07f7 code=0x7ffc0000 [ 457.491616][ T29] audit: type=1326 audit(2509.382:23782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3382 comm="syz.8.13284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f357b4edc2a code=0x7ffc0000 [ 457.511190][ T3390] Cannot find add_set index 0 as target [ 457.514482][ T29] audit: type=1326 audit(2509.382:23783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3382 comm="syz.8.13284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 457.590119][ T9] hid_parser_main: 24 callbacks suppressed [ 457.590168][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 457.603476][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 457.610954][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 457.619717][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 457.627107][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 457.634522][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 457.641939][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 457.649440][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 457.656830][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 457.664397][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 457.673086][ T9] hid-generic 0000:0000:0000.000F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 457.918472][ T3465] loop9: detected capacity change from 0 to 7 [ 457.924989][ T3465] buffer_io_error: 16 callbacks suppressed [ 457.925004][ T3465] Buffer I/O error on dev loop9, logical block 0, async page read [ 457.942545][ T3465] Buffer I/O error on dev loop9, logical block 0, async page read [ 457.950508][ T3465] loop9: unable to read partition table [ 457.956430][ T3465] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 457.956430][ T3465] ) failed (rc=-5) [ 457.988411][ T3479] syz.7.13300: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 458.003739][ T3479] CPU: 1 UID: 0 PID: 3479 Comm: syz.7.13300 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 458.003774][ T3479] Tainted: [W]=WARN [ 458.003811][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 458.003824][ T3479] Call Trace: [ 458.003832][ T3479] [ 458.003840][ T3479] __dump_stack+0x1d/0x30 [ 458.003892][ T3479] dump_stack_lvl+0xe8/0x140 [ 458.003917][ T3479] dump_stack+0x15/0x1b [ 458.003936][ T3479] warn_alloc+0x12b/0x1a0 [ 458.004037][ T3479] ? __rcu_read_unlock+0x4f/0x70 [ 458.004067][ T3479] __vmalloc_node_range_noprof+0x9d/0xed0 [ 458.004102][ T3479] ? __futex_wait+0x1fa/0x260 [ 458.004123][ T3479] ? __pfx_futex_wake_mark+0x10/0x10 [ 458.004183][ T3479] ? __rcu_read_unlock+0x4f/0x70 [ 458.004209][ T3479] ? avc_has_perm_noaudit+0x1b1/0x200 [ 458.004308][ T3479] ? should_fail_ex+0x30/0x280 [ 458.004328][ T3479] ? xskq_create+0x36/0xe0 [ 458.004352][ T3479] vmalloc_user_noprof+0x7d/0xb0 [ 458.004390][ T3479] ? xskq_create+0x80/0xe0 [ 458.004478][ T3479] xskq_create+0x80/0xe0 [ 458.004498][ T3479] xsk_init_queue+0x95/0xf0 [ 458.004539][ T3479] xsk_setsockopt+0x3f5/0x640 [ 458.004560][ T3479] ? __pfx_xsk_setsockopt+0x10/0x10 [ 458.004578][ T3479] __sys_setsockopt+0x184/0x200 [ 458.004632][ T3479] __x64_sys_setsockopt+0x64/0x80 [ 458.004669][ T3479] x64_sys_call+0x20ec/0x3000 [ 458.004756][ T3479] do_syscall_64+0xd2/0x200 [ 458.004776][ T3479] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 458.004803][ T3479] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 458.004837][ T3479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.004872][ T3479] RIP: 0033:0x7fd82f5cefc9 [ 458.004890][ T3479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.004912][ T3479] RSP: 002b:00007fd82e037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 458.004943][ T3479] RAX: ffffffffffffffda RBX: 00007fd82f825fa0 RCX: 00007fd82f5cefc9 [ 458.004959][ T3479] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 458.004973][ T3479] RBP: 00007fd82f651f91 R08: 0000000000000004 R09: 0000000000000000 [ 458.004987][ T3479] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.005057][ T3479] R13: 00007fd82f826038 R14: 00007fd82f825fa0 R15: 00007ffe2bac47f8 [ 458.005077][ T3479] [ 458.005084][ T3479] Mem-Info: [ 458.241188][ T3479] active_anon:24670 inactive_anon:8040 isolated_anon:0 [ 458.241188][ T3479] active_file:11402 inactive_file:6247 isolated_file:0 [ 458.241188][ T3479] unevictable:16392 dirty:269 writeback:0 [ 458.241188][ T3479] slab_reclaimable:4444 slab_unreclaimable:69199 [ 458.241188][ T3479] mapped:28836 shmem:9439 pagetables:1454 [ 458.241188][ T3479] sec_pagetables:0 bounce:0 [ 458.241188][ T3479] kernel_misc_reclaimable:0 [ 458.241188][ T3479] free:1728705 free_pcp:6116 free_cma:0 [ 458.287163][ T3479] Node 0 active_anon:98680kB inactive_anon:32160kB active_file:45608kB inactive_file:24988kB unevictable:65568kB isolated(anon):0kB isolated(file):0kB mapped:115344kB dirty:1076kB writeback:0kB shmem:37756kB kernel_stack:5712kB pagetables:5816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 458.315686][ T3479] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.345767][ T3479] lowmem_reserve[]: 0 2881 7859 7859 [ 458.351228][ T3479] Node 0 DMA32 free:2946736kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950264kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 458.382750][ T3479] lowmem_reserve[]: 0 0 4978 4978 [ 458.387873][ T3479] Node 0 Normal free:3952724kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:98680kB inactive_anon:32160kB active_file:45608kB inactive_file:24988kB unevictable:65568kB writepending:1076kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:20936kB local_pcp:14768kB free_cma:0kB [ 458.422023][ T3479] lowmem_reserve[]: 0 0 0 0 [ 458.426523][ T3479] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 458.439167][ T3479] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946736kB [ 458.455645][ T3479] Node 0 Normal: 1676*4kB (UME) 2644*8kB (UME) 2006*16kB (UME) 1326*32kB (UME) 816*64kB (UME) 732*128kB (UME) 486*256kB (UME) 262*512kB (UME) 97*1024kB (UME) 28*2048kB (UME) 803*4096kB (UM) = 3952624kB [ 458.475599][ T3479] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 458.485253][ T3479] 43465 total pagecache pages [ 458.489980][ T3479] 32 pages in swap cache [ 458.494194][ T3479] Free swap = 94380kB [ 458.498233][ T3479] Total swap = 124996kB [ 458.502560][ T3479] 2097051 pages RAM [ 458.506357][ T3479] 0 pages HighMem/MovableOnly [ 458.511407][ T3479] 81085 pages reserved [ 458.523946][ T41] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.557441][ T41] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.566014][ T41] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.575071][ T41] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.620795][ T3507] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13305'. [ 458.713661][ T3507] netlink: 236 bytes leftover after parsing attributes in process `syz.7.13305'. [ 458.921385][ T3534] netlink: 'syz.7.13317': attribute type 1 has an invalid length. [ 458.955733][ T3534] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.976299][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13317'. [ 458.993966][ T3543] bond3 (unregistering): Released all slaves [ 459.316196][ T3589] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13331'. [ 460.090601][ T3693] loop6: detected capacity change from 0 to 1024 [ 460.102780][ T3693] EXT4-fs: Ignoring removed bh option [ 460.116241][ T3693] EXT4-fs: inline encryption not supported [ 460.124478][ T3693] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 460.135674][ T3693] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 460.144910][ T3693] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.13356: lblock 2 mapped to illegal pblock 2 (length 1) [ 460.159418][ T3693] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.13356: lblock 0 mapped to illegal pblock 48 (length 1) [ 460.173713][ T3693] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.13356: Failed to acquire dquot type 0 [ 460.187565][ T3693] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 460.197497][ T3693] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.13356: mark_inode_dirty error [ 460.208921][ T3693] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 460.219622][ T3693] EXT4-fs (loop6): 1 orphan inode deleted [ 460.228686][ T3693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.241673][ T3937] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1) [ 460.273595][ T3937] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:63: Failed to release dquot type 0 [ 460.362347][ T3718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3718 comm=syz.8.13367 [ 460.375394][ T914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.385480][ T914] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 460.398500][ T914] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 460.443940][ T914] EXT4-fs error (device loop6): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 460.490953][ T3729] __nla_validate_parse: 2 callbacks suppressed [ 460.490970][ T3729] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13368'. [ 460.523490][ T3728] netlink: 76 bytes leftover after parsing attributes in process `syz.4.13372'. [ 460.929264][ T3756] loop6: detected capacity change from 0 to 512 [ 460.936616][ T3756] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 461.058870][ T3764] netlink: 'syz.9.13387': attribute type 2 has an invalid length. [ 461.067372][ T3764] netlink: 'syz.9.13387': attribute type 8 has an invalid length. [ 461.075253][ T3764] netlink: 132 bytes leftover after parsing attributes in process `syz.9.13387'. [ 461.122416][ T3768] tipc: Started in network mode [ 461.127382][ T3768] tipc: Node identity 56757b19246e, cluster identity 4711 [ 461.134643][ T3768] tipc: Enabled bearer , priority 0 [ 461.150456][ T3768] tipc: Disabling bearer [ 461.276898][ T3775] loop9: detected capacity change from 0 to 512 [ 461.284378][ T3775] EXT4-fs (loop9): orphan cleanup on readonly fs [ 461.291057][ T3775] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.13392: bad orphan inode 13 [ 461.302198][ T3775] ext4_test_bit(bit=12, block=18) = 1 [ 461.307626][ T3775] is_bad_inode(inode)=0 [ 461.311797][ T3775] NEXT_ORPHAN(inode)=2130706432 [ 461.316630][ T3775] max_ino=32 [ 461.319843][ T3775] i_nlink=1 [ 461.323374][ T3775] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 461.337700][ T3775] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 461.352676][ T3775] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.13392: bg 0: block 248: padding at end of block bitmap is not set [ 461.368335][ T3775] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.13392: Failed to acquire dquot type 1 [ 461.381201][ T3775] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 461.407347][ T867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.471190][ T3791] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 461.532176][ T3803] bridge: RTM_NEWNEIGH with invalid ether address [ 461.606385][ T3815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13406'. [ 461.731434][ T3824] netlink: 40 bytes leftover after parsing attributes in process `syz.9.13410'. [ 461.740619][ T3824] netlink: 32 bytes leftover after parsing attributes in process `syz.9.13410'. [ 461.988595][ T3837] loop6: detected capacity change from 0 to 128 [ 462.086524][ T3837] syz.6.13416: attempt to access beyond end of device [ 462.086524][ T3837] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 462.118837][ T3837] syz.6.13416: attempt to access beyond end of device [ 462.118837][ T3837] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 462.134817][ T3847] pim6reg1: entered promiscuous mode [ 462.140171][ T3847] pim6reg1: entered allmulticast mode [ 462.147673][ T3837] syz.6.13416: attempt to access beyond end of device [ 462.147673][ T3837] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 462.161758][ T3837] syz.6.13416: attempt to access beyond end of device [ 462.161758][ T3837] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 462.180994][ T3837] syz.6.13416: attempt to access beyond end of device [ 462.180994][ T3837] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 462.199077][ T3837] syz.6.13416: attempt to access beyond end of device [ 462.199077][ T3837] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 462.217631][ T3837] syz.6.13416: attempt to access beyond end of device [ 462.217631][ T3837] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 462.231658][ T3837] syz.6.13416: attempt to access beyond end of device [ 462.231658][ T3837] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 462.246166][ T3837] syz.6.13416: attempt to access beyond end of device [ 462.246166][ T3837] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 462.268814][ T3837] syz.6.13416: attempt to access beyond end of device [ 462.268814][ T3837] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 462.287325][ T3857] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13425'. [ 462.296660][ T3857] IPVS: Error connecting to the multicast addr [ 462.320847][ T3859] loop9: detected capacity change from 0 to 7 [ 462.327132][ T3859] Buffer I/O error on dev loop9, logical block 0, async page read [ 462.335271][ T3859] Buffer I/O error on dev loop9, logical block 0, async page read [ 462.343305][ T3859] loop9: unable to read partition table [ 462.349134][ T3859] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 462.349134][ T3859] ) failed (rc=-5) [ 462.388833][ T3861] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 462.414081][ T3861] team0: Mode changed to "loadbalance" [ 462.414467][ T3867] loop9: detected capacity change from 0 to 512 [ 462.428260][ T3867] EXT4-fs error (device loop9): ext4_iget_extra_inode:5075: inode #15: comm syz.9.13431: corrupted in-inode xattr: invalid ea_ino [ 462.442050][ T3867] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.13431: couldn't read orphan inode 15 (err -117) [ 462.455644][ T3867] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.481058][ T3867] EXT4-fs error (device loop9): ext4_lookup:1787: inode #14: comm syz.9.13431: invalid fast symlink length 39 [ 462.508027][ T867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.525647][ T3879] loop7: detected capacity change from 0 to 8192 [ 462.535074][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 462.535089][ T29] audit: type=1400 audit(2514.532:23856): avc: denied { unmount } for pid=3895 comm="syz.4.13436" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 462.565330][ T3930] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13435'. [ 462.612495][ T3945] netlink: 'syz.9.13439': attribute type 10 has an invalid length. [ 462.653948][ T3945] team0 (unregistering): Port device team_slave_0 removed [ 462.688431][ T3945] team0 (unregistering): Port device team_slave_1 removed [ 462.838135][ T3952] netlink: 'syz.7.13442': attribute type 1 has an invalid length. [ 462.854632][ T29] audit: type=1326 audit(2514.842:23857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.6.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8b8a95e67 code=0x7ffc0000 [ 462.877795][ T29] audit: type=1326 audit(2514.842:23858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.6.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8b8a3b099 code=0x7ffc0000 [ 462.900854][ T29] audit: type=1326 audit(2514.842:23859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.6.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8b8a95e67 code=0x7ffc0000 [ 462.923932][ T29] audit: type=1326 audit(2514.842:23860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.6.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8b8a3b099 code=0x7ffc0000 [ 462.947056][ T29] audit: type=1326 audit(2514.842:23861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.6.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b8a9efc9 code=0x7ffc0000 [ 462.970226][ T29] audit: type=1326 audit(2514.842:23862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.6.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8b8a9efc9 code=0x7ffc0000 [ 462.993374][ T29] audit: type=1326 audit(2514.842:23863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.6.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b8a9efc9 code=0x7ffc0000 [ 463.016497][ T29] audit: type=1326 audit(2514.842:23864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.6.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb8b8a9efc9 code=0x7ffc0000 [ 463.039600][ T29] audit: type=1326 audit(2514.852:23865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.6.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8b8a95e67 code=0x7ffc0000 [ 463.232777][ T3976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 463.371126][ T3991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13458'. [ 463.391652][ T3991] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13458'. [ 463.799397][ T4039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4039 comm=syz.9.13478 [ 463.965993][ T4053] team1: entered promiscuous mode [ 463.971143][ T4053] team1: entered allmulticast mode [ 463.986674][ T4053] 8021q: adding VLAN 0 to HW filter on device team1 [ 464.096998][ T4062] lo speed is unknown, defaulting to 1000 [ 464.204780][ T4075] loop8: detected capacity change from 0 to 2048 [ 464.221044][ T4075] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.374439][ T849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.459793][ T4097] loop8: detected capacity change from 0 to 512 [ 464.470277][ T4097] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 464.490537][ T4097] EXT4-fs (loop8): 1 truncate cleaned up [ 464.496550][ T4097] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.531280][ T4097] EXT4-fs error (device loop8): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.8.13504: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 464.552424][ T4097] EXT4-fs (loop8): Remounting filesystem read-only [ 464.558940][ T4097] EXT4-fs warning (device loop8): ext4_rename_delete:3731: inode #2: comm syz.8.13504: Deleting old file: nlink 5, error=-117 [ 464.587795][ T849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.674071][T27072] IPVS: starting estimator thread 0... [ 464.675813][ T4106] loop8: detected capacity change from 0 to 8192 [ 464.764141][ T4127] loop8: detected capacity change from 0 to 128 [ 464.789955][ T4113] IPVS: using max 2544 ests per chain, 127200 per kthread [ 464.851362][ T4135] netlink: 'syz.8.13521': attribute type 7 has an invalid length. [ 464.892510][ T4139] xt_hashlimit: max too large, truncated to 1048576 [ 464.903022][ T4139] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 464.987315][ T4149] loop8: detected capacity change from 0 to 164 [ 465.049377][ T4160] loop8: detected capacity change from 0 to 1024 [ 465.060440][ T4160] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.116727][ T849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.161118][ T4170] netlink: 'syz.9.13536': attribute type 1 has an invalid length. [ 465.189360][ T4170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 465.204040][ T4170] bond5 (unregistering): Released all slaves [ 465.226404][ T4177] loop8: detected capacity change from 0 to 256 [ 465.237676][ T4177] FAT-fs (loop8): bogus number of FAT sectors [ 465.243798][ T4177] FAT-fs (loop8): Can't find a valid FAT filesystem [ 465.277888][ T4179] bridge0: port 1(gretap0) entered blocking state [ 465.284491][ T4179] bridge0: port 1(gretap0) entered disabled state [ 465.296963][ T4179] gretap0: entered promiscuous mode [ 465.303745][ T4179] bridge0: port 1(gretap0) entered blocking state [ 465.310237][ T4179] bridge0: port 1(gretap0) entered forwarding state [ 465.320963][ T4179] gretap0: left promiscuous mode [ 465.326002][ T4179] bridge0: port 1(gretap0) entered disabled state [ 465.376975][ T4190] loop8: detected capacity change from 0 to 164 [ 465.402088][ T4188] lo speed is unknown, defaulting to 1000 [ 465.436581][ T4192] siw: device registration error -23 [ 465.761478][ T4210] lo speed is unknown, defaulting to 1000 [ 467.013292][ T4274] loop9: detected capacity change from 0 to 1024 [ 467.020239][ T4274] EXT4-fs: Ignoring removed orlov option [ 467.025891][ T4274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.040724][ T4274] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.165075][ T4272] loop6: detected capacity change from 0 to 8192 [ 467.195432][ T867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.232360][ T4283] __nla_validate_parse: 7 callbacks suppressed [ 467.232377][ T4283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13583'. [ 467.349288][ T4293] bridge: RTM_NEWNEIGH with invalid ether address [ 467.555107][ T4309] loop7: detected capacity change from 0 to 2048 [ 467.564764][ T4310] loop9: detected capacity change from 0 to 2048 [ 467.579449][ T4312] netlink: 'syz.8.13596': attribute type 12 has an invalid length. [ 467.599797][ T4309] EXT4-fs (loop7): failed to initialize system zone (-117) [ 467.607027][ T4309] EXT4-fs (loop7): mount failed [ 467.622097][ T29] kauditd_printk_skb: 780 callbacks suppressed [ 467.622112][ T29] audit: type=1400 audit(2519.622:24646): avc: denied { shutdown } for pid=4317 comm="syz.8.13598" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 467.658797][ T4310] EXT4-fs (loop9): failed to initialize system zone (-117) [ 467.679088][ T4310] EXT4-fs (loop9): mount failed [ 467.821219][ T4344] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.019280][ T4344] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.042138][ T4354] bridge0: port 1(ipvlan2) entered blocking state [ 468.048604][ T4354] bridge0: port 1(ipvlan2) entered disabled state [ 468.057344][ T4354] ipvlan2: entered allmulticast mode [ 468.064574][ T4354] ipvlan2: left allmulticast mode [ 468.080715][ T4344] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.140532][ T4344] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.185534][ T3889] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.196658][ T3912] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.212534][ T3912] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.239041][ T3912] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.493700][ T29] audit: type=1326 audit(2520.492:24647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.9.13620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93232efc9 code=0x7ffc0000 [ 468.516959][ T29] audit: type=1326 audit(2520.492:24648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.9.13620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa93232efc9 code=0x7ffc0000 [ 468.540147][ T29] audit: type=1326 audit(2520.492:24649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.9.13620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93232efc9 code=0x7ffc0000 [ 468.563223][ T29] audit: type=1326 audit(2520.492:24650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.9.13620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93232efc9 code=0x7ffc0000 [ 468.587171][ T29] audit: type=1326 audit(2520.492:24651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.9.13620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa93232efc9 code=0x7ffc0000 [ 468.610330][ T29] audit: type=1326 audit(2520.492:24652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.9.13620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93232efc9 code=0x7ffc0000 [ 468.633557][ T29] audit: type=1326 audit(2520.492:24653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.9.13620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93232efc9 code=0x7ffc0000 [ 468.656704][ T29] audit: type=1326 audit(2520.492:24654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.9.13620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa93232efc9 code=0x7ffc0000 [ 468.679867][ T29] audit: type=1326 audit(2520.592:24655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.9.13620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93232efc9 code=0x7ffc0000 [ 468.754925][ T4394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13626'. [ 468.897967][ T4417] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13644'. [ 468.909199][ T4417] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 469.291239][ T4456] lo speed is unknown, defaulting to 1000 [ 469.345680][ T4459] syzkaller0: entered allmulticast mode [ 469.362935][ T4459] syzkaller0: entered promiscuous mode [ 469.390365][ T4459] syzkaller0 (unregistering): left allmulticast mode [ 469.397094][ T4459] syzkaller0 (unregistering): left promiscuous mode [ 469.576397][ T4470] netlink: 'syz.8.13661': attribute type 1 has an invalid length. [ 469.592588][ T4470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 469.602831][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13661'. [ 469.615942][ T4470] bond3 (unregistering): Released all slaves [ 469.792115][ T4488] loop7: detected capacity change from 0 to 7 [ 469.798401][ T4488] Buffer I/O error on dev loop7, logical block 0, async page read [ 469.806511][ T4488] Buffer I/O error on dev loop7, logical block 0, async page read [ 469.814490][ T4488] loop7: unable to read partition table [ 469.816648][ T4484] ÿÿÿÿÿÿ: renamed from vlan1 [ 469.829661][ T4486] loop8: detected capacity change from 0 to 2048 [ 469.841888][ T4488] loop_reread_partitions: partition scan of loop7 (úùƒå¡7x~¾SêjÌ–ã¢P) failed (rc=-5) [ 469.853358][ T4486] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.939113][ T955] Bluetooth: hci0: command 0x1003 tx timeout [ 469.939752][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 470.018827][ T849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.083107][ T4506] loop7: detected capacity change from 0 to 8192 [ 470.129247][ T4506] loop7: p1 < > p2 < p5 p6 > p3 p4 [ 470.134491][ T4506] loop7: partition table partially beyond EOD, truncated [ 470.141881][ T4506] loop7: p1 start 67108864 is beyond EOD, truncated [ 470.149082][ T4506] loop7: p3 start 100859904 is beyond EOD, truncated [ 470.155796][ T4506] loop7: p4 size 393216 extends beyond EOD, truncated [ 470.163650][ T4506] loop7: p5 start 100859904 is beyond EOD, truncated [ 470.170412][ T4506] loop7: p6 size 393216 extends beyond EOD, truncated [ 470.328409][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13681'. [ 470.449079][ T4536] netlink: 200 bytes leftover after parsing attributes in process `syz.8.13687'. [ 471.005020][ T4561] Cannot find add_set index 0 as target [ 471.899498][ T4599] netlink: 200 bytes leftover after parsing attributes in process `syz.7.13715'. [ 472.058147][ T4616] netlink: 'syz.8.13721': attribute type 1 has an invalid length. [ 472.072869][ T4616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.092941][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13721'. [ 472.116402][ T4619] warn_alloc: 1 callbacks suppressed [ 472.116425][ T4619] syz.4.13722: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 472.126505][ T4616] bond3 (unregistering): Released all slaves [ 472.136342][ T4619] CPU: 0 UID: 0 PID: 4619 Comm: syz.4.13722 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 472.136377][ T4619] Tainted: [W]=WARN [ 472.136384][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 472.136398][ T4619] Call Trace: [ 472.136406][ T4619] [ 472.136420][ T4619] __dump_stack+0x1d/0x30 [ 472.136458][ T4619] dump_stack_lvl+0xe8/0x140 [ 472.136482][ T4619] dump_stack+0x15/0x1b [ 472.136570][ T4619] warn_alloc+0x12b/0x1a0 [ 472.136608][ T4619] ? __rcu_read_unlock+0x4f/0x70 [ 472.136639][ T4619] __vmalloc_node_range_noprof+0x9d/0xed0 [ 472.136716][ T4619] ? __futex_wait+0x1fa/0x260 [ 472.136738][ T4619] ? __pfx_futex_wake_mark+0x10/0x10 [ 472.136761][ T4619] ? __rcu_read_unlock+0x4f/0x70 [ 472.136787][ T4619] ? avc_has_perm_noaudit+0x1b1/0x200 [ 472.136874][ T4619] ? should_fail_ex+0x30/0x280 [ 472.136895][ T4619] ? xskq_create+0x36/0xe0 [ 472.136920][ T4619] vmalloc_user_noprof+0x7d/0xb0 [ 472.136956][ T4619] ? xskq_create+0x80/0xe0 [ 472.137000][ T4619] xskq_create+0x80/0xe0 [ 472.137050][ T4619] xsk_init_queue+0x95/0xf0 [ 472.137071][ T4619] xsk_setsockopt+0x3f5/0x640 [ 472.137092][ T4619] ? __pfx_xsk_setsockopt+0x10/0x10 [ 472.137111][ T4619] __sys_setsockopt+0x184/0x200 [ 472.137182][ T4619] __x64_sys_setsockopt+0x64/0x80 [ 472.137216][ T4619] x64_sys_call+0x20ec/0x3000 [ 472.137242][ T4619] do_syscall_64+0xd2/0x200 [ 472.137262][ T4619] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 472.137348][ T4619] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 472.137418][ T4619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.137441][ T4619] RIP: 0033:0x7f5a3a09efc9 [ 472.137457][ T4619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.137476][ T4619] RSP: 002b:00007f5a38b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 472.137532][ T4619] RAX: ffffffffffffffda RBX: 00007f5a3a2f5fa0 RCX: 00007f5a3a09efc9 [ 472.137546][ T4619] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 472.137560][ T4619] RBP: 00007f5a3a121f91 R08: 0000000000000004 R09: 0000000000000000 [ 472.137614][ T4619] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.137628][ T4619] R13: 00007f5a3a2f6038 R14: 00007f5a3a2f5fa0 R15: 00007ffe39e759e8 [ 472.137649][ T4619] [ 472.137656][ T4619] Mem-Info: [ 472.374589][ T4619] active_anon:25181 inactive_anon:8041 isolated_anon:0 [ 472.374589][ T4619] active_file:19115 inactive_file:6263 isolated_file:0 [ 472.374589][ T4619] unevictable:16392 dirty:240 writeback:0 [ 472.374589][ T4619] slab_reclaimable:4407 slab_unreclaimable:69590 [ 472.374589][ T4619] mapped:28835 shmem:9483 pagetables:1257 [ 472.374589][ T4619] sec_pagetables:0 bounce:0 [ 472.374589][ T4619] kernel_misc_reclaimable:0 [ 472.374589][ T4619] free:1712742 free_pcp:12759 free_cma:0 [ 472.420308][ T4619] Node 0 active_anon:100724kB inactive_anon:32164kB active_file:76460kB inactive_file:25052kB unevictable:65568kB isolated(anon):0kB isolated(file):0kB mapped:115340kB dirty:960kB writeback:0kB shmem:37932kB kernel_stack:5680kB pagetables:5028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 472.448420][ T4619] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 472.478040][ T4619] lowmem_reserve[]: 0 2881 7859 7859 [ 472.483423][ T4619] Node 0 DMA32 free:2946736kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950264kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 472.515105][ T4619] lowmem_reserve[]: 0 0 4978 4978 [ 472.520235][ T4619] Node 0 Normal free:3888872kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100724kB inactive_anon:32164kB active_file:76460kB inactive_file:25052kB unevictable:65568kB writepending:960kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:47508kB local_pcp:5220kB free_cma:0kB [ 472.553994][ T4619] lowmem_reserve[]: 0 0 0 0 [ 472.558532][ T4619] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 472.571226][ T4619] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946736kB [ 472.587532][ T4619] Node 0 Normal: 5570*4kB (UME) 1153*8kB (UME) 764*16kB (UME) 451*32kB (UME) 614*64kB (UME) 725*128kB (UME) 500*256kB (UME) 274*512kB (UME) 92*1024kB (UME) 23*2048kB (UME) 803*4096kB (UM) = 3888944kB [ 472.607355][ T4619] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 472.616638][ T4619] 51247 total pagecache pages [ 472.621382][ T4619] 34 pages in swap cache [ 472.625593][ T4619] Free swap = 94368kB [ 472.629680][ T4619] Total swap = 124996kB [ 472.633806][ T4619] 2097051 pages RAM [ 472.637661][ T4619] 0 pages HighMem/MovableOnly [ 472.642369][ T4619] 81085 pages reserved [ 472.796671][ T4639] loop7: detected capacity change from 0 to 1024 [ 472.807822][ T4639] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 472.828125][ T4639] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 472.839150][ T4639] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 472.864248][ T4639] JBD2: no valid journal superblock found [ 472.870058][ T4639] EXT4-fs (loop7): Could not load journal inode [ 472.907147][ T4639] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 473.079912][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13748'. [ 473.095349][ T4675] netlink: 236 bytes leftover after parsing attributes in process `syz.9.13748'. [ 473.146233][ T4677] netlink: 96 bytes leftover after parsing attributes in process `syz.7.13749'. [ 473.165137][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 473.165165][ T29] audit: type=1326 audit(2525.162:24740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.8.13753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 473.195092][ T29] audit: type=1326 audit(2525.162:24741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.8.13753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 473.263853][ T29] audit: type=1326 audit(2525.202:24742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.8.13753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 473.287659][ T29] audit: type=1326 audit(2525.202:24743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.8.13753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 473.310753][ T29] audit: type=1326 audit(2525.202:24744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.8.13753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 473.334667][ T29] audit: type=1326 audit(2525.222:24745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.8.13753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 473.357733][ T29] audit: type=1326 audit(2525.232:24746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.8.13753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 473.381485][ T29] audit: type=1326 audit(2525.262:24747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.8.13753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 473.404530][ T29] audit: type=1326 audit(2525.262:24748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.8.13753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 473.427911][ T29] audit: type=1326 audit(2525.262:24749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.8.13753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 473.479607][ T4696] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.540704][ T4696] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.590664][ T4696] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.640564][ T4696] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.717344][ T3898] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.731814][ T3898] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.747305][ T3898] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.761799][ T3898] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.770241][ T4716] bridge0: entered promiscuous mode [ 473.776191][ T4716] bridge0: left promiscuous mode [ 473.791338][ T4718] netlink: 96 bytes leftover after parsing attributes in process `syz.8.13766'. [ 473.965094][ T4743] loop8: detected capacity change from 0 to 1024 [ 473.972983][ T4743] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 473.984467][ T4743] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 473.995526][ T4743] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 474.013914][ T4745] loop6: detected capacity change from 0 to 2048 [ 474.015815][ T4743] JBD2: no valid journal superblock found [ 474.026353][ T4743] EXT4-fs (loop8): Could not load journal inode [ 474.044691][ T4745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.087758][ T4750] loop7: detected capacity change from 0 to 1024 [ 474.121065][ T4750] EXT4-fs: Ignoring removed orlov option [ 474.125373][ T4743] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 474.132774][ T4750] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 474.162605][ T4750] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000] [ 474.187079][ T4750] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.13782: lblock 2 mapped to illegal pblock 2 (length 1) [ 474.191701][ T4756] netlink: 'syz.9.13794': attribute type 1 has an invalid length. [ 474.201925][ T4750] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.13782: lblock 0 mapped to illegal pblock 48 (length 1) [ 474.224151][ T4750] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.13782: Failed to acquire dquot type 0 [ 474.224334][ T4760] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.245464][ T4750] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 474.256161][ T4750] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.13782: mark_inode_dirty error [ 474.260369][ T4761] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13794'. [ 474.277287][ T4750] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 474.289080][ T4750] EXT4-fs (loop7): 1 orphan inode deleted [ 474.295153][ T4750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.315566][ T3898] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 474.331572][ T4756] 8021q: adding VLAN 0 to HW filter on device bond5 [ 474.361496][ T4761] bond5 (unregistering): Released all slaves [ 474.381378][ T4760] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.393186][ T3898] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:30: Failed to release dquot type 0 [ 474.406005][ T914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.436948][ T925] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.447412][ T925] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 474.461136][ T925] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 474.471748][ T4760] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.482063][ T925] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 474.512134][ T4768] loop9: detected capacity change from 0 to 2048 [ 474.531363][ T4760] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.548318][ T4768] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.606231][ T3912] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.634760][ T3912] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.661777][ T3912] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.688561][ T3912] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.856178][ T867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.009716][ T4791] loop9: detected capacity change from 0 to 8192 [ 475.069579][ T4791] loop9: p1 < > p2 < p5 p6 > p3 p4 [ 475.074816][ T4791] loop9: partition table partially beyond EOD, truncated [ 475.109116][ T4791] loop9: p1 start 67108864 is beyond EOD, truncated [ 475.124478][ T4791] loop9: p3 start 100859904 is beyond EOD, truncated [ 475.131207][ T4791] loop9: p4 size 393216 extends beyond EOD, truncated [ 475.158451][ T4791] loop9: p5 start 100859904 is beyond EOD, truncated [ 475.165210][ T4791] loop9: p6 size 393216 extends beyond EOD, truncated [ 475.223482][ T4798] tipc: Enabling of bearer rejected, failed to enable media [ 475.328481][ T4812] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.373883][ T4820] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.13807'. [ 475.383215][ T4820] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13807'. [ 475.410921][ T4812] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.443406][ T4822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4822 comm=syz.7.13809 [ 475.467685][ T4826] loop8: detected capacity change from 0 to 1024 [ 475.474635][ T4826] EXT4-fs: Ignoring removed orlov option [ 475.475240][ T4812] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.491259][ T4826] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 475.502311][ T4826] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000] [ 475.511443][ T4826] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.13811: lblock 2 mapped to illegal pblock 2 (length 1) [ 475.526395][ T4826] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.13811: lblock 0 mapped to illegal pblock 48 (length 1) [ 475.541629][ T4826] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.13811: Failed to acquire dquot type 0 [ 475.554224][ T4826] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 475.554743][ T4812] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.563835][ T4826] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.13811: mark_inode_dirty error [ 475.563947][ T4826] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 475.563979][ T4826] EXT4-fs (loop8): 1 orphan inode deleted [ 475.564317][ T4826] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.569218][ T3898] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 475.629634][ T3898] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:30: Failed to release dquot type 0 [ 475.677071][ T3898] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.685727][ T3898] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.694055][ T3898] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.702373][ T3898] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.730898][ T849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.740911][ T849] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 475.754031][ T849] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 475.763788][ T849] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 476.239579][ T4842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4842 comm=syz.7.13817 [ 476.327541][ T4847] loop7: detected capacity change from 0 to 512 [ 476.360099][ T4847] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 476.667515][ T4868] loop7: detected capacity change from 0 to 1024 [ 476.674694][ T4868] EXT4-fs: Ignoring removed bh option [ 476.680353][ T4868] EXT4-fs: inline encryption not supported [ 476.686756][ T4868] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 476.707824][ T4868] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 476.717128][ T4870] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.13828'. [ 476.726411][ T4870] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13828'. [ 476.737166][ T4868] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.13829: lblock 2 mapped to illegal pblock 2 (length 1) [ 476.753855][ T4868] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.13829: lblock 0 mapped to illegal pblock 48 (length 1) [ 476.768347][ T4868] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.13829: Failed to acquire dquot type 0 [ 476.780520][ T4868] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 476.790232][ T4868] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.13829: mark_inode_dirty error [ 476.802019][ T4868] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 476.812385][ T4868] EXT4-fs (loop7): 1 orphan inode deleted [ 476.818740][ T4868] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.831705][ T3898] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 476.855675][ T3898] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:30: Failed to release dquot type 0 [ 476.878767][ T925] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.888514][ T925] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 476.902271][ T925] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 476.912835][ T925] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 476.942296][ T4881] bridge0: entered promiscuous mode [ 476.952140][ T4881] bridge0: left promiscuous mode [ 477.013160][ T4898] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13839'. [ 477.022428][ T4898] IPVS: Error connecting to the multicast addr [ 477.510427][ T4910] loop6: detected capacity change from 0 to 1024 [ 477.529636][ T4910] EXT4-fs: Ignoring removed orlov option [ 477.541199][ T4910] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 477.567114][ T4910] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000] [ 477.600801][ T4910] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.13842: lblock 2 mapped to illegal pblock 2 (length 1) [ 477.627961][ T4910] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.13842: lblock 0 mapped to illegal pblock 48 (length 1) [ 477.643298][ T4910] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.13842: Failed to acquire dquot type 0 [ 477.654968][ T4910] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 477.664822][ T4910] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.13842: mark_inode_dirty error [ 477.677070][ T4910] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 477.687562][ T4910] EXT4-fs (loop6): 1 orphan inode deleted [ 477.693807][ T4910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.713107][ T3899] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 477.727935][ T3899] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:31: Failed to release dquot type 0 [ 477.936196][ T4922] pim6reg1: entered promiscuous mode [ 477.941695][ T4922] pim6reg1: entered allmulticast mode [ 477.958445][ T914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.967940][ T914] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 477.983096][ T914] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 477.992838][ T914] EXT4-fs error (device loop6): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 478.055770][ T4932] loop6: detected capacity change from 0 to 1024 [ 478.063067][ T4932] ext4: Unknown parameter 'uid<00000000000000000000' [ 478.208775][ T4944] loop9: detected capacity change from 0 to 512 [ 478.218778][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13857'. [ 478.231725][ T4944] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.383360][ T867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.701243][ T4956] loop6: detected capacity change from 0 to 512 [ 478.701545][ T4954] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 478.710053][ T4956] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.13860: corrupted in-inode xattr: invalid ea_ino [ 478.722416][ T4954] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 478.729313][ T4956] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.13860: couldn't read orphan inode 15 (err -117) [ 478.752295][ T4956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.784463][ T4956] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz.6.13860: invalid fast symlink length 39 [ 478.822793][ T914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.241741][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 479.241755][ T29] audit: type=1326 audit(2531.242:24884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.8.13866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 479.271077][ T29] audit: type=1326 audit(2531.242:24885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.8.13866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 479.296803][ T4974] loop8: detected capacity change from 0 to 1024 [ 479.323529][ T29] audit: type=1326 audit(2531.242:24886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.8.13866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 479.326356][ T4974] ext4: Unknown parameter 'uid<00000000000000000000' [ 479.346722][ T29] audit: type=1326 audit(2531.242:24887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.8.13866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 479.346806][ T29] audit: type=1326 audit(2531.242:24888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.8.13866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 479.346835][ T29] audit: type=1326 audit(2531.242:24889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.8.13866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 479.346863][ T29] audit: type=1326 audit(2531.242:24890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.8.13866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 479.346941][ T29] audit: type=1326 audit(2531.242:24891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.8.13866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 479.346973][ T29] audit: type=1326 audit(2531.242:24892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.8.13866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 479.347000][ T29] audit: type=1326 audit(2531.242:24893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.8.13866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b4eefc9 code=0x7ffc0000 [ 479.522668][ T4977] netlink: 660 bytes leftover after parsing attributes in process `syz.9.13869'. [ 479.571064][ T4983] loop7: detected capacity change from 0 to 512 [ 479.592688][ T4983] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 479.614732][ T4983] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 9: comm syz.7.13872: lblock 0 mapped to illegal pblock 9 (length 1) [ 479.634347][ T4983] EXT4-fs (loop7): mount failed [ 479.980633][ T5035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13894'. [ 479.990521][ T5035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13894'. [ 480.609744][ T5062] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13905'. [ 480.820729][ T5073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13908'. [ 480.832527][ T5074] loop7: detected capacity change from 0 to 512 [ 480.840210][ T5073] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13908'. [ 480.863118][ T5074] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.13907: corrupted in-inode xattr: invalid ea_ino [ 480.885512][ T5074] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.13907: couldn't read orphan inode 15 (err -117) [ 480.920399][ T5074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.942613][ T5089] loop6: detected capacity change from 0 to 512 [ 480.966086][ T5074] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz.7.13907: invalid fast symlink length 39 [ 480.980229][ T5089] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 481.021243][ T925] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.045625][ T5089] bio_check_eod: 86 callbacks suppressed [ 481.045641][ T5089] syz.6.13916: attempt to access beyond end of device [ 481.045641][ T5089] loop6: rw=2049, sector=656, nr_sectors = 32 limit=512 [ 481.066791][ T5089] syz.6.13916: attempt to access beyond end of device [ 481.066791][ T5089] loop6: rw=2049, sector=720, nr_sectors = 32 limit=512 [ 481.080912][ T5089] syz.6.13916: attempt to access beyond end of device [ 481.080912][ T5089] loop6: rw=2049, sector=784, nr_sectors = 32 limit=512 [ 481.095541][ T5089] syz.6.13916: attempt to access beyond end of device [ 481.095541][ T5089] loop6: rw=2049, sector=848, nr_sectors = 32 limit=512 [ 481.115223][ T5094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5094 comm=syz.7.13919 [ 481.208593][ T5105] loop8: detected capacity change from 0 to 512 [ 481.215681][ T5105] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 481.239037][ T5105] syz.8.13935: attempt to access beyond end of device [ 481.239037][ T5105] loop8: rw=2049, sector=656, nr_sectors = 32 limit=512 [ 481.253908][ T5105] syz.8.13935: attempt to access beyond end of device [ 481.253908][ T5105] loop8: rw=2049, sector=720, nr_sectors = 32 limit=512 [ 481.268054][ T5105] syz.8.13935: attempt to access beyond end of device [ 481.268054][ T5105] loop8: rw=2049, sector=784, nr_sectors = 32 limit=512 [ 481.281725][ T5105] syz.8.13935: attempt to access beyond end of device [ 481.281725][ T5105] loop8: rw=2049, sector=848, nr_sectors = 32 limit=512 [ 481.326898][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13928'. [ 481.462900][ T5128] pimreg: entered allmulticast mode [ 481.468948][ T5128] pimreg: left allmulticast mode [ 481.906810][ T5139] lo speed is unknown, defaulting to 1000 [ 482.311027][ T5173] loop6: detected capacity change from 0 to 164 [ 482.333209][ T5173] syz.6.13953: attempt to access beyond end of device [ 482.333209][ T5173] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 482.352797][ T5173] syz.6.13953: attempt to access beyond end of device [ 482.352797][ T5173] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 482.398874][ T5180] siw: device registration error -23 [ 482.435730][ T5184] xt_hashlimit: max too large, truncated to 1048576 [ 482.444069][ T5184] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 482.694860][ T5192] netlink: 'syz.4.13964': attribute type 1 has an invalid length. [ 482.713706][ T5192] 8021q: adding VLAN 0 to HW filter on device bond8 [ 482.727401][ T5192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13964'. [ 482.747670][ T5192] bond8 (unregistering): Released all slaves [ 482.787535][ T5190] lo speed is unknown, defaulting to 1000 [ 482.822625][ T5199] netlink: 'syz.7.13977': attribute type 1 has an invalid length. [ 482.851939][ T5199] 8021q: adding VLAN 0 to HW filter on device bond3 [ 482.867117][ T5199] dummy0: left allmulticast mode [ 482.878692][ T5199] bond3: (slave dummy0): making interface the new active one [ 482.887259][ T5199] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 482.970387][ T5206] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.033936][ T5206] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.106703][ T5206] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.170546][ T5206] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.258919][ T3898] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.271447][ T3898] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.292763][ T3898] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.324635][ T3898] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.653732][ T5220] xt_hashlimit: max too large, truncated to 1048576 [ 483.661132][ T5220] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 483.714404][ T5221] loop7: detected capacity change from 0 to 512 [ 483.752024][ T5221] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.810791][ T925] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.077541][ T5237] netlink: 'syz.7.13979': attribute type 1 has an invalid length. [ 484.101051][ T5237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 484.125681][ T5237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13979'. [ 484.157606][ T5237] bond4 (unregistering): Released all slaves [ 484.690824][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 484.690840][ T29] audit: type=1326 audit(2536.692:25254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.7.13985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 484.758621][ T29] audit: type=1326 audit(2536.692:25255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.7.13985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 484.782417][ T29] audit: type=1326 audit(2536.692:25256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.7.13985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 484.805982][ T29] audit: type=1326 audit(2536.712:25257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.7.13985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 484.829838][ T29] audit: type=1326 audit(2536.712:25258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.7.13985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 484.853060][ T29] audit: type=1326 audit(2536.712:25259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.7.13985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 484.877235][ T29] audit: type=1326 audit(2536.712:25260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.7.13985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 484.900452][ T29] audit: type=1326 audit(2536.712:25261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.7.13985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 484.924600][ T29] audit: type=1326 audit(2536.712:25262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.7.13985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 484.947945][ T29] audit: type=1326 audit(2536.712:25263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.7.13985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 485.033374][ T5268] loop6: detected capacity change from 0 to 512 [ 485.051156][ T5268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.078246][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13992'. [ 485.102709][ T5266] lo speed is unknown, defaulting to 1000 [ 485.111555][ T914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.193020][ T5277] loop7: detected capacity change from 0 to 512 [ 485.241396][ T5277] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.266467][ T5279] lo speed is unknown, defaulting to 1000 [ 485.303509][ T925] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.805419][ T5301] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.862938][ T5301] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.933561][ T5301] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.995572][ T5301] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.055694][ T3898] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.067806][ T3898] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.083193][ T3898] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.110864][ T3898] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.293172][ T5321] loop9: detected capacity change from 0 to 1024 [ 486.304319][ T5321] EXT4-fs: Ignoring removed orlov option [ 486.319887][ T5321] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 486.336763][ T5323] netlink: 'syz.8.14012': attribute type 10 has an invalid length. [ 486.344852][ T5323] netlink: 40 bytes leftover after parsing attributes in process `syz.8.14012'. [ 486.354697][ T5321] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000] [ 486.366352][ T5321] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.14007: lblock 2 mapped to illegal pblock 2 (length 1) [ 486.374886][ T5323] dummy0: entered promiscuous mode [ 486.386711][ T5323] bridge0: port 3(dummy0) entered blocking state [ 486.393192][ T5323] bridge0: port 3(dummy0) entered disabled state [ 486.399715][ T5323] dummy0: entered allmulticast mode [ 486.406087][ T5323] bridge0: port 3(dummy0) entered blocking state [ 486.412546][ T5323] bridge0: port 3(dummy0) entered forwarding state [ 486.414442][ T5325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5325 comm=syz.7.14013 [ 486.433685][ T5321] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.14007: lblock 0 mapped to illegal pblock 48 (length 1) [ 486.448564][ T5321] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.14007: Failed to acquire dquot type 0 [ 486.466082][ T5321] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 486.473562][ T5327] lo speed is unknown, defaulting to 1000 [ 486.496194][ T5321] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.14007: mark_inode_dirty error [ 486.519144][ T5321] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 486.530963][ T5321] EXT4-fs (loop9): 1 orphan inode deleted [ 486.537464][ T5321] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.552896][ T3899] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 486.580174][ T3899] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:31: Failed to release dquot type 0 [ 486.610393][ T5337] loop8: detected capacity change from 0 to 2048 [ 486.626505][ T5337] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.694618][ T867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.707798][ T867] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 486.724075][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14031'. [ 486.752451][ T867] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 486.783209][ T867] EXT4-fs error (device loop9): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 486.853302][ T5354] xt_hashlimit: max too large, truncated to 1048576 [ 486.865047][ T5354] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 487.135202][ T5348] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 487.159380][ T5337] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 18 with max blocks 2048 with error 28 [ 487.171969][ T5337] EXT4-fs (loop8): This should not happen!! Data will be lost [ 487.171969][ T5337] [ 487.181623][ T5337] EXT4-fs (loop8): Total free blocks count 0 [ 487.187598][ T5337] EXT4-fs (loop8): Free/Dirty block details [ 487.193506][ T5337] EXT4-fs (loop8): free_blocks=66060288 [ 487.199088][ T5337] EXT4-fs (loop8): dirty_blocks=8208 [ 487.204417][ T5337] EXT4-fs (loop8): Block reservation details [ 487.210404][ T5337] EXT4-fs (loop8): i_reserved_data_blocks=513 [ 487.330658][ T5363] loop9: detected capacity change from 0 to 8192 [ 487.354022][ T3889] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2068 with max blocks 2048 with error 28 [ 487.575596][ T5384] loop7: detected capacity change from 0 to 1024 [ 487.589438][ T5384] EXT4-fs: Ignoring removed orlov option [ 487.595143][ T5384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 487.640838][ T5384] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.696836][ T925] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.837797][ T5400] netlink: 'syz.6.14038': attribute type 1 has an invalid length. [ 487.853224][ T5400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.869703][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14038'. [ 487.887217][ T5400] bond2 (unregistering): Released all slaves [ 488.005425][ T5405] loop6: detected capacity change from 0 to 2048 [ 488.030415][ T5405] EXT4-fs (loop6): failed to initialize system zone (-117) [ 488.040321][ T5405] EXT4-fs (loop6): mount failed [ 488.052405][ T5407] lo speed is unknown, defaulting to 1000 [ 488.575036][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14048'. [ 489.539519][ T9] page_pool_release_retry() stalled pool shutdown: id 350, 1 inflight 60 sec [ 490.195252][ T5432] loop9: detected capacity change from 0 to 512 [ 490.209333][ T5432] EXT4-fs: Ignoring removed i_version option [ 490.215400][ T5432] EXT4-fs: Ignoring removed bh option [ 490.241156][ T5432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.330726][ T5435] lo speed is unknown, defaulting to 1000 [ 490.447103][ T5444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14053'. [ 490.456237][ T5444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14053'. [ 490.483041][ T5448] netlink: 'syz.8.14054': attribute type 1 has an invalid length. [ 490.498360][ T867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.511981][ T5448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.538070][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14054'. [ 490.558367][ T5448] bond3 (unregistering): Released all slaves [ 490.599324][ T5461] loop6: detected capacity change from 0 to 512 [ 490.607420][ T5464] IPv6: NLM_F_CREATE should be specified when creating new route [ 490.615605][ T5461] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 490.627745][ T5461] EXT4-fs (loop6): 1 truncate cleaned up [ 490.656732][ T5461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.699939][ T5461] EXT4-fs error (device loop6): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.6.14061: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 490.743722][ T5461] EXT4-fs (loop6): Remounting filesystem read-only [ 490.750410][ T5461] EXT4-fs warning (device loop6): ext4_rename_delete:3731: inode #2: comm syz.6.14061: Deleting old file: nlink 5, error=-117 [ 490.789558][ T29] kauditd_printk_skb: 683 callbacks suppressed [ 490.789573][ T29] audit: type=1326 audit(2542.782:25944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5472 comm="syz.4.14066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3a09efc9 code=0x7ffc0000 [ 490.818865][ T29] audit: type=1326 audit(2542.782:25945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5472 comm="syz.4.14066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3a09efc9 code=0x7ffc0000 [ 490.846324][ T29] audit: type=1326 audit(2542.792:25946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5472 comm="syz.4.14066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a3a09efc9 code=0x7ffc0000 [ 490.860526][ T5469] lo speed is unknown, defaulting to 1000 [ 490.870331][ T29] audit: type=1326 audit(2542.792:25947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5472 comm="syz.4.14066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3a09efc9 code=0x7ffc0000 [ 490.898520][ T29] audit: type=1326 audit(2542.792:25948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5472 comm="syz.4.14066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3a09efc9 code=0x7ffc0000 [ 490.922292][ T29] audit: type=1326 audit(2542.792:25949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5472 comm="syz.4.14066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a3a09d810 code=0x7ffc0000 [ 490.945379][ T29] audit: type=1326 audit(2542.792:25950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5472 comm="syz.4.14066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3a09efc9 code=0x7ffc0000 [ 490.969107][ T29] audit: type=1326 audit(2542.792:25951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5472 comm="syz.4.14066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3a09efc9 code=0x7ffc0000 [ 490.992851][ T29] audit: type=1326 audit(2542.792:25952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5472 comm="syz.4.14066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a3a0a0ee7 code=0x7ffc0000 [ 491.015930][ T29] audit: type=1326 audit(2542.792:25953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5472 comm="syz.4.14066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5a3a0a0e5c code=0x7ffc0000 [ 491.049549][ T914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.140617][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14071'. [ 491.199632][ T5485] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.226240][ T5494] netlink: 'syz.6.14076': attribute type 1 has an invalid length. [ 491.248140][ T5491] macvlan2: entered promiscuous mode [ 491.253479][ T5491] macvlan2: entered allmulticast mode [ 491.271557][ T5491] bond5: (slave macvlan2): Opening slave failed [ 491.303575][ T5494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.321501][ T5488] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14074'. [ 491.331236][ T5488] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14074'. [ 491.351289][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14076'. [ 491.393126][ T5501] bond2 (unregistering): Released all slaves [ 491.441294][ T5507] netlink: 48 bytes leftover after parsing attributes in process `syz.9.14078'. [ 491.607311][T27072] hid_parser_main: 19 callbacks suppressed [ 491.607334][T27072] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 491.660811][T27072] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 491.671326][ T5520] lo speed is unknown, defaulting to 1000 [ 491.825906][ T5544] netlink: 'syz.4.14095': attribute type 1 has an invalid length. [ 491.852599][ T5548] loop8: detected capacity change from 0 to 512 [ 491.856006][ T5544] 8021q: adding VLAN 0 to HW filter on device bond8 [ 491.869309][ T5548] EXT4-fs: Ignoring removed i_version option [ 491.875345][ T5548] EXT4-fs: Ignoring removed bh option [ 491.888009][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14095'. [ 491.899515][ T5549] bond8 (unregistering): Released all slaves [ 491.909903][ T5548] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.035169][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14098'. [ 492.130313][ T849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.180423][ T5567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.197087][ T5567] macvlan2: entered promiscuous mode [ 492.202638][ T5567] macvlan2: entered allmulticast mode [ 492.209319][ T5567] bond3: (slave macvlan2): Opening slave failed [ 492.452230][ T5572] lo speed is unknown, defaulting to 1000 [ 492.567661][ T5572] chnl_net:caif_netlink_parms(): no params data found [ 492.604822][ T5603] tipc: Started in network mode [ 492.609862][ T5603] tipc: Node identity ac14140f, cluster identity 4711 [ 492.616801][ T5603] tipc: New replicast peer: 255.255.255.83 [ 492.622730][ T5603] tipc: Enabled bearer , priority 10 [ 492.635293][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.642655][ T5572] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.652094][ T5572] bridge_slave_0: entered allmulticast mode [ 492.654715][ T5610] loop7: detected capacity change from 0 to 128 [ 492.658805][ T5572] bridge_slave_0: entered promiscuous mode [ 492.676219][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.683345][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.698670][ T5572] bridge_slave_1: entered allmulticast mode [ 492.705401][ T5572] bridge_slave_1: entered promiscuous mode [ 492.724832][ T5572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.737681][ T5572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.767894][ T5572] team0: Port device team_slave_0 added [ 492.780627][ T5572] team0: Port device team_slave_1 added [ 492.807140][ T5611] lo speed is unknown, defaulting to 1000 [ 492.840068][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.847052][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.872974][ T5572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.884743][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.891716][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.917802][ T5572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.979957][ T5572] hsr_slave_0: entered promiscuous mode [ 492.986483][ T5572] hsr_slave_1: entered promiscuous mode [ 492.993670][ T5572] debugfs: 'hsr0' already exists in 'hsr' [ 492.999496][ T5572] Cannot create hsr debugfs directory [ 493.114855][ T5572] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.181007][ T5572] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.250381][ T5572] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.340481][ T5572] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.433418][ T5572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 493.442524][ T5572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 493.451584][ T5572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 493.460939][ T5572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 493.475840][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.482993][ T5572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.490375][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.497427][ T5572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.525994][ T5572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.538281][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.548576][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.561346][ T5572] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.571016][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.578064][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.588454][ T3899] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.595632][ T3899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.651986][ T5572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.706933][ T5572] veth0_vlan: entered promiscuous mode [ 493.715038][ T5572] veth1_vlan: entered promiscuous mode [ 493.731281][ T5572] veth0_macvtap: entered promiscuous mode [ 493.738733][ T5572] veth1_macvtap: entered promiscuous mode [ 493.748912][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.756215][T17503] tipc: Node number set to 2886997007 [ 493.763370][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.774699][ T3885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.783908][ T3889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.792908][ T3889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.803335][ T3889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.891874][ T5667] netlink: 'syz.2.14127': attribute type 1 has an invalid length. [ 493.911077][ T5670] loop7: detected capacity change from 0 to 512 [ 493.921368][ T5670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 493.929441][ T5660] lo: left allmulticast mode [ 493.941615][ T5660] tunl0: left allmulticast mode [ 493.947001][ T5670] System zones: 1-12 [ 493.956637][ T5660] gre0: left allmulticast mode [ 493.962052][ T5670] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.14132: corrupted in-inode xattr: e_value size too large [ 493.978193][ T5660] gretap0: left allmulticast mode [ 493.984690][ T5660] erspan0: left allmulticast mode [ 493.989980][ T5660] ip_vti0: left allmulticast mode [ 493.995120][ T5660] ip6_vti0: left allmulticast mode [ 494.000875][ T5660] sit0: left allmulticast mode [ 494.005867][ T5660] ip6tnl0: left allmulticast mode [ 494.011245][ T5660] ip6gre0: left allmulticast mode [ 494.016390][ T5660] syz_tun: left allmulticast mode [ 494.021674][ T5660] ip6gretap0: left allmulticast mode [ 494.027005][ T5660] .`: left allmulticast mode [ 494.032354][ T5660] team0: left allmulticast mode [ 494.045171][ T5660] dummy0: left allmulticast mode [ 494.050237][ T5660] nlmon0: left allmulticast mode [ 494.055324][ T5660] caif0: left allmulticast mode [ 494.060350][ T5660] veth0: left allmulticast mode [ 494.065363][ T5660] veth1: left allmulticast mode [ 494.070303][ T5660] wg1: left allmulticast mode [ 494.075069][ T5660] veth0_to_bridge: left allmulticast mode [ 494.080982][ T5660] veth1_to_bridge: left allmulticast mode [ 494.086736][ T5660] bridge_slave_1: left allmulticast mode [ 494.092555][ T5660] veth0_to_bond: left allmulticast mode [ 494.098184][ T5660] bond_slave_0: left allmulticast mode [ 494.103818][ T5660] veth1_to_bond: left allmulticast mode [ 494.109484][ T5660] bond_slave_1: left allmulticast mode [ 494.115049][ T5660] veth0_to_team: left allmulticast mode [ 494.120693][ T5660] team_slave_0: left allmulticast mode [ 494.126178][ T5660] veth1_to_team: left allmulticast mode [ 494.129732][ T5670] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.14132: couldn't read orphan inode 15 (err -117) [ 494.131810][ T5660] team_slave_1: left allmulticast mode [ 494.149169][ T5660] veth0_to_batadv: left allmulticast mode [ 494.154964][ T5660] batadv_slave_0: left allmulticast mode [ 494.160781][ T5660] veth1_to_batadv: left allmulticast mode [ 494.161073][ T5670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.166617][ T5660] batadv_slave_1: left allmulticast mode [ 494.184253][ T5660] xfrm0: left allmulticast mode [ 494.189296][ T5660] veth0_to_hsr: left allmulticast mode [ 494.194821][ T5660] hsr_slave_0: left allmulticast mode [ 494.200274][ T5660] veth1_virt_wifi: left allmulticast mode [ 494.206196][ T5660] veth0_virt_wifi: left allmulticast mode [ 494.212119][ T5660] veth1_macvtap: left allmulticast mode [ 494.217823][ T5660] veth0_macvtap: left allmulticast mode [ 494.223462][ T5660] macvtap0: left allmulticast mode [ 494.228653][ T5660] macsec0: left allmulticast mode [ 494.233735][ T5660] geneve0: left allmulticast mode [ 494.238815][ T5660] geneve1: left allmulticast mode [ 494.243978][ T5660] sit1: left allmulticast mode [ 494.248777][ T5660] veth2: left allmulticast mode [ 494.253731][ T5660] veth3: left promiscuous mode [ 494.258477][ T5660] veth3: left allmulticast mode [ 494.263497][ T5660] batadv1: left allmulticast mode [ 494.268576][ T5660] batadv2: left allmulticast mode [ 494.273722][ T5660] bridge1: left allmulticast mode [ 494.278810][ T5660] bridge2: left allmulticast mode [ 494.283987][ T5660] macvtap1: left allmulticast mode [ 494.289231][ T5660] bridge3: left allmulticast mode [ 494.294399][ T5660] veth4: left promiscuous mode [ 494.299178][ T5660] veth4: left allmulticast mode [ 494.304113][ T5660] veth5: left allmulticast mode [ 494.309034][ T5660] vxlan0: left allmulticast mode [ 494.314072][ T5660] veth6: left allmulticast mode [ 494.318967][ T5660] veth7: left allmulticast mode [ 494.324075][ T5660] bridge4: left allmulticast mode [ 494.329331][ T5660] bridge5: left allmulticast mode [ 494.334496][ T5660] bridge6: left allmulticast mode [ 494.339711][ T5660] gre1: left allmulticast mode [ 494.344534][ T5660] veth8: left allmulticast mode [ 494.349511][ T5660] veth9: left allmulticast mode [ 494.354461][ T5660] bond1: left allmulticast mode [ 494.359440][ T5660] veth10: left allmulticast mode [ 494.364524][ T5660] veth11: left allmulticast mode [ 494.369698][ T5660] veth12: left allmulticast mode [ 494.374663][ T5660] veth13: left allmulticast mode [ 494.379673][ T5660] bond2: left allmulticast mode [ 494.384562][ T5660] veth14: left allmulticast mode [ 494.389642][ T5660] veth15: left allmulticast mode [ 494.439245][ T5660] bridge0: left allmulticast mode [ 494.445688][ T5660] bridge7: left allmulticast mode [ 494.457588][ T5660] sit2: left allmulticast mode [ 494.463091][ T5660] veth16: left allmulticast mode [ 494.468107][ T5660] veth17: left allmulticast mode [ 494.473323][ T5660] veth18: left promiscuous mode [ 494.478187][ T5660] veth18: left allmulticast mode [ 494.483387][ T5660] veth19: left allmulticast mode [ 494.490201][ T5660] bridge8: left allmulticast mode [ 494.498061][ T5660] ip6tnl1: left allmulticast mode [ 494.506528][ T5660] bridge9: left allmulticast mode [ 494.513077][ T925] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.522398][ T5660] bridge10: left allmulticast mode [ 494.528453][ T5660] sit3: left allmulticast mode [ 494.534107][ T5660] veth20: left allmulticast mode [ 494.539332][ T5660] veth21: left allmulticast mode [ 494.544371][ T5660] bond0: left allmulticast mode [ 494.551995][ T5660] bridge11: left allmulticast mode [ 494.560284][ T5660] bond3: left allmulticast mode [ 494.566470][ T5660] bond4: left allmulticast mode [ 494.572944][ T5660] bond5: left allmulticast mode [ 494.578626][ T5660] bond6: left allmulticast mode [ 494.595159][ T5660] ip6gretap1: left allmulticast mode [ 494.867671][ T5736] netlink: 'syz.4.14171': attribute type 4 has an invalid length. [ 494.920771][ T5730] lo speed is unknown, defaulting to 1000 [ 494.988308][ T3940] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.002219][ T5730] chnl_net:caif_netlink_parms(): no params data found [ 495.036319][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.043453][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.050829][ T5730] bridge_slave_0: entered allmulticast mode [ 495.057413][ T5730] bridge_slave_0: entered promiscuous mode [ 495.065303][ T3940] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.076658][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.083731][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.091018][ T5730] bridge_slave_1: entered allmulticast mode [ 495.097371][ T5730] bridge_slave_1: entered promiscuous mode [ 495.113942][ T3940] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.126611][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.137203][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.156693][ T5730] team0: Port device team_slave_0 added [ 495.163291][ T3940] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.175531][ T5730] team0: Port device team_slave_1 added [ 495.190983][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.197943][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.224260][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.235422][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.242452][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.268812][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.296607][ T5730] hsr_slave_0: entered promiscuous mode [ 495.302908][ T5730] hsr_slave_1: entered promiscuous mode [ 495.308796][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 495.314512][ T5730] Cannot create hsr debugfs directory [ 495.690750][ T3940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.700203][ T3940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.709317][ T3940] bond0 (unregistering): Released all slaves [ 495.717323][ T3940] bond1 (unregistering): Released all slaves [ 495.725997][ T3940] bond2 (unregistering): (slave veth11): Releasing active interface [ 495.734377][ T3940] bond2 (unregistering): Released all slaves [ 495.762999][ T3940] tipc: Disabling bearer [ 495.768279][ T3940] tipc: Left network mode [ 495.827013][ T3940] hsr_slave_0: left promiscuous mode [ 495.833943][ T3940] hsr_slave_1: left promiscuous mode [ 495.865025][ T3940] team0 (unregistering): Port device team_slave_0 removed [ 496.092841][ T5730] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 496.101769][ T5730] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 496.110519][ T5730] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 496.119870][ T5730] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 496.162931][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.171496][ T3940] IPVS: stop unused estimator thread 0... [ 496.174785][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.188570][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.195665][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.209286][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.216347][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.276313][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.363235][ T5730] veth0_vlan: entered promiscuous mode [ 496.372807][ T5730] veth1_vlan: entered promiscuous mode [ 496.388035][ T5730] veth0_macvtap: entered promiscuous mode [ 496.395352][ T5730] veth1_macvtap: entered promiscuous mode [ 496.406406][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.417660][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.428979][ T3940] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.441062][ T3940] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.450329][ T3940] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.460750][ T3940] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.507706][ T5772] __nla_validate_parse: 10 callbacks suppressed [ 496.507727][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14162'. [ 496.523341][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 496.523358][ T29] audit: type=1326 audit(2548.502:26074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 496.552630][ T29] audit: type=1326 audit(2548.502:26075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 496.575598][ T29] audit: type=1326 audit(2548.502:26076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 496.598641][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 496.606538][ T29] audit: type=1326 audit(2548.502:26077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 496.629664][ T29] audit: type=1326 audit(2548.502:26078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd82f5cd810 code=0x7ffc0000 [ 496.652879][ T29] audit: type=1326 audit(2548.502:26079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 496.676194][ T29] audit: type=1326 audit(2548.502:26080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 496.699255][ T29] audit: type=1326 audit(2548.502:26081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd82f5cdc2a code=0x7ffc0000 [ 496.723217][ T29] audit: type=1326 audit(2548.582:26082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd82f601885 code=0x7ffc0000 [ 496.784402][ T29] audit: type=1326 audit(2548.782:26083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82f5cefc9 code=0x7ffc0000 [ 496.827394][ T5777] loop7: detected capacity change from 0 to 8192 [ 496.879756][ T5783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.888360][ T5783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.923305][ T3899] ================================================================== [ 496.931409][ T3899] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 496.939649][ T3899] [ 496.941975][ T3899] write to 0xffff88813b43140c of 2 bytes by task 5777 on cpu 1: [ 496.949589][ T3899] fat16_ent_put+0x28/0x60 [ 496.953999][ T3899] fat_alloc_clusters+0x4d1/0xa80 [ 496.959021][ T3899] fat_get_block+0x258/0x5e0 [ 496.963601][ T3899] __block_write_begin_int+0x400/0xf90 [ 496.969058][ T3899] cont_write_begin+0x5fc/0x970 [ 496.973924][ T3899] fat_write_begin+0x4f/0xe0 [ 496.978508][ T3899] cont_write_begin+0x1b0/0x970 [ 496.983354][ T3899] fat_write_begin+0x4f/0xe0 [ 496.987945][ T3899] generic_cont_expand_simple+0xb0/0x150 [ 496.993575][ T3899] fat_cont_expand+0x3e/0x170 [ 496.998251][ T3899] fat_setattr+0x2a5/0x8a0 [ 497.002655][ T3899] notify_change+0x872/0x8f0 [ 497.007234][ T3899] do_ftruncate+0x34b/0x450 [ 497.011732][ T3899] __x64_sys_ftruncate+0x68/0xc0 [ 497.016663][ T3899] x64_sys_call+0x2d61/0x3000 [ 497.021329][ T3899] do_syscall_64+0xd2/0x200 [ 497.025817][ T3899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.031697][ T3899] [ 497.034004][ T3899] read to 0xffff88813b431400 of 512 bytes by task 3899 on cpu 0: [ 497.041700][ T3899] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 497.047586][ T3899] generic_perform_write+0x2c2/0x490 [ 497.052862][ T3899] shmem_file_write_iter+0xc5/0xf0 [ 497.057963][ T3899] lo_rw_aio+0x6a0/0x760 [ 497.062203][ T3899] loop_process_work+0x52d/0xa60 [ 497.067134][ T3899] loop_workfn+0x31/0x40 [ 497.071368][ T3899] process_scheduled_works+0x4ce/0x9d0 [ 497.076824][ T3899] worker_thread+0x582/0x770 [ 497.081397][ T3899] kthread+0x489/0x510 [ 497.085455][ T3899] ret_from_fork+0x122/0x1b0 [ 497.090032][ T3899] ret_from_fork_asm+0x1a/0x30 [ 497.094786][ T3899] [ 497.097092][ T3899] Reported by Kernel Concurrency Sanitizer on: [ 497.103226][ T3899] CPU: 0 UID: 0 PID: 3899 Comm: kworker/u8:31 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 497.114767][ T3899] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 497.118553][ T3899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.128590][ T3899] Workqueue: loop7 loop_workfn [ 497.133353][ T3899] ================================================================== [ 497.741240][ T41] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.780988][ T41] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.850403][ T41] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.910189][ T41] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.990919][ T41] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 498.570094][ T41] .` (unregistering): Released all slaves [ 498.577893][ T41] bond1 (unregistering): Released all slaves [ 498.586161][ T41] bond2 (unregistering): Released all slaves [ 498.594284][ T41] bond0 (unregistering): Released all slaves [ 498.602198][ T41] bond3 (unregistering): Released all slaves [ 498.610397][ T41] bond4 (unregistering): Released all slaves [ 498.618314][ T41] bond5 (unregistering): Released all slaves [ 498.626484][ T41] bond6 (unregistering): Released all slaves [ 498.634143][ T41] bond7 (unregistering): Released all slaves [ 498.643890][ T41] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 498.652306][ T41] ip6gretap1 (unregistering): left allmulticast mode [ 498.770545][ T41] bond0 (unregistering): Released all slaves [ 498.778730][ T41] bond1 (unregistering): Released all slaves [ 498.786886][ T41] bond2 (unregistering): Released all slaves [ 498.795134][ T41] bond3 (unregistering): (slave dummy0): Releasing active interface [ 498.803922][ T41] bond3 (unregistering): Released all slaves [ 498.863999][ T41] tipc: Disabling bearer [ 498.869354][ T41] tipc: Disabling bearer [ 498.874307][ T41] tipc: Left network mode [ 498.889460][ T41] tipc: Left network mode [ 498.948278][ T41] hsr_slave_0: left promiscuous mode [ 498.954027][ T41] hsr_slave_1: left promiscuous mode [ 498.961868][ T41] veth1_macvtap: left promiscuous mode [ 498.967329][ T41] veth0_macvtap: left promiscuous mode [ 498.972985][ T41] veth1_vlan: left promiscuous mode [ 498.978198][ T41] veth0_vlan: left promiscuous mode [ 499.444265][ T41] IPVS: stop unused estimator thread 0... [ 499.450155][ T41] IPVS: stop unused estimator thread 0... [ 499.492677][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.552117][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.601705][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.651219][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.721606][ T41] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.770377][ T41] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.840286][ T41] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.900413][ T41] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.960767][ T41] bridge_slave_1: left allmulticast mode [ 499.966409][ T41] bridge_slave_1: left promiscuous mode [ 499.972165][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.980049][ T41] bridge_slave_0: left allmulticast mode [ 499.985678][ T41] bridge_slave_0: left promiscuous mode [ 499.991353][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.113102][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.123306][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.132697][ T41] bond0 (unregistering): Released all slaves [ 500.202071][ T41] bond0 (unregistering): Released all slaves [ 500.210345][ T41] bond1 (unregistering): Released all slaves [ 500.262876][ T41] tipc: Disabling bearer [ 500.267842][ T41] tipc: Left network mode [ 500.323791][ T41] hsr_slave_0: left promiscuous mode [ 500.329389][ T41] hsr_slave_1: left promiscuous mode [ 500.335010][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.342473][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.350086][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.357457][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.365423][ T41] hsr_slave_0: left promiscuous mode [ 500.371051][ T41] hsr_slave_1: left promiscuous mode [ 500.381428][ T41] veth1_macvtap: left promiscuous mode [ 500.386885][ T41] veth0_macvtap: left promiscuous mode [ 500.392496][ T41] veth1_vlan: left promiscuous mode [ 500.397687][ T41] veth0_vlan: left promiscuous mode [ 500.403247][ T41] veth1_macvtap: left promiscuous mode [ 500.408691][ T41] veth0_macvtap: left promiscuous mode [ 500.481813][ T41] team0 (unregistering): Port device team_slave_1 removed [ 500.491100][ T41] team0 (unregistering): Port device team_slave_0 removed [ 501.031940][ T41] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.101271][ T41] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.161227][ T41] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.241277][ T41] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.301270][ T41] bridge_slave_1: left allmulticast mode [ 501.306960][ T41] bridge_slave_1: left promiscuous mode [ 501.312598][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.320315][ T41] bridge_slave_0: left allmulticast mode [ 501.325950][ T41] bridge_slave_0: left promiscuous mode [ 501.331580][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.410678][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.420588][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.429927][ T41] bond0 (unregistering): Released all slaves [ 501.526623][ T41] hsr_slave_0: left promiscuous mode [ 501.532361][ T41] hsr_slave_1: left promiscuous mode [ 501.537888][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.545335][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.553071][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.560560][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.570808][ T41] veth1_macvtap: left promiscuous mode [ 501.576265][ T41] veth0_macvtap: left promiscuous mode [ 501.581769][ T41] veth1_vlan: left promiscuous mode [ 501.587088][ T41] veth0_vlan: left promiscuous mode [ 501.640584][ T41] team0 (unregistering): Port device team_slave_1 removed [ 501.651013][ T41] team0 (unregistering): Port device team_slave_0 removed