last executing test programs: 9m10.296930778s ago: executing program 32 (id=635): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 9m0.83706181s ago: executing program 33 (id=924): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 8m34.31516017s ago: executing program 34 (id=1767): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 8m7.464234967s ago: executing program 35 (id=2638): r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000001c0)=""/55, 0x37) getdents(r2, 0xfffffffffffffffd, 0x58) 7m35.446104143s ago: executing program 36 (id=3839): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7m30.953967519s ago: executing program 37 (id=4011): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = syz_io_uring_setup(0x81e, &(0x7f0000000480)={0x0, 0x40, 0x10, 0xfffffffe, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 4m45.391832705s ago: executing program 4 (id=9508): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 4m45.314695326s ago: executing program 4 (id=9509): setreuid(0x0, 0xee00) r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x3, 0x0) fcntl$setpipe(r1, 0x4, 0xfffffffffffff000) 4m44.448479483s ago: executing program 4 (id=9539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x5, 0x129}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) 4m44.363655725s ago: executing program 4 (id=9541): unshare(0x62040600) socket$inet6_udp(0xa, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioperm(0x2, 0x7, 0x13) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15", 0x2}], 0x1, 0x0) 4m44.10997437s ago: executing program 1 (id=9550): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = memfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) fadvise64(0xffffffffffffffff, 0xfffffffffffffff8, 0x2000000000b09c, 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) 4m43.812257275s ago: executing program 1 (id=9556): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r1, 0xffffffffffffffff, 0x0) 4m43.780177716s ago: executing program 1 (id=9557): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e1e, 0x200, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r2}}, 0x18) 4m43.525399311s ago: executing program 1 (id=9568): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000004c0)='neigh_update\x00', r0}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 4m43.492250781s ago: executing program 4 (id=9570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4m43.424571513s ago: executing program 1 (id=9571): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4m43.330684645s ago: executing program 38 (id=9573): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback}, 0x10) 4m43.290231145s ago: executing program 4 (id=9575): socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 4m43.290135925s ago: executing program 39 (id=9575): socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 4m43.283998286s ago: executing program 1 (id=9577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 4m43.265166346s ago: executing program 40 (id=9577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 3m36.703015307s ago: executing program 0 (id=11454): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m36.685186837s ago: executing program 0 (id=11455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp6\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x8000041e) readv(r1, 0x0, 0x0) 3m36.669851017s ago: executing program 0 (id=11456): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 3m36.627678759s ago: executing program 0 (id=11458): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 3m36.607764499s ago: executing program 0 (id=11459): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 3m33.704761975s ago: executing program 0 (id=11508): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24040010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x18, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 3m33.704295815s ago: executing program 41 (id=11508): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24040010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x18, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 1m39.849387186s ago: executing program 2 (id=14487): sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4cb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1m39.754194807s ago: executing program 2 (id=14491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x40, 0xf, 0xe6, 0x5, 0x0, 0x5, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 1m39.686099518s ago: executing program 2 (id=14492): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m38.814923016s ago: executing program 2 (id=14530): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1389899, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88f8d2, 0x0) 1m38.682172158s ago: executing program 2 (id=14535): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1m38.330207905s ago: executing program 2 (id=14539): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 1m38.308982025s ago: executing program 42 (id=14539): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 1m22.348023592s ago: executing program 7 (id=14857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1m22.099771867s ago: executing program 7 (id=14861): openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.721684784s ago: executing program 7 (id=14870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000800)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2, 0x0, 0x800000000006}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001400000000208000140000000300800024000"], 0x122}}, 0x8010) 1m21.574883537s ago: executing program 7 (id=14887): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1389899, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88f8d2, 0x0) 1m21.369625011s ago: executing program 7 (id=14889): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = fsmount(r0, 0x0, 0xa) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000004c0)=""/55, 0x37) getdents64(r3, 0xfffffffffffffffe, 0x29) 1m21.098218676s ago: executing program 7 (id=14880): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m21.098070616s ago: executing program 43 (id=14880): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.726915207s ago: executing program 3 (id=16674): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x20060400) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r1, r0}}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000030000000008f9ffff00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.622592229s ago: executing program 3 (id=16678): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.489688541s ago: executing program 3 (id=16685): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.408664723s ago: executing program 3 (id=16690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0x70, 0x8906}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}}, 0x3e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x3) 1.345206774s ago: executing program 6 (id=16692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000001c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0x0, 0x0, 0x0) dup3(r4, r2, 0x80000) 1.304840725s ago: executing program 3 (id=16693): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 1.166522908s ago: executing program 3 (id=16695): socket(0xa, 0x80802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) 1.166179708s ago: executing program 6 (id=16696): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x4e20, 0x400, 0x4e21, 0xfffe, 0xa, 0x80, 0x40, 0x2f}, {0xfff, 0x401, 0x7, 0x2, 0x5, 0x2, 0x9277, 0xa676}, {0x80000000, 0x6, 0xffff, 0x5}, 0x27, 0x6e6bb2, 0x2, 0x1, 0x3, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x32}, 0x2, @in6=@remote, 0x3504, 0x10b43197a60a3a06, 0x2, 0x2, 0x81, 0xffffffa0, 0x2}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.148741788s ago: executing program 9 (id=16697): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x266180, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.07413396s ago: executing program 9 (id=16698): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") timer_create(0x3, 0x0, &(0x7f0000001b40)=0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/144, 0x90}], 0x1) timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000180)="f30f1efc6645f10f0808c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b2c0000653ed9fa", 0x80000004, 0x0, {[0x7ffc]}}, 0x0, 0x8, &(0x7f0000000200)) 1.04437179s ago: executing program 6 (id=16700): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x15, 0x9, 0x36}, 0x2c) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) 943.380392ms ago: executing program 6 (id=16701): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) 894.184853ms ago: executing program 9 (id=16703): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = getpid() r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24040010) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r4, 0x12, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004040}, 0x40) 892.191713ms ago: executing program 8 (id=16704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 869.425733ms ago: executing program 5 (id=16705): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 869.288053ms ago: executing program 6 (id=16706): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 697.608147ms ago: executing program 5 (id=16707): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="001800"/17, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0xc}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) utimes(&(0x7f0000000340)='./file0\x00', 0x0) 697.463577ms ago: executing program 8 (id=16708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000006c0)={0xf6c447fee59251f4}) close_range(r2, r3, 0x0) 553.97495ms ago: executing program 5 (id=16709): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd733, 0x80, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) io_uring_enter(r3, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 553.878759ms ago: executing program 8 (id=16710): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 452.428851ms ago: executing program 8 (id=16711): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 403.369012ms ago: executing program 5 (id=16712): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 402.776302ms ago: executing program 9 (id=16713): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='tlb_flush\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 248.252735ms ago: executing program 8 (id=16714): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 224.156536ms ago: executing program 9 (id=16715): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 213.586306ms ago: executing program 8 (id=16716): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x80) fchdir(r2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) 194.970546ms ago: executing program 9 (id=16717): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) 75.679629ms ago: executing program 5 (id=16718): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x110) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 67.380499ms ago: executing program 6 (id=16719): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 0s ago: executing program 5 (id=16720): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) semop(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) kernel console output (not intermixed with test programs): 118 comm="syz.9.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 526.795311][ T29] audit: type=1326 audit(536.343:27818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.9.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 526.818554][ T29] audit: type=1326 audit(536.343:27819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.9.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 526.841753][ T29] audit: type=1326 audit(536.343:27820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.9.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 526.864855][ T29] audit: type=1326 audit(536.343:27821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.9.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 526.938579][T13115] 8021q: adding VLAN 0 to HW filter on device bond9 [ 526.986725][T13117] bond9 (unregistering): Released all slaves [ 527.005185][ T4866] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.025361][ T4866] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.034753][ T4866] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.044112][ T4866] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.121185][T13211] sch_fq: defrate 0 ignored. [ 527.400934][T13244] syzkaller0: entered promiscuous mode [ 527.406469][T13244] syzkaller0: entered allmulticast mode [ 527.527487][T13255] netlink: 'syz.9.14859': attribute type 1 has an invalid length. [ 527.554898][T13255] 8021q: adding VLAN 0 to HW filter on device bond10 [ 527.569205][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14859'. [ 527.588967][T13255] bond10 (unregistering): Released all slaves [ 527.773485][T13257] netlink: 44 bytes leftover after parsing attributes in process `syz.6.14869'. [ 527.853374][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14874'. [ 528.010772][T13375] netlink: 7 bytes leftover after parsing attributes in process `syz.7.14870'. [ 528.027344][T13375] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14870'. [ 528.162369][T13385] ref_ctr increment failed for inode: 0x16e2 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88810005ed40 [ 528.182578][T13385] ref_ctr increment failed for inode: 0x16e2 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810005ed40 [ 528.211815][T13384] uprobe: syz.5.14885:13384 failed to unregister, leaking uprobe [ 528.303731][T13384] uprobe: syz.5.14885:13384 failed to unregister, leaking uprobe [ 528.937413][T13405] chnl_net:caif_netlink_parms(): no params data found [ 529.023924][T13405] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.031179][T13405] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.052634][T13405] bridge_slave_0: entered allmulticast mode [ 529.065554][T13405] bridge_slave_0: entered promiscuous mode [ 529.078612][T13405] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.085864][T13405] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.118835][T13405] bridge_slave_1: entered allmulticast mode [ 529.145492][T13405] bridge_slave_1: entered promiscuous mode [ 529.181323][T13405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.198969][T13398] loop3: detected capacity change from 0 to 1024 [ 529.204280][T13405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.230077][T13398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.258122][T13405] team0: Port device team_slave_0 added [ 529.273020][T13405] team0: Port device team_slave_1 added [ 529.313283][T13405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.320277][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.346911][T13405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.409923][T13405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.416892][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.443538][T13405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.657307][T13405] hsr_slave_0: entered promiscuous mode [ 529.663570][T13405] hsr_slave_1: entered promiscuous mode [ 529.703754][T13405] debugfs: 'hsr0' already exists in 'hsr' [ 529.709519][T13405] Cannot create hsr debugfs directory [ 529.856485][T11573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.144938][T13789] loop3: detected capacity change from 0 to 512 [ 530.174706][T13789] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 530.204308][T13789] EXT4-fs (loop3): mount failed [ 530.207379][T13405] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 530.235629][T13405] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 530.267945][T13405] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 530.286250][T13405] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 530.354962][T13405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.378197][T13405] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.405724][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.412871][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.441292][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.448421][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.607685][T13405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.819417][T13854] loop3: detected capacity change from 0 to 128 [ 530.842880][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14908'. [ 530.916113][T13405] veth0_vlan: entered promiscuous mode [ 530.926883][T13864] bridge: RTM_NEWNEIGH with invalid ether address [ 530.939246][T13405] veth1_vlan: entered promiscuous mode [ 530.947809][T13870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14912'. [ 530.976535][T13405] veth0_macvtap: entered promiscuous mode [ 531.003676][T13405] veth1_macvtap: entered promiscuous mode [ 531.038165][T13405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.049572][T13405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.071270][ T4866] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.086110][ T4866] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.104817][ T4866] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.137216][ T4866] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.169660][T13883] loop3: detected capacity change from 0 to 512 [ 531.179426][T13887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=13887 comm=syz.9.14919 [ 531.180774][T13883] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 531.202656][T13883] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 531.218245][T13892] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13892 comm=syz.8.14881 [ 531.231755][T13892] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13892 comm=syz.8.14881 [ 531.293760][T13883] netlink: zone id is out of range [ 531.302850][T13883] netlink: zone id is out of range [ 531.310602][T13883] netlink: zone id is out of range [ 531.316547][T13883] netlink: zone id is out of range [ 531.335435][T13883] netlink: zone id is out of range [ 531.341920][T13883] netlink: zone id is out of range [ 531.347148][T13883] netlink: zone id is out of range [ 531.354093][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14927'. [ 531.361177][T13883] netlink: zone id is out of range [ 531.373651][T13883] netlink: zone id is out of range [ 531.388635][T13883] netlink: zone id is out of range [ 531.393358][T13912] ip6gre6: entered allmulticast mode [ 531.544498][T13933] macsec0: entered promiscuous mode [ 531.586969][T13939] loop3: detected capacity change from 0 to 512 [ 531.599522][T13939] EXT4-fs: Ignoring removed orlov option [ 531.610344][T13939] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 531.632393][T13939] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 531.658365][T13939] EXT4-fs (loop3): 1 orphan inode deleted [ 531.670192][T13939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.691527][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 531.691545][ T29] audit: type=1326 audit(541.582:28119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.9.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 531.721090][ T29] audit: type=1326 audit(541.582:28120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.9.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 531.753039][ T29] audit: type=1326 audit(541.582:28121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.9.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 531.776136][ T29] audit: type=1326 audit(541.582:28122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.9.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 531.799907][ T29] audit: type=1326 audit(541.582:28123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.9.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 531.823122][ T29] audit: type=1326 audit(541.582:28124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.9.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 531.846957][ T29] audit: type=1326 audit(541.582:28125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.9.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 531.870030][ T29] audit: type=1326 audit(541.582:28126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.9.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 531.900347][T11573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.013085][T13968] pimreg: entered allmulticast mode [ 532.041602][T13968] pimreg: left allmulticast mode [ 532.055450][T13977] loop3: detected capacity change from 0 to 2048 [ 532.066262][T13977] EXT4-fs: Ignoring removed orlov option [ 532.099602][T13977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.410238][T11573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.496837][T14019] netlink: 'syz.3.14954': attribute type 13 has an invalid length. [ 532.546495][T14019] gretap0: refused to change device tx_queue_len [ 532.642441][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14958'. [ 532.692694][T14028] 8021q: adding VLAN 0 to HW filter on device bond3 [ 532.729933][T14062] vlan0: entered allmulticast mode [ 532.735158][T14062] bond3: entered allmulticast mode [ 532.752598][ T29] audit: type=1326 audit(542.705:28127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14067 comm="syz.8.14961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d3d0ebe9 code=0x7ffc0000 [ 532.775705][ T29] audit: type=1326 audit(542.705:28128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14067 comm="syz.8.14961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d3d0ebe9 code=0x7ffc0000 [ 532.802641][T14068] loop8: detected capacity change from 0 to 256 [ 532.893370][T14077] netlink: 'syz.8.14963': attribute type 10 has an invalid length. [ 532.902038][T14077] netlink: 40 bytes leftover after parsing attributes in process `syz.8.14963'. [ 532.930093][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14967'. [ 532.949545][T14077] dummy0: entered promiscuous mode [ 532.991795][T14087] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14968'. [ 533.000913][T14087] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14968'. [ 533.077663][T14087] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14968'. [ 533.086974][T14087] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14968'. [ 533.250375][T14115] veth0: entered promiscuous mode [ 533.689667][T14157] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 534.750862][T14201] wireguard0: entered promiscuous mode [ 534.756796][T14201] wireguard0: entered allmulticast mode [ 534.861415][T14216] pimreg: entered allmulticast mode [ 534.931438][T14216] pimreg: left allmulticast mode [ 534.973531][T14226] netlink: 'syz.3.15013': attribute type 3 has an invalid length. [ 534.988842][T14226] netlink: 'syz.3.15013': attribute type 3 has an invalid length. [ 535.177616][T14254] rdma_op ffff8881227c7580 conn xmit_rdma 0000000000000000 [ 535.391377][T14273] netlink: 'syz.8.15030': attribute type 21 has an invalid length. [ 536.634511][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 536.634590][ T29] audit: type=1326 audit(546.778:28265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.15058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 536.669358][ T29] audit: type=1326 audit(546.778:28266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.15058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 536.693728][ T29] audit: type=1326 audit(546.810:28267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.15058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 536.717317][ T29] audit: type=1326 audit(546.810:28268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.15058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 536.740574][ T29] audit: type=1326 audit(546.810:28269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.15058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 536.769253][ T29] audit: type=1326 audit(546.841:28270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.15058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 536.792689][ T29] audit: type=1326 audit(546.841:28271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.15058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f83c5baec23 code=0x7ffc0000 [ 536.804490][T14359] loop3: detected capacity change from 0 to 256 [ 536.815869][ T29] audit: type=1326 audit(546.841:28272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.15058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f83c5bad69f code=0x7ffc0000 [ 536.844997][ T29] audit: type=1326 audit(546.841:28273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.15058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f83c5baec77 code=0x7ffc0000 [ 536.880433][ T29] audit: type=1326 audit(546.946:28274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.15058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83c5bad550 code=0x7ffc0000 [ 537.059355][T14374] __nla_validate_parse: 6 callbacks suppressed [ 537.059377][T14374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15061'. [ 537.309746][T14399] loop3: detected capacity change from 0 to 512 [ 537.337541][T14399] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.15071: Failed to acquire dquot type 1 [ 537.353145][T14399] EXT4-fs (loop3): 1 truncate cleaned up [ 537.360263][T14399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.404922][T11573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.501876][T14413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15073'. [ 537.706020][T14431] veth1: entered promiscuous mode [ 537.804002][T14466] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15085'. [ 538.811511][T14534] tipc: Started in network mode [ 538.816448][T14534] tipc: Node identity 86b74bae1112, cluster identity 4711 [ 538.823765][T14534] tipc: Enabled bearer , priority 0 [ 538.888477][T14533] tipc: Resetting bearer [ 538.919453][T14533] tipc: Disabling bearer [ 539.167344][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15109'. [ 539.417908][T14576] tipc: Started in network mode [ 539.422915][T14576] tipc: Node identity ac14140f, cluster identity 4711 [ 539.466344][T14576] tipc: New replicast peer: 255.255.255.83 [ 539.472379][T14576] tipc: Enabled bearer , priority 10 [ 539.787721][T14566] net_ratelimit: 73 callbacks suppressed [ 539.787739][T14566] Set syz1 is full, maxelem 65536 reached [ 539.882611][T14597] 9pnet: p9_errstr2errno: server reported unknown error [ 540.041616][T14603] loop8: detected capacity change from 0 to 512 [ 540.097622][T14603] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.190251][T13405] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.533525][ T874] tipc: Node number set to 2886997007 [ 540.640753][T14641] loop3: detected capacity change from 0 to 8192 [ 540.772578][T14657] netlink: 'syz.3.15140': attribute type 30 has an invalid length. [ 541.390637][T14681] loop3: detected capacity change from 0 to 512 [ 541.422115][T14681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.468801][T11573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.843624][T14700] loop3: detected capacity change from 0 to 512 [ 541.879413][T14700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.958161][T11573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.046907][T14709] netlink: 'syz.3.15156': attribute type 13 has an invalid length. [ 542.122978][T14709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.132253][T14709] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.147100][T14709] batman_adv: batadv0: Interface activated: dummy0 [ 542.169600][T14709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.284291][T14719] netlink: 'syz.9.15158': attribute type 1 has an invalid length. [ 542.292338][T14717] wireguard0: entered promiscuous mode [ 542.294451][T14721] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15161'. [ 542.298131][T14717] wireguard0: entered allmulticast mode [ 542.347643][T14734] netlink: 3 bytes leftover after parsing attributes in process `syz.9.15158'. [ 542.360543][T14719] bond10: entered promiscuous mode [ 542.374240][T14719] 8021q: adding VLAN 0 to HW filter on device bond10 [ 542.404541][T14721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.433125][T14728] vlan2: entered allmulticast mode [ 542.438285][T14728] bond1: entered allmulticast mode [ 542.474404][T14734] batadv1: entered promiscuous mode [ 542.480189][T14734] batadv1: entered allmulticast mode [ 542.499448][T14734] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 542.507657][T14734] bond10: (slave batadv1): making interface the new active one [ 542.516192][T14734] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 542.737862][T14818] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.15167'. [ 542.747223][T14818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15167'. [ 542.969144][T14832] netlink: 96 bytes leftover after parsing attributes in process `syz.6.15173'. [ 543.033394][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15174'. [ 543.075662][T14835] 8021q: adding VLAN 0 to HW filter on device bond9 [ 543.109769][T14835] vlan0: entered allmulticast mode [ 543.115135][T14835] bond9: entered allmulticast mode [ 543.322686][T14897] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14897 comm=syz.9.15183 [ 543.335476][T14897] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14897 comm=syz.9.15183 [ 543.369073][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 543.369091][ T29] audit: type=1326 audit(553.833:28453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.15193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 543.398720][ T29] audit: type=1326 audit(553.833:28454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.15193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 543.422213][ T29] audit: type=1326 audit(553.833:28455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.15193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 543.445466][ T29] audit: type=1326 audit(553.833:28456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.15193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 543.468912][ T29] audit: type=1326 audit(553.833:28457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.15193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 543.492862][ T29] audit: type=1326 audit(553.833:28458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.15193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 543.516371][ T29] audit: type=1326 audit(553.833:28459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.15193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 543.539634][ T29] audit: type=1326 audit(553.833:28460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.15193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 543.562750][ T29] audit: type=1326 audit(553.833:28461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.15193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 543.585943][ T29] audit: type=1326 audit(553.833:28462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.15193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 543.621531][T14912] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15186'. [ 543.672395][T14900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=14900 comm=syz.8.15185 [ 543.691924][T14917] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14917 comm=syz.5.15200 [ 543.704762][T14917] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14917 comm=syz.5.15200 [ 543.823983][T14925] wg2: entered promiscuous mode [ 543.828908][T14925] wg2: entered allmulticast mode [ 543.879102][ T3403] page_pool_release_retry() stalled pool shutdown: id 300, 1 inflight 60 sec [ 543.945974][T14948] tipc: Bearer : already 2 bearers with priority 10 [ 543.954191][T14948] tipc: Bearer : trying with adjusted priority [ 543.962415][T14948] tipc: New replicast peer: 255.255.255.255 [ 543.968567][T14948] tipc: Enabled bearer , priority 9 [ 544.114846][T14965] loop8: detected capacity change from 0 to 512 [ 544.127209][T14965] EXT4-fs (loop8): orphan cleanup on readonly fs [ 544.136857][T14965] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.15209: bg 0: block 248: padding at end of block bitmap is not set [ 544.165819][T14965] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.15209: Failed to acquire dquot type 1 [ 544.182483][T14965] EXT4-fs (loop8): 1 truncate cleaned up [ 544.188811][T14965] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 544.213047][T14965] netlink: 'syz.8.15209': attribute type 13 has an invalid length. [ 544.366378][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.373704][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.540075][T14965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.581596][T14965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.649657][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15218'. [ 545.024637][T14977] wireguard0: entered promiscuous mode [ 545.030193][T14977] wireguard0: entered allmulticast mode [ 545.038394][T13405] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.078427][ T4866] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.098829][ T4866] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.123706][ T4866] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.145248][ T4866] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.391608][T15011] veth3: entered promiscuous mode [ 545.449060][T14981] Set syz1 is full, maxelem 65536 reached [ 545.451701][T15029] tipc: Enabling of bearer rejected, failed to enable media [ 545.508391][T15049] netlink: 'syz.5.15225': attribute type 1 has an invalid length. [ 545.516579][T15049] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.15225'. [ 545.559384][T15053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15053 comm=syz.3.15227 [ 545.615217][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15230'. [ 545.734371][T15072] loop3: detected capacity change from 0 to 512 [ 545.744798][T15072] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 545.765520][T15072] EXT4-fs (loop3): 1 truncate cleaned up [ 545.771742][T15072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.823917][T11573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.137258][T15105] atomic_op ffff88811bf87128 conn xmit_atomic 0000000000000000 [ 546.342893][T15101] Set syz1 is full, maxelem 65536 reached [ 546.441901][T15126] netlink: 'syz.3.15253': attribute type 83 has an invalid length. [ 546.664491][T15141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 546.671769][T15141] IPv6: NLM_F_CREATE should be set when creating new route [ 546.748198][T15153] netlink: 'syz.3.15262': attribute type 1 has an invalid length. [ 546.763978][T15153] bond1: entered promiscuous mode [ 546.769067][T15153] bond1: entered allmulticast mode [ 546.782598][T15153] geneve2: entered allmulticast mode [ 546.790712][T15153] bond1: (slave geneve2): making interface the new active one [ 546.798352][T15153] geneve2: entered promiscuous mode [ 546.824814][T15153] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 546.833871][ T4918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.856223][T15194] bond1: left promiscuous mode [ 546.861195][T15194] geneve2: left promiscuous mode [ 546.866230][T15194] bond1: left allmulticast mode [ 546.875053][T15194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.893232][ T4918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.917497][ T4918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.931137][ T4918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.334851][T15229] wireguard0: entered promiscuous mode [ 547.340394][T15229] wireguard0: entered allmulticast mode [ 547.384137][T15236] __nla_validate_parse: 2 callbacks suppressed [ 547.384159][T15236] netlink: 96 bytes leftover after parsing attributes in process `syz.8.15281'. [ 547.447623][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15283'. [ 547.894679][T15296] tipc: Enabling of bearer rejected, failed to enable media [ 547.957973][T15301] loop8: detected capacity change from 0 to 256 [ 548.008143][T15312] netlink: 332 bytes leftover after parsing attributes in process `syz.6.15304'. [ 548.095928][T15343] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15307'. [ 548.214348][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15312'. [ 548.224145][T15363] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15312'. [ 548.380481][T15382] netlink: 'syz.5.15328': attribute type 10 has an invalid length. [ 548.388552][T15382] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15328'. [ 548.397823][T15382] dummy0: entered promiscuous mode [ 548.403558][T15382] batman_adv: batadv0: Interface activated: dummy0 [ 548.410357][T15382] batman_adv: batadv0: Interface deactivated: dummy0 [ 548.417161][T15382] batman_adv: batadv0: Removing interface: dummy0 [ 548.470571][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15321'. [ 548.496089][T15392] veth9: entered promiscuous mode [ 548.597210][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15325'. [ 548.746009][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 548.746034][ T29] audit: type=1326 audit(559.481:28618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.5.15331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 548.746297][T15454] netlink: 'syz.5.15331': attribute type 13 has an invalid length. [ 548.752307][ T29] audit: type=1326 audit(559.491:28619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.5.15331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 548.806649][ T29] audit: type=1326 audit(559.491:28620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.5.15331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 548.829884][ T29] audit: type=1326 audit(559.491:28621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.5.15331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 548.853098][ T29] audit: type=1326 audit(559.491:28622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.5.15331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 548.876229][ T29] audit: type=1326 audit(559.491:28623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.5.15331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 548.899328][ T29] audit: type=1326 audit(559.491:28624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.5.15331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 548.922722][ T29] audit: type=1326 audit(559.491:28625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.5.15331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 548.960497][T15454] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 549.000457][ T29] audit: type=1326 audit(559.491:28626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.5.15331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 549.096996][ T29] audit: type=1326 audit(559.838:28627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.5.15331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 549.225473][T15481] veth25: entered promiscuous mode [ 549.427380][T15530] delete_channel: no stack [ 549.478800][T15538] ref_ctr increment failed for inode: 0x2e58 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888104035c00 [ 549.491175][T15538] ref_ctr increment failed for inode: 0x2e58 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888104035c00 [ 549.503203][T15537] uprobe: syz.9.15347:15537 failed to unregister, leaking uprobe [ 549.551123][T15545] netlink: 'syz.6.15349': attribute type 13 has an invalid length. [ 549.640861][T15537] uprobe: syz.9.15347:15537 failed to unregister, leaking uprobe [ 549.790790][T15563] tipc: Enabled bearer , priority 0 [ 549.801183][T15563] tipc: Disabling bearer [ 549.865391][T15577] pimreg: entered allmulticast mode [ 549.872939][T15577] pimreg: left allmulticast mode [ 549.942355][T15594] wireguard0: entered promiscuous mode [ 549.948012][T15594] wireguard0: entered allmulticast mode [ 550.679529][T15708] loop3: detected capacity change from 0 to 512 [ 550.695934][T15708] EXT4-fs (loop3): orphan cleanup on readonly fs [ 550.704002][T15708] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.15362: bg 0: block 248: padding at end of block bitmap is not set [ 550.723743][T15708] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.15362: Failed to acquire dquot type 1 [ 550.737139][T15708] EXT4-fs (loop3): 1 truncate cleaned up [ 550.744256][T15708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 550.757955][T15721] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15366'. [ 550.775977][T15721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 550.780418][T15708] netlink: 'syz.3.15362': attribute type 13 has an invalid length. [ 550.797154][T15721] bond2 (unregistering): Released all slaves [ 550.865867][T15708] batman_adv: batadv0: Interface deactivated: dummy0 [ 550.941020][ T4916] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.959629][ T4916] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.011747][ T4916] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.026018][ T4916] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.037994][T11573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.294939][T15857] netlink: 'syz.9.15394': attribute type 1 has an invalid length. [ 551.346116][T15857] 8021q: adding VLAN 0 to HW filter on device bond11 [ 551.366088][T15897] bond11 (unregistering): Released all slaves [ 551.385571][T15899] tipc: Enabling of bearer rejected, failed to enable media [ 551.439776][T15938] loop8: detected capacity change from 0 to 1024 [ 551.448292][T15938] EXT4-fs: Ignoring removed nobh option [ 551.453934][T15938] EXT4-fs: Ignoring removed bh option [ 551.473034][T15938] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.530235][T13405] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.631833][T15968] uprobe: syz.8.15412:15968 failed to unregister, leaking uprobe [ 551.887688][T15992] netlink: 'syz.3.15420': attribute type 10 has an invalid length. [ 551.935970][T15999] netlink: 'syz.3.15420': attribute type 10 has an invalid length. [ 551.949056][T15992] batman_adv: batadv0: Removing interface: dummy0 [ 551.959663][T15992] team0: Port device dummy0 added [ 551.966220][T15999] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 551.987289][T15999] team0: Failed to send options change via netlink (err -105) [ 551.998505][T15999] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 552.007789][T15999] team0: Port device dummy0 removed [ 552.017017][T15999] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 552.198341][T16017] __nla_validate_parse: 9 callbacks suppressed [ 552.198355][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15430'. [ 552.734358][T16055] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15439'. [ 552.744156][T16055] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15439'. [ 552.952790][T16074] netlink: 'syz.9.15448': attribute type 21 has an invalid length. [ 552.961199][T16074] netlink: 132 bytes leftover after parsing attributes in process `syz.9.15448'. [ 553.060411][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15453'. [ 553.077631][T16084] ip6gre3: entered allmulticast mode [ 553.344348][T16123] ref_ctr increment failed for inode: 0x3c1f offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88810005d080 [ 553.367718][T16123] ref_ctr increment failed for inode: 0x3c1f offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810005d080 [ 553.391964][T16122] uprobe: syz.6.15467:16122 failed to unregister, leaking uprobe [ 553.445316][T16127] infiniband syz1: set down [ 553.450045][T16127] infiniband syz1: added syz_tun [ 553.460528][T16122] uprobe: syz.6.15467:16122 failed to unregister, leaking uprobe [ 553.493293][T16127] RDS/IB: syz1: added [ 553.497336][T16127] smc: adding ib device syz1 with port count 1 [ 553.514668][T16127] smc: ib device syz1 port 1 has pnetid [ 553.568379][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15471'. [ 553.915630][T16163] netlink: 'syz.8.15479': attribute type 10 has an invalid length. [ 553.940861][T16163] dummy0: left promiscuous mode [ 553.949581][T16163] team0: Port device dummy0 added [ 553.963959][T16168] netlink: 'syz.8.15479': attribute type 10 has an invalid length. [ 553.987472][T16168] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 554.009385][T16168] team0: Failed to send options change via netlink (err -105) [ 554.034686][T16168] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 554.045256][T16168] team0: Port device dummy0 removed [ 554.053041][T16168] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 554.124896][T16177] pim6reg1: entered promiscuous mode [ 554.130355][T16177] pim6reg1: entered allmulticast mode [ 554.297560][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 554.297576][ T29] audit: type=1326 audit(565.317:28778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16188 comm="syz.8.15488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9d3d0ebe9 code=0x0 [ 554.382399][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15489'. [ 554.401670][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15490'. [ 554.451190][T16197] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15490'. [ 554.904180][T16224] ref_ctr increment failed for inode: 0x1987 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff8881040305c0 [ 554.916421][T16224] ref_ctr increment failed for inode: 0x1987 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881040305c0 [ 554.928350][T16223] uprobe: syz.5.15494:16223 failed to unregister, leaking uprobe [ 554.994225][T16223] uprobe: syz.5.15494:16223 failed to unregister, leaking uprobe [ 555.216392][T16247] syzkaller0: entered allmulticast mode [ 555.225995][T16243] tipc: Enabled bearer , priority 0 [ 555.234324][T16247] syzkaller0 (unregistering): left allmulticast mode [ 555.244894][ T29] audit: type=1326 audit(566.315:28779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.15504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 555.268060][ T29] audit: type=1326 audit(566.315:28780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.15504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 555.291918][ T29] audit: type=1326 audit(566.315:28781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.15504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 555.315026][ T29] audit: type=1326 audit(566.315:28782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.15504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 555.338741][ T29] audit: type=1326 audit(566.315:28783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.15504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 555.361874][ T29] audit: type=1326 audit(566.315:28784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.15504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 555.385668][ T29] audit: type=1326 audit(566.315:28785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.15504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 555.408813][ T29] audit: type=1326 audit(566.315:28786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.15504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 555.432603][ T29] audit: type=1326 audit(566.315:28787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.15504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 555.456929][T16242] tipc: Resetting bearer [ 555.478223][T16242] tipc: Disabling bearer [ 556.244462][T16329] netlink: 'syz.9.15521': attribute type 10 has an invalid length. [ 556.265676][T16329] netlink: 'syz.9.15521': attribute type 10 has an invalid length. [ 556.610662][T16374] ipvlan0: entered promiscuous mode [ 556.620009][T16374] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 556.628606][T16374] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 556.740107][T16398] pimreg: entered allmulticast mode [ 556.767330][T16398] pimreg: left allmulticast mode [ 556.933755][T16440] rdma_rxe: rxe_newlink: failed to add syz_tun [ 557.103120][T16448] syzkaller0: entered allmulticast mode [ 557.113063][T16448] syzkaller0: entered promiscuous mode [ 557.123775][T16448] syzkaller0 (unregistering): left allmulticast mode [ 557.130872][T16448] syzkaller0 (unregistering): left promiscuous mode [ 557.293892][T16458] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 557.813448][T16490] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15551'. [ 557.815016][T16486] syzkaller0: entered allmulticast mode [ 557.828846][T16490] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15551'. [ 557.859834][T16486] syzkaller0 (unregistering): left allmulticast mode [ 558.065279][T16512] netlink: 360 bytes leftover after parsing attributes in process `syz.6.15558'. [ 558.177085][T16528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15564'. [ 558.420476][T16546] dvmrp8: entered allmulticast mode [ 558.426915][T16546] dvmrp8: left allmulticast mode [ 559.613086][T16596] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.623673][T16596] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.769006][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15587'. [ 559.778047][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15587'. [ 559.791619][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15587'. [ 559.811935][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15587'. [ 559.821145][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15587'. [ 559.833863][T16596] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.844444][T16596] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.968045][T16596] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.977976][T16596] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.074666][T16596] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.084513][T16596] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.164640][T16612] tipc: Enabled bearer , priority 0 [ 560.174747][T16611] tipc: Resetting bearer [ 560.203163][T16611] tipc: Disabling bearer [ 560.313255][ T4908] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.321613][ T4908] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.354858][ T4908] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.363461][ T4908] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.411819][ T4908] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.420257][ T4908] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.469252][ T4908] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.477675][ T4908] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.590694][T16668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=16668 comm=syz.9.15596 [ 560.647335][T16670] program syz.3.15597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 560.690479][T16676] ref_ctr increment failed for inode: 0x2fbd offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888104032280 [ 560.694914][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 560.694932][ T29] audit: type=1326 audit(572.036:28879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.3.15602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83c5baebe9 code=0x0 [ 560.706291][T16676] ref_ctr increment failed for inode: 0x2fbd offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888104032280 [ 560.757017][T16675] uprobe: syz.9.15601:16675 failed to unregister, leaking uprobe [ 560.824550][T16675] uprobe: syz.9.15601:16675 failed to unregister, leaking uprobe [ 561.001038][T16699] netlink: 'syz.6.15608': attribute type 1 has an invalid length. [ 561.019405][T16699] 8021q: adding VLAN 0 to HW filter on device bond10 [ 561.042218][T16699] 8021q: adding VLAN 0 to HW filter on device bond10 [ 561.050301][T16699] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 561.066370][T16699] bond10: (slave vti0): Error -95 calling set_mac_address [ 561.078822][ T29] audit: type=1326 audit(572.435:28880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.9.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 561.142334][ T29] audit: type=1326 audit(572.435:28881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.9.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 561.165599][ T29] audit: type=1326 audit(572.435:28882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.9.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 561.188915][ T29] audit: type=1326 audit(572.467:28883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.9.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 561.212332][ T29] audit: type=1326 audit(572.467:28884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.9.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 561.235508][ T29] audit: type=1326 audit(572.467:28885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.9.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 561.258788][ T29] audit: type=1326 audit(572.467:28886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.9.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 561.282025][ T29] audit: type=1326 audit(572.467:28887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.9.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 561.305146][ T29] audit: type=1326 audit(572.467:28888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.9.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 561.438774][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15614'. [ 562.366604][T16807] bond0: (slave dummy0): Releasing backup interface [ 562.399618][T16807] bond7: (slave batadv3): Releasing active interface [ 562.418076][T16807] bond8: (slave batadv4): Releasing active interface [ 562.732144][T16835] netlink: 'syz.8.15637': attribute type 1 has an invalid length. [ 562.761406][T16835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.812613][T16835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.830033][T16835] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 562.841973][T16835] bond2: (slave vti0): Error -95 calling set_mac_address [ 563.105476][T16905] veth0: entered promiscuous mode [ 563.113955][T16905] __nla_validate_parse: 3 callbacks suppressed [ 563.113972][T16905] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15641'. [ 563.131552][T16905] veth0 (unregistering): left promiscuous mode [ 564.139511][T16962] vhci_hcd: invalid port number 96 [ 564.144684][T16962] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 564.826666][T17011] netlink: 'syz.5.15659': attribute type 1 has an invalid length. [ 564.875984][T17011] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.963494][T17011] 8021q: adding VLAN 0 to HW filter on device bond4 [ 565.013851][T17011] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 565.048968][T17011] bond4: (slave vti0): Error -95 calling set_mac_address [ 565.411622][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15667'. [ 565.462259][ T29] kauditd_printk_skb: 996 callbacks suppressed [ 565.462277][ T29] audit: type=1326 audit(577.044:29885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.5.15665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05b8e75ba7 code=0x7ffc0000 [ 565.504675][ T29] audit: type=1326 audit(577.075:29886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.5.15665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05b8e1adb9 code=0x7ffc0000 [ 565.527752][ T29] audit: type=1326 audit(577.075:29887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.5.15665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05b8e75ba7 code=0x7ffc0000 [ 565.551068][ T29] audit: type=1326 audit(577.075:29888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.5.15665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05b8e1adb9 code=0x7ffc0000 [ 565.574592][ T29] audit: type=1326 audit(577.075:29889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.5.15665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05b8e75ba7 code=0x7ffc0000 [ 565.597769][ T29] audit: type=1326 audit(577.075:29890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.5.15665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05b8e1adb9 code=0x7ffc0000 [ 565.621230][ T29] audit: type=1326 audit(577.075:29891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.5.15665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05b8e75ba7 code=0x7ffc0000 [ 565.644262][ T29] audit: type=1326 audit(577.075:29892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.5.15665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05b8e1adb9 code=0x7ffc0000 [ 565.667537][ T29] audit: type=1326 audit(577.075:29893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.5.15665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05b8e75ba7 code=0x7ffc0000 [ 565.690642][ T29] audit: type=1326 audit(577.075:29894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.5.15665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05b8e1adb9 code=0x7ffc0000 [ 565.810095][T17101] netlink: 'syz.8.15673': attribute type 7 has an invalid length. [ 565.818742][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15673'. [ 566.181173][T17117] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.191224][T17117] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.243711][T17119] macvtap1: entered allmulticast mode [ 566.249146][T17119] bridge0: entered allmulticast mode [ 566.274064][T17119] bridge0: port 1(macvtap1) entered blocking state [ 566.280807][T17119] bridge0: port 1(macvtap1) entered disabled state [ 566.308750][T17119] bridge0: left allmulticast mode [ 566.337472][T17117] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.347336][T17117] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.440985][T17117] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.450967][T17117] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.550560][T17117] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.560509][T17117] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.660790][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15685'. [ 566.676668][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15685'. [ 566.711017][ T4874] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.711453][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15685'. [ 566.719459][ T4874] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.752327][ T4862] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.761310][ T4862] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.770026][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15685'. [ 566.796309][ T4862] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.804564][ T4862] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.839100][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15685'. [ 566.863837][ T4862] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.873075][ T4862] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.891914][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15685'. [ 566.906520][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15685'. [ 569.657156][T17280] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.667097][T17280] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.759833][T17280] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.769774][T17280] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.855907][T17280] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.865733][T17280] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.942618][T17280] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.953177][T17280] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.973880][T17299] __nla_validate_parse: 79 callbacks suppressed [ 569.973895][T17299] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15718'. [ 570.017547][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15720'. [ 570.027902][T17305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15720'. [ 570.048387][ T4862] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.056881][ T4862] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.097493][ T4862] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.105988][ T4862] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.122429][ T4862] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.130876][ T4862] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.142944][ T4862] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.151297][ T4862] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.184622][T17321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15723'. [ 570.210025][T17327] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 570.234967][ T29] kauditd_printk_skb: 4453 callbacks suppressed [ 570.234985][ T29] audit: type=1326 audit(582.051:34348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17261 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b1ba2adb9 code=0x7ffc0000 [ 570.272160][ T29] audit: type=1326 audit(582.051:34349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.5.15726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 570.296135][ T29] audit: type=1326 audit(582.051:34350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.5.15726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 570.319502][ T29] audit: type=1326 audit(582.083:34351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17261 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b1ba85ba7 code=0x7ffc0000 [ 570.343244][ T29] audit: type=1326 audit(582.083:34352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17261 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b1ba2adb9 code=0x7ffc0000 [ 570.366313][ T29] audit: type=1326 audit(582.083:34353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17261 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 570.390069][ T29] audit: type=1326 audit(582.083:34354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.5.15726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 570.413225][ T29] audit: type=1326 audit(582.083:34355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.5.15726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 570.437110][ T29] audit: type=1326 audit(582.083:34356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17261 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b1ba85ba7 code=0x7ffc0000 [ 570.460205][ T29] audit: type=1326 audit(582.083:34357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17261 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b1ba2adb9 code=0x7ffc0000 [ 570.672933][T17370] loop3: detected capacity change from 0 to 512 [ 570.690500][T17370] EXT4-fs: Ignoring removed oldalloc option [ 570.706880][T17370] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.15732: Parent and EA inode have the same ino 15 [ 570.719959][T17370] EXT4-fs (loop3): 1 orphan inode deleted [ 570.730205][T17370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.747142][T17370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.842441][T17388] Set syz1 is full, maxelem 65536 reached [ 570.858247][T17389] loop8: detected capacity change from 0 to 2048 [ 570.875295][T17399] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15737'. [ 570.906989][T17389] loop8: p2 p3 p7 [ 571.124315][T17435] loop3: detected capacity change from 0 to 512 [ 571.131075][T17435] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 571.168262][T17441] netlink: 'syz.3.15745': attribute type 1 has an invalid length. [ 571.195970][T17441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.217315][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15745'. [ 571.225965][T17483] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15747'. [ 571.244729][T17441] bond2 (unregistering): Released all slaves [ 571.278726][T17527] netlink: 'syz.8.15748': attribute type 4 has an invalid length. [ 571.297766][T17527] netlink: 'syz.8.15748': attribute type 4 has an invalid length. [ 571.370579][T17544] loop3: detected capacity change from 0 to 512 [ 571.390096][T17544] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 571.574598][T17568] netlink: 'syz.3.15761': attribute type 12 has an invalid length. [ 571.583476][T17568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15761'. [ 571.602721][ T4886] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.612078][T17568] netlink: 'syz.3.15761': attribute type 12 has an invalid length. [ 571.620086][T17568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15761'. [ 571.629656][ T4886] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.639187][ T4886] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.651469][ T4886] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.962291][T17630] loop3: detected capacity change from 0 to 512 [ 571.995851][T17630] EXT4-fs: Ignoring removed nobh option [ 572.047231][T17630] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.15774: corrupted inode contents [ 572.087931][T17630] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.15774: mark_inode_dirty error [ 572.116409][T17630] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.15774: corrupted inode contents [ 572.162443][T17630] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.15774: mark_inode_dirty error [ 572.235436][T17630] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.15774: Failed to acquire dquot type 0 [ 572.289828][T17630] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.15774: corrupted inode contents [ 572.345805][T17630] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.15774: mark_inode_dirty error [ 572.379955][T17630] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.15774: corrupted inode contents [ 572.423154][T17630] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.15774: mark_inode_dirty error [ 572.468534][T17630] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.15774: corrupted inode contents [ 572.504978][T17630] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 572.532406][T17630] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.15774: corrupted inode contents [ 572.572243][T17630] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.15774: mark_inode_dirty error [ 572.594047][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15789'. [ 572.604423][T17630] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 572.615311][T17690] ip6gre1: entered allmulticast mode [ 572.625547][T17630] EXT4-fs (loop3): 1 truncate cleaned up [ 572.631623][T17630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.670123][T17630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.422063][T17802] wg2: entered promiscuous mode [ 573.427092][T17802] wg2: entered allmulticast mode [ 574.166672][T17857] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.176581][T17857] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.210075][T17858] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 574.216624][T17858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 574.224344][T17858] vhci_hcd vhci_hcd.0: Device attached [ 574.235401][T17863] vhci_hcd: connection closed [ 574.235719][ T4874] vhci_hcd: stop threads [ 574.244776][ T4874] vhci_hcd: release socket [ 574.249195][ T4874] vhci_hcd: disconnect device [ 574.255599][T17857] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.265559][T17857] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.316971][T17857] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.326812][T17857] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.398827][T17857] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.408755][T17857] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.479615][ T4874] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.488044][ T4874] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.497121][ T4874] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.506162][ T4874] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.518173][ T4874] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.526486][ T4874] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.559922][ T4874] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.568165][ T4874] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.611998][T17897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17897 comm=syz.6.15832 [ 574.657291][T17903] C: renamed from team_slave_0 [ 574.663734][T17903] netlink: 'syz.6.15836': attribute type 3 has an invalid length. [ 574.969312][T17926] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.047271][T17926] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.112822][T17926] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.218102][T17926] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.325802][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 575.325820][ T29] audit: type=1326 audit(587.395:34662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.8.15845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d3d0ebe9 code=0x7ffc0000 [ 575.355899][ T29] audit: type=1326 audit(587.395:34663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.8.15845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d3d0ebe9 code=0x7ffc0000 [ 575.381672][ T4886] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.408288][ T4886] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.460365][ T4886] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.482387][ T29] audit: type=1326 audit(587.395:34664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.8.15845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa9d3d0ebe9 code=0x7ffc0000 [ 575.506248][ T29] audit: type=1326 audit(587.395:34665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.8.15845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d3d0ebe9 code=0x7ffc0000 [ 575.511738][ T4886] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.529491][ T29] audit: type=1326 audit(587.395:34666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.8.15845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d3d0ebe9 code=0x7ffc0000 [ 575.562114][ T29] audit: type=1326 audit(587.395:34667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.8.15845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa9d3d0ebe9 code=0x7ffc0000 [ 575.585274][ T29] audit: type=1326 audit(587.395:34668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.8.15845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d3d0ebe9 code=0x7ffc0000 [ 575.608493][ T29] audit: type=1326 audit(587.395:34669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.8.15845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d3d0ebe9 code=0x7ffc0000 [ 575.632442][ T29] audit: type=1326 audit(587.395:34670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.8.15845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9d3d0ebe9 code=0x7ffc0000 [ 575.656514][ T29] audit: type=1326 audit(587.405:34671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.8.15845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d3d0ebe9 code=0x7ffc0000 [ 576.167832][T17989] __nla_validate_parse: 7 callbacks suppressed [ 576.167852][T17989] netlink: 100 bytes leftover after parsing attributes in process `syz.8.15859'. [ 576.265257][T17993] loop3: detected capacity change from 0 to 128 [ 576.277473][T17992] syzkaller1: entered promiscuous mode [ 576.283002][T17992] syzkaller1: entered allmulticast mode [ 576.468739][T18017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15864'. [ 576.539654][T18021] loop8: detected capacity change from 0 to 1024 [ 576.553391][T18021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 576.579956][T18021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 576.602040][T18021] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 576.614852][T18024] syzkaller0: entered promiscuous mode [ 576.621050][T18024] syzkaller0: entered allmulticast mode [ 576.644122][T18021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.720203][T13405] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.825495][T18075] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15872'. [ 576.839006][T18075] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 576.910856][T18085] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15877'. [ 577.603741][T18175] 9pnet: p9_errstr2errno: server reported unknown error [ 577.621325][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15892'. [ 578.126031][T18212] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15905'. [ 578.137267][ T4129] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 578.145067][ T4129] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 578.158291][ T4129] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 578.166060][ T4129] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 578.173781][ T4129] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 578.181477][ T4129] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 578.189162][ T4129] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 578.196818][ T4129] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 578.204547][ T4129] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 578.212281][ T4129] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 578.259182][ T4129] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 578.357788][T18253] netlink: 'syz.3.15913': attribute type 4 has an invalid length. [ 578.384619][T18253] netlink: 'syz.3.15913': attribute type 4 has an invalid length. [ 578.501599][T18270] netlink: 'syz.6.15922': attribute type 1 has an invalid length. [ 578.528713][T18270] bond11: entered promiscuous mode [ 578.534629][T18270] bond11: entered allmulticast mode [ 578.544737][T18270] 8021q: adding VLAN 0 to HW filter on device bond11 [ 578.563399][T18270] ip6gretap0: entered promiscuous mode [ 578.569015][T18270] ip6gretap0: entered allmulticast mode [ 578.575326][T18270] bond11: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 578.622191][T18262] loop8: detected capacity change from 0 to 8192 [ 578.630943][T18267] loop3: detected capacity change from 0 to 8192 [ 578.646073][ T4886] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 578.733283][T18329] netlink: 'syz.6.15928': attribute type 1 has an invalid length. [ 578.753955][T18331] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15929'. [ 578.780011][ T4874] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 578.823182][T18349] bond12: (slave bridge12): making interface the new active one [ 578.834304][T18349] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 579.061755][T18391] loop8: detected capacity change from 0 to 8192 [ 579.076536][T18391] msdos: Unknown parameter 'A' [ 579.182291][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15942'. [ 579.221652][T18430] team1: entered promiscuous mode [ 579.227432][T18430] team1: entered allmulticast mode [ 579.501060][T18503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15957'. [ 579.529734][T18503] team1: entered promiscuous mode [ 579.535694][T18503] team1: entered allmulticast mode [ 579.542254][T18508] pim6reg1: entered promiscuous mode [ 579.547582][T18508] pim6reg1: entered allmulticast mode [ 579.577940][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15961'. [ 579.607163][T18547] tipc: Started in network mode [ 579.612188][T18547] tipc: Node identity 7ecc849139b, cluster identity 4711 [ 579.619455][T18547] tipc: Enabled bearer , priority 0 [ 579.637696][T18545] tipc: Resetting bearer [ 579.670124][T18545] tipc: Disabling bearer [ 580.186941][T18648] loop8: detected capacity change from 0 to 128 [ 580.207830][T18648] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 580.297254][T13405] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 580.410836][T18665] netlink: 'syz.8.15994': attribute type 4 has an invalid length. [ 580.445650][T18665] netlink: 'syz.8.15994': attribute type 4 has an invalid length. [ 580.567793][T18676] loop8: detected capacity change from 0 to 512 [ 580.603179][T18676] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.708038][T13405] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.881770][T18691] loop3: detected capacity change from 0 to 8192 [ 580.912919][T18691] msdos: Unknown parameter 'A' [ 581.287416][T18723] __nla_validate_parse: 2 callbacks suppressed [ 581.287470][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16017'. [ 581.326401][T18725] netlink: 'syz.3.16006': attribute type 1 has an invalid length. [ 581.395387][T18725] bond2: (slave bridge7): making interface the new active one [ 581.407828][T18725] bond2: (slave bridge7): Enslaving as an active interface with an up link [ 581.901037][T18786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16016'. [ 582.224664][T18798] netlink: 'syz.6.16022': attribute type 21 has an invalid length. [ 582.233317][T18798] netlink: 128 bytes leftover after parsing attributes in process `syz.6.16022'. [ 582.253642][T18798] netlink: 'syz.6.16022': attribute type 5 has an invalid length. [ 582.262425][T18798] netlink: 'syz.6.16022': attribute type 6 has an invalid length. [ 582.270269][T18798] netlink: 3 bytes leftover after parsing attributes in process `syz.6.16022'. [ 582.293933][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 582.293951][ T29] audit: type=1326 audit(594.701:34958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="syz.9.16024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 582.324090][ T29] audit: type=1326 audit(594.701:34959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="syz.9.16024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 582.347616][ T29] audit: type=1326 audit(594.701:34960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="syz.9.16024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 582.371395][ T29] audit: type=1326 audit(594.701:34961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="syz.9.16024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 582.394562][ T29] audit: type=1326 audit(594.701:34962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="syz.9.16024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 582.418304][ T29] audit: type=1326 audit(594.701:34963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="syz.9.16024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa05277d550 code=0x7ffc0000 [ 582.441491][ T29] audit: type=1326 audit(594.701:34964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="syz.9.16024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 582.465077][ T29] audit: type=1326 audit(594.701:34965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="syz.9.16024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 582.507220][ T29] audit: type=1326 audit(594.775:34966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="syz.9.16024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 582.531037][ T29] audit: type=1326 audit(594.775:34967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="syz.9.16024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 582.584545][T18808] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 582.631578][T18822] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16030'. [ 582.695121][T18834] syz_tun: entered allmulticast mode [ 582.728589][T18840] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16038'. [ 582.770919][T18831] syz_tun: left allmulticast mode [ 582.781701][T18844] tipc: Enabling of bearer rejected, failed to enable media [ 582.802102][T18830] tipc: Enabled bearer , priority 0 [ 582.896951][T18827] tipc: Resetting bearer [ 582.940144][T18827] tipc: Disabling bearer [ 583.024298][T18863] : renamed from bond0 [ 583.075889][ T3398] Process accounting resumed [ 583.142106][T18873] bond0: (slave bridge5): making interface the new active one [ 583.150040][T18873] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 583.299372][T18929] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 583.435684][T18940] validate_nla: 1 callbacks suppressed [ 583.435698][T18940] netlink: 'syz.8.16064': attribute type 1 has an invalid length. [ 583.463912][T18940] 8021q: adding VLAN 0 to HW filter on device bond4 [ 583.474111][T18940] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16064'. [ 583.492788][T18940] bond4 (unregistering): Released all slaves [ 584.135875][T19021] netlink: 'syz.5.16068': attribute type 1 has an invalid length. [ 584.215752][T19021] bond5: (slave bridge8): making interface the new active one [ 584.242780][T19021] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 584.303518][T19076] loop3: detected capacity change from 0 to 512 [ 584.312132][T19076] EXT4-fs: Ignoring removed mblk_io_submit option [ 584.324984][T19076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 584.339268][T19076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 584.347787][T19076] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 584.394024][T19076] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.16079: Allocating blocks 41-42 which overlap fs metadata [ 584.413848][T19076] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.16079: Allocating blocks 41-42 which overlap fs metadata [ 584.428424][T19076] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.16079: Failed to acquire dquot type 1 [ 584.444103][T19076] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 584.459008][T19076] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.16079: corrupted inode contents [ 584.475842][T19094] netlink: 96 bytes leftover after parsing attributes in process `syz.8.16085'. [ 584.476285][T19076] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.16079: mark_inode_dirty error [ 584.501098][T19076] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.16079: corrupted inode contents [ 584.514606][T19076] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.16079: mark_inode_dirty error [ 584.527220][T19076] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.16079: corrupted inode contents [ 584.539598][T19076] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 584.550362][T19076] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.16079: corrupted inode contents [ 584.567298][T19076] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.16079: mark_inode_dirty error [ 584.578849][T19076] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 584.596417][T19076] EXT4-fs (loop3): 1 truncate cleaned up [ 584.602882][T19076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.636117][T19076] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 584.660093][T11573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.835335][T19121] $Hÿ: renamed from  [ 584.845395][T19121] $Hÿ: entered promiscuous mode [ 584.851258][T19121] bond_slave_0: entered promiscuous mode [ 584.857187][T19121] bond_slave_1: entered promiscuous mode [ 584.882143][T19121] dummy0: entered promiscuous mode [ 584.995253][T19134] 8021q: adding VLAN 0 to HW filter on device bond4 [ 585.026070][T19134] bond4: (slave ip6gretap1): making interface the new active one [ 585.044091][T19134] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 585.110526][T19185] geneve3: entered promiscuous mode [ 585.112537][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16106'. [ 585.115880][T19185] geneve3: entered allmulticast mode [ 585.173807][T19197] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 585.452203][T19226] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 586.760248][T19330] __nla_validate_parse: 6 callbacks suppressed [ 586.760281][T19330] netlink: 36 bytes leftover after parsing attributes in process `syz.9.16147'. [ 586.775683][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.9.16147'. [ 586.784816][T19330] netlink: 36 bytes leftover after parsing attributes in process `syz.9.16147'. [ 586.814108][T19330] netlink: 36 bytes leftover after parsing attributes in process `syz.9.16147'. [ 587.095913][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 587.095933][ T29] audit: type=1326 audit(599.751:35044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19369 comm="syz.3.16160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 587.144374][ T29] audit: type=1326 audit(599.751:35045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19369 comm="syz.3.16160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 587.167667][ T29] audit: type=1326 audit(599.751:35046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19369 comm="syz.3.16160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 587.190990][ T29] audit: type=1326 audit(599.751:35047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19369 comm="syz.3.16160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 587.214090][ T29] audit: type=1326 audit(599.751:35048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19369 comm="syz.3.16160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 587.237328][ T29] audit: type=1326 audit(599.751:35049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19369 comm="syz.3.16160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 587.260876][ T29] audit: type=1326 audit(599.751:35050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19369 comm="syz.3.16160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 587.284109][ T29] audit: type=1326 audit(599.751:35051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19369 comm="syz.3.16160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 587.307233][ T29] audit: type=1326 audit(599.751:35052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19369 comm="syz.3.16160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 587.395712][ T29] audit: type=1326 audit(600.066:35053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19382 comm="syz.6.16164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 587.470276][T19389] loop3: detected capacity change from 0 to 128 [ 587.594884][T19398] ref_ctr increment failed for inode: 0x6c7 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888104033f40 [ 587.606082][T19398] ref_ctr increment failed for inode: 0x6c7 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888104033f40 [ 587.617911][T19395] uprobe: syz.3.16168:19395 failed to unregister, leaking uprobe [ 587.686959][T19395] uprobe: syz.3.16168:19395 failed to unregister, leaking uprobe [ 587.748590][T19412] vlan0: entered allmulticast mode [ 587.931759][T19438] netlink: 20 bytes leftover after parsing attributes in process `syz.9.16183'. [ 587.957087][T19438] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 588.038719][T19450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16189'. [ 588.048430][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16189'. [ 588.067702][T19450] netlink: 76 bytes leftover after parsing attributes in process `syz.8.16189'. [ 588.138685][T19460] netlink: 'syz.3.16193': attribute type 17 has an invalid length. [ 588.146845][T19460] netlink: 148 bytes leftover after parsing attributes in process `syz.3.16193'. [ 588.732738][T19493] netlink: 'syz.9.16204': attribute type 4 has an invalid length. [ 588.820545][T19500] bridge: RTM_NEWNEIGH with invalid ether address [ 589.289241][T19538] netlink: 5 bytes leftover after parsing attributes in process `syz.3.16218'. [ 589.311645][T19538] 0ªX¹¦D: renamed from gretap0 [ 589.318446][T19538] 0ªX¹¦D: entered allmulticast mode [ 589.325015][T19538] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 589.593343][T19601] netlink: 'syz.9.16226': attribute type 3 has an invalid length. [ 589.603530][T19601] netlink: 'syz.9.16226': attribute type 3 has an invalid length. [ 589.703526][T19615] loop8: detected capacity change from 0 to 512 [ 589.714079][T19615] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 589.773714][T19615] EXT4-fs (loop8): 1 truncate cleaned up [ 589.811359][T19615] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.967069][T13405] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.136085][T19665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19665 comm=syz.8.16243 [ 590.155631][T19676] netlink: 'syz.3.16244': attribute type 1 has an invalid length. [ 590.163872][T19676] netlink: 'syz.3.16244': attribute type 4 has an invalid length. [ 590.191397][T19676] netlink: 'syz.3.16244': attribute type 1 has an invalid length. [ 590.199347][T19676] netlink: 'syz.3.16244': attribute type 4 has an invalid length. [ 590.241882][T19691] netem: change failed [ 590.582360][T19716] netlink: 'syz.6.16254': attribute type 1 has an invalid length. [ 590.624346][T19719] syzkaller0: entered promiscuous mode [ 590.629970][T19719] syzkaller0: entered allmulticast mode [ 590.704711][T19734] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 590.784060][T19745] vhci_hcd: invalid port number 255 [ 590.789389][T19745] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 591.403293][T19771] loop8: detected capacity change from 0 to 512 [ 591.410073][T19771] EXT4-fs: Ignoring removed oldalloc option [ 591.423952][T19771] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.16275: Parent and EA inode have the same ino 15 [ 591.441797][T19771] EXT4-fs (loop8): Remounting filesystem read-only [ 591.452102][T19771] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -30) [ 591.462958][T19771] EXT4-fs (loop8): 1 orphan inode deleted [ 591.481734][T19771] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.512974][T13405] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.540664][T19779] vhci_hcd: invalid port number 255 [ 591.546646][T19779] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 591.566649][T19781] __nla_validate_parse: 8 callbacks suppressed [ 591.566720][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16278'. [ 591.589155][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16278'. [ 591.624903][T19790] loop8: detected capacity change from 0 to 164 [ 591.642316][T19790] syz.8.16280: attempt to access beyond end of device [ 591.642316][T19790] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 591.662407][T19790] syz.8.16280: attempt to access beyond end of device [ 591.662407][T19790] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 591.759718][T19808] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 591.920766][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 591.920855][ T29] audit: type=1326 audit(604.811:35191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19838 comm="syz.9.16295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 591.966510][ T29] audit: type=1326 audit(604.853:35192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19838 comm="syz.9.16295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 591.989999][ T29] audit: type=1326 audit(604.853:35193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19838 comm="syz.9.16295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 592.013187][ T29] audit: type=1326 audit(604.853:35194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19838 comm="syz.9.16295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 592.036312][ T29] audit: type=1326 audit(604.853:35195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19838 comm="syz.9.16295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 592.059451][ T29] audit: type=1326 audit(604.853:35196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19838 comm="syz.9.16295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 592.082691][ T29] audit: type=1326 audit(604.853:35197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19838 comm="syz.9.16295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 592.105977][ T29] audit: type=1326 audit(604.853:35198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19838 comm="syz.9.16295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 592.129314][ T29] audit: type=1326 audit(604.853:35199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19838 comm="syz.9.16295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 592.152496][ T29] audit: type=1326 audit(604.853:35200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19838 comm="syz.9.16295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 592.250513][T19856] loop3: detected capacity change from 0 to 1024 [ 592.253854][T19857] vlan0: entered allmulticast mode [ 592.278450][T19856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.310745][T11573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.561604][T19900] bridge: RTM_NEWNEIGH with invalid ether address [ 593.062081][T19929] loop8: detected capacity change from 0 to 2048 [ 593.092608][T19929] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 593.532748][T19952] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.542694][T19952] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.551645][T19929] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 593.573156][T19929] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 593.585700][T19929] EXT4-fs (loop8): This should not happen!! Data will be lost [ 593.585700][T19929] [ 593.595533][T19929] EXT4-fs (loop8): Total free blocks count 0 [ 593.601601][T19929] EXT4-fs (loop8): Free/Dirty block details [ 593.607510][T19929] EXT4-fs (loop8): free_blocks=2415919104 [ 593.613289][T19929] EXT4-fs (loop8): dirty_blocks=8208 [ 593.618593][T19929] EXT4-fs (loop8): Block reservation details [ 593.624630][T19929] EXT4-fs (loop8): i_reserved_data_blocks=513 [ 593.664959][T19947] netlink: 96 bytes leftover after parsing attributes in process `syz.6.16340'. [ 593.678708][T19952] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.688688][T19952] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.723826][ T4890] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 593.785352][T19952] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.796090][T19952] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.870578][T19952] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.880428][T19952] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.963983][ T4859] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.972520][ T4859] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.994851][ T4859] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.003297][ T4859] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.021441][ T4859] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.029789][ T4859] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.043724][T19983] netlink: 96 bytes leftover after parsing attributes in process `syz.8.16336'. [ 594.075372][ T4859] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.083664][ T4859] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.617656][T20024] pim6reg: entered allmulticast mode [ 594.628673][T20021] netlink: 'syz.3.16351': attribute type 10 has an invalid length. [ 594.639769][T20024] pim6reg: left allmulticast mode [ 594.671299][T20021] bond0: (slave dummy0): Releasing backup interface [ 594.689708][T20031] netlink: 'syz.3.16351': attribute type 10 has an invalid length. [ 594.730053][T20021] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 594.740653][T20021] team0: Failed to send options change via netlink (err -105) [ 594.758181][T20021] team0: Port device dummy0 added [ 594.767908][T20031] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 594.778011][T20031] team0: Failed to send options change via netlink (err -105) [ 594.786211][T20031] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 594.795337][T20031] team0: Port device dummy0 removed [ 594.805776][T20031] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 594.887723][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16353'. [ 595.295383][T20080] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16361'. [ 595.364715][T20088] ref_ctr increment failed for inode: 0x32c1 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888104032840 [ 595.387958][T20088] ref_ctr increment failed for inode: 0x32c1 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888104032840 [ 595.416285][T20087] uprobe: syz.9.16366:20087 failed to unregister, leaking uprobe [ 595.438489][T20094] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.478909][T20087] uprobe: syz.9.16366:20087 failed to unregister, leaking uprobe [ 595.490509][T20094] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.560530][T20094] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.561988][T20111] 9pnet: p9_errstr2errno: server reported unknown error [ 595.651174][T20094] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.892883][ T4891] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.973967][ T4891] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.007049][ T4891] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.021829][ T4891] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.789212][T20233] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 596.874989][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 596.875022][ T29] audit: type=1326 audit(610.018:35360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20250 comm="syz.5.16418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 596.940196][ T29] audit: type=1326 audit(610.049:35361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20250 comm="syz.5.16418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 596.964142][ T29] audit: type=1326 audit(610.049:35362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20250 comm="syz.5.16418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 596.987473][ T29] audit: type=1326 audit(610.049:35363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20250 comm="syz.5.16418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 597.010610][ T29] audit: type=1326 audit(610.060:35364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20250 comm="syz.5.16418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05b8e7d550 code=0x7ffc0000 [ 597.034443][ T29] audit: type=1326 audit(610.060:35365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20250 comm="syz.5.16418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 597.040687][T20257] netlink: 332 bytes leftover after parsing attributes in process `syz.3.16420'. [ 597.057523][ T29] audit: type=1326 audit(610.060:35366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20250 comm="syz.5.16418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 597.057584][ T29] audit: type=1326 audit(610.060:35367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20250 comm="syz.5.16418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 597.057617][ T29] audit: type=1326 audit(610.060:35368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20250 comm="syz.5.16418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 597.138378][ T29] audit: type=1326 audit(610.060:35369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20250 comm="syz.5.16418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b8e7ebe9 code=0x7ffc0000 [ 597.231998][T20271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16426'. [ 597.447321][T20303] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16439'. [ 597.777190][T20337] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.840879][T20337] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.905052][T20346] loop8: detected capacity change from 0 to 8192 [ 597.912771][T20337] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.966550][T20337] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.048428][ T4859] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.100497][ T4859] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.128491][ T4859] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.154496][ T4859] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.453563][T20410] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16469'. [ 598.494308][T20410] 8021q: adding VLAN 0 to HW filter on device bond11 [ 598.512569][T20410] vlan0: entered allmulticast mode [ 598.517864][T20410] bond11: entered allmulticast mode [ 598.732971][T20461] netlink: 'syz.8.16477': attribute type 1 has an invalid length. [ 598.740946][T20461] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.16477'. [ 599.323359][T20474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16484'. [ 599.580087][T20495] netlink: 'syz.6.16492': attribute type 7 has an invalid length. [ 599.588072][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16492'. [ 599.713617][T20506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16496'. [ 599.731226][T20506] team2: entered promiscuous mode [ 599.736600][T20506] team2: entered allmulticast mode [ 599.808849][T20555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16501'. [ 599.850096][T20560] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16502'. [ 599.880811][T20563] loop3: detected capacity change from 0 to 128 [ 601.036294][T20651] 8021q: adding VLAN 0 to HW filter on device bond3 [ 601.080461][T20651] bond3: (slave ip6gretap1): making interface the new active one [ 601.090954][T20651] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 601.374408][T20739] 8021q: adding VLAN 0 to HW filter on device bond12 [ 601.399089][T20739] bond12: (slave ip6gretap1): making interface the new active one [ 601.410006][T20739] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 601.443636][T20779] team2: entered promiscuous mode [ 601.448722][T20779] team2: entered allmulticast mode [ 602.086043][T20859] 8021q: adding VLAN 0 to HW filter on device bond6 [ 602.101995][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 602.102014][ T29] audit: type=1400 audit(615.508:35758): avc: denied { append } for pid=20855 comm="syz.8.16561" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 602.155562][T20859] bond6: (slave ip6gretap1): making interface the new active one [ 602.165398][T20859] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 602.249660][T20897] __nla_validate_parse: 8 callbacks suppressed [ 602.249679][T20897] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16563'. [ 602.371025][ T29] audit: type=1326 audit(615.781:35759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.9.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa052775ba7 code=0x7ffc0000 [ 602.394137][ T29] audit: type=1326 audit(615.781:35760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.9.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa05271adb9 code=0x7ffc0000 [ 602.417158][ T29] audit: type=1326 audit(615.781:35761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.9.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa052775ba7 code=0x7ffc0000 [ 602.440225][ T29] audit: type=1326 audit(615.781:35762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.9.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa05271adb9 code=0x7ffc0000 [ 602.463220][ T29] audit: type=1326 audit(615.781:35763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.9.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 602.486373][ T29] audit: type=1326 audit(615.781:35764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.9.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 602.534452][ T29] audit: type=1326 audit(615.949:35765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.9.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 602.558523][ T29] audit: type=1326 audit(615.949:35766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.9.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05277ebe9 code=0x7ffc0000 [ 602.630901][T20909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16567'. [ 602.640126][T20909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16567'. [ 602.749615][T20925] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.814397][T20925] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.886747][T20925] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.950847][T20925] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.041905][ T4915] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.063676][ T4915] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.064454][T20951] loop8: detected capacity change from 0 to 2048 [ 603.098270][ T4915] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.113171][ T4915] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.128237][T20951] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.207474][ T29] audit: type=1326 audit(616.663:35767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20971 comm="syz.3.16581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c5baebe9 code=0x7ffc0000 [ 603.346721][T13405] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.390873][T20989] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16584'. [ 603.420427][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16584'. [ 603.959777][T21054] bond7: entered promiscuous mode [ 603.964997][T21054] bond7: entered allmulticast mode [ 603.971333][T21054] 8021q: adding VLAN 0 to HW filter on device bond7 [ 603.988304][T21054] bond7 (unregistering): Released all slaves [ 604.204858][T21135] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.214792][T21135] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.247497][T21135] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.258103][T21135] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.313848][T21135] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.323728][T21135] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.370872][T21135] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.380782][T21135] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.463440][ T4898] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.471854][ T4898] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.498563][ T4898] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.506924][ T4898] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.581286][ T4908] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.589558][ T4908] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.609735][ T4891] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.617982][ T4891] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.782941][T21163] netlink: 'syz.5.16606': attribute type 1 has an invalid length. [ 604.791016][T21163] netlink: 'syz.5.16606': attribute type 4 has an invalid length. [ 604.794814][T21164] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.16607'. [ 604.798939][T21163] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.16606'. [ 604.838933][T21165] netlink: 'syz.5.16606': attribute type 1 has an invalid length. [ 604.846940][T21165] netlink: 'syz.5.16606': attribute type 4 has an invalid length. [ 604.854875][T21165] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.16606'. [ 604.897298][T21167] syzkaller0: entered allmulticast mode [ 604.903232][T21167] syzkaller0: entered promiscuous mode [ 604.935693][T21176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16609'. [ 604.946446][T21167] syzkaller0 (unregistering): left allmulticast mode [ 604.953154][T21167] syzkaller0 (unregistering): left promiscuous mode [ 605.001796][T21176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16609'. [ 605.048289][T21187] syzkaller0: entered allmulticast mode [ 605.066290][T21187] syzkaller0: entered promiscuous mode [ 605.076741][T21187] syzkaller0 (unregistering): left allmulticast mode [ 605.083537][T21187] syzkaller0 (unregistering): left promiscuous mode [ 605.124233][T21199] netlink: 'syz.3.16615': attribute type 4 has an invalid length. [ 605.152388][T21198] netlink: 'syz.6.16616': attribute type 17 has an invalid length. [ 605.269288][T21204] 8021q: adding VLAN 0 to HW filter on device bond13 [ 605.305513][T21247] bond13: (slave ip6gretap1): making interface the new active one [ 605.328114][T21247] bond13: (slave ip6gretap1): Enslaving as an active interface with an up link [ 605.421123][T21252] netlink: 'syz.6.16622': attribute type 1 has an invalid length. [ 605.429736][T21252] netlink: 'syz.6.16622': attribute type 4 has an invalid length. [ 605.467519][T21252] netlink: 'syz.6.16622': attribute type 1 has an invalid length. [ 605.475551][T21252] netlink: 'syz.6.16622': attribute type 4 has an invalid length. [ 605.892918][T21277] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 605.926248][T21284] loop8: detected capacity change from 0 to 128 [ 606.487143][T21305] 8021q: adding VLAN 0 to HW filter on device bond5 [ 606.523864][T21305] bond5: (slave geneve2): making interface the new active one [ 606.548044][T21305] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 606.559450][ T4883] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.599921][ T4883] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.641729][ T4883] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.673247][ T4883] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.873905][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 606.873920][ T29] audit: type=1326 audit(620.516:35919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.6.16646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b1ba85ba7 code=0x7ffc0000 [ 606.903965][ T29] audit: type=1326 audit(620.516:35920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.6.16646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b1ba2adb9 code=0x7ffc0000 [ 606.928011][ T29] audit: type=1326 audit(620.516:35921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.6.16646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 606.958425][ T29] audit: type=1326 audit(620.600:35922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.6.16646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b1ba85ba7 code=0x7ffc0000 [ 606.981564][ T29] audit: type=1326 audit(620.600:35923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.6.16646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b1ba2adb9 code=0x7ffc0000 [ 607.004600][ T29] audit: type=1326 audit(620.600:35924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.6.16646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 607.038301][T21370] loop3: detected capacity change from 0 to 128 [ 607.039617][ T29] audit: type=1326 audit(620.684:35925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.6.16646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b1ba85ba7 code=0x7ffc0000 [ 607.068421][ T29] audit: type=1326 audit(620.684:35926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.6.16646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b1ba2adb9 code=0x7ffc0000 [ 607.092095][ T29] audit: type=1326 audit(620.684:35927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.6.16646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3b1ba8ebe9 code=0x7ffc0000 [ 607.115356][ T29] audit: type=1326 audit(620.684:35928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.6.16646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b1ba85ba7 code=0x7ffc0000 [ 607.308898][T21378] __nla_validate_parse: 9 callbacks suppressed [ 607.308913][T21378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16654'. [ 607.333762][T21378] 8021q: adding VLAN 0 to HW filter on device bond7 [ 607.343354][T21380] ref_ctr increment failed for inode: 0x33f5 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88810005bf40 [ 607.365028][T21378] vlan0: entered allmulticast mode [ 607.370210][T21378] bond7: entered allmulticast mode [ 607.371538][T21380] ref_ctr increment failed for inode: 0x33f5 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810005bf40 [ 607.390320][T21379] uprobe: syz.9.16656:21379 failed to unregister, leaking uprobe [ 607.480353][T21379] uprobe: syz.9.16656:21379 failed to unregister, leaking uprobe [ 607.627672][T21431] pim6reg: entered allmulticast mode [ 607.649754][T21431] pim6reg: left allmulticast mode [ 607.744656][T21454] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16667'. [ 608.089092][T21495] bridge0: port 3(macvtap1) entered blocking state [ 608.096506][T21495] bridge0: port 3(macvtap1) entered disabled state [ 608.106008][T21495] macvtap1: entered allmulticast mode [ 608.111512][T21495] bridge0: entered allmulticast mode [ 608.124229][T21495] macvtap1: left allmulticast mode [ 608.129572][T21495] bridge0: left allmulticast mode [ 608.140623][T21499] netlink: 20 bytes leftover after parsing attributes in process `syz.9.16679'. [ 608.538149][T21538] loop3: detected capacity change from 0 to 512 [ 608.555723][T21538] EXT4-fs: Ignoring removed mblk_io_submit option [ 608.565783][T21538] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 608.582970][T21538] EXT4-fs (loop3): 1 truncate cleaned up [ 608.591477][T21538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.663996][T21552] tipc: Failed to remove unknown binding: 66,1,1/0:2906039636/2906039638 [ 608.672627][T21552] tipc: Failed to remove unknown binding: 66,1,1/0:2906039636/2906039638 [ 608.716484][T21556] tipc: Enabling of bearer rejected, failed to enable media [ 608.780852][T21562] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.791438][T21562] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.857522][T21562] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.867499][T21562] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.989586][T21562] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.999421][T21562] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.062941][T21562] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.072857][T21562] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.171044][ T31] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.179957][ T31] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.204656][ T31] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.212890][ T31] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.225132][T21601] SELinux: failed to load policy [ 609.256599][T21617] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16711'. [ 609.273624][ T31] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.281962][ T31] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.312134][T21617] 8021q: adding VLAN 0 to HW filter on device bond6 [ 609.330973][T21646] vlan0: entered allmulticast mode [ 609.336281][T21646] bond6: entered allmulticast mode [ 609.390990][ T31] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.399320][ T31] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.515550][T21672] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.525451][T21672] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.577613][T21672] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.588256][T21672] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.669937][T21538] ================================================================== [ 609.678113][T21538] BUG: KCSAN: data-race in __xa_set_mark / filemap_write_and_wait_range [ 609.686482][T21538] [ 609.688819][T21538] write to 0xffff8881044760f4 of 4 bytes by task 21553 on cpu 0: [ 609.696601][T21538] __xa_set_mark+0x172/0x1a0 [ 609.701209][T21538] __folio_mark_dirty+0x3af/0x4d0 [ 609.706267][T21538] mark_buffer_dirty+0x11e/0x210 [ 609.711237][T21538] block_write_end+0x12d/0x210 [ 609.716038][T21538] ext4_write_end+0x134/0x730 [ 609.720746][T21538] generic_perform_write+0x30f/0x490 [ 609.726090][T21538] ext4_buffered_write_iter+0x1ee/0x3c0 [ 609.731799][T21538] ext4_file_write_iter+0xdbf/0xf00 [ 609.737046][T21538] iter_file_splice_write+0x663/0xa60 [ 609.742454][T21538] direct_splice_actor+0x153/0x2a0 [ 609.747597][T21538] splice_direct_to_actor+0x30f/0x680 [ 609.752997][T21538] do_splice_direct+0xda/0x150 [ 609.757786][T21538] do_sendfile+0x380/0x650 [ 609.762267][T21538] __x64_sys_sendfile64+0x105/0x150 [ 609.767498][T21538] x64_sys_call+0x2bb0/0x2ff0 [ 609.772192][T21538] do_syscall_64+0xd2/0x200 [ 609.776743][T21538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.782687][T21538] [ 609.785023][T21538] read to 0xffff8881044760f4 of 4 bytes by task 21538 on cpu 1: [ 609.792663][T21538] filemap_write_and_wait_range+0xfc/0x340 [ 609.798496][T21538] ext4_file_write_iter+0xe04/0xf00 [ 609.803712][T21538] iter_file_splice_write+0x663/0xa60 [ 609.809183][T21538] direct_splice_actor+0x153/0x2a0 [ 609.814295][T21538] splice_direct_to_actor+0x30f/0x680 [ 609.819681][T21538] do_splice_direct+0xda/0x150 [ 609.824555][T21538] do_sendfile+0x380/0x650 [ 609.828986][T21538] __x64_sys_sendfile64+0x105/0x150 [ 609.834199][T21538] x64_sys_call+0x2bb0/0x2ff0 [ 609.838911][T21538] do_syscall_64+0xd2/0x200 [ 609.843431][T21538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.849349][T21538] [ 609.851672][T21538] value changed: 0x00000021 -> 0x0a000021 [ 609.857395][T21538] [ 609.859712][T21538] Reported by Kernel Concurrency Sanitizer on: [ 609.865867][T21538] CPU: 1 UID: 0 PID: 21538 Comm: syz.3.16695 Not tainted syzkaller #0 PREEMPT(voluntary) [ 609.875773][T21538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.886001][T21538] ================================================================== [ 609.896780][T21672] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.906681][T21672] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.918001][T11573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.968303][T21672] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.978271][T21672] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.087030][ T4883] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.095870][ T4883] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.107681][ T4883] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.115934][ T4883] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.128254][ T4883] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.136550][ T4883] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.148606][ T4883] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.156873][ T4883] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0