last executing test programs: 2m2.586497805s ago: executing program 32 (id=103): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 1m29.847598732s ago: executing program 1 (id=1006): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/34, 0x22}], 0x1}, 0x96d}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001340)=""/36, 0x24}], 0x1}, 0xffff}], 0x2, 0x40, 0x0) 1m29.741475994s ago: executing program 1 (id=1011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='hrtimer_start\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r3}, 0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 1m29.722533904s ago: executing program 1 (id=1013): r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) 1m29.686544985s ago: executing program 1 (id=1016): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 1m29.668425985s ago: executing program 1 (id=1018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7, 0xfe, 0x0, 0x8, 0x0, 0x5, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5a7, 0x8}, 0x800, 0x80, 0x8, 0x3, 0x8, 0x7, 0x4, 0x0, 0x4, 0x0, 0x2000000a}, 0x0, 0x10, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 1m29.44693304s ago: executing program 1 (id=1022): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x451, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)=';', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) sendfile(r1, r0, 0x0, 0x3ffff) request_key(&(0x7f0000000680)='logon\x00', &(0x7f00000007c0)={'syz', 0x1}, &(0x7f0000000800)='\x00', 0xfffffffffffffffd) 1m29.40634409s ago: executing program 33 (id=1022): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x451, &(0x7f0000002240)="$eJzs28trXFUYAPDv3pmk9mXGUh99qNEqFh9JM33YhQsVBRcKgi7qMiZpqZ020kSwpWgUqUspuC8uBf8CV7oRdSW4VddSKJJNq1AYuTN3ksl0Jk3ipBMzvx9M55x7T3rOl3vOzDn35AbQt4azf5KIHRHxW0QM1bNLCwzX327OX5r4e/7SRBLV6lt/JbVyN+YvTTSKNn5ueyNTjEg/S2Jfm3pnLlw8M16pTJ3P86OzZ98fnblw8bnTZ8dPTZ2aOlc+fvzI4bFbx8pHuxJnFteNvR9N79/z2jtX3pg4ceXdn75JGvG3xNElw22PFutvT1arXa6ut3Y2pZNiDxvCqhTyLjlQG/9DUYjFizcUr37a08YB66parVYf6Hx6rgpsYkn0ugVAbzS+6LP1b+N1l6YeG8L1l+oLoCzum/mrfqYYaV5moGV9203DEXFi7p+rJ25Vr0brfYit61QpANDXvsvmP8+2m/+l0Xxf6N58D6UUEfdFxK6IOBYRuyPi/oha2Qcj4qFV1t+6SXL7/DO9tqbAViib/72Q720tnf81Zn9RKuS5nbX4B5KTpytTh/LfycEY2JLlx5ap4/tXfv2i07mF+V/+yurP3hdLpNeKW5b+zOT47Ph/ibnZ9U8i9hbbxZ8s7AQkEbEnIl5cYx2nn/56f6dzHeIfXNF/3IV9pupXEU/Vr/9ctMSfy7p9p/3J54+Vj47eE5WpQ6ONXnG7n3+5/Gan+u98/Zt1f0GQXf9tbft/I/4/Sknzfu3M6uu4/PvnHdeUa+3/g8nbS459OD47e34sYjB5vZYvNR8vt5QrL5bP4j94oP343xWLv4l9EZF14ocj4pGIeDRv+2MR8XhEHFgm/h9ffuK9tce/vrL4J5e9/tFy/RcTg9F6pH2icOaHb5dUWlpN/Nn1P1JLHcyPrOTzbyXtWltvBgAAgP+fNCJ2RJKOLKTTdGSk/jf8u2NbWpmemX3m5PQH5ybrzwiUYiBt3OkaarofOpYv6xv5ckv+cH7f+MvC1lp+ZGK6Mtnr4KHPbe8w/jN/FnrdOmDdeV4L+pfxD/3L+If+ZfxD/2oz/j16Bn2i3ff/xz1oB3D3tYz/Zbf9TAxgc7H+h/5l/EP/Mv6hL81sjTs/JL85EmlEbIBmbJZEpBuiGRLrlOj1JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB3/BsAAP//nobm9w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)=';', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) sendfile(r1, r0, 0x0, 0x3ffff) request_key(&(0x7f0000000680)='logon\x00', &(0x7f00000007c0)={'syz', 0x1}, &(0x7f0000000800)='\x00', 0xfffffffffffffffd) 1m15.03071041s ago: executing program 6 (id=1384): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m14.991556171s ago: executing program 6 (id=1386): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000008780)) write$binfmt_elf64(r4, &(0x7f0000003380)=ANY=[], 0x18c6) 1m14.702151187s ago: executing program 6 (id=1389): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1d, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) 1m14.486591591s ago: executing program 6 (id=1398): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4}, 0x48) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000180)="bf", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 1m14.361608763s ago: executing program 6 (id=1400): bpf$MAP_CREATE(0x0, 0x0, 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0xc02, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1m13.933602062s ago: executing program 4 (id=1406): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@data_journal}, {@bh}, {@nogrpid}, {@grpjquota}, {@auto_da_alloc}]}, 0x6, 0x605, &(0x7f0000000b80)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0xd, 0xfe, &(0x7f00000000c0)="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"}) 1m13.900855632s ago: executing program 6 (id=1407): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1m13.744097815s ago: executing program 4 (id=1411): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xadfd82f5f27d2a52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m13.717253326s ago: executing program 4 (id=1413): mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 1m13.638065798s ago: executing program 4 (id=1426): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x33) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m13.448307141s ago: executing program 4 (id=1418): bpf$MAP_CREATE(0x0, 0x0, 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0xc02, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1m12.718355145s ago: executing program 3 (id=1435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r2}, 0x18) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r1, 0x0) 1m12.669680246s ago: executing program 4 (id=1437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m12.653079006s ago: executing program 3 (id=1438): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="c50f000000000000000011000000", @ANYBLOB="0c00990008000000370000000e012a0084"], 0x138}}, 0x0) 1m12.618048697s ago: executing program 3 (id=1440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x25, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x6, 0xfff, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.458242981s ago: executing program 3 (id=1444): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1m12.353421822s ago: executing program 3 (id=1449): bpf$MAP_CREATE(0x0, 0x0, 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0xc02, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1m11.666824736s ago: executing program 3 (id=1451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054", 0x8f}, {&(0x7f0000000900)="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", 0x3c2}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 58.790270657s ago: executing program 34 (id=1407): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 57.276352776s ago: executing program 35 (id=1437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 56.292168575s ago: executing program 36 (id=1451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054", 0x8f}, {&(0x7f0000000900)="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", 0x3c2}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 5.225250539s ago: executing program 8 (id=2752): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x62c8, 0x4, 0x42, 0x0, 0x0) 5.1546551s ago: executing program 8 (id=2754): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 4.736239338s ago: executing program 8 (id=2764): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a9", 0x1}], 0x1}}], 0x1, 0x4008440) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3f, 0x10000000, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0xfffffffffffffffc, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) 4.718616988s ago: executing program 8 (id=2765): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 4.64920579s ago: executing program 8 (id=2768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0xf, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c8}, 0x20004804) 4.555534832s ago: executing program 8 (id=2769): symlink(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x37, 0x2d, 0xa]}}}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2.735406817s ago: executing program 5 (id=2810): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.701353357s ago: executing program 5 (id=2813): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) close(r0) 2.657806569s ago: executing program 5 (id=2817): utime(&(0x7f0000000000)='./file7\x00', &(0x7f0000000080)={0xf, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000410000009500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.637406299s ago: executing program 5 (id=2819): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000700)={[{@delalloc}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@abort}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nobh}, {@inlinecrypt}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 2.56267237s ago: executing program 5 (id=2821): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x108100, 0x0, 0x10001, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigpending(0x0, 0x0) 2.396877013s ago: executing program 5 (id=2827): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f0000303000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f00009b2000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2.396598924s ago: executing program 37 (id=2827): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f0000303000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f00009b2000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.478537421s ago: executing program 9 (id=2843): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) pipe2(0x0, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x121091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.449592962s ago: executing program 9 (id=2844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.414669933s ago: executing program 9 (id=2845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='-1\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}, @NFT_MSG_DELOBJ={0x5c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x2e, 0x8, "f3a86bb0dce012fe1061f7391b3cdc1590a72d135d87caf5f3faba2870dab8470a4453cccc4b73f88d16"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x74, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x4883}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000906010200000000000000000600000a05000100070000000a00094000000008100008800c00078008000940000000d40900020073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x10000001}, 0x0) 1.322184644s ago: executing program 9 (id=2847): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$kcm(0x11, 0x3, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000057b871770200000014000200626f6e642d00000000000000000000000900010073"], 0x43}}, 0x0) 1.279008905s ago: executing program 9 (id=2849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.230524606s ago: executing program 9 (id=2850): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.048038679s ago: executing program 7 (id=2851): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.047543769s ago: executing program 7 (id=2852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x81, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0x1, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x5, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x64, 0xff, 0x24, 0x5, 0xe7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x9, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0xb, 0x5, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x3, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x3, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x6, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x5, 0x7fffffff, 0x0, 0x6, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x1, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xfffffffd, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x400, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0xb, 0x9, 0x2, 0xffffffff, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x2, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x6, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x2, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0xc0, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0x7, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x80000002, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 975.847641ms ago: executing program 7 (id=2853): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f00000005c0)=r1}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) listen(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 913.290462ms ago: executing program 7 (id=2854): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x801) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) setgroups(0x0, 0x0) nanosleep(&(0x7f0000000040), 0x0) 894.325213ms ago: executing program 7 (id=2855): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 810.453594ms ago: executing program 2 (id=2856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 805.996345ms ago: executing program 0 (id=2828): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = epoll_create(0x3ff) r3 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000280)={0x2000000, 0x100002000000}) 786.145114ms ago: executing program 2 (id=2857): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0x519, 0x80, 0x0, 0x1bc}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) write$UHID_INPUT(r1, &(0x7f0000003ec0)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 785.251125ms ago: executing program 7 (id=2858): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000640), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x6, 0x5, 0x2, 0x483}) 723.870856ms ago: executing program 0 (id=2859): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) 721.560046ms ago: executing program 0 (id=2860): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xe, r3, 0xfffffffe}, 0x10) 720.923236ms ago: executing program 2 (id=2861): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9174e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 394.504672ms ago: executing program 0 (id=2862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448dd, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 375.521853ms ago: executing program 0 (id=2863): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x300, 0x100, 0x1, 0x4000}}) 316.826624ms ago: executing program 0 (id=2864): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) r1 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0xffffffff, 0x100000, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 251.314365ms ago: executing program 2 (id=2865): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) alarm(0x4) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) listen(r1, 0x4) 209.736136ms ago: executing program 2 (id=2866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000020000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1, 0x0, 0x2000000}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 0s ago: executing program 2 (id=2867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): terface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.626475][ T7799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.639897][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.647013][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.673136][ T7799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.726988][ T7799] hsr_slave_0: entered promiscuous mode [ 98.733146][ T7799] hsr_slave_1: entered promiscuous mode [ 98.739228][ T7799] debugfs: 'hsr0' already exists in 'hsr' [ 98.744967][ T7799] Cannot create hsr debugfs directory [ 98.837483][ T4355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.848930][ T4355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.862492][ T4355] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 98.872078][ T4355] bond0 (unregistering): Released all slaves [ 98.888625][ T4355] bond1 (unregistering): (slave batadv1): Releasing active interface [ 98.900716][ T4355] bond1 (unregistering): Released all slaves [ 98.910593][ T4355] bond2 (unregistering): Released all slaves [ 98.919838][ T7849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1605'. [ 98.965232][ T4355] tipc: Disabling bearer [ 98.970454][ T4355] tipc: Left network mode [ 98.984326][ T7772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.030342][ T4355] hsr_slave_0: left promiscuous mode [ 99.037043][ T4355] hsr_slave_1: left promiscuous mode [ 99.042651][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.050143][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.058842][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.066452][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.075335][ T4355] veth1_macvtap: left promiscuous mode [ 99.082415][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.091804][ T4355] veth0_macvtap: left promiscuous mode [ 99.097997][ T4355] veth1_vlan: left promiscuous mode [ 99.103409][ T4355] veth0_vlan: left promiscuous mode [ 99.160344][ T4355] team0 (unregistering): Port device team_slave_1 removed [ 99.169975][ T4355] team0 (unregistering): Port device team_slave_0 removed [ 99.252273][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 99.275831][ T7799] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 99.287603][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1612'. [ 99.317589][ T7799] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 99.335219][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1613'. [ 99.354895][ T7884] loop5: detected capacity change from 0 to 1024 [ 99.356666][ T7799] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 99.362382][ T7884] EXT4-fs: Ignoring removed nobh option [ 99.373880][ T7884] EXT4-fs: Ignoring removed orlov option [ 99.379683][ T7884] EXT4-fs: Ignoring removed bh option [ 99.392981][ T7799] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 99.401609][ T7884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.416387][ T7843] chnl_net:caif_netlink_parms(): no params data found [ 99.465583][ T7884] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1614: Allocating blocks 385-513 which overlap fs metadata [ 99.493356][ T7884] EXT4-fs (loop5): pa ffff88810714f460: logic 16, phys. 129, len 24 [ 99.501589][ T7884] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 99.512471][ T7772] veth0_vlan: entered promiscuous mode [ 99.529673][ T7772] veth1_vlan: entered promiscuous mode [ 99.548755][ T7884] syz.5.1614 (7884) used greatest stack depth: 9128 bytes left [ 99.549929][ T7843] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.563678][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.571877][ T7843] bridge_slave_0: entered allmulticast mode [ 99.572173][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.587851][ T7843] bridge_slave_0: entered promiscuous mode [ 99.594554][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.601774][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.620856][ T7843] bridge_slave_1: entered allmulticast mode [ 99.627589][ T7843] bridge_slave_1: entered promiscuous mode [ 99.697887][ T7843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.708706][ T7843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.729345][ T7843] team0: Port device team_slave_0 added [ 99.735665][ T7843] team0: Port device team_slave_1 added [ 99.752289][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.759381][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.785377][ T7843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.797154][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.804098][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.830092][ T7843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.849365][ T7772] veth0_macvtap: entered promiscuous mode [ 99.866143][ T7799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.875115][ T7772] veth1_macvtap: entered promiscuous mode [ 99.907547][ T7799] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.924358][ T7843] hsr_slave_0: entered promiscuous mode [ 99.930704][ T7917] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 99.932065][ T7843] hsr_slave_1: entered promiscuous mode [ 99.949748][ T7843] debugfs: 'hsr0' already exists in 'hsr' [ 99.955501][ T7843] Cannot create hsr debugfs directory [ 99.973023][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.981422][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.988527][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.003804][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.011081][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.032103][ T7799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.046768][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.066892][ T4419] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.083996][ T4419] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.104788][ T4419] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.122835][ T4419] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.154105][ T4355] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.179308][ T7799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.214892][ T7843] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 100.225611][ T7843] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 100.237726][ T4355] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.254761][ T7843] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 100.264652][ T7843] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 100.308570][ T4355] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.335194][ T7843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.350370][ T4355] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.370761][ T7843] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.401305][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.408412][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.419306][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.426389][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.439504][ T7799] veth0_vlan: entered promiscuous mode [ 100.455299][ T7799] veth1_vlan: entered promiscuous mode [ 100.490597][ T7843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.501550][ T7843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.523008][ T7799] veth0_macvtap: entered promiscuous mode [ 100.546667][ T4355] bridge_slave_1: left allmulticast mode [ 100.552344][ T4355] bridge_slave_1: left promiscuous mode [ 100.558211][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.566242][ T4355] bridge_slave_0: left allmulticast mode [ 100.571960][ T4355] bridge_slave_0: left promiscuous mode [ 100.577921][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.693098][ T7969] netlink: 'syz.7.1629': attribute type 1 has an invalid length. [ 100.838486][ T4355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.848870][ T4355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.858922][ T4355] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 100.867888][ T4355] bond0 (unregistering): Released all slaves [ 100.876000][ T4355] bond1 (unregistering): Released all slaves [ 100.884678][ T4355] bond2 (unregistering): (slave veth3): Releasing backup interface [ 100.893570][ T4355] bond2 (unregistering): Released all slaves [ 100.901709][ T4355] bond3 (unregistering): Released all slaves [ 100.917096][ T7799] veth1_macvtap: entered promiscuous mode [ 100.929451][ T7970] ip6gre0: entered promiscuous mode [ 100.934773][ T7970] ip6gre0: entered allmulticast mode [ 100.953545][ T4355] tipc: Disabling bearer [ 100.966242][ T4355] tipc: Left network mode [ 100.980352][ T7799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.989331][ T7843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.009842][ T4355] hsr_slave_0: left promiscuous mode [ 101.024585][ T4355] hsr_slave_1: left promiscuous mode [ 101.037467][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.044896][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.054825][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.058529][ T7983] netlink: zone id is out of range [ 101.062506][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.070531][ T7983] netlink: zone id is out of range [ 101.096995][ T4355] veth1_macvtap: left promiscuous mode [ 101.109106][ T4355] veth0_macvtap: left promiscuous mode [ 101.117007][ T4355] veth1_vlan: left promiscuous mode [ 101.122310][ T4355] veth0_vlan: left promiscuous mode [ 101.232471][ T4355] team0 (unregistering): Port device team_slave_1 removed [ 101.244180][ T4355] team0 (unregistering): Port device team_slave_0 removed [ 101.294489][ T7799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.326890][ T4420] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.363530][ T4387] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.397567][ T4387] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.410225][ T4387] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.431738][ T8018] syzkaller1: entered promiscuous mode [ 101.437346][ T8018] syzkaller1: entered allmulticast mode [ 101.444201][ T8019] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 101.486935][ T7843] veth0_vlan: entered promiscuous mode [ 101.508588][ T7843] veth1_vlan: entered promiscuous mode [ 101.532944][ T7843] veth0_macvtap: entered promiscuous mode [ 101.540651][ T7843] veth1_macvtap: entered promiscuous mode [ 101.559225][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.571658][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.587330][ T4416] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.600778][ T4416] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.612589][ T4416] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.627144][ T4416] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.680856][ T8037] bond_slave_1: mtu less than device minimum [ 102.140737][ T8078] netlink: 'syz.2.1664': attribute type 1 has an invalid length. [ 102.160477][ T8078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.209776][ T8081] vhci_hcd: invalid port number 96 [ 102.215037][ T8081] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 102.257526][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.268123][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.338903][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 102.338917][ T29] audit: type=1400 audit(102.326:4044): avc: denied { bind } for pid=8104 comm="syz.2.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.367185][ T29] audit: type=1400 audit(102.346:4045): avc: denied { listen } for pid=8104 comm="syz.2.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.412545][ T29] audit: type=1400 audit(102.396:4046): avc: denied { write } for pid=8108 comm="+}[@" name="file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.434067][ T29] audit: type=1400 audit(102.396:4047): avc: denied { open } for pid=8108 comm="+}[@" path="/12/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.455464][ T29] audit: type=1400 audit(102.396:4048): avc: denied { ioctl } for pid=8108 comm="+}[@" path="/12/file0" dev="tmpfs" ino=79 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.519818][ T8113] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.567755][ T8113] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.596081][ T29] audit: type=1400 audit(102.576:4049): avc: denied { write } for pid=8119 comm="syz.5.1681" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 102.667978][ T8113] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.704278][ T8125] loop5: detected capacity change from 0 to 512 [ 102.717916][ T8125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.732482][ T8113] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.760204][ T8130] 9pnet: p9_errstr2errno: server reported unknown error [ 102.769109][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.785728][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1685'. [ 102.805955][ T29] audit: type=1400 audit(102.786:4050): avc: denied { append } for pid=8133 comm="syz.5.1686" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 102.829491][ T8134] loop5: detected capacity change from 0 to 512 [ 102.847448][ T4416] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.862957][ T4416] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.882510][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1687'. [ 102.891593][ T4416] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.911920][ T4416] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.067569][ T8151] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.117944][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1697'. [ 103.183126][ T8164] syzkaller0: entered promiscuous mode [ 103.187899][ T8168] loop8: detected capacity change from 0 to 2048 [ 103.188697][ T8164] syzkaller0: entered allmulticast mode [ 103.198094][ T29] audit: type=1326 audit(103.176:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001b92ebe9 code=0x7ffc0000 [ 103.229078][ T8169] loop5: detected capacity change from 0 to 512 [ 103.236202][ T29] audit: type=1326 audit(103.206:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f001b92ebe9 code=0x7ffc0000 [ 103.253946][ T8168] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.259131][ T29] audit: type=1326 audit(103.206:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001b92ebe9 code=0x7ffc0000 [ 103.274197][ T8169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.456862][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.485534][ T8159] Set syz1 is full, maxelem 65536 reached [ 103.503185][ T7799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.524971][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 103.618197][ T8195] bond_slave_1: mtu less than device minimum [ 103.648190][ T8200] loop7: detected capacity change from 0 to 512 [ 103.661502][ T8204] netlink: zone id is out of range [ 103.671144][ T8204] netlink: zone id is out of range [ 103.676834][ T8200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.736106][ T7772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.909529][ T8227] loop7: detected capacity change from 0 to 8192 [ 103.936678][ T3405] IPVS: starting estimator thread 0... [ 104.026397][ T8232] IPVS: using max 2976 ests per chain, 148800 per kthread [ 104.037214][ T8243] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 104.084157][ T8245] program syz.9.1731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.172985][ T8251] loop5: detected capacity change from 0 to 1024 [ 104.195671][ T8251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.211690][ T8251] macvtap0: refused to change device tx_queue_len [ 104.229474][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.494237][ T8271] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 104.715932][ T8280] loop7: detected capacity change from 0 to 164 [ 104.780047][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1747'. [ 104.804558][ T8285] loop7: detected capacity change from 0 to 1024 [ 104.840068][ T8285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.878511][ T8292] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.927282][ T7772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.966027][ T8298] tipc: Started in network mode [ 104.970958][ T8298] tipc: Node identity ac14140f, cluster identity 4711 [ 104.985248][ T8298] tipc: New replicast peer: 255.255.255.255 [ 104.991379][ T8298] tipc: Enabled bearer , priority 10 [ 105.164396][ T8314] loop8: detected capacity change from 0 to 2048 [ 105.195248][ T8314] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.265929][ T4416] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:62: bg 0: block 345: padding at end of block bitmap is not set [ 105.324320][ T4416] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 117 [ 105.337055][ T4416] EXT4-fs (loop8): This should not happen!! Data will be lost [ 105.337055][ T4416] [ 105.381025][ T7799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.613573][ T8354] syzkaller1: entered promiscuous mode [ 105.619128][ T8354] syzkaller1: entered allmulticast mode [ 105.673444][ T8358] $Hÿ: (slave dummy0): Releasing backup interface [ 105.680511][ T8358] dummy0: left promiscuous mode [ 105.693228][ T8358] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 105.701244][ T8358] bond_slave_0: left promiscuous mode [ 105.713181][ T8358] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 105.723522][ T8358] bond_slave_1: left promiscuous mode [ 105.745439][ T8358] team0: Port device team_slave_0 removed [ 105.758874][ T8358] team0: Port device team_slave_1 removed [ 105.765833][ T8358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.773450][ T8358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.782474][ T8358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.789930][ T8358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.805609][ T8358] bond0: (slave veth1): Releasing active interface [ 105.835653][ T8366] syzkaller1: entered promiscuous mode [ 105.841229][ T8366] syzkaller1: entered allmulticast mode [ 105.924657][ T8372] loop9: detected capacity change from 0 to 2048 [ 105.938673][ T8372] EXT4-fs (loop9): failed to initialize system zone (-117) [ 105.946037][ T8372] EXT4-fs (loop9): mount failed [ 106.106384][ T6984] tipc: Node number set to 2886997007 [ 106.321730][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1792'. [ 106.331107][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1792'. [ 106.340201][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1792'. [ 106.349493][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1792'. [ 106.358496][ T8391] netlink: 'syz.7.1792': attribute type 6 has an invalid length. [ 106.427356][ T8402] netlink: 'syz.5.1797': attribute type 10 has an invalid length. [ 106.439955][ T8402] netlink: 'syz.5.1797': attribute type 10 has an invalid length. [ 106.448695][ T8402] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 106.457793][ T8402] team0: Port device dummy0 removed [ 106.464904][ T8402] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 106.825741][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1803'. [ 107.272674][ T8460] netlink: 'syz.5.1820': attribute type 4 has an invalid length. [ 107.384596][ T8478] loop5: detected capacity change from 0 to 512 [ 107.415242][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 107.415256][ T29] audit: type=1400 audit(107.396:4321): avc: denied { mounton } for pid=8477 comm="syz.5.1828" path="/398/file0" dev="tmpfs" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 107.444293][ T29] audit: type=1400 audit(107.396:4322): avc: denied { create } for pid=8480 comm="syz.8.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.465300][ T8478] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 107.483944][ T29] audit: type=1400 audit(107.426:4323): avc: denied { ioctl } for pid=8480 comm="syz.8.1829" path="socket:[25407]" dev="sockfs" ino=25407 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.486960][ T8478] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.508148][ T29] audit: type=1400 audit(107.426:4324): avc: denied { write } for pid=8480 comm="syz.8.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.555572][ T8478] EXT4-fs (loop5): mount failed [ 107.568560][ T29] audit: type=1400 audit(107.546:4325): avc: denied { getopt } for pid=8486 comm="syz.9.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.587705][ T29] audit: type=1400 audit(107.546:4326): avc: denied { connect } for pid=8486 comm="syz.9.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.606921][ T29] audit: type=1400 audit(107.546:4327): avc: denied { name_connect } for pid=8486 comm="syz.9.1831" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 107.629347][ T29] audit: type=1400 audit(107.616:4328): avc: denied { write } for pid=8486 comm="syz.9.1831" lport=45006 faddr=fc01::1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.655585][ T29] audit: type=1400 audit(107.616:4329): avc: denied { module_request } for pid=8488 comm="syz.8.1832" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 107.722800][ T8497] ref_ctr increment failed for inode: 0xd7 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811a80b3c0 [ 107.743929][ T8497] ref_ctr increment failed for inode: 0xd7 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811a80b3c0 [ 107.755783][ T8496] uprobe: syz.7.1834:8496 failed to unregister, leaking uprobe [ 107.756676][ T8499] bridge0: port 3(30ªî{X¹¦) entered disabled state [ 107.782620][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.789870][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.815418][ T8499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.825396][ T8499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.842010][ T8499] veth0_vlan: left allmulticast mode [ 107.867093][ T4380] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.878490][ T4380] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.887164][ T4380] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.895794][ T4380] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.907282][ T8496] uprobe: syz.7.1834:8496 failed to unregister, leaking uprobe [ 107.983332][ T8512] loop5: detected capacity change from 0 to 128 [ 108.113218][ T8512] syz.5.1840: attempt to access beyond end of device [ 108.113218][ T8512] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 108.128909][ T8512] syz.5.1840: attempt to access beyond end of device [ 108.128909][ T8512] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 108.144688][ T8512] syz.5.1840: attempt to access beyond end of device [ 108.144688][ T8512] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 108.160619][ T8512] syz.5.1840: attempt to access beyond end of device [ 108.160619][ T8512] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 108.194416][ T8512] syz.5.1840: attempt to access beyond end of device [ 108.194416][ T8512] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 108.212536][ T8512] syz.5.1840: attempt to access beyond end of device [ 108.212536][ T8512] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 108.227684][ T8512] syz.5.1840: attempt to access beyond end of device [ 108.227684][ T8512] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 108.241325][ T8512] syz.5.1840: attempt to access beyond end of device [ 108.241325][ T8512] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 108.256625][ T8512] syz.5.1840: attempt to access beyond end of device [ 108.256625][ T8512] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 108.270911][ T8512] syz.5.1840: attempt to access beyond end of device [ 108.270911][ T8512] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 108.325866][ T8530] loop8: detected capacity change from 0 to 512 [ 108.343684][ T8530] EXT4-fs: Ignoring removed nobh option [ 108.361660][ T8530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.391361][ T8530] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1847: iget: bad i_size value: 38620345925642 [ 108.429593][ T8530] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1847: couldn't read orphan inode 15 (err -117) [ 108.475147][ T8530] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.587929][ T7799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.678360][ T8551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8551 comm=syz.9.1856 [ 108.681232][ T8553] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.1853'. [ 108.700041][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1853'. [ 108.962634][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1863'. [ 108.984371][ T8569] loop7: detected capacity change from 0 to 128 [ 109.291052][ T8568] Set syz1 is full, maxelem 65536 reached [ 109.379566][ T8576] vhci_hcd: invalid port number 96 [ 109.384706][ T8576] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 109.527559][ T8589] loop8: detected capacity change from 0 to 1024 [ 109.545541][ T8589] EXT4-fs: Ignoring removed bh option [ 109.570836][ T8589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 109.629697][ T7799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 109.800298][ T8602] loop5: detected capacity change from 0 to 512 [ 109.811226][ T8604] loop8: detected capacity change from 0 to 128 [ 109.819399][ T8604] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.831681][ T8604] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.841927][ T8602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.869503][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.889346][ T4416] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.135949][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1881'. [ 110.166578][ T8616] veth1_to_hsr: entered promiscuous mode [ 110.183317][ T8616] macsec1: entered promiscuous mode [ 110.188618][ T8616] macsec1: entered allmulticast mode [ 110.194008][ T8616] veth1_to_hsr: entered allmulticast mode [ 110.220405][ T8616] veth1_to_hsr: left allmulticast mode [ 110.226146][ T8616] veth1_to_hsr: left promiscuous mode [ 110.257334][ T8625] loop5: detected capacity change from 0 to 2048 [ 110.265822][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'. [ 110.294623][ T8625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.547147][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1894'. [ 110.611254][ T8651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.630877][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.650717][ T8657] vlan0: entered allmulticast mode [ 110.655854][ T8657] bond2: entered allmulticast mode [ 110.682583][ T8656] $Hÿ: renamed from bond0 (while UP) [ 110.692412][ T8656] $Hÿ: entered promiscuous mode [ 110.697698][ T8656] bond_slave_0: entered promiscuous mode [ 110.703485][ T8656] bond_slave_1: entered promiscuous mode [ 110.807298][ T8661] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1898'. [ 110.989678][ T8659] loop5: detected capacity change from 0 to 1024 [ 110.996413][ T8659] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 111.348388][ T8677] loop5: detected capacity change from 0 to 8192 [ 111.543775][ T8665] loop8: detected capacity change from 0 to 1024 [ 111.592190][ T8665] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.654505][ T8693] loop5: detected capacity change from 0 to 1024 [ 111.734408][ T8693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.887544][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.897746][ T8710] ------------[ cut here ]------------ [ 111.903249][ T8710] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x0, 0x1] s64=[0x0, 0x1] u32=[0x1, 0x0] s32=[0x0, 0x1] var_off=(0x0, 0x1)(1) [ 111.919704][ T8710] WARNING: CPU: 1 PID: 8710 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 111.930313][ T8710] Modules linked in: [ 111.934234][ T8710] CPU: 1 UID: 0 PID: 8710 Comm: syz.7.1919 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.944027][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.954133][ T8710] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 111.960437][ T8710] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 42 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 111.980103][ T8710] RSP: 0018:ffffc900013d7440 EFLAGS: 00010292 [ 111.986191][ T8710] RAX: 8e3480e702265900 RBX: ffff888118f06040 RCX: 0000000000080000 [ 111.994221][ T8710] RDX: ffffc9000309d000 RSI: 0000000000004764 RDI: 0000000000004765 [ 112.002202][ T8710] RBP: 0000000000000000 R08: 0001c900013d727f R09: 0000000000000000 [ 112.010198][ T8710] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888118f06000 [ 112.018182][ T8710] R13: ffff888114930000 R14: ffff888114930000 R15: ffff888118f06038 [ 112.026152][ T8710] FS: 00007f9b7d1bf6c0(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000 [ 112.035138][ T8710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.041767][ T8710] CR2: 00007f9b7d1bef98 CR3: 0000000118014000 CR4: 00000000003506f0 [ 112.049790][ T8710] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 112.057770][ T8710] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 112.065742][ T8710] Call Trace: [ 112.069052][ T8710] [ 112.072055][ T8710] reg_set_min_max+0x215/0x260 [ 112.076885][ T8710] check_cond_jmp_op+0x1080/0x16e0 [ 112.082040][ T8710] do_check+0x332a/0x7a10 [ 112.086576][ T8710] ? __rcu_read_unlock+0x4f/0x70 [ 112.091528][ T8710] ? __rcu_read_unlock+0x4f/0x70 [ 112.096543][ T8710] ? __pfx_verbose+0x10/0x10 [ 112.101284][ T8710] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 112.106982][ T8710] do_check_common+0xc3a/0x12a0 [ 112.111889][ T8710] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 112.117433][ T8710] bpf_check+0x942b/0xd9e0 [ 112.121848][ T8710] ? __rcu_read_unlock+0x4f/0x70 [ 112.126871][ T8710] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 112.133207][ T8710] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 112.139063][ T8710] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 112.144969][ T8710] ? pcpu_block_update+0x232/0x3b0 [ 112.150108][ T8710] ? _find_next_zero_bit+0x64/0xa0 [ 112.155269][ T8710] ? pcpu_block_update+0x24e/0x3b0 [ 112.160586][ T8710] ? _find_next_zero_bit+0x64/0xa0 [ 112.165697][ T8710] ? pcpu_block_refresh_hint+0x157/0x170 [ 112.171392][ T8710] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 112.177511][ T8710] ? css_rstat_updated+0xb7/0x240 [ 112.182569][ T8710] ? __rcu_read_unlock+0x4f/0x70 [ 112.187596][ T8710] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 112.193548][ T8710] ? should_fail_ex+0x30/0x280 [ 112.198465][ T8710] ? selinux_bpf_prog_load+0x36/0xf0 [ 112.203824][ T8710] ? should_failslab+0x8c/0xb0 [ 112.208720][ T8710] ? __kmalloc_cache_noprof+0x189/0x320 [ 112.214344][ T8710] ? selinux_bpf_prog_load+0xbf/0xf0 [ 112.219675][ T8710] ? security_bpf_prog_load+0x2c/0xa0 [ 112.225132][ T8710] bpf_prog_load+0xedd/0x1070 [ 112.229989][ T8710] ? security_bpf+0x2b/0x90 [ 112.234582][ T8710] __sys_bpf+0x462/0x7b0 [ 112.238951][ T8710] __x64_sys_bpf+0x41/0x50 [ 112.243383][ T8710] x64_sys_call+0x2aea/0x2ff0 [ 112.248165][ T8710] do_syscall_64+0xd2/0x200 [ 112.252795][ T8710] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 112.258945][ T8710] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 112.264771][ T8710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.270689][ T8710] RIP: 0033:0x7f9b7e75ebe9 [ 112.275318][ T8710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.294956][ T8710] RSP: 002b:00007f9b7d1bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.303690][ T8710] RAX: ffffffffffffffda RBX: 00007f9b7e995fa0 RCX: 00007f9b7e75ebe9 [ 112.311808][ T8710] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 112.319880][ T8710] RBP: 00007f9b7e7e1e19 R08: 0000000000000000 R09: 0000000000000000 [ 112.327869][ T8710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.336015][ T8710] R13: 00007f9b7e996038 R14: 00007f9b7e995fa0 R15: 00007ffcf689fe08 [ 112.344043][ T8710] [ 112.347122][ T8710] ---[ end trace 0000000000000000 ]--- [ 112.354660][ T7799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.455938][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 112.455983][ T29] audit: type=1400 audit(112.436:4491): avc: denied { write } for pid=8727 comm="syz.9.1926" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.486429][ T29] audit: type=1400 audit(112.436:4492): avc: denied { open } for pid=8727 comm="syz.9.1926" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.509368][ T29] audit: type=1400 audit(112.446:4493): avc: denied { ioctl } for pid=8727 comm="syz.9.1926" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.536110][ T29] audit: type=1326 audit(112.476:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.7.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7e75ebe9 code=0x7ffc0000 [ 112.559122][ T29] audit: type=1326 audit(112.476:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.7.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7e75ebe9 code=0x7ffc0000 [ 112.581899][ T29] audit: type=1326 audit(112.476:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.7.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b7e75ebe9 code=0x7ffc0000 [ 112.604771][ T29] audit: type=1326 audit(112.476:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.7.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7e75ebe9 code=0x7ffc0000 [ 112.627672][ T29] audit: type=1326 audit(112.476:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.7.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7e75ebe9 code=0x7ffc0000 [ 112.650687][ T29] audit: type=1326 audit(112.476:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.7.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b7e75ebe9 code=0x7ffc0000 [ 112.673483][ T29] audit: type=1326 audit(112.476:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.7.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7e75ebe9 code=0x7ffc0000 [ 112.825880][ T8752] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1937'. [ 113.140797][ T8761] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1941'. [ 113.326094][ T8775] vhci_hcd: invalid port number 255 [ 113.331352][ T8775] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 113.348130][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1946'. [ 113.475347][ T8784] vhci_hcd: invalid port number 96 [ 113.480637][ T8784] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 113.813148][ T8805] loop9: detected capacity change from 0 to 1024 [ 113.819842][ T8805] EXT4-fs: Ignoring removed bh option [ 113.828416][ T8805] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.853877][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.904444][ T8813] syzkaller0: entered promiscuous mode [ 113.910000][ T8813] syzkaller0: entered allmulticast mode [ 114.084852][ T8824] loop9: detected capacity change from 0 to 512 [ 114.096039][ T8824] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.1966: corrupted in-inode xattr: invalid ea_ino [ 114.110550][ T8824] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1966: couldn't read orphan inode 15 (err -117) [ 114.128656][ T8824] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.228214][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.672093][ T8887] tipc: Enabled bearer , priority 0 [ 114.680333][ T8887] tipc: Disabling bearer [ 114.713413][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1990'. [ 114.725622][ T8891] ip6gre1: entered allmulticast mode [ 115.466604][ T8902] netlink: 'syz.5.1994': attribute type 4 has an invalid length. [ 115.546851][ T8909] atomic_op ffff88811bd79d28 conn xmit_atomic 0000000000000000 [ 115.855506][ T8923] loop9: detected capacity change from 0 to 128 [ 115.889405][ T8923] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.028698][ T8923] support for cryptoloop has been removed. Use dm-crypt instead. [ 116.054228][ T8929] bridge_slave_0: left allmulticast mode [ 116.059991][ T8929] bridge_slave_0: left promiscuous mode [ 116.065766][ T8929] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.091429][ T7843] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.105121][ T8929] bridge_slave_1: left allmulticast mode [ 116.110903][ T8929] bridge_slave_1: left promiscuous mode [ 116.116607][ T8929] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.133593][ T8929] bond0: (slave bond_slave_0): Releasing backup interface [ 116.147513][ T8929] bond0: (slave bond_slave_1): Releasing backup interface [ 116.162593][ T8929] team0: Port device team_slave_0 removed [ 116.172022][ T8929] team0: Port device team_slave_1 removed [ 116.195760][ T8934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2008'. [ 116.278545][ T8929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.285945][ T8929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.304994][ T8937] loop5: detected capacity change from 0 to 512 [ 116.316760][ T8929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.324204][ T8929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.334856][ T8937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.360288][ T8939] loop9: detected capacity change from 0 to 512 [ 116.384494][ T8944] veth3: entered promiscuous mode [ 116.416477][ T8939] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 116.436801][ T8947] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #19: comm syz.5.2009: corrupted inode contents [ 116.453569][ T8947] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #19: comm syz.5.2009: mark_inode_dirty error [ 116.465005][ T8939] EXT4-fs (loop9): mount failed [ 116.495447][ T8947] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #19: comm syz.5.2009: corrupted inode contents [ 116.512556][ T8939] loop9: detected capacity change from 0 to 1024 [ 116.519264][ T8947] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #19: comm syz.5.2009: mark_inode_dirty error [ 116.531824][ T8939] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.542737][ T8939] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 116.546643][ T8947] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #19: comm syz.5.2009: mark inode dirty (error -117) [ 116.585773][ T8947] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 116.590194][ T8939] JBD2: no valid journal superblock found [ 116.600625][ T8939] EXT4-fs (loop9): Could not load journal inode [ 116.739303][ T4373] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.761245][ T4373] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.772675][ T4373] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.790091][ T4373] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.803718][ T8962] loop9: detected capacity change from 0 to 512 [ 116.819925][ T8964] atomic_op ffff888113eac928 conn xmit_atomic 0000000000000000 [ 116.829929][ T8962] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.863386][ T8962] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.2017: corrupted in-inode xattr: overlapping e_value [ 116.878299][ T8962] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2017: couldn't read orphan inode 15 (err -117) [ 116.892798][ T8962] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.933828][ T8971] loop7: detected capacity change from 0 to 164 [ 116.952979][ T8971] bio_check_eod: 172 callbacks suppressed [ 116.952993][ T8971] wÞ¡ÿ: attempt to access beyond end of device [ 116.952993][ T8971] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 117.009436][ T8971] wÞ¡ÿ: attempt to access beyond end of device [ 117.009436][ T8971] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 117.180201][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.207051][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.232087][ T8995] syzkaller0: refused to change device tx_queue_len [ 117.334603][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2035'. [ 117.420244][ T9010] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2036'. [ 117.472884][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 117.472897][ T29] audit: type=1400 audit(117.456:4690): avc: denied { module_request } for pid=9012 comm="syz.8.2047" kmod="net-pf-16-proto-16-family-nbd" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 117.508023][ T9013] veth3: entered promiscuous mode [ 117.583959][ T29] audit: type=1400 audit(117.566:4691): avc: denied { tracepoint } for pid=9017 comm="syz.8.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 117.684533][ T29] audit: type=1400 audit(117.666:4692): avc: denied { shutdown } for pid=9020 comm="syz.8.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.703852][ T29] audit: type=1400 audit(117.666:4693): avc: denied { write } for pid=9020 comm="syz.8.2040" lport=60887 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 117.727348][ T29] audit: type=1400 audit(117.666:4694): avc: denied { setopt } for pid=9020 comm="syz.8.2040" lport=60887 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 117.777526][ T29] audit: type=1400 audit(117.756:4695): avc: denied { listen } for pid=9022 comm="syz.8.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.796591][ T29] audit: type=1400 audit(117.756:4696): avc: denied { accept } for pid=9022 comm="syz.8.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.833942][ T9025] loop8: detected capacity change from 0 to 512 [ 117.843061][ T9025] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.861252][ T9027] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2043'. [ 117.870900][ T9027] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 117.878461][ T9027] 0ªî{X¹¦: entered allmulticast mode [ 117.884753][ T9027] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 117.935051][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.942543][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.950235][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.959419][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.967007][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.974455][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.982141][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.989692][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.997216][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.004593][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.013868][ T3361] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz1 [ 118.033753][ T29] audit: type=1400 audit(117.846:4697): avc: denied { write } for pid=9026 comm="syz.9.2043" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.056526][ T29] audit: type=1400 audit(117.846:4698): avc: denied { open } for pid=9026 comm="syz.9.2043" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.079675][ T29] audit: type=1400 audit(117.846:4699): avc: denied { ioctl } for pid=9026 comm="syz.9.2043" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.126539][ T9025] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.2042: corrupted in-inode xattr: overlapping e_value [ 118.145433][ T9025] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2042: couldn't read orphan inode 15 (err -117) [ 118.166130][ T9025] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.392848][ T9058] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2056'. [ 118.494071][ T7799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.668072][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2066'. [ 118.761580][ T9089] ref_ctr increment failed for inode: 0xa1f offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881096833c0 [ 118.796898][ T9088] uprobe: syz.2.2067:9088 failed to unregister, leaking uprobe [ 119.014721][ T9076] loop7: detected capacity change from 0 to 1024 [ 119.028943][ T9076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.348283][ T7772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.511988][ T9111] loop8: detected capacity change from 0 to 512 [ 119.520883][ T9111] EXT4-fs: inline encryption not supported [ 119.527173][ T9111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.538564][ T9111] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.715058][ T9121] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9121 comm=syz.5.2079 [ 119.727558][ T9121] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9121 comm=syz.5.2079 [ 119.755903][ T9123] loop5: detected capacity change from 0 to 512 [ 119.786946][ T9123] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.796940][ T9123] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 119.820611][ T9123] netlink: zone id is out of range [ 119.831150][ T9123] netlink: zone id is out of range [ 119.841768][ T9123] netlink: zone id is out of range [ 119.846955][ T9123] netlink: zone id is out of range [ 119.859641][ T9123] netlink: zone id is out of range [ 119.870212][ T9123] netlink: zone id is out of range [ 119.881857][ T9123] netlink: zone id is out of range [ 119.892705][ T9123] netlink: zone id is out of range [ 119.911781][ T9123] netlink: zone id is out of range [ 120.261382][ T9151] netlink: 'syz.5.2092': attribute type 13 has an invalid length. [ 120.284368][ T9151] 0ªî{X¹¦: refused to change device tx_queue_len [ 120.302070][ T7799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.348693][ T9157] loop9: detected capacity change from 0 to 512 [ 120.378141][ T9163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9163 comm=syz.8.2098 [ 120.390942][ T9163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9163 comm=syz.8.2098 [ 120.420473][ T9157] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.436093][ T9165] veth0: entered promiscuous mode [ 120.436243][ T9169] 9pnet: p9_errstr2errno: server reported unknown error [ 120.441923][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2099'. [ 120.466842][ T9165] veth0 (unregistering): left promiscuous mode [ 120.482496][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.519081][ T9178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9178 comm=syz.9.2104 [ 120.634200][ T9185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31504 sclass=netlink_route_socket pid=9185 comm=syz.8.2107 [ 120.689115][ T9190] loop9: detected capacity change from 0 to 512 [ 120.698740][ T9190] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.721352][ T9190] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #17: comm syz.9.2110: iget: bad i_size value: -6917529027641081756 [ 120.741927][ T9190] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2110: couldn't read orphan inode 17 (err -117) [ 120.755769][ T9190] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.772518][ T9190] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2110: bg 0: block 65: padding at end of block bitmap is not set [ 120.788540][ T9190] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.2110: Failed to acquire dquot type 0 [ 120.846153][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.892986][ T9203] tipc: Started in network mode [ 120.897937][ T9203] tipc: Node identity ac14140f, cluster identity 4711 [ 120.905202][ T9203] tipc: New replicast peer: 255.255.255.83 [ 120.911220][ T9203] tipc: Enabled bearer , priority 10 [ 120.924594][ T9205] veth3: entered promiscuous mode [ 121.210619][ T9227] pim6reg: tun_chr_ioctl cmd 35108 [ 121.656384][ T9238] vhci_hcd: invalid port number 96 [ 121.661575][ T9238] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 121.906321][ T36] tipc: Node number set to 2886997007 [ 122.088571][ T9257] loop7: detected capacity change from 0 to 512 [ 122.150494][ T9257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.252348][ T9270] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #19: comm syz.7.2138: corrupted inode contents [ 122.279780][ T9270] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #19: comm syz.7.2138: mark_inode_dirty error [ 122.307196][ T9270] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #19: comm syz.7.2138: corrupted inode contents [ 122.329372][ T9270] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #19: comm syz.7.2138: mark_inode_dirty error [ 122.362288][ T9274] netlink: 'syz.2.2145': attribute type 13 has an invalid length. [ 122.373184][ T9270] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #19: comm syz.7.2138: mark inode dirty (error -117) [ 122.400868][ T9274] gretap0: refused to change device tx_queue_len [ 122.410748][ T9270] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 122.611327][ T9282] veth5: entered promiscuous mode [ 122.731359][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 122.731374][ T29] audit: type=1400 audit(122.716:4822): avc: denied { kexec_image_load } for pid=9287 comm="syz.9.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 122.808657][ T9291] loop9: detected capacity change from 0 to 1024 [ 122.815202][ T9291] EXT4-fs: Ignoring removed bh option [ 122.834097][ T9291] EXT4-fs: inline encryption not supported [ 122.863250][ T9291] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.891580][ T9291] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 122.916871][ T9291] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.2152: lblock 2 mapped to illegal pblock 2 (length 1) [ 122.958575][ T9291] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 122.993661][ T9291] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.2152: lblock 0 mapped to illegal pblock 48 (length 1) [ 123.008944][ T7772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.019908][ T9291] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 123.028728][ T9291] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.2152: Failed to acquire dquot type 0 [ 123.074941][ T9291] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 123.086254][ T9291] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.2152: mark_inode_dirty error [ 123.099932][ T9291] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 123.110437][ T9291] EXT4-fs (loop9): 1 orphan inode deleted [ 123.117808][ T9291] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.130516][ T4391] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:43: lblock 1 mapped to illegal pblock 1 (length 1) [ 123.155231][ T4391] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 123.163696][ T4391] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:43: Failed to release dquot type 0 [ 123.187101][ T9291] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.197088][ T9291] EXT4-fs error (device loop9): __ext4_get_inode_loc:4861: comm syz.9.2152: Invalid inode table block 1 in block_group 0 [ 123.210531][ T9291] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 123.220547][ T9291] EXT4-fs error (device loop9): ext4_quota_off:7221: inode #3: comm syz.9.2152: mark_inode_dirty error [ 123.364604][ T29] audit: type=1400 audit(123.346:4823): avc: denied { write } for pid=9312 comm="syz.5.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.460539][ T9261] syz.8.2140 (9261) used greatest stack depth: 7336 bytes left [ 123.486839][ T9320] tipc: Enabled bearer , priority 0 [ 123.497157][ T9318] tipc: Resetting bearer [ 123.551449][ T9318] tipc: Disabling bearer [ 123.569658][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.573841][ T29] audit: type=1400 audit(123.556:4824): avc: denied { read } for pid=9331 comm="syz.8.2169" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.579221][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.817952][ T9358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.828501][ T9358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.844174][ T29] audit: type=1400 audit(123.826:4825): avc: denied { create } for pid=9359 comm="syz.7.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.880541][ T9368] loop5: detected capacity change from 0 to 512 [ 123.888815][ T29] audit: type=1400 audit(123.826:4826): avc: denied { write } for pid=9359 comm="syz.7.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.939278][ T9368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.984257][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.012451][ T29] audit: type=1400 audit(123.996:4827): avc: denied { name_bind } for pid=9379 comm="syz.5.2186" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 124.313664][ T9442] loop8: detected capacity change from 0 to 512 [ 124.324557][ T9442] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.2189: corrupted in-inode xattr: invalid ea_ino [ 124.339593][ T9442] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2189: couldn't read orphan inode 15 (err -117) [ 124.355492][ T9442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.371353][ T9442] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.2189: deleted inode referenced: 15 [ 124.630069][ T7799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.723748][ T29] audit: type=1326 audit(124.706:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.7.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7e75ebe9 code=0x7ffc0000 [ 124.834958][ T9524] netlink: 'syz.9.2202': attribute type 2 has an invalid length. [ 125.648050][ T9570] netlink: 'syz.8.2221': attribute type 7 has an invalid length. [ 125.655821][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2221'. [ 125.760218][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.777460][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.844804][ T9586] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2229'. [ 125.854125][ T9586] x_tables: ip_tables: udp match: only valid for protocol 17 [ 125.896023][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2232'. [ 125.906688][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2232'. [ 126.211543][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2244'. [ 126.230359][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2244'. [ 126.334601][ T9623] SELinux: failed to load policy [ 126.399154][ T9635] loop8: detected capacity change from 0 to 512 [ 126.441442][ T9635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.742940][ T9632] net_ratelimit: 75 callbacks suppressed [ 126.742958][ T9632] Set syz1 is full, maxelem 65536 reached [ 126.881120][ T9657] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2260'. [ 126.895855][ T9635] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2251: bg 0: block 145: padding at end of block bitmap is not set [ 126.996525][ T7799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.116384][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2267'. [ 127.168664][ T9672] tipc: Enabled bearer , priority 0 [ 127.176207][ T9671] tipc: Resetting bearer [ 127.193095][ T9671] tipc: Disabling bearer [ 127.469284][ T9648] syz.2.2256 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 127.483580][ T9648] CPU: 0 UID: 0 PID: 9648 Comm: syz.2.2256 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 127.483635][ T9648] Tainted: [W]=WARN [ 127.483639][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.483646][ T9648] Call Trace: [ 127.483651][ T9648] [ 127.483656][ T9648] __dump_stack+0x1d/0x30 [ 127.483670][ T9648] dump_stack_lvl+0xe8/0x140 [ 127.483681][ T9648] dump_stack+0x15/0x1b [ 127.483740][ T9648] dump_header+0x81/0x220 [ 127.483759][ T9648] oom_kill_process+0x342/0x400 [ 127.483809][ T9648] out_of_memory+0x979/0xb80 [ 127.483855][ T9648] try_charge_memcg+0x5e6/0x9e0 [ 127.483871][ T9648] obj_cgroup_charge_pages+0xa6/0x150 [ 127.483889][ T9648] __memcg_kmem_charge_page+0x9f/0x170 [ 127.483981][ T9648] __alloc_frozen_pages_noprof+0x188/0x360 [ 127.484139][ T9648] alloc_pages_mpol+0x1e0/0x250 [ 127.484158][ T9648] alloc_pages_noprof+0x90/0x130 [ 127.484175][ T9648] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 127.484203][ T9648] __kvmalloc_node_noprof+0x30f/0x4e0 [ 127.484220][ T9648] ? ip_set_alloc+0x1f/0x30 [ 127.484230][ T9648] ? ip_set_alloc+0x1f/0x30 [ 127.484290][ T9648] ? __kmalloc_cache_noprof+0x189/0x320 [ 127.484307][ T9648] ip_set_alloc+0x1f/0x30 [ 127.484317][ T9648] hash_netiface_create+0x282/0x740 [ 127.484415][ T9648] ? __pfx_hash_netiface_create+0x10/0x10 [ 127.484427][ T9648] ip_set_create+0x3c9/0x960 [ 127.484444][ T9648] nfnetlink_rcv_msg+0x4c3/0x590 [ 127.484591][ T9648] netlink_rcv_skb+0x123/0x220 [ 127.484629][ T9648] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 127.484649][ T9648] nfnetlink_rcv+0x16b/0x1690 [ 127.484707][ T9648] ? nlmon_xmit+0x4f/0x60 [ 127.484776][ T9648] ? consume_skb+0x49/0x150 [ 127.484788][ T9648] ? nlmon_xmit+0x4f/0x60 [ 127.484801][ T9648] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 127.484817][ T9648] ? __dev_queue_xmit+0x1200/0x2000 [ 127.484940][ T9648] ? __dev_queue_xmit+0x182/0x2000 [ 127.485035][ T9648] ? ref_tracker_free+0x37d/0x3e0 [ 127.485049][ T9648] ? __netlink_deliver_tap+0x4dc/0x500 [ 127.485147][ T9648] netlink_unicast+0x5bd/0x690 [ 127.485165][ T9648] netlink_sendmsg+0x58b/0x6b0 [ 127.485201][ T9648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.485215][ T9648] __sock_sendmsg+0x145/0x180 [ 127.485231][ T9648] ____sys_sendmsg+0x31e/0x4e0 [ 127.485246][ T9648] ___sys_sendmsg+0x17b/0x1d0 [ 127.485291][ T9648] __x64_sys_sendmsg+0xd4/0x160 [ 127.485305][ T9648] x64_sys_call+0x191e/0x2ff0 [ 127.485326][ T9648] do_syscall_64+0xd2/0x200 [ 127.485343][ T9648] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 127.485357][ T9648] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 127.485371][ T9648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.485406][ T9648] RIP: 0033:0x7f980e59ebe9 [ 127.485423][ T9648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.485486][ T9648] RSP: 002b:00007f980cfff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.485500][ T9648] RAX: ffffffffffffffda RBX: 00007f980e7d5fa0 RCX: 00007f980e59ebe9 [ 127.485507][ T9648] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 127.485515][ T9648] RBP: 00007f980e621e19 R08: 0000000000000000 R09: 0000000000000000 [ 127.485522][ T9648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.485529][ T9648] R13: 00007f980e7d6038 R14: 00007f980e7d5fa0 R15: 00007ffe5de75d58 [ 127.485539][ T9648] [ 127.485544][ T9648] memory: usage 307200kB, limit 307200kB, failcnt 242 [ 127.741687][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 127.741702][ T29] audit: type=1326 audit(127.726:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 127.742346][ T9648] memory+swap: usage 307784kB, limit 9007199254740988kB, failcnt 0 [ 127.742361][ T9648] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 127.751709][ T29] audit: type=1326 audit(127.736:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 127.766491][ T9648] Memory cgroup stats for /syz2: [ 127.766957][ T9648] cache 4096 [ 127.782028][ T9693] loop5: detected capacity change from 0 to 512 [ 127.782932][ T9648] rss 4096 [ 127.792836][ T29] audit: type=1326 audit(127.756:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 127.798867][ T9648] shmem 0 [ 127.806924][ T29] audit: type=1326 audit(127.776:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 127.814972][ T9648] mapped_file 4096 [ 127.814980][ T9648] dirty 0 [ 127.814985][ T9648] writeback 0 [ 127.814992][ T9648] workingset_refault_anon 2570 [ 127.814999][ T9648] workingset_refault_file 1 [ 127.815005][ T9648] swap 598016 [ 127.815011][ T9648] swapcached 4096 [ 127.815018][ T9648] pgpgin 192455 [ 127.825743][ T29] audit: type=1326 audit(127.806:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 127.831139][ T9648] pgpgout 192451 [ 127.831150][ T9648] pgfault 153529 [ 127.855527][ T29] audit: type=1326 audit(127.846:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 127.861784][ T9648] pgmajfault 328 [ 127.861793][ T9648] inactive_anon 4096 [ 127.861800][ T9648] active_anon 0 [ 127.861808][ T9648] inactive_file 12288 [ 127.870446][ T29] audit: type=1326 audit(127.856:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 127.892040][ T9648] active_file 0 [ 127.892049][ T9648] unevictable 0 [ 127.892071][ T9648] hierarchical_memory_limit 314572800 [ 127.892091][ T9648] hierarchical_memsw_limit 9223372036854771712 [ 127.892100][ T9648] total_cache 4096 [ 127.892106][ T9648] total_rss 4096 [ 127.892112][ T9648] total_shmem 0 [ 127.892118][ T9648] total_mapped_file 4096 [ 127.892125][ T9648] total_dirty 0 [ 127.892130][ T9648] total_writeback 0 [ 127.892212][ T9648] total_workingset_refault_anon 2570 [ 127.892220][ T9648] total_workingset_refault_file 1 [ 127.900044][ T29] audit: type=1326 audit(127.886:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 127.900355][ T9648] total_swap 598016 [ 127.907759][ T9693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.909607][ T9648] total_swapcached 4096 [ 127.909617][ T9648] total_pgpgin 192455 [ 127.932618][ T29] audit: type=1326 audit(127.916:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 127.935312][ T9648] total_pgpgout 192451 [ 127.935322][ T9648] total_pgfault 153529 [ 127.976364][ T29] audit: type=1326 audit(127.946:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 127.977873][ T9648] total_pgmajfault 328 [ 128.235888][ T9648] total_inactive_anon 4096 [ 128.240312][ T9648] total_active_anon 0 [ 128.244292][ T9648] total_inactive_file 12288 [ 128.248817][ T9648] total_active_file 0 [ 128.252982][ T9648] total_unevictable 0 [ 128.257092][ T9648] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2256,pid=9647,uid=0 [ 128.260886][ T9699] loop7: detected capacity change from 0 to 512 [ 128.271801][ T9648] Memory cgroup out of memory: Killed process 9647 (syz.2.2256) total-vm:95744kB, anon-rss:1012kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 128.309005][ T9699] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.2276: corrupted in-inode xattr: invalid ea_ino [ 128.323854][ T9699] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2276: couldn't read orphan inode 15 (err -117) [ 128.351197][ T9699] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.369791][ T9704] loop8: detected capacity change from 0 to 1024 [ 128.381002][ T9699] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.2276: deleted inode referenced: 15 [ 128.392877][ T9704] EXT4-fs: Ignoring removed orlov option [ 128.411050][ T9704] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.489997][ T9693] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2274: bg 0: block 145: padding at end of block bitmap is not set [ 128.602833][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.693923][ T9648] syz.2.2256 (9648) used greatest stack depth: 6376 bytes left [ 128.698854][ T9720] loop9: detected capacity change from 0 to 512 [ 128.722652][ T9720] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.747645][ T7772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.780479][ T9724] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.835910][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.867879][ T9724] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.916014][ T7799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.934525][ T9724] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.992398][ T9724] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.018626][ T9744] loop5: detected capacity change from 0 to 512 [ 129.027070][ T9744] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 129.048576][ T9744] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2297: invalid indirect mapped block 4294967295 (level 0) [ 129.064710][ T9744] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2297: invalid indirect mapped block 4294967295 (level 1) [ 129.078733][ T9762] serio: Serial port ptm0 [ 129.085996][ T9760] pim6reg1: entered promiscuous mode [ 129.091446][ T9760] pim6reg1: entered allmulticast mode [ 129.099016][ T9744] EXT4-fs (loop5): 1 orphan inode deleted [ 129.104832][ T9744] EXT4-fs (loop5): 1 truncate cleaned up [ 129.124167][ T4373] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.137448][ T9744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.150005][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.166401][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.174608][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.243809][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.934472][ T9807] loop5: detected capacity change from 0 to 512 [ 130.187464][ T9829] netlink: 'syz.9.2332': attribute type 1 has an invalid length. [ 130.235718][ T9829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.253761][ T9829] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 130.263715][ T9829] bond0: (slave batadv1): making interface the new active one [ 130.272963][ T9829] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 130.438790][ T9842] loop7: detected capacity change from 0 to 8192 [ 130.468630][ T9849] pim6reg1: entered promiscuous mode [ 130.474066][ T9849] pim6reg1: entered allmulticast mode [ 130.523635][ T9857] loop7: detected capacity change from 0 to 128 [ 130.542002][ T9855] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.557997][ T9857] syz.7.2343: attempt to access beyond end of device [ 130.557997][ T9857] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 130.680020][ T9855] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.733557][ T9871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.740847][ T9871] IPv6: NLM_F_CREATE should be set when creating new route [ 130.754071][ T9873] ref_ctr increment failed for inode: 0x2d7 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811a809140 [ 130.765414][ T9873] ref_ctr increment failed for inode: 0x2d7 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811a809140 [ 130.777444][ T9872] uprobe: syz.7.2350:9872 failed to unregister, leaking uprobe [ 130.794934][ T9855] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.866915][ T9872] uprobe: syz.7.2350:9872 failed to unregister, leaking uprobe [ 130.917293][ T9855] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.978088][ T9886] loop5: detected capacity change from 0 to 1024 [ 130.999315][ T9886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.034243][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.049517][ T4384] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.081035][ T9894] netlink: 'syz.5.2358': attribute type 6 has an invalid length. [ 131.094233][ T4384] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.156458][ T51] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.172545][ T51] tipc: Subscription rejected, illegal request [ 131.213323][ T51] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.143756][ T9930] bond1: entered promiscuous mode [ 132.149194][ T9930] bond1: entered allmulticast mode [ 132.155890][ T9930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.166698][ T9930] bond1 (unregistering): Released all slaves [ 132.310688][ T9955] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2384'. [ 132.330476][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2382'. [ 132.812103][ T9994] loop5: detected capacity change from 0 to 164 [ 132.831042][ T9994] rock: directory entry would overflow storage [ 132.837360][ T9994] rock: sig=0x66, size=4, remaining=3 [ 133.632873][T10022] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.685454][T10031] netlink: 'syz.5.2415': attribute type 12 has an invalid length. [ 133.718087][T10022] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.779154][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2416'. [ 133.793733][T10022] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.989160][T10022] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.152118][T10048] : renamed from bond0 [ 134.156449][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 134.156489][ T29] audit: type=1400 audit(134.136:5657): avc: denied { ioctl } for pid=10046 comm="syz.5.2421" path="socket:[31784]" dev="sockfs" ino=31784 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.453133][ T4345] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.485018][ T29] audit: type=1400 audit(134.466:5658): avc: denied { create } for pid=10061 comm="syz.7.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 134.517474][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.556372][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.564658][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.571508][T10068] loop7: detected capacity change from 0 to 128 [ 134.595208][T10068] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.598235][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2430'. [ 134.662722][ T7772] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.768827][T10088] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2437'. [ 134.784557][ T29] audit: type=1400 audit(134.766:5659): avc: denied { mount } for pid=10090 comm="syz.5.2438" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 134.806313][ T29] audit: type=1400 audit(134.766:5660): avc: denied { mounton } for pid=10090 comm="syz.5.2438" path="/524/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 134.828164][ T29] audit: type=1400 audit(134.766:5661): avc: denied { mount } for pid=10090 comm="syz.5.2438" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.849740][ T29] audit: type=1400 audit(134.766:5662): avc: denied { unmount } for pid=10090 comm="syz.5.2438" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.880106][ T29] audit: type=1400 audit(134.866:5663): avc: denied { bind } for pid=10095 comm="syz.2.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.899379][ T29] audit: type=1400 audit(134.866:5664): avc: denied { name_bind } for pid=10095 comm="syz.2.2440" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 134.900285][T10096] netlink: 'syz.2.2440': attribute type 4 has an invalid length. [ 134.973053][ T29] audit: type=1400 audit(134.866:5665): avc: denied { node_bind } for pid=10095 comm="syz.2.2440" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 134.994556][ T29] audit: type=1400 audit(134.916:5666): avc: denied { unmount } for pid=3745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 135.036007][T10098] hub 2-0:1.0: USB hub found [ 135.042557][T10098] hub 2-0:1.0: 8 ports detected [ 135.064365][T10107] 9pnet: p9_errstr2errno: server reported unknown error [ 135.113330][T10111] netlink: zone id is out of range [ 135.118697][T10111] netlink: zone id is out of range [ 135.293475][T10127] batman_adv: batadv0: Adding interface: dummy0 [ 135.299791][T10127] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.325228][T10127] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 135.413922][T10131] tipc: Started in network mode [ 135.418945][T10131] tipc: Node identity ac14140f, cluster identity 4711 [ 135.441790][T10131] tipc: New replicast peer: 255.255.255.83 [ 135.447818][T10131] tipc: Enabled bearer , priority 10 [ 135.458117][T10135] netlink: 'syz.7.2454': attribute type 10 has an invalid length. [ 135.478849][T10135] batman_adv: batadv0: Removing interface: dummy0 [ 135.492291][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2458'. [ 135.502531][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2458'. [ 135.504216][T10135] team0: Port device dummy0 added [ 135.511911][T10142] netlink: 'syz.7.2454': attribute type 10 has an invalid length. [ 135.535887][T10139] tipc: Enabling of bearer rejected, already enabled [ 135.546550][T10142] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 135.558170][T10142] team0: Failed to send options change via netlink (err -105) [ 135.568112][T10142] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 135.580317][T10142] team0: Port device dummy0 removed [ 135.599296][T10142] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 135.667778][T10149] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.671534][T10152] loop5: detected capacity change from 0 to 1024 [ 135.710724][T10152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.732362][T10149] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.778706][T10149] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.819605][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.859343][T10149] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.893459][T10169] smc: net device bond0 applied user defined pnetid SYZ0 [ 135.925194][ T6515] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.929010][T10169] smc: net device bond0 erased user defined pnetid SYZ0 [ 135.943668][ T6515] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.959870][ T6515] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.976787][ T6515] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.019802][ T6515] tipc: Subscription rejected, illegal request [ 136.040264][T10178] netlink: 'syz.5.2472': attribute type 4 has an invalid length. [ 136.073471][T10180] netlink: 'syz.2.2474': attribute type 4 has an invalid length. [ 136.082278][T10180] netlink: 'syz.2.2474': attribute type 4 has an invalid length. [ 136.098374][T10182] pim6reg1: entered promiscuous mode [ 136.103805][T10182] pim6reg1: entered allmulticast mode [ 136.197362][T10191] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2479'. [ 136.424463][T10201] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.467908][T10201] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.517878][T10201] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.566329][ T6975] tipc: Node number set to 2886997007 [ 136.588475][T10201] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.623178][T10204] tipc: New replicast peer: 255.255.255.254 [ 136.629320][T10204] tipc: Enabled bearer , priority 10 [ 136.643100][ T4345] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.654549][ T4345] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.702882][ T4345] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.727115][ T4345] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.976117][T10228] netlink: zone id is out of range [ 136.985561][T10228] netlink: zone id is out of range [ 136.999557][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2494'. [ 137.022585][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2494'. [ 137.108552][T10236] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.178046][T10236] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.467982][T10236] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.507939][T10236] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.724215][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.747879][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.772086][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.798326][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.941136][T10298] __nla_validate_parse: 1 callbacks suppressed [ 137.941178][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2522'. [ 138.024862][T10300] tipc: Enabled bearer , priority 0 [ 138.032164][T10299] tipc: Resetting bearer [ 138.048884][T10299] tipc: Disabling bearer [ 138.081018][T10302] netlink: 'syz.7.2524': attribute type 1 has an invalid length. [ 138.095010][T10302] bond1: entered promiscuous mode [ 138.100213][T10302] bond1: entered allmulticast mode [ 138.109352][T10302] geneve2: entered allmulticast mode [ 138.117193][T10302] bond1: (slave geneve2): making interface the new active one [ 138.124706][T10302] geneve2: entered promiscuous mode [ 138.130458][T10302] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 138.139162][ T6515] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.140363][T10302] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2524'. [ 138.157902][T10302] bond1: left promiscuous mode [ 138.162746][T10302] geneve2: left promiscuous mode [ 138.167836][T10302] bond1: left allmulticast mode [ 138.173210][T10302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.180739][ T51] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.189100][ T51] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.198464][ T51] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.230457][T10309] netlink: 'syz.8.2527': attribute type 10 has an invalid length. [ 138.241366][T10309] team0: Port device dummy0 added [ 138.249731][T10309] netlink: 'syz.8.2527': attribute type 10 has an invalid length. [ 138.258215][T10309] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 138.268527][T10309] team0: Failed to send options change via netlink (err -105) [ 138.276106][T10309] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 138.285151][T10309] team0: Port device dummy0 removed [ 138.292075][T10309] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 138.321252][T10312] bond0: (slave dummy0): Releasing backup interface [ 138.329599][T10312] batman_adv: batadv0: Adding interface: dummy0 [ 138.335855][T10312] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.361212][T10312] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 138.616270][T10338] netlink: 'syz.5.2539': attribute type 10 has an invalid length. [ 138.625823][T10338] : (slave dummy0): Releasing backup interface [ 138.638898][T10338] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 138.650113][T10338] team0: Failed to send options change via netlink (err -105) [ 138.657615][T10338] team0: Port device dummy0 added [ 138.683349][T10338] netlink: 'syz.5.2539': attribute type 10 has an invalid length. [ 138.702828][T10338] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 138.737882][T10338] team0: Failed to send options change via netlink (err -105) [ 138.745533][T10338] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 138.755175][T10338] team0: Port device dummy0 removed [ 138.762248][T10338] : (slave dummy0): Enslaving as an active interface with an up link [ 138.953813][T10362] loop9: detected capacity change from 0 to 512 [ 138.961958][T10362] EXT4-fs: Ignoring removed nobh option [ 138.967683][T10360] gretap0: refused to change device tx_queue_len [ 138.974472][T10360] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 138.996245][T10362] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.084518][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.098534][T10371] loop7: detected capacity change from 0 to 128 [ 139.106566][T10371] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.142599][ T7772] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.275667][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 139.275682][ T29] audit: type=1326 audit(139.256:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.9.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 139.308532][ T29] audit: type=1326 audit(139.296:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.9.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 139.331481][ T29] audit: type=1326 audit(139.296:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.9.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 139.352756][T10380] loop7: detected capacity change from 0 to 512 [ 139.354449][ T29] audit: type=1326 audit(139.296:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.9.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 139.383649][ T29] audit: type=1326 audit(139.296:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.9.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb9b160b07 code=0x7ffc0000 [ 139.406522][ T29] audit: type=1326 audit(139.296:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.9.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdb9b160a7c code=0x7ffc0000 [ 139.429341][ T29] audit: type=1326 audit(139.296:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.9.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdb9b1609b4 code=0x7ffc0000 [ 139.452257][ T29] audit: type=1326 audit(139.296:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.9.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdb9b1609b4 code=0x7ffc0000 [ 139.475239][ T29] audit: type=1326 audit(139.296:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.9.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdb9b15d84a code=0x7ffc0000 [ 139.498067][ T29] audit: type=1326 audit(139.296:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.9.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9b15ebe9 code=0x7ffc0000 [ 139.522116][T10380] EXT4-fs error (device loop7): __ext4_iget:5464: inode #17: block 1803188595: comm syz.7.2554: invalid block [ 139.534954][T10380] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2554: couldn't read orphan inode 17 (err -117) [ 139.548367][T10380] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.587566][ T7772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.771210][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2566'. [ 139.833055][T10410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.843572][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2567'. [ 139.863313][T10410] bond2 (unregistering): Released all slaves [ 140.176430][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2573'. [ 140.204661][T10430] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2574'. [ 140.313544][T10435] macsec1: entered promiscuous mode [ 140.318852][T10435] bridge0: entered promiscuous mode [ 140.326213][T10435] bridge0: port 4(macsec1) entered blocking state [ 140.332755][T10435] bridge0: port 4(macsec1) entered disabled state [ 140.341403][T10435] macsec1: entered allmulticast mode [ 140.346739][T10435] bridge0: entered allmulticast mode [ 140.352948][T10435] macsec1: left allmulticast mode [ 140.358011][T10435] bridge0: left allmulticast mode [ 140.365093][T10435] bridge0: left promiscuous mode [ 140.539919][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2581'. [ 140.651442][T10461] loop8: detected capacity change from 0 to 2048 [ 140.679326][T10461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.851016][T10476] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.938149][T10476] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.008648][T10476] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.022293][ T7799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.068023][T10476] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.158978][ T4345] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.181935][ T4345] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.216333][ T4345] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.249857][ T4345] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.319128][T10499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10499 comm=syz.5.2602 [ 141.562209][T10517] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2620'. [ 141.596472][T10517] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 141.812811][T10528] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2611'. [ 142.621371][T10549] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2621'. [ 143.149294][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2625'. [ 143.540438][T10576] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2630'. [ 143.682152][T10580] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.816071][T10580] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.992525][T10580] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.135602][T10580] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.230093][ T6971] hid_parser_main: 18 callbacks suppressed [ 144.230112][ T6971] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 144.243464][ T6971] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.250880][ T6971] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.258315][ T6971] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.265769][ T6971] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.273219][ T6971] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.368534][ T6971] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.375955][ T6971] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.383385][ T6971] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 144.390968][ T6971] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.418143][ T4402] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.453749][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 144.453764][ T29] audit: type=1400 audit(144.436:6075): avc: denied { lock } for pid=10593 comm="syz.8.2639" path="socket:[37308]" dev="sockfs" ino=37308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.485367][ T6971] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 144.500369][ T4343] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.553017][ T4343] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.576564][ T4366] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.865196][ T29] audit: type=1400 audit(144.846:6076): avc: denied { getattr } for pid=10609 comm="syz.7.2646" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=33669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.930921][T10614] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.987047][T10614] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.036787][T10614] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.100539][ T6975] page_pool_release_retry() stalled pool shutdown: id 66, 1 inflight 60 sec [ 145.110272][T10614] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.113942][ T29] audit: type=1326 audit(145.096:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f980e595ba7 code=0x7ffc0000 [ 145.143008][ T29] audit: type=1326 audit(145.096:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f980e53adb9 code=0x7ffc0000 [ 145.166357][ T29] audit: type=1326 audit(145.096:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f980e595ba7 code=0x7ffc0000 [ 145.189223][ T29] audit: type=1326 audit(145.096:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f980e53adb9 code=0x7ffc0000 [ 145.212068][ T29] audit: type=1326 audit(145.096:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980e59ebe9 code=0x7ffc0000 [ 145.235223][ T29] audit: type=1326 audit(145.096:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f980e59ebe9 code=0x7ffc0000 [ 145.258158][ T29] audit: type=1326 audit(145.096:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f980e595ba7 code=0x7ffc0000 [ 145.281003][ T29] audit: type=1326 audit(145.096:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f980e53adb9 code=0x7ffc0000 [ 145.327182][T10632] pim6reg1: entered promiscuous mode [ 145.332513][T10632] pim6reg1: entered allmulticast mode [ 145.490489][T10638] loop5: detected capacity change from 0 to 1024 [ 145.508015][T10638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.523775][T10638] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.5.2658: path /578/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 145.554177][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.961104][ T4413] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.981857][ T4413] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.999640][ T4413] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.013624][ T4413] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.347818][T10686] validate_nla: 2 callbacks suppressed [ 146.347827][T10686] netlink: 'syz.9.2677': attribute type 49 has an invalid length. [ 146.517383][T10692] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2679'. [ 146.546114][T10702] netlink: 'syz.9.2683': attribute type 1 has an invalid length. [ 146.561639][T10702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.576226][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2683'. [ 146.588607][T10702] bond1 (unregistering): Released all slaves [ 146.864816][T10729] 9pnet: p9_errstr2errno: server reported unknown error [ 146.984585][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2696'. [ 147.036922][T10738] loop5: detected capacity change from 0 to 8192 [ 147.089797][T10747] netlink: 'syz.2.2702': attribute type 4 has an invalid length. [ 147.113993][T10747] netlink: 'syz.2.2702': attribute type 4 has an invalid length. [ 147.609596][T10762] uprobe: syz.9.2709:10762 failed to unregister, leaking uprobe [ 147.618840][T10762] uprobe: syz.9.2709:10762 failed to unregister, leaking uprobe [ 147.670801][T10766] loop8: detected capacity change from 0 to 512 [ 147.679105][T10766] journal_path: Lookup failure for './file0/../file0' [ 147.685895][T10766] EXT4-fs: error: could not find journal device path [ 147.729062][T10770] syzkaller1: entered promiscuous mode [ 147.734575][T10770] syzkaller1: entered allmulticast mode [ 147.770201][T10773] loop7: detected capacity change from 0 to 2368 [ 147.778633][T10773] iso9660: Bad value for 'check' [ 148.175851][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2723'. [ 148.189136][T10792] ip6gre1: entered allmulticast mode [ 148.346445][T10804] syzkaller0: refused to change device tx_queue_len [ 148.363145][T10806] netlink: 'syz.8.2729': attribute type 21 has an invalid length. [ 148.371191][T10806] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.045175][T10808] Set syz1 is full, maxelem 65536 reached [ 149.562988][T10844] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2745'. [ 149.597749][T10848] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.650969][T10848] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.663613][T10852] netlink: 'syz.8.2749': attribute type 10 has an invalid length. [ 149.673032][T10852] batman_adv: batadv0: Removing interface: dummy0 [ 149.682478][T10852] team0: Port device dummy0 added [ 149.695491][T10852] netlink: 'syz.8.2749': attribute type 10 has an invalid length. [ 149.718272][T10852] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 149.729429][T10852] team0: Failed to send options change via netlink (err -105) [ 149.737041][T10852] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 149.746353][T10852] team0: Port device dummy0 removed [ 149.753856][T10852] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 149.763934][T10848] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.848833][T10848] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.887862][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2753'. [ 149.912711][T10862] ip6gre1: entered allmulticast mode [ 149.918846][ T4384] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.977617][T10864] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.004338][ T4413] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.004799][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 150.004824][ T29] audit: type=1400 audit(149.986:6205): avc: denied { ioctl } for pid=10867 comm="syz.5.2756" path="socket:[38411]" dev="sockfs" ino=38411 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.025983][ T4413] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.056218][ T4413] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.078498][T10864] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.129515][T10864] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.152675][T10877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10877 comm=syz.2.2759 [ 150.179072][T10864] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.210126][ T29] audit: type=1400 audit(150.186:6206): avc: denied { getopt } for pid=10881 comm="syz.2.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.253218][ T4413] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.264102][ T4413] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.288588][ T4413] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.306432][ T4413] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.541785][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2769'. [ 150.566724][T10900] hsr_slave_0: left promiscuous mode [ 150.572581][T10900] hsr_slave_1: left promiscuous mode [ 150.658090][T10906] syzkaller0: entered promiscuous mode [ 150.663599][T10906] syzkaller0: entered allmulticast mode [ 150.673597][T10905] macvtap1: entered allmulticast mode [ 150.679139][T10905] bridge0: entered allmulticast mode [ 150.686029][T10905] bridge0: port 4(macvtap1) entered blocking state [ 150.692601][T10905] bridge0: port 4(macvtap1) entered disabled state [ 150.702503][T10905] bridge0: left allmulticast mode [ 150.710463][ T29] audit: type=1400 audit(150.696:6207): avc: denied { relabelfrom } for pid=10904 comm="syz.2.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 150.730246][ T29] audit: type=1400 audit(150.696:6208): avc: denied { relabelto } for pid=10904 comm="syz.2.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 150.894793][ T29] audit: type=1326 audit(150.876:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.5.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001b92ebe9 code=0x7ffc0000 [ 150.918990][ T29] audit: type=1326 audit(150.876:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.5.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001b92ebe9 code=0x7ffc0000 [ 150.942273][ T29] audit: type=1326 audit(150.876:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.5.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f001b92ebe9 code=0x7ffc0000 [ 150.965257][ T29] audit: type=1326 audit(150.876:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.5.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001b92ebe9 code=0x7ffc0000 [ 150.988389][ T29] audit: type=1326 audit(150.876:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.5.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f001b92ebe9 code=0x7ffc0000 [ 151.012255][ T29] audit: type=1326 audit(150.876:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.5.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001b92ebe9 code=0x7ffc0000 [ 151.111812][T10934] loop7: detected capacity change from 0 to 512 [ 151.120399][T10934] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 151.148223][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2788'. [ 151.176054][T10945] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.247632][T10945] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.307509][T10945] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.357420][T10945] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.422757][ T4413] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.433208][ T4413] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.443785][ T4413] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.454463][ T4413] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.238211][T10979] netlink: 'syz.5.2805': attribute type 12 has an invalid length. [ 152.287713][T10983] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2807'. [ 152.299438][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2807'. [ 152.455599][T11007] loop5: detected capacity change from 0 to 1024 [ 152.462885][T11007] EXT4-fs: Ignoring removed nobh option [ 152.463414][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2820'. [ 152.468506][T11007] EXT4-fs: inline encryption not supported [ 152.468523][T11007] EXT4-fs: Ignoring removed bh option [ 152.487843][T11007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.509160][T11009] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2820'. [ 152.569263][T11017] loop9: detected capacity change from 0 to 1024 [ 152.578534][T11017] EXT4-fs: Ignoring removed orlov option [ 152.586123][T11017] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.608038][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.640228][T11024] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.678165][T11024] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.748228][T11024] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.790544][T11024] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.823114][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.849397][T11027] chnl_net:caif_netlink_parms(): no params data found [ 152.864541][T11039] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.895164][T11027] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.902249][T11027] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.910197][T11027] bridge_slave_0: entered allmulticast mode [ 152.917304][T11027] bridge_slave_0: entered promiscuous mode [ 152.924704][T11039] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.937085][T11027] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.944179][T11027] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.951695][T11027] bridge_slave_1: entered allmulticast mode [ 152.958274][T11027] bridge_slave_1: entered promiscuous mode [ 152.969881][T11039] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.985958][T11027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.997140][T11027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.015703][T11039] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.028188][T11027] team0: Port device team_slave_0 added [ 153.035047][T11027] team0: Port device team_slave_1 added [ 153.049278][T11027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.056908][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.083030][T11027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.094499][T11027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.101567][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.127957][T11027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.154976][T11027] hsr_slave_0: entered promiscuous mode [ 153.161746][T11027] hsr_slave_1: entered promiscuous mode [ 153.167681][T11027] debugfs: 'hsr0' already exists in 'hsr' [ 153.173398][T11027] Cannot create hsr debugfs directory [ 153.181579][ T4384] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.192753][ T4384] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.216876][ T4384] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.244221][ T4384] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.269756][ T4413] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.289357][ T4413] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.314749][T11053] loop9: detected capacity change from 0 to 1024 [ 153.321454][T11053] EXT4-fs: Ignoring removed orlov option [ 153.331302][T11053] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.331570][ T4413] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.372252][ T4413] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.539606][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2839'. [ 153.576678][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.608429][T11027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.619103][T11027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.629800][T11027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.641585][T11027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.679559][T11086] netlink: 'syz.9.2845': attribute type 9 has an invalid length. [ 153.692365][T11027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.700019][T11086] netlink: 'syz.9.2845': attribute type 9 has an invalid length. [ 153.705646][T11027] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.717700][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.725150][ T6515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.738771][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.745882][ T6515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.774079][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2847'. [ 153.845179][T11027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.871812][T11101] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.996017][T11101] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.064766][T11101] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.086057][T11027] veth0_vlan: entered promiscuous mode [ 154.094468][T11027] veth1_vlan: entered promiscuous mode [ 154.114524][T11027] veth0_macvtap: entered promiscuous mode [ 154.122631][T11027] veth1_macvtap: entered promiscuous mode [ 154.134721][T11027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.158996][T11101] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.202368][T11027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.212335][ T4404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.224770][ T4404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.234124][ T4404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.243925][ T4404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.311830][ T4384] 0ªî{X¹¦: left allmulticast mode [ 154.317067][ T4384] 0ªî{X¹¦: left promiscuous mode [ 154.322367][ T4384] bridge0: port 3(30ªî{X¹¦) entered disabled state [ 154.336184][ T4384] bridge_slave_1: left allmulticast mode [ 154.341981][T11127] loop7: detected capacity change from 0 to 2048 [ 154.342001][ T4384] bridge_slave_1: left promiscuous mode [ 154.342138][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.365780][ T4384] bridge_slave_0: left promiscuous mode [ 154.367973][T11127] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.371480][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.436004][ T4384] team0: Port device geneve1 removed [ 154.446118][T11135] netlink: 'syz.2.2861': attribute type 1 has an invalid length. [ 154.500571][T11137] EXT4-fs (loop7): Online defrag not supported with bigalloc [ 154.599035][ T4384]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.608388][ T4384]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.618057][ T4384]  (unregistering): (slave dummy0): Releasing backup interface [ 154.627243][ T4384]  (unregistering): Released all slaves [ 154.641137][ T4384] bond1 (unregistering): Released all slaves [ 154.653878][ T4384] bond2 (unregistering): Released all slaves [ 154.679244][T11135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.750464][T11138] bond3: (slave veth3): Enslaving as an active interface with a down link [ 154.772419][T11139] bridge6: entered promiscuous mode [ 154.777696][T11139] bridge6: entered allmulticast mode [ 154.793079][T11139] bond3: (slave bridge6): Enslaving as an active interface with a down link [ 154.805828][ T4384] tipc: Disabling bearer [ 154.811375][ T4384] tipc: Disabling bearer [ 154.816415][ T4384] tipc: Left network mode [ 154.822648][ T4384] hsr_slave_0: left promiscuous mode [ 154.829033][ T4384] hsr_slave_1: left promiscuous mode [ 154.834771][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.844257][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.896137][ T4384] team0 (unregistering): Port device team_slave_1 removed [ 154.912561][ T4384] team0 (unregistering): Port device team_slave_0 removed [ 155.100324][ T4404] ================================================================== [ 155.108508][ T4404] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 155.117975][ T4404] [ 155.120291][ T4404] write to 0xffff88811c5279a2 of 2 bytes by task 11127 on cpu 0: [ 155.128243][ T4404] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 155.134135][ T4404] generic_perform_write+0x2c2/0x490 [ 155.139401][ T4404] ext4_buffered_write_iter+0x1ee/0x3c0 [ 155.144934][ T4404] ext4_file_write_iter+0x383/0xf00 [ 155.150115][ T4404] iter_file_splice_write+0x663/0xa60 [ 155.153319][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 155.153333][ T29] audit: type=1400 audit(155.136:6347): avc: denied { write } for pid=3291 comm="syz-executor" path="pipe:[2477]" dev="pipefs" ino=2477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 155.155469][ T4404] direct_splice_actor+0x153/0x2a0 [ 155.189130][ T4404] splice_direct_to_actor+0x30f/0x680 [ 155.194489][ T4404] do_splice_direct+0xda/0x150 [ 155.199240][ T4404] do_sendfile+0x380/0x650 [ 155.203645][ T4404] __x64_sys_sendfile64+0x105/0x150 [ 155.208834][ T4404] x64_sys_call+0x2bb0/0x2ff0 [ 155.213505][ T4404] do_syscall_64+0xd2/0x200 [ 155.218032][ T4404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.224080][ T4404] [ 155.226393][ T4404] read to 0xffff88811c527800 of 2048 bytes by task 4404 on cpu 1: [ 155.234179][ T4404] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 155.240068][ T4404] generic_perform_write+0x2c2/0x490 [ 155.245429][ T4404] shmem_file_write_iter+0xc5/0xf0 [ 155.250535][ T4404] lo_rw_aio+0x6a0/0x760 [ 155.254782][ T4404] loop_process_work+0x52d/0xa60 [ 155.259712][ T4404] loop_workfn+0x31/0x40 [ 155.263948][ T4404] process_scheduled_works+0x4ce/0x9d0 [ 155.269483][ T4404] worker_thread+0x582/0x770 [ 155.274156][ T4404] kthread+0x486/0x510 [ 155.278213][ T4404] ret_from_fork+0xda/0x150 [ 155.282878][ T4404] ret_from_fork_asm+0x1a/0x30 [ 155.287634][ T4404] [ 155.289938][ T4404] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 155.296071][ T4404] CPU: 1 UID: 0 PID: 4404 Comm: kworker/u8:53 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 155.307603][ T4404] Tainted: [W]=WARN [ 155.311417][ T4404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.321463][ T4404] Workqueue: loop7 loop_workfn [ 155.326226][ T4404] ================================================================== [ 155.662738][T11125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.687515][ T4345] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.767625][ T4345] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.877500][ T4345] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.927537][ T4345] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.003503][ T4345] bond1 (unregistering): (slave geneve2): Releasing active interface [ 156.167933][ T4345] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 156.176904][ T4345] bond0 (unregistering): Released all slaves [ 156.184656][ T4345] bond1 (unregistering): Released all slaves [ 156.228106][ T4345] tipc: Disabling bearer [ 156.233405][ T4345] tipc: Left network mode [ 156.240836][ T4345] hsr_slave_0: left promiscuous mode [ 156.247165][ T4345] hsr_slave_1: left promiscuous mode [ 156.931329][ T6515] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.941983][ T4345] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.952451][ T4345] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.963384][ T6515] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.999578][ T4345] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.888692][ T4345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.938785][ T4345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.988927][ T4345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.047429][ T4345] bridge_slave_1: left allmulticast mode [ 158.053077][ T4345] bridge_slave_1: left promiscuous mode [ 158.058774][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.066568][ T4345] bridge_slave_0: left allmulticast mode [ 158.072450][ T4345] bridge_slave_0: left promiscuous mode [ 158.078175][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.158190][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.167949][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.177570][ T4345] bond0 (unregistering): Released all slaves [ 158.209319][ T4345] hsr_slave_0: left promiscuous mode [ 158.214926][ T4345] hsr_slave_1: left promiscuous mode [ 158.220516][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.227953][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.235451][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.242848][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.252266][ T4345] veth1_macvtap: left promiscuous mode [ 158.257751][ T4345] veth0_macvtap: left promiscuous mode [ 158.263304][ T4345] veth1_vlan: left promiscuous mode [ 158.268790][ T4345] veth0_vlan: left promiscuous mode [ 158.317671][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 158.327019][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 160.288844][ T4345] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.337798][ T4345] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.397508][ T4345] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.447676][ T4345] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.508093][ T4345] bridge_slave_1: left allmulticast mode [ 160.513792][ T4345] bridge_slave_1: left promiscuous mode [ 160.519614][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.527430][ T4345] bridge_slave_0: left allmulticast mode [ 160.533054][ T4345] bridge_slave_0: left promiscuous mode [ 160.538812][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.599902][ T4345] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.608906][ T4345] bond_slave_0: left promiscuous mode [ 160.615294][ T4345] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.624180][ T4345] bond_slave_1: left promiscuous mode [ 160.630377][ T4345] $Hÿ (unregistering): Released all slaves [ 160.638870][ T4345] bond0 (unregistering): (slave batadv1): Releasing active interface [ 160.647825][ T4345] bond0 (unregistering): Released all slaves [ 160.698198][ T4345] tipc: Disabling bearer [ 160.703193][ T4345] tipc: Left network mode [ 160.708674][ T4345] hsr_slave_0: left promiscuous mode [ 160.714370][ T4345] hsr_slave_1: left promiscuous mode [ 160.719979][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.727393][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.734776][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.742272][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.751828][ T4345] veth1_macvtap: left promiscuous mode [ 160.757430][ T4345] veth0_macvtap: left promiscuous mode [ 160.800211][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 160.810779][ T4345] team0 (unregistering): Port device team_slave_0 removed