last executing test programs: 3m36.476710941s ago: executing program 2 (id=62): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r2, 0x4000, r4}, 0x18) 3m36.400581947s ago: executing program 2 (id=66): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 3m36.352069531s ago: executing program 2 (id=69): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x14, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getitimer(0x2, 0x0) 3m36.303160855s ago: executing program 2 (id=73): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@lazytime}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x6b2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x10000000000]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) 3m36.127062729s ago: executing program 2 (id=77): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x8c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x8c}}, 0x0) 3m35.840739922s ago: executing program 2 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 3m35.840505172s ago: executing program 32 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 1m14.230899178s ago: executing program 4 (id=2975): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000aa40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x40010) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0x8a, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) 1m14.166471773s ago: executing program 4 (id=2979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m13.776787464s ago: executing program 4 (id=2982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x14, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000180000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000180)="92931f6e32e1ffa94914674af600", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x4}, 0x50) close_range(r2, 0xffffffffffffffff, 0x0) 1m13.69994807s ago: executing program 4 (id=2984): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 1m13.421184693s ago: executing program 4 (id=2986): creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8}, 0x18) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m13.250459916s ago: executing program 4 (id=2989): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)="5b6e69c7a60454bd925ca45a", &(0x7f0000000140), 0x80000002, r0}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0xffffffff, 0x7}}, @const={0xa, 0x0, 0x0, 0xa, 0x3}, @restrict={0xb, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x5f, 0x2e, 0x5f, 0x5f, 0x30, 0x2e, 0x61, 0x0]}}, &(0x7f0000000140)=""/110, 0x53, 0x6e, 0x0, 0x1, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1c, &(0x7f00000018c0)=ANY=[@ANYBLOB="180000000300000000181159920aa69386599e334f764d78b34119a04f50998e621d257a23bb1f9b7788d543a90cd8b88771e1700952786c", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000043000000850000007e000000180000000300000000000000810000001ad7c0ff08000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000008c0)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r0, r0, r0, r0], 0x0, 0x10, 0xbdff}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="0d81757e6c000400"/28, @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000) 1m13.250067786s ago: executing program 33 (id=2989): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)="5b6e69c7a60454bd925ca45a", &(0x7f0000000140), 0x80000002, r0}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0xffffffff, 0x7}}, @const={0xa, 0x0, 0x0, 0xa, 0x3}, @restrict={0xb, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x5f, 0x2e, 0x5f, 0x5f, 0x30, 0x2e, 0x61, 0x0]}}, &(0x7f0000000140)=""/110, 0x53, 0x6e, 0x0, 0x1, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1c, &(0x7f00000018c0)=ANY=[@ANYBLOB="180000000300000000181159920aa69386599e334f764d78b34119a04f50998e621d257a23bb1f9b7788d543a90cd8b88771e1700952786c", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000043000000850000007e000000180000000300000000000000810000001ad7c0ff08000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000008c0)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r0, r0, r0, r0], 0x0, 0x10, 0xbdff}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="0d81757e6c000400"/28, @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000) 4.305786915s ago: executing program 1 (id=4268): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100ebff00001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x404cc84) 2.773222838s ago: executing program 3 (id=4275): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 2.766498968s ago: executing program 1 (id=4276): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.74738475s ago: executing program 3 (id=4277): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.670044676s ago: executing program 3 (id=4279): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x100006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.634776559s ago: executing program 3 (id=4281): syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.551686836s ago: executing program 1 (id=4285): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x81, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) 2.010483459s ago: executing program 6 (id=4294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x208, 0x21, 0x8000}, 0x50) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 1.926575656s ago: executing program 5 (id=4295): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = dup(r3) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f00000000c0)) ioctl$PTP_EXTTS_REQUEST2(r4, 0x43403d05, 0x0) 1.926114196s ago: executing program 6 (id=4296): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 1.87654325s ago: executing program 5 (id=4297): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.340167043s ago: executing program 5 (id=4298): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 1.339513253s ago: executing program 1 (id=4308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0) 1.312948335s ago: executing program 3 (id=4299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 1.218264073s ago: executing program 0 (id=4301): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200020, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x44000) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) timer_create(0x2, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) 1.153177928s ago: executing program 6 (id=4302): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 1.152530918s ago: executing program 5 (id=4303): bpf$PROG_LOAD(0x5, 0x0, 0x46) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000c50000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.149547738s ago: executing program 0 (id=4304): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000100000000000007000000000100000002000084d6000000040000000200000075000000070000000900000003000000006130"], 0x0, 0x50, 0x0, 0x1, 0x9}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500060000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r1, 0x409, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.067396595s ago: executing program 6 (id=4305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x939e02dc105d5baa, 0xfff5}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000003080)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000180)=""/192, 0xc0}], 0x5}, 0x8}], 0x2000, 0x0, 0x0) 922.416647ms ago: executing program 6 (id=4306): open(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010062, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 680.606456ms ago: executing program 0 (id=4307): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x6) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 486.317181ms ago: executing program 6 (id=4309): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x81, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) 485.646331ms ago: executing program 0 (id=4319): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) unshare(0xc040400) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 310.179565ms ago: executing program 3 (id=4310): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 307.177906ms ago: executing program 1 (id=4321): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 264.702379ms ago: executing program 1 (id=4311): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = semget$private(0x0, 0x4000000009, 0x0) r1 = eventfd2(0x7, 0x800) read$eventfd(r1, &(0x7f0000000200), 0x8) semop(r0, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) io_cancel(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0xffff}, {0x0, 0x8, 0x800}], 0x2) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 159.149067ms ago: executing program 5 (id=4312): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200028bd7000fbdbdf2502000000090001007266646e6f00000005000000000000002f01b04a"], 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x80011) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d332000000f7ffffff00000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000a00000000000000000000004800020063621e2085a9406328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d6163286165732900"/321], 0x184}}, 0x0) 136.621939ms ago: executing program 5 (id=4313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) socket$inet6(0xa, 0x2, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) 77.758284ms ago: executing program 0 (id=4314): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 0 (id=4315): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x4, 0x8}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): =0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 159.619226][ T9842] netlink: 'syz.0.2512': attribute type 30 has an invalid length. [ 159.741667][ T9853] netlink: 'syz.0.2518': attribute type 1 has an invalid length. [ 159.756373][ T9853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.787095][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2518'. [ 159.798725][ T9853] bond1 (unregistering): Released all slaves [ 159.938580][ T9867] bond0: (slave dummy0): Releasing backup interface [ 160.010450][ T9880] lo speed is unknown, defaulting to 1000 [ 160.106570][ T9886] netlink: 'syz.3.2530': attribute type 30 has an invalid length. [ 160.542071][ T9918] wg2: entered promiscuous mode [ 160.547133][ T9918] wg2: entered allmulticast mode [ 161.625516][ T9978] netlink: 'syz.1.2569': attribute type 30 has an invalid length. [ 161.780719][ T9988] tls_set_device_offload: netdev not found [ 161.914237][T10004] lo: entered allmulticast mode [ 161.925573][T10004] dvmrp1: entered allmulticast mode [ 161.954544][T10003] lo: left allmulticast mode [ 162.444151][T10030] netlink: 'syz.5.2590': attribute type 1 has an invalid length. [ 162.518231][T10030] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.528043][T10030] bond3: (slave bond4): making interface the new active one [ 162.535894][T10030] bond3: (slave bond4): Enslaving as an active interface with an up link [ 162.633618][T10030] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2590'. [ 162.653498][T10030] bond3: entered promiscuous mode [ 162.658631][T10030] bond4: entered promiscuous mode [ 162.663970][T10030] bond3: entered allmulticast mode [ 162.669164][T10030] bond4: entered allmulticast mode [ 162.693280][T10030] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.706504][T10038] lo speed is unknown, defaulting to 1000 [ 162.938709][T10061] netlink: 'syz.0.2609': attribute type 1 has an invalid length. [ 162.975749][T10061] bond1: entered promiscuous mode [ 162.980945][T10061] bond1: entered allmulticast mode [ 162.998547][T10061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.017501][T10061] bridge5: entered promiscuous mode [ 163.023699][T10061] bridge5: entered allmulticast mode [ 163.025926][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2603'. [ 163.029838][T10061] bond1: (slave bridge5): Enslaving as a backup interface with an up link [ 163.056207][T10073] vlan2: entered allmulticast mode [ 163.061643][T10073] bridge0: entered allmulticast mode [ 163.067883][T10073] bridge6: port 1(vlan2) entered blocking state [ 163.074529][T10073] bridge6: port 1(vlan2) entered disabled state [ 163.081713][T10073] vlan2: entered promiscuous mode [ 163.087575][T10073] bridge0: entered promiscuous mode [ 163.087939][ T1698] net_ratelimit: 11 callbacks suppressed [ 163.087955][ T1698] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 163.129779][T10081] syz_tun: entered allmulticast mode [ 163.135368][T10079] netlink: 'syz.0.2605': attribute type 30 has an invalid length. [ 163.139401][T10081] dvmrp1: entered allmulticast mode [ 163.152674][T10080] syz_tun: left allmulticast mode [ 163.181853][T10087] wg2: left promiscuous mode [ 163.187261][T10087] wg2: left allmulticast mode [ 163.198236][T10087] wg2: entered promiscuous mode [ 163.203142][T10087] wg2: entered allmulticast mode [ 163.226332][ T3691] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 163.258318][T10091] netlink: 'syz.4.2611': attribute type 1 has an invalid length. [ 163.273926][T10091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.283250][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2621'. [ 163.289285][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2611'. [ 163.306686][T10091] bond1 (unregistering): Released all slaves [ 163.891267][T10116] dvmrp1: entered allmulticast mode [ 164.041231][T10126] netlink: 'syz.0.2627': attribute type 30 has an invalid length. [ 164.110149][T10127] lo speed is unknown, defaulting to 1000 [ 164.206933][T10137] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2633'. [ 164.230230][T10137] 0X: renamed from caif0 [ 164.339634][T10137] 0X: entered allmulticast mode [ 164.346152][T10137] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 164.369600][T10140] tipc: New replicast peer: 255.255.255.255 [ 164.377103][T10140] tipc: Enabled bearer , priority 10 [ 164.701401][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2641'. [ 164.713059][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 164.713074][ T29] audit: type=1326 audit(1755568496.949:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10157 comm="syz.1.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6dced55ba7 code=0x7ffc0000 [ 164.753866][ T29] audit: type=1326 audit(1755568496.949:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10157 comm="syz.1.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6dcecfadd9 code=0x7ffc0000 [ 164.786902][ T29] audit: type=1326 audit(1755568496.949:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10157 comm="syz.1.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6dced55ba7 code=0x7ffc0000 [ 164.813373][ T29] audit: type=1326 audit(1755568496.949:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10157 comm="syz.1.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6dcecfadd9 code=0x7ffc0000 [ 164.838520][ T29] audit: type=1326 audit(1755568496.949:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10157 comm="syz.1.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 164.864749][ T29] audit: type=1326 audit(1755568496.949:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10157 comm="syz.1.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 164.890206][ T29] audit: type=1326 audit(1755568496.949:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10157 comm="syz.1.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6dced55ba7 code=0x7ffc0000 [ 164.914460][ T29] audit: type=1326 audit(1755568496.949:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10157 comm="syz.1.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6dcecfadd9 code=0x7ffc0000 [ 164.937996][ T29] audit: type=1326 audit(1755568496.949:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10157 comm="syz.1.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6dced55ba7 code=0x7ffc0000 [ 164.961468][ T29] audit: type=1326 audit(1755568496.949:7321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10157 comm="syz.1.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6dcecfadd9 code=0x7ffc0000 [ 165.045690][T10162] loop3: detected capacity change from 0 to 512 [ 165.060103][T10162] EXT4-fs error (device loop3): __ext4_iget:5464: inode #17: block 1803188595: comm syz.3.2642: invalid block [ 165.079121][T10162] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2642: couldn't read orphan inode 17 (err -117) [ 165.130948][T10162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.159277][T10174] tipc: Failed to remove unknown binding: 66,1,1/0:2703321899/2703321901 [ 165.190121][T10162] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 165.203517][T10174] tipc: Failed to remove unknown binding: 66,1,1/0:2703321899/2703321901 [ 165.212063][T10174] tipc: Failed to remove unknown binding: 66,1,1/0:2703321899/2703321901 [ 165.260898][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.371811][T10184] syzkaller0: entered allmulticast mode [ 165.377714][T10184] syzkaller0: entered promiscuous mode [ 165.421764][T10184] syzkaller0 (unregistering): left allmulticast mode [ 165.428619][T10184] syzkaller0 (unregistering): left promiscuous mode [ 165.499071][T10188] tipc: Enabled bearer , priority 0 [ 165.512344][T10187] tipc: Resetting bearer [ 165.531829][T10187] tipc: Disabling bearer [ 166.002914][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2658'. [ 166.086070][T10207] vlan0: entered allmulticast mode [ 166.091360][T10207] bridge0: entered allmulticast mode [ 166.116389][T10207] bridge6: port 1(vlan0) entered blocking state [ 166.122756][T10207] bridge6: port 1(vlan0) entered disabled state [ 166.131696][T10207] vlan0: entered promiscuous mode [ 166.136831][T10207] bridge0: entered promiscuous mode [ 166.194951][T10201] lo speed is unknown, defaulting to 1000 [ 167.139055][T10242] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2831316901/2831316903 [ 167.140524][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2672'. [ 167.169110][T10242] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2831316901/2831316903 [ 167.178456][T10242] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2831316901/2831316903 [ 167.200477][T10243] vlan1: entered allmulticast mode [ 167.206538][T10243] bridge0: entered allmulticast mode [ 167.224003][T10243] bridge7: port 1(vlan1) entered blocking state [ 167.230326][T10243] bridge7: port 1(vlan1) entered disabled state [ 167.247491][T10243] vlan1: entered promiscuous mode [ 167.252590][T10243] bridge0: entered promiscuous mode [ 167.405270][T10264] pim6reg1: entered promiscuous mode [ 167.410673][T10264] pim6reg1: entered allmulticast mode [ 168.031390][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'. [ 168.045248][T10279] lo speed is unknown, defaulting to 1000 [ 168.051441][T10280] vlan0: entered allmulticast mode [ 168.051460][T10280] bridge0: entered allmulticast mode [ 168.110029][T10279] uprobe: syz.5.2688:10279 failed to unregister, leaking uprobe [ 168.384573][T10287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2691'. [ 168.593307][ T7119] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 168.613771][ T7119] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 168.969306][T10321] loop4: detected capacity change from 0 to 512 [ 169.014485][T10321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.034081][T10323] loop3: detected capacity change from 0 to 512 [ 169.041151][T10321] ext4 filesystem being mounted at /549/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.057988][T10321] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2703: Failed to acquire dquot type 0 [ 169.071012][T10323] EXT4-fs (loop3): too many log groups per flexible block group [ 169.078841][T10323] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 169.096389][T10323] EXT4-fs (loop3): mount failed [ 169.102352][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.128483][T10332] loop4: detected capacity change from 0 to 512 [ 169.136498][T10332] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.143076][T10332] EXT4-fs: Ignoring removed bh option [ 169.155113][T10332] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.166994][T10332] EXT4-fs (loop4): 1 truncate cleaned up [ 169.173217][T10332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.234963][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.272520][T10334] loop3: detected capacity change from 0 to 8192 [ 169.551250][T10351] loop4: detected capacity change from 0 to 8192 [ 169.633182][ T7119] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.651976][ T7119] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.734298][T10363] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 169.844288][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2723'. [ 169.885698][T10372] team1: entered promiscuous mode [ 169.891613][T10372] team1: entered allmulticast mode [ 170.161014][T10391] loop4: detected capacity change from 0 to 512 [ 170.187409][T10391] EXT4-fs (loop4): too many log groups per flexible block group [ 170.196784][T10391] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 170.205743][T10391] EXT4-fs (loop4): mount failed [ 170.287895][T10404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2733'. [ 170.353226][T10404] vlan0: entered allmulticast mode [ 170.358729][T10404] bridge0: entered allmulticast mode [ 170.380429][T10404] bridge8: port 1(vlan0) entered blocking state [ 170.386837][T10404] bridge8: port 1(vlan0) entered disabled state [ 170.396015][T10404] vlan0: entered promiscuous mode [ 170.401197][T10404] bridge0: entered promiscuous mode [ 170.433958][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 170.433976][ T29] audit: type=1326 audit(1755568502.228:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 170.463743][ T29] audit: type=1326 audit(1755568502.228:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 170.519964][ T29] audit: type=1326 audit(1755568502.228:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 170.543523][ T29] audit: type=1326 audit(1755568502.228:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 170.567186][ T29] audit: type=1326 audit(1755568502.228:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 170.591106][ T29] audit: type=1326 audit(1755568502.228:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 170.614634][ T29] audit: type=1326 audit(1755568502.228:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 170.638455][ T29] audit: type=1326 audit(1755568502.228:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 170.662069][ T29] audit: type=1326 audit(1755568502.228:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 170.685870][ T29] audit: type=1326 audit(1755568502.228:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 170.990499][T10448] lo speed is unknown, defaulting to 1000 [ 171.095764][T10463] $H: renamed from  [ 171.112393][T10463] $H: entered promiscuous mode [ 171.174129][T10471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2751'. [ 171.445238][T10501] tipc: Failed to remove unknown binding: 66,1,1/0:2738921779/2738921781 [ 171.474360][T10501] tipc: Failed to remove unknown binding: 66,1,1/0:2738921779/2738921781 [ 171.483019][T10501] tipc: Failed to remove unknown binding: 66,1,1/0:2738921779/2738921781 [ 171.531554][T10509] netlink: 'syz.0.2764': attribute type 4 has an invalid length. [ 171.583881][T10515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10515 comm=syz.5.2767 [ 172.070234][T10534] tipc: Failed to remove unknown binding: 66,1,1/0:3066800186/3066800188 [ 172.080517][T10534] tipc: Failed to remove unknown binding: 66,1,1/0:3066800186/3066800188 [ 172.089011][T10534] tipc: Failed to remove unknown binding: 66,1,1/0:3066800186/3066800188 [ 172.696428][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2787'. [ 173.706905][T10614] lo speed is unknown, defaulting to 1000 [ 174.156097][T10625] lo speed is unknown, defaulting to 1000 [ 174.292925][T10631] batadv0: mtu less than device minimum [ 174.299140][T10631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 174.309745][T10631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 174.320231][T10631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 174.331257][T10631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 174.341911][T10631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 174.352384][T10631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 174.362936][T10631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 174.373578][T10631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 174.384095][T10631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 174.419227][T10633] tipc: Enabled bearer , priority 0 [ 174.427928][T10633] tipc: Disabling bearer [ 174.495669][T10641] lo speed is unknown, defaulting to 1000 [ 175.023468][T10680] vlan1: entered allmulticast mode [ 175.030291][T10680] dummy0: entered allmulticast mode [ 175.358340][T10682] lo speed is unknown, defaulting to 1000 [ 175.709856][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'. [ 175.901298][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 175.901317][ T29] audit: type=1326 audit(1755568507.268:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.3.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 175.931168][ T29] audit: type=1326 audit(1755568507.268:7868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.3.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 175.974487][ T7119] Process accounting resumed [ 175.978964][ T29] audit: type=1326 audit(1755568507.332:7869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.3.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 176.003059][ T29] audit: type=1326 audit(1755568507.332:7870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.3.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 176.026722][ T29] audit: type=1326 audit(1755568507.332:7871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.3.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 176.050279][ T29] audit: type=1326 audit(1755568507.332:7872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.3.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 176.074088][ T29] audit: type=1326 audit(1755568507.332:7873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.3.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 176.097806][ T29] audit: type=1326 audit(1755568507.332:7874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.3.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 176.121540][ T29] audit: type=1326 audit(1755568507.332:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.3.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 176.145183][ T29] audit: type=1326 audit(1755568507.332:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.3.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 176.256002][T10727] tipc: Enabling of bearer rejected, failed to enable media [ 176.358312][T10736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2850'. [ 176.393420][T10738] vlan0: entered allmulticast mode [ 176.544609][T10756] loop4: detected capacity change from 0 to 128 [ 176.812635][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e27a00: rx timeout, send abort [ 177.354368][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e26800: rx timeout, send abort [ 177.362837][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e27a00: abort rx timeout. Force session deactivation [ 177.581974][T10781] vlan3: entered allmulticast mode [ 177.757152][T10801] loop4: detected capacity change from 0 to 1024 [ 177.811264][T10801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.902832][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.911963][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e26800: abort rx timeout. Force session deactivation [ 178.771624][T10849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2894'. [ 178.790301][T10849] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10849 comm=syz.3.2894 [ 178.897131][T10847] lo speed is unknown, defaulting to 1000 [ 179.030833][T10865] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2909'. [ 179.119165][T10863] lo speed is unknown, defaulting to 1000 [ 179.720291][T10901] lo speed is unknown, defaulting to 1000 [ 179.987583][T10913] lo speed is unknown, defaulting to 1000 [ 180.212554][T10922] lo speed is unknown, defaulting to 1000 [ 180.473386][T10936] net_ratelimit: 10 callbacks suppressed [ 180.473401][T10936] netlink: zone id is out of range [ 180.484331][T10936] netlink: zone id is out of range [ 180.491235][T10936] netlink: zone id is out of range [ 180.496486][T10936] netlink: zone id is out of range [ 180.501843][T10936] netlink: zone id is out of range [ 180.508461][T10936] netlink: zone id is out of range [ 180.513773][T10936] netlink: zone id is out of range [ 180.519809][T10936] netlink: zone id is out of range [ 180.525149][T10936] netlink: zone id is out of range [ 180.538368][T10936] netlink: zone id is out of range [ 180.991228][T10953] block device autoloading is deprecated and will be removed. [ 181.326034][ T29] kauditd_printk_skb: 715 callbacks suppressed [ 181.326049][ T29] audit: type=1326 audit(1755568512.271:8592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.3.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbad6ad5ba7 code=0x7ffc0000 [ 181.356858][ T29] audit: type=1326 audit(1755568512.271:8593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.3.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbad6a7add9 code=0x7ffc0000 [ 181.380389][ T29] audit: type=1326 audit(1755568512.271:8594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.3.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 181.403911][ T29] audit: type=1326 audit(1755568512.280:8595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.3.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbad6ad5ba7 code=0x7ffc0000 [ 181.427333][ T29] audit: type=1326 audit(1755568512.280:8596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.3.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbad6a7add9 code=0x7ffc0000 [ 181.450767][ T29] audit: type=1326 audit(1755568512.280:8597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.3.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 181.474336][ T29] audit: type=1326 audit(1755568512.298:8598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.3.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbad6ad5ba7 code=0x7ffc0000 [ 181.497910][ T29] audit: type=1326 audit(1755568512.298:8599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.3.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbad6a7add9 code=0x7ffc0000 [ 181.521349][ T29] audit: type=1326 audit(1755568512.298:8600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.3.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 181.546725][ T29] audit: type=1326 audit(1755568512.307:8601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.3.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbad6ad5ba7 code=0x7ffc0000 [ 181.663631][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2942'. [ 181.705248][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2954'. [ 181.902738][T10996] bridge0: port 1($H) entered blocking state [ 181.909262][T10996] bridge0: port 1($H) entered disabled state [ 181.922850][T10996] $H: entered allmulticast mode [ 181.931281][T10996] $H: left allmulticast mode [ 181.936338][T10996] bridge0: port 1($H) entered disabled state [ 181.988344][T10998] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 182.215030][T11009] loop4: detected capacity change from 0 to 512 [ 182.227280][T11009] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.308853][T11009] EXT4-fs (loop4): 1 truncate cleaned up [ 182.327644][T11009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.406542][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.478170][T11020] wg2: left promiscuous mode [ 182.482958][T11020] wg2: left allmulticast mode [ 182.568326][T11020] wg2: entered promiscuous mode [ 182.573238][T11020] wg2: entered allmulticast mode [ 182.905456][T11030] lo speed is unknown, defaulting to 1000 [ 182.980056][T11028] lo speed is unknown, defaulting to 1000 [ 183.515445][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2970'. [ 183.774697][T11068] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 183.837319][T11073] loop4: detected capacity change from 0 to 128 [ 183.861746][T11077] netlink: 'syz.0.2980': attribute type 10 has an invalid length. [ 183.869765][T11077] dummy0: left promiscuous mode [ 183.876325][T11077] team0: Port device dummy0 added [ 183.883171][T11077] netlink: 'syz.0.2980': attribute type 10 has an invalid length. [ 183.891719][T11077] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 183.910508][T11080] syz.4.2979: attempt to access beyond end of device [ 183.910508][T11080] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 183.925633][T11080] syz.4.2979: attempt to access beyond end of device [ 183.925633][T11080] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 183.942033][T11077] team0: Failed to send options change via netlink (err -105) [ 183.951980][T11080] syz.4.2979: attempt to access beyond end of device [ 183.951980][T11080] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 184.008819][T11080] syz.4.2979: attempt to access beyond end of device [ 184.008819][T11080] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 184.024101][T11077] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 184.035064][T11077] team0: Port device dummy0 removed [ 184.041750][T11077] dummy0: entered promiscuous mode [ 184.047184][T11077] $H: (slave dummy0): Enslaving as an active interface with an up link [ 184.057486][T11080] syz.4.2979: attempt to access beyond end of device [ 184.057486][T11080] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 184.072997][T11080] syz.4.2979: attempt to access beyond end of device [ 184.072997][T11080] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 184.086508][T11080] syz.4.2979: attempt to access beyond end of device [ 184.086508][T11080] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 184.100957][T11080] syz.4.2979: attempt to access beyond end of device [ 184.100957][T11080] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 184.116093][T11080] syz.4.2979: attempt to access beyond end of device [ 184.116093][T11080] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 184.129817][T11080] syz.4.2979: attempt to access beyond end of device [ 184.129817][T11080] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 184.275100][T11088] netlink: 'syz.0.2983': attribute type 13 has an invalid length. [ 184.303316][T11088] gretap0: refused to change device tx_queue_len [ 184.627359][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2987'. [ 184.636337][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2987'. [ 184.823428][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2991'. [ 184.985758][T11103] lo speed is unknown, defaulting to 1000 [ 185.071503][T11103] chnl_net:caif_netlink_parms(): no params data found [ 185.229063][T11103] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.236245][T11103] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.262896][T11103] bridge_slave_0: entered allmulticast mode [ 185.269517][T11103] bridge_slave_0: entered promiscuous mode [ 185.276460][T11103] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.283543][T11103] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.290928][T11103] bridge_slave_1: entered allmulticast mode [ 185.297614][T11103] bridge_slave_1: entered promiscuous mode [ 185.321889][T11103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.337747][T11103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.361952][T11103] team0: Port device team_slave_0 added [ 185.368682][T11103] team0: Port device team_slave_1 added [ 185.413294][T11103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.420308][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.446341][T11103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.458566][T11103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.465602][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.491561][T11103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.542042][T11103] hsr_slave_0: entered promiscuous mode [ 185.549215][T11103] hsr_slave_1: entered promiscuous mode [ 185.556467][T11103] debugfs: 'hsr0' already exists in 'hsr' [ 185.562277][T11103] Cannot create hsr debugfs directory [ 185.574179][T11143] siw: device registration error -23 [ 185.593673][T11141] bridge0: port 3(bond0) entered blocking state [ 185.600092][T11141] bridge0: port 3(bond0) entered disabled state [ 185.608065][T11141] bond0: entered allmulticast mode [ 185.613297][T11141] bond_slave_0: entered allmulticast mode [ 185.620180][T11141] bond0: entered promiscuous mode [ 185.625349][T11141] bond_slave_0: entered promiscuous mode [ 185.633616][T11141] bridge0: port 3(bond0) entered blocking state [ 185.640058][T11141] bridge0: port 3(bond0) entered forwarding state [ 185.667115][T11141] bond0: left allmulticast mode [ 185.672238][T11141] bond_slave_0: left allmulticast mode [ 185.677966][T11141] bond0: left promiscuous mode [ 185.682772][T11141] bond_slave_0: left promiscuous mode [ 185.688506][T11141] bridge0: port 3(bond0) entered disabled state [ 185.751887][T11147] lo speed is unknown, defaulting to 1000 [ 185.846554][T11103] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.858012][T11103] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.868924][T11103] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.878185][T11103] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 185.919921][T11103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.940216][T11103] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.951294][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.958442][ T3705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.972439][ T3705] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.979533][ T3705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.062488][T11167] bridge: RTM_NEWNEIGH with invalid ether address [ 186.139276][T11103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.331054][T11195] lo speed is unknown, defaulting to 1000 [ 186.335514][T11103] veth0_vlan: entered promiscuous mode [ 186.362451][T11103] veth1_vlan: entered promiscuous mode [ 186.398656][T11103] veth0_macvtap: entered promiscuous mode [ 186.411539][T11103] veth1_macvtap: entered promiscuous mode [ 186.424206][T11103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.435486][T11103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.447174][ T3683] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.459626][ T3683] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.470565][ T3695] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.480919][ T3695] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.530193][T11207] loop6: detected capacity change from 0 to 4096 [ 186.537224][T11207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.553417][T11207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.580210][T11207] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2990: bg 0: block 297: padding at end of block bitmap is not set [ 186.622131][T11103] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.717878][T11214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3016'. [ 186.726906][T11214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3016'. [ 186.735865][T11214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3016'. [ 186.746255][T11214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3016'. [ 186.907997][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 186.908014][ T29] audit: type=1400 audit(1755568517.421:9060): avc: denied { unlink } for pid=3311 comm="syz-executor" name="bus" dev="tmpfs" ino=3338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 187.136020][T11204] net_ratelimit: 3 callbacks suppressed [ 187.136033][T11204] Set syz1 is full, maxelem 65536 reached [ 187.148190][T11216] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.179269][T11219] lo speed is unknown, defaulting to 1000 [ 187.228265][T11216] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.280366][T11216] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.335483][T11216] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.428675][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'. [ 187.437837][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'. [ 187.767966][ T29] audit: type=1326 audit(1755568518.224:9061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 187.792233][ T29] audit: type=1326 audit(1755568518.224:9062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 188.000375][ T29] audit: type=1326 audit(1755568518.270:9063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 188.024611][ T29] audit: type=1326 audit(1755568518.270:9064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f365db5ec23 code=0x7ffc0000 [ 188.048610][ T29] audit: type=1326 audit(1755568518.270:9065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f365db5d69f code=0x7ffc0000 [ 188.072099][ T29] audit: type=1326 audit(1755568518.270:9066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f365db5ec77 code=0x7ffc0000 [ 188.096174][ T29] audit: type=1326 audit(1755568518.270:9067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f365db5d550 code=0x7ffc0000 [ 188.119781][ T29] audit: type=1326 audit(1755568518.270:9068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f365db5d84a code=0x7ffc0000 [ 188.143759][ T29] audit: type=1326 audit(1755568518.270:9069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 188.747363][T11256] Set syz1 is full, maxelem 65536 reached [ 188.812743][T11276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3042'. [ 188.845637][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3043'. [ 188.855301][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3043'. [ 189.202283][T11303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3053'. [ 189.222037][T11303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11303 comm=syz.3.3053 [ 189.313585][T11309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3056'. [ 189.338551][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3056'. [ 189.374678][T11311] lo speed is unknown, defaulting to 1000 [ 189.381667][T11311] lo speed is unknown, defaulting to 1000 [ 189.387854][T11311] lo speed is unknown, defaulting to 1000 [ 189.422284][T11311] infiniband syz2: set active [ 189.427137][T11311] infiniband syz2: added lo [ 189.431701][ T36] lo speed is unknown, defaulting to 1000 [ 189.442230][T11311] RDS/IB: syz2: added [ 189.444373][ T1698] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.446406][T11311] smc: adding ib device syz2 with port count 1 [ 189.460848][T11311] smc: ib device syz2 port 1 has pnetid [ 189.466855][ T6865] lo speed is unknown, defaulting to 1000 [ 189.469041][ T1698] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.480913][T11311] lo speed is unknown, defaulting to 1000 [ 189.516486][T11311] lo speed is unknown, defaulting to 1000 [ 189.530554][ T1698] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.556262][T11311] lo speed is unknown, defaulting to 1000 [ 189.587624][ T1698] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.595963][T11311] lo speed is unknown, defaulting to 1000 [ 189.625375][ T7121] IPVS: starting estimator thread 0... [ 189.651348][T11311] lo speed is unknown, defaulting to 1000 [ 189.695458][T11330] netlink: 'syz.5.3066': attribute type 10 has an invalid length. [ 189.713713][T11321] loop6: detected capacity change from 0 to 512 [ 189.720177][T11330] team0: Port device dummy0 added [ 189.727296][T11320] IPVS: using max 2496 ests per chain, 124800 per kthread [ 189.740031][T11321] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 189.751571][T11330] netlink: 'syz.5.3066': attribute type 10 has an invalid length. [ 189.758982][T11311] lo speed is unknown, defaulting to 1000 [ 189.762309][T11330] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 189.778117][T11330] team0: Failed to send options change via netlink (err -105) [ 189.785857][T11330] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 189.797935][T11330] team0: Port device dummy0 removed [ 189.807451][T11330] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 189.973598][T11346] lo speed is unknown, defaulting to 1000 [ 189.980063][T11346] lo speed is unknown, defaulting to 1000 [ 190.866362][T11357] ref_ctr increment failed for inode: 0xbba offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881037805c0 [ 190.885362][T11357] uprobe: syz.1.3073:11357 failed to unregister, leaking uprobe [ 191.054455][T11363] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3076'. [ 191.282902][T11371] netlink: 'syz.1.3079': attribute type 10 has an invalid length. [ 191.351103][T11372] netlink: 'syz.1.3079': attribute type 10 has an invalid length. [ 191.418601][T11351] Set syz1 is full, maxelem 65536 reached [ 191.427875][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3080'. [ 191.439649][T11371] batman_adv: batadv0: Interface deactivated: dummy0 [ 191.446920][T11371] batman_adv: batadv0: Removing interface: dummy0 [ 191.457270][T11371] team0: Port device dummy0 added [ 191.466177][T11372] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 191.478604][T11372] team0: Failed to send options change via netlink (err -105) [ 191.488643][T11372] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 191.499016][T11372] team0: Port device dummy0 removed [ 191.508125][T11372] dummy0: entered promiscuous mode [ 191.514494][T11372] $H: (slave dummy0): Enslaving as an active interface with an up link [ 191.526675][T11374] bridge0: port 3(vlan3) entered blocking state [ 191.533050][T11374] bridge0: port 3(vlan3) entered disabled state [ 191.539681][T11374] vlan3: entered allmulticast mode [ 191.676299][T11374] vlan3: left allmulticast mode [ 191.701344][T11379] netlink: 'syz.1.3094': attribute type 10 has an invalid length. [ 191.711601][T11379] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.721619][T11379] team0: entered promiscuous mode [ 191.727644][T11379] $H: (slave team0): Enslaving as an active interface with an up link [ 191.736353][T11380] bridge0: port 1(bond0) entered blocking state [ 191.742773][T11380] bridge0: port 1(bond0) entered disabled state [ 191.768098][T11379] siw: device registration error -23 [ 191.776539][T11380] bond0: entered allmulticast mode [ 191.783436][T11380] bond0: entered promiscuous mode [ 191.806080][T11383] bond0: left allmulticast mode [ 191.811718][T11383] bond0: left promiscuous mode [ 191.816625][T11383] bridge0: port 1(bond0) entered disabled state [ 191.892644][T11391] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 191.901003][T11391] tipc: Enabled bearer , priority 10 [ 191.960380][T11395] $H: left promiscuous mode [ 191.970046][T11395] dummy0: left promiscuous mode [ 191.987067][T11395] 8021q: adding VLAN 0 to HW filter on device $H [ 192.013175][T11395] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.032217][T11395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.365658][T11419] netlink: 'syz.1.3101': attribute type 298 has an invalid length. [ 192.559292][T11427] rdma_rxe: rxe_newlink: failed to add lo [ 192.817842][T11437] vlan3: entered allmulticast mode [ 192.987601][ T3396] tipc: Node number set to 1422907658 [ 193.023343][T11443] netlink: 'syz.6.3112': attribute type 10 has an invalid length. [ 193.063535][T11443] team0: Port device dummy0 added [ 193.072841][T11443] netlink: 'syz.6.3112': attribute type 10 has an invalid length. [ 193.095153][T11443] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 193.120062][T11443] team0: Failed to send options change via netlink (err -105) [ 193.138622][T11443] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 193.150408][T11443] team0: Port device dummy0 removed [ 193.163608][T11443] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 193.228009][T11459] __nla_validate_parse: 4 callbacks suppressed [ 193.228146][T11459] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3117'. [ 193.722949][T11488] netlink: 'syz.3.3128': attribute type 10 has an invalid length. [ 193.756053][T11488] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.778446][T11490] siw: device registration error -23 [ 193.789158][T11488] bond0: (slave team0): Enslaving as an active interface with an up link [ 193.858917][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'. [ 193.881362][T11500] : renamed from vlan0 [ 193.949598][T11506] lo speed is unknown, defaulting to 1000 [ 193.957306][T11506] lo speed is unknown, defaulting to 1000 [ 194.003783][ T29] kauditd_printk_skb: 571 callbacks suppressed [ 194.003797][ T29] audit: type=1400 audit(1755568523.974:9641): avc: denied { read } for pid=11507 comm="syz.3.3137" path="socket:[43513]" dev="sockfs" ino=43513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 194.417397][T11526] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3144'. [ 194.492529][T11530] netlink: 'syz.0.3145': attribute type 10 has an invalid length. [ 194.664071][ T29] audit: type=1326 audit(1755568524.574:9642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.3.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 194.687854][ T29] audit: type=1326 audit(1755568524.574:9643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.3.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 194.711559][ T29] audit: type=1326 audit(1755568524.574:9644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.3.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 194.734937][ T29] audit: type=1326 audit(1755568524.574:9645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.3.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 194.758532][ T29] audit: type=1326 audit(1755568524.574:9646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.3.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 194.782055][ T29] audit: type=1326 audit(1755568524.574:9647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.3.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 194.805653][ T29] audit: type=1326 audit(1755568524.574:9648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.3.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 194.829464][ T29] audit: type=1326 audit(1755568524.574:9649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.3.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 194.853038][ T29] audit: type=1326 audit(1755568524.574:9650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.3.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 194.939716][T11543] lo speed is unknown, defaulting to 1000 [ 194.947769][T11543] lo speed is unknown, defaulting to 1000 [ 194.971973][T11547] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.054140][T11547] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.141281][T11556] IPv6: Can't replace route, no match found [ 195.148713][T11547] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.200286][T11547] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.316989][ T3705] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.346225][ T3705] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.391523][ T3705] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.414028][ T3705] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.726610][T11600] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3168'. [ 195.830549][T11607] lo speed is unknown, defaulting to 1000 [ 195.836663][T11609] lo speed is unknown, defaulting to 1000 [ 195.843007][T11607] lo speed is unknown, defaulting to 1000 [ 195.884952][T11609] lo speed is unknown, defaulting to 1000 [ 196.155392][T11621] lo speed is unknown, defaulting to 1000 [ 196.167601][T11621] lo speed is unknown, defaulting to 1000 [ 196.308668][T11625] loop6: detected capacity change from 0 to 512 [ 196.340165][T11625] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.3182: corrupted inode contents [ 196.352476][T11625] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.3182: mark_inode_dirty error [ 196.368598][T11625] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.3182: corrupted inode contents [ 196.384418][T11625] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.3182: mark_inode_dirty error [ 196.396043][T11625] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.3182: corrupted inode contents [ 196.409843][T11625] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 196.428572][T11625] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.3182: corrupted inode contents [ 196.441055][T11625] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.3182: mark_inode_dirty error [ 196.453921][T11625] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 196.463991][T11625] EXT4-fs (loop6): 1 truncate cleaned up [ 196.471229][T11625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.483991][ T3679] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:26: Failed to release dquot type 1 [ 196.497209][T11625] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.526108][T11103] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.560010][T11635] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.640739][T11635] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.770572][T11635] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.782308][T11647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3191'. [ 196.846052][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3193'. [ 196.848012][T11635] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.854957][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3193'. [ 196.874923][T11647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11647 comm=syz.5.3191 [ 196.911599][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3195'. [ 196.973429][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3194'. [ 197.023573][T11668] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3201'. [ 197.037402][T11668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.048797][T11668] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 197.069310][T11668] bond0 (unregistering): Released all slaves [ 197.099306][T11672] lo speed is unknown, defaulting to 1000 [ 197.109622][T11672] lo speed is unknown, defaulting to 1000 [ 197.229027][T11685] lo speed is unknown, defaulting to 1000 [ 197.235482][T11685] lo speed is unknown, defaulting to 1000 [ 198.502025][T11722] netlink: 'syz.3.3220': attribute type 10 has an invalid length. [ 198.510188][T11722] batman_adv: batadv0: Interface deactivated: dummy0 [ 198.518357][T11722] batman_adv: batadv0: Removing interface: dummy0 [ 198.527974][T11722] team0: Port device dummy0 added [ 198.540470][T11722] netlink: 'syz.3.3220': attribute type 10 has an invalid length. [ 198.543539][T11721] $H: left promiscuous mode [ 198.553140][T11721] dummy0: left promiscuous mode [ 198.558142][T11721] team0: left promiscuous mode [ 198.567431][T11721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.583170][ T36] lo speed is unknown, defaulting to 1000 [ 198.583611][T11722] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 198.603478][T11722] team0: Failed to send options change via netlink (err -105) [ 198.624337][T11722] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 198.635098][T11722] team0: Port device dummy0 removed [ 198.649606][T11722] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 199.206502][ T3668] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.215142][ T3668] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.239110][ T3668] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.247353][ T3668] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.424834][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 199.424920][ T29] audit: type=1326 audit(1755568528.986:9812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 199.566882][ T29] audit: type=1326 audit(1755568529.023:9813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 199.590552][ T29] audit: type=1326 audit(1755568529.032:9814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 199.614260][ T29] audit: type=1326 audit(1755568529.041:9815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 199.637812][ T29] audit: type=1326 audit(1755568529.051:9816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 199.661697][ T29] audit: type=1326 audit(1755568529.078:9817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 199.691073][T11765] 0X: left allmulticast mode [ 199.696359][T11765] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 199.786179][ T29] audit: type=1326 audit(1755568529.318:9818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11768 comm="syz.0.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 199.809795][ T29] audit: type=1326 audit(1755568529.318:9819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11768 comm="syz.0.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 199.834108][ T29] audit: type=1326 audit(1755568529.318:9820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11768 comm="syz.0.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 199.858459][ T29] audit: type=1326 audit(1755568529.318:9821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11768 comm="syz.0.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 200.038546][T11778] lo speed is unknown, defaulting to 1000 [ 200.039697][T11781] __nla_validate_parse: 5 callbacks suppressed [ 200.039714][T11781] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3252'. [ 200.045231][T11778] lo speed is unknown, defaulting to 1000 [ 200.054391][T11781] 0{X: renamed from gretap0 (while UP) [ 200.076425][T11781] 0{X: entered allmulticast mode [ 200.091560][T11781] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 200.133070][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3242'. [ 200.396373][T11807] atomic_op ffff88813b0a6928 conn xmit_atomic 0000000000000000 [ 200.629554][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3259'. [ 200.713914][T11825] loop6: detected capacity change from 0 to 128 [ 200.722079][T11825] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.736185][T11825] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 200.770261][T11103] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.912471][T11838] lo speed is unknown, defaulting to 1000 [ 200.920902][T11838] lo speed is unknown, defaulting to 1000 [ 201.171121][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3273'. [ 201.272612][T11866] lo speed is unknown, defaulting to 1000 [ 201.285228][T11866] lo speed is unknown, defaulting to 1000 [ 201.414676][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3275'. [ 201.856625][T11891] lo speed is unknown, defaulting to 1000 [ 201.870702][T11891] lo speed is unknown, defaulting to 1000 [ 201.878446][T11892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3279'. [ 201.941707][T11895] netlink: 'syz.3.3281': attribute type 39 has an invalid length. [ 202.092534][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3287'. [ 202.108189][T11907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.194922][T11907] vlan1: entered allmulticast mode [ 202.200218][T11907] bond4: entered allmulticast mode [ 202.268607][T11920] atomic_op ffff888134104928 conn xmit_atomic 0000000000000000 [ 202.311060][T11927] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3294'. [ 202.329126][T11923] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3293'. [ 202.340126][T11927] $H (unregistering): (slave dummy0): Releasing backup interface [ 202.349271][T11927] $H (unregistering): Released all slaves [ 202.359204][T11923] 1{X: renamed from 30{X (while UP) [ 202.368160][T11923] 1{X: entered allmulticast mode [ 202.373868][T11923] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 202.394497][T11929] dummy0: entered promiscuous mode [ 202.400148][T11929] dummy0: left promiscuous mode [ 202.721416][T11952] atomic_op ffff888110183928 conn xmit_atomic 0000000000000000 [ 203.797487][T11970] wireguard0: entered promiscuous mode [ 203.808071][T11970] wireguard0: entered allmulticast mode [ 204.039440][T11984] loop6: detected capacity change from 0 to 1024 [ 204.073737][T11984] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.126840][T11103] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.595759][T12016] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 204.833357][T12027] netlink: 'syz.1.3334': attribute type 4 has an invalid length. [ 204.861326][ T6865] lo speed is unknown, defaulting to 1000 [ 204.867176][ T6865] syz2: Port: 1 Link DOWN [ 204.870666][T12028] lo speed is unknown, defaulting to 1000 [ 204.887512][ T6865] lo speed is unknown, defaulting to 1000 [ 204.895299][T12028] lo speed is unknown, defaulting to 1000 [ 205.545654][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3348'. [ 205.558782][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 205.558799][ T29] audit: type=1326 audit(1755568534.644:10045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 205.588853][ T29] audit: type=1326 audit(1755568534.644:10046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 205.612651][ T29] audit: type=1326 audit(1755568534.644:10047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 205.636332][ T29] audit: type=1326 audit(1755568534.644:10048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbad6adec23 code=0x7ffc0000 [ 205.659880][ T29] audit: type=1326 audit(1755568534.644:10049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbad6adec23 code=0x7ffc0000 [ 205.683401][ T29] audit: type=1326 audit(1755568534.644:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 205.737035][T12064] bond2: (slave veth1): Releasing active interface [ 205.910557][ T29] audit: type=1326 audit(1755568534.727:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 205.934227][ T29] audit: type=1326 audit(1755568534.727:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 205.957832][ T29] audit: type=1326 audit(1755568534.727:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 205.981501][ T29] audit: type=1326 audit(1755568534.727:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 206.090469][T12073] loop6: detected capacity change from 0 to 512 [ 206.097414][T12073] EXT4-fs: test_dummy_encryption option not supported [ 206.468999][T12082] netlink: 'syz.1.3354': attribute type 1 has an invalid length. [ 206.476946][T12082] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3354'. [ 206.505797][T12088] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3356'. [ 206.530741][T12088] $H (unregistering): (slave dummy0): Releasing backup interface [ 206.542544][T12088] $H (unregistering): (slave team0): Releasing backup interface [ 206.551935][T12088] $H (unregistering): Released all slaves [ 206.965856][T12106] lo speed is unknown, defaulting to 1000 [ 206.972188][T12106] lo speed is unknown, defaulting to 1000 [ 207.035011][T12111] siw: device registration error -23 [ 207.086348][T12115] loop6: detected capacity change from 0 to 1024 [ 207.119667][T12115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.137689][T12115] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.256049][T12115] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 1: comm syz.6.3367: lblock 1 mapped to illegal pblock 1 (length 3) [ 207.293224][T12115] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 207.305649][T12115] EXT4-fs (loop6): This should not happen!! Data will be lost [ 207.305649][T12115] [ 207.337972][T12115] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 4: comm syz.6.3367: lblock 4 mapped to illegal pblock 4 (length 1) [ 207.355886][T12115] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 207.368231][T12115] EXT4-fs (loop6): This should not happen!! Data will be lost [ 207.368231][T12115] [ 207.411470][T12115] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 5: comm syz.6.3367: lblock 5 mapped to illegal pblock 5 (length 7) [ 207.450734][T12115] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 7 with error 117 [ 207.453289][T12128] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3369'. [ 207.463128][T12115] EXT4-fs (loop6): This should not happen!! Data will be lost [ 207.463128][T12115] [ 207.489347][T12128] bond0 (unregistering): (slave team0): Releasing backup interface [ 207.507309][ T3686] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:33: bg 0: block 3: invalid block bitmap [ 207.523674][T12128] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 207.534598][ T3686] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 207.547193][ T3686] EXT4-fs (loop6): This should not happen!! Data will be lost [ 207.547193][ T3686] [ 207.559868][T12128] bond0 (unregistering): Released all slaves [ 207.570870][T11103] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.661876][T12137] netlink: 'syz.1.3374': attribute type 1 has an invalid length. [ 207.701562][T12137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.718959][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3374'. [ 207.746352][T12144] bond3 (unregistering): Released all slaves [ 207.861199][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 207.989502][T12169] ipvlan0: entered promiscuous mode [ 208.465693][T12198] lo speed is unknown, defaulting to 1000 [ 208.472405][T12198] lo speed is unknown, defaulting to 1000 [ 208.551463][T12195] netlink: 29 bytes leftover after parsing attributes in process `syz.0.3397'. [ 208.998794][T12220] netlink: 'syz.0.3405': attribute type 30 has an invalid length. [ 209.219561][T12234] wireguard0: entered promiscuous mode [ 209.225583][T12234] wireguard0: entered allmulticast mode [ 209.540965][T12250] netlink: 'syz.0.3419': attribute type 1 has an invalid length. [ 209.549527][T12250] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3419'. [ 209.588238][T12254] netlink: 'syz.5.3421': attribute type 30 has an invalid length. [ 209.796048][T12273] ipvlan0: entered promiscuous mode [ 209.810810][T12273] bridge0: port 1(ipvlan0) entered blocking state [ 209.817408][T12273] bridge0: port 1(ipvlan0) entered disabled state [ 209.824247][T12273] ipvlan0: entered allmulticast mode [ 209.830087][T12273] ipvlan0: left allmulticast mode [ 210.128841][T12286] netlink: 'syz.5.3434': attribute type 1 has an invalid length. [ 210.136616][T12286] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.3434'. [ 210.372812][T12311] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3441'. [ 211.128214][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 211.128274][ T29] audit: type=1400 audit(1755568539.785:10360): avc: denied { setopt } for pid=12329 comm="syz.1.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 211.215824][T12333] loop6: detected capacity change from 0 to 512 [ 211.251819][T12333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.265344][T12335] netlink: 'syz.3.3453': attribute type 30 has an invalid length. [ 211.275269][T12341] __nla_validate_parse: 3 callbacks suppressed [ 211.275287][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3462'. [ 211.290582][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3462'. [ 211.307025][T12333] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.333928][ T29] audit: type=1326 audit(1755568539.970:10361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12332 comm="syz.6.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 211.358278][ T29] audit: type=1326 audit(1755568539.970:10362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12332 comm="syz.6.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 211.386255][T12333] netlink: 'syz.6.3452': attribute type 1 has an invalid length. [ 211.394013][T12333] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.3452'. [ 211.436222][ T29] audit: type=1326 audit(1755568539.970:10363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12332 comm="syz.6.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 211.460164][ T29] audit: type=1326 audit(1755568539.970:10364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12332 comm="syz.6.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 211.484083][ T29] audit: type=1326 audit(1755568539.970:10365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12332 comm="syz.6.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 211.508095][ T29] audit: type=1326 audit(1755568540.025:10366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12332 comm="syz.6.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 211.531715][ T29] audit: type=1326 audit(1755568540.025:10367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12332 comm="syz.6.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 211.555328][ T29] audit: type=1326 audit(1755568540.025:10368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12332 comm="syz.6.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 211.579069][ T29] audit: type=1326 audit(1755568540.025:10369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12332 comm="syz.6.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 211.609031][T11103] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.626967][T12347] ref_ctr increment failed for inode: 0xf1f offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103786780 [ 211.643698][T12346] uprobe: syz.0.3457:12346 failed to unregister, leaking uprobe [ 211.762248][T12362] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3461'. [ 211.771616][T12362] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3461'. [ 211.929444][T12378] netlink: 'syz.0.3469': attribute type 3 has an invalid length. [ 212.088377][T12386] netlink: 'syz.6.3474': attribute type 1 has an invalid length. [ 212.152727][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3474'. [ 212.177011][T12386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.189018][T12399] netlink: 'syz.5.3477': attribute type 1 has an invalid length. [ 212.223792][T12393] bond1 (unregistering): Released all slaves [ 212.298431][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3477'. [ 212.345680][T12399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.365364][T12412] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3480'. [ 212.380651][T12404] bond0 (unregistering): Released all slaves [ 212.404393][T12412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.438666][T12412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.452900][T12412] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 212.462571][T12412] bond0 (unregistering): Released all slaves [ 212.581441][T12427] netlink: 'syz.3.3484': attribute type 1 has an invalid length. [ 212.589337][T12427] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3484'. [ 212.625121][T12428] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3487'. [ 213.228712][T12466] netlink: 'syz.3.3502': attribute type 13 has an invalid length. [ 213.236672][T12466] netlink: 'syz.3.3502': attribute type 17 has an invalid length. [ 213.247350][T12466] 0{X: left allmulticast mode [ 213.257633][T12466] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.271216][T12466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.312488][T12468] netlink: 'syz.0.3503': attribute type 1 has an invalid length. [ 213.328911][T12468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.343214][T12468] bond2 (unregistering): Released all slaves [ 213.369807][T12473] netlink: 'syz.3.3505': attribute type 3 has an invalid length. [ 213.553144][T12490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.561117][T12490] bond2: (slave bond3): Enslaving as an active interface with an up link [ 213.578381][T12490] bond2 (unregistering): (slave bond3): Releasing backup interface [ 213.588814][T12490] bond2 (unregistering): Released all slaves [ 213.693098][T12505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.715602][T12505] bond0 (unregistering): Released all slaves [ 213.822571][T12518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.849696][T12518] bond0 (unregistering): Released all slaves [ 214.803524][T12605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.255697][T12684] team0 (unregistering): Port device team_slave_0 removed [ 215.280210][T12684] team0 (unregistering): Port device team_slave_1 removed [ 215.303839][T12687] 9pnet_fd: Insufficient options for proto=fd [ 215.451014][T12689] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 215.714211][T12697] wireguard0: entered promiscuous mode [ 215.720679][T12697] wireguard0: entered allmulticast mode [ 216.652547][T12779] syz_tun: entered allmulticast mode [ 216.666884][T12778] syz_tun: left allmulticast mode [ 217.246599][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 217.246615][ T29] audit: type=1326 audit(2000000004.716:10776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12788 comm="syz.0.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 217.322575][ T29] audit: type=1326 audit(2000000004.744:10777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12788 comm="syz.0.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 217.347129][ T29] audit: type=1326 audit(2000000004.744:10778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12788 comm="syz.0.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 217.370812][ T29] audit: type=1326 audit(2000000004.744:10779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12788 comm="syz.0.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 217.496881][ T29] audit: type=1326 audit(2000000004.938:10780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12788 comm="syz.0.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 217.521316][ T29] audit: type=1326 audit(2000000004.938:10781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12788 comm="syz.0.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 217.610588][ T29] audit: type=1326 audit(2000000005.048:10782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.1.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 217.635234][ T29] audit: type=1326 audit(2000000005.048:10783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.1.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 217.659579][ T29] audit: type=1326 audit(2000000005.048:10784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.1.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 217.683552][ T29] audit: type=1326 audit(2000000005.048:10785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12806 comm="syz.1.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 217.769129][T12813] validate_nla: 7 callbacks suppressed [ 217.769254][T12813] netlink: 'syz.6.3593': attribute type 4 has an invalid length. [ 217.904822][T12824] lo: entered allmulticast mode [ 217.914646][T12822] lo: left allmulticast mode [ 217.975671][T12831] netlink: 'syz.3.3601': attribute type 10 has an invalid length. [ 217.986000][T12831] team0: Port device dummy0 added [ 217.999157][T12831] netlink: 'syz.3.3601': attribute type 10 has an invalid length. [ 218.009864][T12831] team0: Port device dummy0 removed [ 218.062032][T12837] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 218.086787][T12839] loop6: detected capacity change from 0 to 2048 [ 218.106483][T12839] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.3604: bad orphan inode 61 [ 218.129201][T12839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.264384][T11103] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.426008][T12864] loop9: detected capacity change from 0 to 7 [ 218.432345][T12864] Buffer I/O error on dev loop9, logical block 0, async page read [ 218.440446][T12864] Buffer I/O error on dev loop9, logical block 0, async page read [ 218.448405][T12864] loop9: unable to read partition table [ 218.454787][T12864] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 218.454787][T12864] ) failed (rc=-5) [ 218.663491][T12887] __nla_validate_parse: 14 callbacks suppressed [ 218.663569][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3620'. [ 218.895027][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3626'. [ 218.980845][T12914] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3630'. [ 219.145845][T12921] netlink: 'syz.6.3632': attribute type 10 has an invalid length. [ 219.155379][T12921] team0: Port device dummy0 added [ 219.165861][T12921] netlink: 'syz.6.3632': attribute type 10 has an invalid length. [ 219.177822][T12921] team0: Port device dummy0 removed [ 219.340821][T12935] lo speed is unknown, defaulting to 1000 [ 219.424444][T12935] lo speed is unknown, defaulting to 1000 [ 219.478247][T12939] ip6gre2: entered allmulticast mode [ 219.578376][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3639'. [ 219.596771][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3639'. [ 219.754078][T12958] : renamed from vlan0 [ 220.323003][T13000] lo speed is unknown, defaulting to 1000 [ 220.336150][T13000] lo speed is unknown, defaulting to 1000 [ 220.758130][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3666'. [ 220.920608][T13017] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.3671'. [ 222.394326][T13052] 9pnet_fd: Insufficient options for proto=fd [ 222.454390][T13061] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3691'. [ 222.476491][T13061] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13061 comm=syz.5.3691 [ 222.678099][ T29] kauditd_printk_skb: 746 callbacks suppressed [ 222.678124][ T29] audit: type=1326 audit(2000000009.728:11532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.5.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 222.708910][ T29] audit: type=1326 audit(2000000009.737:11533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.5.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 222.711599][T13072] cgroup: Invalid name [ 222.732673][ T29] audit: type=1326 audit(2000000009.737:11534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.5.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 222.733268][ T29] audit: type=1400 audit(2000000009.756:11535): avc: denied { mounton } for pid=13071 comm="syz.1.3696" path=2F3638392FE91F7189591E9233614B dev="tmpfs" ino=3628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 222.786645][ T29] audit: type=1326 audit(2000000009.783:11536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.5.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 222.801826][T13074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3697'. [ 222.811186][ T29] audit: type=1326 audit(2000000009.783:11537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.5.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 222.843610][ T29] audit: type=1326 audit(2000000009.802:11538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.5.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 222.867269][ T29] audit: type=1326 audit(2000000009.802:11539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.5.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 222.891422][ T29] audit: type=1326 audit(2000000009.829:11540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.5.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 222.915894][ T29] audit: type=1326 audit(2000000009.829:11541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.5.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f365db5ebe9 code=0x7ffc0000 [ 222.927757][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3697'. [ 223.335177][T13094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13094 comm=syz.1.3706 [ 223.386021][T13098] netlink: 'syz.1.3707': attribute type 2 has an invalid length. [ 223.393911][T13098] netlink: 'syz.1.3707': attribute type 1 has an invalid length. [ 223.401691][T13098] netlink: 'syz.1.3707': attribute type 2 has an invalid length. [ 223.574779][T13103] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13103 comm=syz.3.3709 [ 223.727463][T13127] bond_slave_1: entered promiscuous mode [ 223.742233][T13127] bond_slave_1 (unregistering): left promiscuous mode [ 224.112126][T13166] __nla_validate_parse: 8 callbacks suppressed [ 224.112145][T13166] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3735'. [ 224.138188][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3735'. [ 224.368224][T13187] lo speed is unknown, defaulting to 1000 [ 224.375325][T13187] lo speed is unknown, defaulting to 1000 [ 224.828222][T13207] lo speed is unknown, defaulting to 1000 [ 224.860216][T13207] lo speed is unknown, defaulting to 1000 [ 225.023185][T13218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13218 comm=syz.0.3755 [ 225.091241][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3755'. [ 225.374174][T13247] bridge0: entered promiscuous mode [ 225.381098][T13247] bridge0: port 3(macsec0) entered blocking state [ 225.387767][T13247] bridge0: port 3(macsec0) entered disabled state [ 225.615066][T13247] macsec0: entered allmulticast mode [ 225.620515][T13247] bridge0: entered allmulticast mode [ 225.709962][T13247] macsec0: left allmulticast mode [ 225.715050][T13247] bridge0: left allmulticast mode [ 225.809105][T13247] bridge0: left promiscuous mode [ 226.605798][T13271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13271 comm=syz.5.3775 [ 226.622035][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3775'. [ 226.665493][T13279] netlink: 'syz.5.3779': attribute type 12 has an invalid length. [ 226.723906][T13281] loop6: detected capacity change from 0 to 8192 [ 226.787230][T13291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3787'. [ 226.913324][T13302] bond5: entered promiscuous mode [ 226.918435][T13302] bond5: entered allmulticast mode [ 226.925363][T13302] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.935880][T13302] bond5 (unregistering): Released all slaves [ 227.078811][T13316] Set syz1 is full, maxelem 65536 reached [ 227.087514][T13314] lo speed is unknown, defaulting to 1000 [ 227.094017][T13314] lo speed is unknown, defaulting to 1000 [ 227.665793][T13330] netlink: 'syz.3.3800': attribute type 4 has an invalid length. [ 228.259788][T13350] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3808'. [ 228.268817][T13350] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3808'. [ 228.460913][ T29] kauditd_printk_skb: 582 callbacks suppressed [ 228.460930][ T29] audit: type=1326 audit(2000000015.063:12124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13357 comm="syz.6.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 228.490754][ T29] audit: type=1326 audit(2000000015.063:12125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13357 comm="syz.6.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 228.515812][ T29] audit: type=1326 audit(2000000015.118:12126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13357 comm="syz.6.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 228.539539][ T29] audit: type=1326 audit(2000000015.118:12127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13357 comm="syz.6.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 228.563207][ T29] audit: type=1326 audit(2000000015.118:12128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13357 comm="syz.6.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 228.597872][ T29] audit: type=1326 audit(2000000015.183:12129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13357 comm="syz.6.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 228.621573][ T29] audit: type=1326 audit(2000000015.183:12130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13357 comm="syz.6.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 228.645340][ T29] audit: type=1326 audit(2000000015.183:12131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13357 comm="syz.6.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 228.669050][ T29] audit: type=1326 audit(2000000015.201:12132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13357 comm="syz.6.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 228.692622][ T29] audit: type=1326 audit(2000000015.201:12133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13357 comm="syz.6.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 228.744537][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3814'. [ 228.941578][T13384] lo speed is unknown, defaulting to 1000 [ 228.948505][T13384] lo speed is unknown, defaulting to 1000 [ 229.154944][T13406] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.322328][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.010540][T13473] vlan0: entered allmulticast mode [ 231.015852][T13473] bridge_slave_0: entered allmulticast mode [ 231.093472][T13475] syzkaller0: entered allmulticast mode [ 231.099203][T13475] syzkaller0: entered promiscuous mode [ 231.109337][T13475] syzkaller0 (unregistering): left allmulticast mode [ 231.116163][T13475] syzkaller0 (unregistering): left promiscuous mode [ 231.186222][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3857'. [ 231.277409][T13482] lo speed is unknown, defaulting to 1000 [ 231.283905][T13482] lo speed is unknown, defaulting to 1000 [ 231.345608][T13487] netlink: 'syz.1.3861': attribute type 1 has an invalid length. [ 231.359438][T13490] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.374626][T13492] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3863'. [ 231.391050][T13487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.412333][T13495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13495 comm=syz.3.3864 [ 231.417555][T13487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.425722][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3864'. [ 231.435360][T13487] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 231.456545][T13487] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 231.534522][T13502] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3866'. [ 231.837605][T13533] 9pnet: p9_errstr2errno: server reported unknown error [ 232.400136][T13566] 9pnet_fd: Insufficient options for proto=fd [ 233.171024][T13622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3925'. [ 233.192494][T13622] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.200347][T13622] bond5: (slave bond6): Enslaving as an active interface with an up link [ 233.219128][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3925'. [ 233.238336][T13622] bond5 (unregistering): (slave bond6): Releasing backup interface [ 233.256704][T13622] bond5 (unregistering): Released all slaves [ 233.314764][T13632] veth0: entered promiscuous mode [ 233.320289][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3930'. [ 233.329960][T13632] veth0 (unregistering): left promiscuous mode [ 234.484913][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 234.484929][ T29] audit: type=1326 audit(2000000020.629:12308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13672 comm="syz.6.3939" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d5720ebe9 code=0x0 [ 234.515607][ T29] audit: type=1326 audit(2000000020.647:12309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 234.539227][ T29] audit: type=1326 audit(2000000020.647:12310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 234.562903][ T29] audit: type=1326 audit(2000000020.647:12311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 234.586581][ T29] audit: type=1326 audit(2000000020.647:12312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 234.610180][ T29] audit: type=1326 audit(2000000020.647:12313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 234.633902][ T29] audit: type=1326 audit(2000000020.647:12314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 234.657571][ T29] audit: type=1326 audit(2000000020.647:12315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 234.681208][ T29] audit: type=1326 audit(2000000020.647:12316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 234.704954][ T29] audit: type=1326 audit(2000000020.647:12317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbad6adebe9 code=0x7ffc0000 [ 235.728333][T13695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13695 comm=syz.0.3945 [ 235.760206][T13695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3945'. [ 235.798600][T13698] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3947'. [ 235.807646][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3947'. [ 236.146620][T13708] netlink: 'syz.0.3962': attribute type 1 has an invalid length. [ 236.172577][T13708] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.196610][T13708] vlan0: entered promiscuous mode [ 236.201683][T13708] bond5: entered promiscuous mode [ 236.209215][T13708] dummy0: entered promiscuous mode [ 236.219333][T13708] bond5: (slave dummy0): making interface the new active one [ 236.229893][T13708] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 236.278842][T13717] netlink: 'syz.5.3955': attribute type 1 has an invalid length. [ 236.294572][T13717] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.312945][T13717] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.324595][T13717] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 236.336298][T13717] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 236.541488][T13731] wireguard0: entered promiscuous mode [ 236.547353][T13731] wireguard0: entered allmulticast mode [ 237.356163][T13761] __nla_validate_parse: 4 callbacks suppressed [ 237.356184][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3973'. [ 237.768909][T13786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3982'. [ 237.853223][T13791] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 238.115802][T13812] lo speed is unknown, defaulting to 1000 [ 238.122283][T13812] lo speed is unknown, defaulting to 1000 [ 238.628052][T13839] netlink: 'syz.1.4001': attribute type 1 has an invalid length. [ 238.654020][T13839] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.670098][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4001'. [ 238.683772][T13839] vlan0: entered promiscuous mode [ 238.688948][T13839] bond5: entered promiscuous mode [ 238.696995][T13839] dummy0: entered promiscuous mode [ 238.849882][T13839] bond5: (slave dummy0): making interface the new active one [ 238.872666][T13839] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 238.939898][T13853] loop6: detected capacity change from 0 to 128 [ 238.955267][T13853] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.969037][T13853] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.104978][T11103] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.173277][T13870] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4011'. [ 239.203096][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4016'. [ 239.440212][T13905] netlink: 'syz.6.4027': attribute type 1 has an invalid length. [ 239.455159][T13905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.482374][T13905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.489881][T13905] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 239.502547][T13905] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 239.512431][T13909] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4028'. [ 239.521451][T13909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4028'. [ 239.530477][T13909] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4028'. [ 239.539453][T13909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4028'. [ 239.548522][T13909] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4028'. [ 239.683446][T13915] syzkaller0: entered allmulticast mode [ 239.694222][T13915] syzkaller0: entered promiscuous mode [ 239.705853][T13915] syzkaller0 (unregistering): left allmulticast mode [ 239.712575][T13915] syzkaller0 (unregistering): left promiscuous mode [ 239.760138][T13921] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.979334][T13931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.062401][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 240.062418][ T29] audit: type=1326 audit(2000000025.770:12566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 240.099260][ T29] audit: type=1326 audit(2000000025.779:12567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 240.123632][ T29] audit: type=1326 audit(2000000025.779:12568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 240.147300][ T29] audit: type=1326 audit(2000000025.779:12569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 240.171489][ T29] audit: type=1326 audit(2000000025.779:12570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 240.195270][ T29] audit: type=1326 audit(2000000025.779:12571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 240.195709][ T3703] bond1: (slave bridge5): link status up again after 0 ms [ 240.219830][ T29] audit: type=1326 audit(2000000025.779:12572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 240.226351][ T3703] bond1: (slave bridge5): failed to get link speed/duplex [ 240.257915][ T29] audit: type=1326 audit(2000000025.779:12573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 240.282244][ T29] audit: type=1326 audit(2000000025.779:12574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 240.305958][ T29] audit: type=1326 audit(2000000025.779:12575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 240.355951][ T3703] bond1: (slave bridge5): failed to get link speed/duplex [ 240.476852][ T3688] bond1: (slave bridge5): failed to get link speed/duplex [ 240.593617][ T3707] bond1: (slave bridge5): failed to get link speed/duplex [ 240.713110][ T3707] bond1: (slave bridge5): failed to get link speed/duplex [ 240.832318][ T3688] bond1: (slave bridge5): failed to get link speed/duplex [ 240.891334][T13993] lo speed is unknown, defaulting to 1000 [ 240.898760][T13993] lo speed is unknown, defaulting to 1000 [ 240.984045][ T3688] bond1: (slave bridge5): failed to get link speed/duplex [ 241.102661][ T3689] bond1: (slave bridge5): failed to get link speed/duplex [ 241.162372][T14010] lo speed is unknown, defaulting to 1000 [ 241.170375][T14010] lo speed is unknown, defaulting to 1000 [ 241.693065][T14032] loop6: detected capacity change from 0 to 512 [ 241.700998][T14032] EXT4-fs: Ignoring removed orlov option [ 241.707136][T14032] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 241.721144][T14032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 241.732572][T14032] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.4081: corrupted in-inode xattr: e_value size too large [ 241.753059][T14032] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4081: couldn't read orphan inode 15 (err -117) [ 241.774496][T14032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.873519][T14040] C: renamed from team_slave_0 (while UP) [ 241.880887][T14040] netlink: 'syz.6.4081': attribute type 1 has an invalid length. [ 242.595572][T11103] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.747445][T14056] netlink: 'syz.1.4087': attribute type 10 has an invalid length. [ 242.770340][T14056] bond5: (slave dummy0): Releasing active interface [ 242.952798][T14064] lo speed is unknown, defaulting to 1000 [ 242.988136][T14064] lo speed is unknown, defaulting to 1000 [ 243.309490][T14072] __nla_validate_parse: 7 callbacks suppressed [ 243.309507][T14072] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4094'. [ 243.362258][T14072] 1{X: renamed from 30{X (while UP) [ 243.383829][T14072] 1{X: entered allmulticast mode [ 243.400267][T14076] bridge: RTM_NEWNEIGH with invalid ether address [ 244.285157][T14115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4120'. [ 244.418896][T14122] netlink: 'syz.1.4109': attribute type 1 has an invalid length. [ 244.435987][T14122] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.480029][T14122] dummy0: left promiscuous mode [ 244.520176][T14122] bond7: (slave dummy0): making interface the new active one [ 244.556885][T14122] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 244.592177][T14129] lo speed is unknown, defaulting to 1000 [ 244.598598][T14129] lo speed is unknown, defaulting to 1000 [ 245.170908][ T7121] IPVS: starting estimator thread 0... [ 245.273602][T14166] IPVS: using max 2592 ests per chain, 129600 per kthread [ 245.284828][ T7121] Process accounting resumed [ 245.429282][T14163] pim6reg: entered allmulticast mode [ 245.450458][T14163] pim6reg: left allmulticast mode [ 245.490818][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4137'. [ 245.502221][ T3700] net_ratelimit: 56 callbacks suppressed [ 245.502238][ T3700] bond1: (slave bridge5): failed to get link speed/duplex [ 245.663311][ T3700] bond1: (slave bridge5): failed to get link speed/duplex [ 245.671295][T14189] SELinux: failed to load policy [ 245.735188][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 245.735201][ T29] audit: type=1400 audit(2000000031.003:12754): avc: denied { name_bind 0x1000000 } for pid=14197 comm="syz.6.4143" path="socket:[52905]" dev="sockfs" ino=52905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 245.787990][ T3663] bond1: (slave bridge5): failed to get link speed/duplex [ 245.816634][ T3686] TC_ACT_REPEAT abuse ? [ 245.820990][ C0] TC_ACT_REPEAT abuse ? [ 245.836744][ T29] audit: type=1326 audit(2000000031.095:12755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.0.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 245.861155][ T29] audit: type=1326 audit(2000000031.095:12756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.0.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7928cebe9 code=0x7ffc0000 [ 245.887221][ T29] audit: type=1326 audit(2000000031.105:12757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.6.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 245.911559][ T29] audit: type=1326 audit(2000000031.105:12758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.6.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 245.916836][ T3663] bond1: (slave bridge5): failed to get link speed/duplex [ 245.936056][ T29] audit: type=1326 audit(2000000031.105:12759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.6.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 245.965839][ T29] audit: type=1326 audit(2000000031.105:12760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.6.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 245.990174][ T29] audit: type=1326 audit(2000000031.105:12761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.6.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 246.014234][ T29] audit: type=1326 audit(2000000031.105:12762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.6.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 246.038059][T14208] netlink: 'syz.6.4147': attribute type 1 has an invalid length. [ 246.046242][ T29] audit: type=1326 audit(2000000031.105:12763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.6.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5720ebe9 code=0x7ffc0000 [ 246.091449][T14208] bond1: entered promiscuous mode [ 246.096635][T14208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.113073][T14212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.120716][T14212] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 246.131348][T14212] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 246.153381][T14212] bond1: (slave wireguard0): making interface the new active one [ 246.161347][T14212] wireguard0: entered promiscuous mode [ 246.165150][T14215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4149'. [ 246.182755][T14208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.190011][T14208] IPv6: NLM_F_CREATE should be set when creating new route [ 246.197228][T14208] IPv6: NLM_F_CREATE should be set when creating new route [ 246.221040][T14208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.222456][T14212] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 246.237527][ T3686] bond1: (slave bridge5): failed to get link speed/duplex [ 246.296638][T14208] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 246.328910][T14223] TC_ACT_REPEAT abuse ? [ 246.339553][T14223] TC_ACT_REPEAT abuse ? [ 246.347121][T14208] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 246.357067][ T3697] bond1: (slave bridge5): failed to get link speed/duplex [ 246.372381][T14219] lo speed is unknown, defaulting to 1000 [ 246.382955][T14225] netlink: 'syz.1.4153': attribute type 1 has an invalid length. [ 246.394646][T14219] lo speed is unknown, defaulting to 1000 [ 246.436034][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4154'. [ 246.473585][T14225] 8021q: adding VLAN 0 to HW filter on device bond8 [ 246.522913][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4153'. [ 246.557969][T14225] bond8 (unregistering): Released all slaves [ 247.093345][T14260] lo speed is unknown, defaulting to 1000 [ 247.122994][T14259] lo speed is unknown, defaulting to 1000 [ 247.123091][T14260] lo speed is unknown, defaulting to 1000 [ 247.241078][T14259] lo speed is unknown, defaulting to 1000 [ 248.433947][T14321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.803929][T14364] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4209'. [ 249.812933][T14364] 0{X: renamed from gretap0 (while UP) [ 249.821282][T14364] 0{X: entered allmulticast mode [ 249.876189][T14374] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4214'. [ 249.895916][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4215'. [ 249.927186][T14374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14374 comm=syz.5.4214 [ 250.024557][T14382] vlan1: entered allmulticast mode [ 250.029788][T14382] bridge_slave_0: entered allmulticast mode [ 250.100971][T14390] veth0_to_team: entered promiscuous mode [ 250.139858][T14396] bond5: (slave dummy0): Releasing active interface [ 250.157976][T14396] bond0: (slave veth5): Releasing active interface [ 250.180426][T14396] bond1: (slave bridge5): Removing an active aggregator [ 250.198024][T14396] bond1: (slave bridge5): Releasing backup interface [ 250.215913][T14396] bridge5: left promiscuous mode [ 250.220978][T14396] bridge5: left allmulticast mode [ 250.243756][T14396] : left promiscuous mode [ 250.248692][T14396] bridge0: left promiscuous mode [ 250.253905][T14396] bridge6: port 1() entered disabled state [ 251.111741][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4243'. [ 251.352168][T14425] netlink: 'syz.6.4235': attribute type 1 has an invalid length. [ 251.368472][T14425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.381070][T14425] vlan0: entered allmulticast mode [ 251.386272][T14425] bond2: entered allmulticast mode [ 251.638919][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 251.638978][ T29] audit: type=1326 audit(2000000036.458:12901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.1.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 251.936666][ T29] audit: type=1326 audit(2000000036.458:12902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.1.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 251.961057][ T29] audit: type=1326 audit(2000000036.458:12903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.1.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 251.984690][ T29] audit: type=1326 audit(2000000036.458:12904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.1.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 252.009059][ T29] audit: type=1326 audit(2000000036.458:12905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.1.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 252.032657][ T29] audit: type=1326 audit(2000000036.458:12906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.1.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 252.056779][ T29] audit: type=1326 audit(2000000036.458:12907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.1.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 252.078346][ T3700] net_ratelimit: 82 callbacks suppressed [ 252.078367][ T3700] TC_ACT_REPEAT abuse ? [ 252.080407][ T29] audit: type=1326 audit(2000000036.458:12908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.1.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 252.080437][ T29] audit: type=1326 audit(2000000036.467:12909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.1.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 252.086257][ C1] TC_ACT_REPEAT abuse ? [ 252.090956][ T29] audit: type=1326 audit(2000000036.467:12910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.1.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dced5ebe9 code=0x7ffc0000 [ 252.342346][T14446] wg2: entered promiscuous mode [ 252.347303][T14446] wg2: entered allmulticast mode [ 252.536632][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4246'. [ 252.563798][T14456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.587395][T14456] vlan0: entered allmulticast mode [ 252.592963][T14456] bond3: entered allmulticast mode [ 253.084807][T14471] netlink: 'syz.0.4252': attribute type 1 has an invalid length. [ 253.101069][T14471] bond6: entered promiscuous mode [ 253.107298][T14471] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.238658][T14471] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.246087][T14471] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 253.257403][T14471] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 253.280972][T14480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.288238][T14480] IPv6: NLM_F_CREATE should be set when creating new route [ 253.295508][T14480] IPv6: NLM_F_CREATE should be set when creating new route [ 253.316693][T14471] bond6: (slave wireguard0): making interface the new active one [ 253.324526][T14471] wireguard0: entered promiscuous mode [ 253.354484][T14480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.362795][T14471] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 253.386851][T14482] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4257'. [ 253.389849][T14480] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 253.396229][ T3680] TC_ACT_REPEAT abuse ? [ 253.410659][ C1] TC_ACT_REPEAT abuse ? [ 253.416726][T14480] bond6: (slave wireguard1): Enslaving as a backup interface with an up link [ 253.426164][T14482] 0{X: renamed from 31{X (while UP) [ 253.436096][T14482] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 253.488326][T14486] TC_ACT_REPEAT abuse ? [ 253.492667][ C0] TC_ACT_REPEAT abuse ? [ 253.680424][T14505] lo speed is unknown, defaulting to 1000 [ 253.710901][T14505] lo speed is unknown, defaulting to 1000 [ 253.926464][T14518] loop6: detected capacity change from 0 to 512 [ 253.990654][T14518] EXT4-fs: Ignoring removed nobh option [ 254.076573][T14518] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.4269: corrupted inode contents [ 254.160419][T14518] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.4269: mark_inode_dirty error [ 254.199557][T14518] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.4269: corrupted inode contents [ 254.263383][T14518] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.4269: mark_inode_dirty error [ 254.280627][T14518] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.4269: Failed to acquire dquot type 0 [ 254.334511][T14535] netlink: 'syz.3.4272': attribute type 1 has an invalid length. [ 254.417812][ C0] TC_ACT_REPEAT abuse ? [ 254.422334][ C0] TC_ACT_REPEAT abuse ? [ 254.422784][ T12] TC_ACT_REPEAT abuse ? [ 254.453155][T14535] bond5: entered promiscuous mode [ 254.458526][T14535] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.504158][T14535] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.513975][T14535] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 254.524644][T14535] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 254.688233][T14538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.695509][T14538] IPv6: NLM_F_CREATE should be set when creating new route [ 254.698690][T14535] bond5: (slave wireguard0): making interface the new active one [ 254.702803][T14538] IPv6: NLM_F_CREATE should be set when creating new route [ 254.718564][T14535] wireguard0: entered promiscuous mode [ 254.789519][T14518] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4269: corrupted inode contents [ 254.802512][T14538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.806237][T14535] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 254.889470][T14518] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.4269: mark_inode_dirty error [ 255.018810][T14538] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 255.092597][T14538] bond5: (slave wireguard1): Enslaving as a backup interface with an up link [ 255.196464][T14518] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4269: corrupted inode contents [ 255.227049][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4276'. [ 255.241915][T14518] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.4269: mark_inode_dirty error [ 255.254965][T14518] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4269: corrupted inode contents [ 255.280063][T14518] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 255.297197][T14518] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4269: corrupted inode contents [ 255.316547][T14518] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.4269: mark_inode_dirty error [ 255.351430][T14518] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 255.397391][T14518] EXT4-fs (loop6): 1 truncate cleaned up [ 255.406797][T14518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.458424][T14518] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.580997][T11103] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.926362][T14587] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4292'. [ 256.641911][T14595] loop6: detected capacity change from 0 to 1024 [ 256.770277][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4301'. [ 256.792692][T14595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.836642][T11103] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.937316][T14628] syzkaller0: entered promiscuous mode [ 256.943006][T14628] syzkaller0: entered allmulticast mode [ 257.074409][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 257.074423][ T29] audit: type=1400 audit(2000000041.479:12992): avc: denied { read } for pid=14631 comm="syz.6.4306" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 257.103515][ T29] audit: type=1400 audit(2000000041.479:12993): avc: denied { open } for pid=14631 comm="syz.6.4306" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 257.131713][T14633] rdma_rxe: rxe_newlink: failed to add wg1 [ 257.784834][T14651] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4312'. [ 257.852390][T14654] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 257.852390][T14654] The task syz.1.4311 (14654) triggered the difference, watch for misbehavior. [ 257.942352][T14658] ================================================================== [ 257.950474][T14658] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 257.958834][T14658] [ 257.961166][T14658] write to 0xffff888106c03dfc of 4 bytes by task 14655 on cpu 1: [ 257.968901][T14658] inode_update_timestamps+0x147/0x270 [ 257.974375][T14658] file_update_time+0x20e/0x2b0 [ 257.979254][T14658] shmem_file_write_iter+0x9c/0xf0 [ 257.984388][T14658] iter_file_splice_write+0x666/0x9e0 [ 257.989778][T14658] direct_splice_actor+0x153/0x2a0 [ 257.994902][T14658] splice_direct_to_actor+0x30f/0x680 [ 258.000308][T14658] do_splice_direct+0xda/0x150 [ 258.005113][T14658] do_sendfile+0x380/0x650 [ 258.009551][T14658] __x64_sys_sendfile64+0x105/0x150 [ 258.014773][T14658] x64_sys_call+0x2bb0/0x2ff0 [ 258.019460][T14658] do_syscall_64+0xd2/0x200 [ 258.023982][T14658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.029899][T14658] [ 258.032231][T14658] read to 0xffff888106c03dfc of 4 bytes by task 14658 on cpu 0: [ 258.039875][T14658] atime_needs_update+0x2a8/0x3e0 [ 258.044932][T14658] touch_atime+0x4a/0x340 [ 258.049305][T14658] shmem_file_splice_read+0x5b1/0x600 [ 258.054709][T14658] splice_direct_to_actor+0x26f/0x680 [ 258.060091][T14658] do_splice_direct+0xda/0x150 [ 258.064883][T14658] do_sendfile+0x380/0x650 [ 258.069350][T14658] __x64_sys_sendfile64+0x105/0x150 [ 258.074575][T14658] x64_sys_call+0x2bb0/0x2ff0 [ 258.079259][T14658] do_syscall_64+0xd2/0x200 [ 258.083793][T14658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.089705][T14658] [ 258.092039][T14658] value changed: 0x0fbeed6f -> 0x104bc41f [ 258.097764][T14658] [ 258.100090][T14658] Reported by Kernel Concurrency Sanitizer on: [ 258.106263][T14658] CPU: 0 UID: 0 PID: 14658 Comm: syz.5.4313 Tainted: G W 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 258.120372][T14658] Tainted: [W]=WARN [ 258.124180][T14658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.134259][T14658] ================================================================== [ 258.144500][ T29] audit: type=1326 audit(2000000042.458:12994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.0.4315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7ff7928c5ba7 code=0x0 [ 258.740830][ T3449] net_ratelimit: 8 callbacks suppressed [ 258.740909][ T3449] TC_ACT_REPEAT abuse ? [ 258.750872][ C0] TC_ACT_REPEAT abuse ? [ 259.878527][ T3663] TC_ACT_REPEAT abuse ? [ 259.882858][ C1] TC_ACT_REPEAT abuse ? [ 259.954171][ T3719] TC_ACT_REPEAT abuse ? [ 259.958481][ C1] TC_ACT_REPEAT abuse ? [ 261.178397][ T3449] TC_ACT_REPEAT abuse ? [ 261.182719][ C0] TC_ACT_REPEAT abuse ? [ 262.370351][ T3666] TC_ACT_REPEAT abuse ? [ 262.374748][ C1] TC_ACT_REPEAT abuse ? [ 264.808359][ T3719] net_ratelimit: 2 callbacks suppressed [ 264.808375][ T3719] TC_ACT_REPEAT abuse ? [ 264.818308][ C1] TC_ACT_REPEAT abuse ? [ 266.010502][ T3666] TC_ACT_REPEAT abuse ? [ 266.014867][ C0] TC_ACT_REPEAT abuse ? [ 266.205939][ T3719] TC_ACT_REPEAT abuse ? [ 266.210242][ C1] TC_ACT_REPEAT abuse ? [ 267.202444][ T3666] TC_ACT_REPEAT abuse ? [ 267.206756][ C1] TC_ACT_REPEAT abuse ?