last executing test programs: 17m33.785816934s ago: executing program 32 (id=114): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 15m50.880104977s ago: executing program 33 (id=4072): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioperm(0x0, 0x44, 0x7) 14m44.821134902s ago: executing program 34 (id=6834): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 14m44.64129156s ago: executing program 35 (id=6838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1f8, 0x178, 0x178, 0x1f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}}, 0x12a, 0xc0, 0x128, 0x0, {0x0, 0x7a010000}, [@common=@inet=@socket3={{0x28}, 0x5}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x5, 0x2, 0x20, 'snmp\x00', 'syz0\x00', {0x101}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0x0, 0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) 14m29.147365935s ago: executing program 36 (id=7274): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00001c7000/0x2000)=nil, 0x2000, 0x2) 14m28.747814125s ago: executing program 37 (id=7276): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x7}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 14m28.320052327s ago: executing program 38 (id=7279): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x1000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 14m19.954984091s ago: executing program 39 (id=7173): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) close(r0) 13m25.075485335s ago: executing program 40 (id=9648): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x10010, r1, 0x6) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 13m18.723560541s ago: executing program 41 (id=9933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}]}}}]}, 0x3c}}, 0x84000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x20004000) 13m9.248089894s ago: executing program 42 (id=10231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 12m32.276002604s ago: executing program 43 (id=11074): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xe, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 12m1.679784727s ago: executing program 44 (id=12512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 9m52.205529707s ago: executing program 2 (id=16815): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) fsetxattr$security_capability(r2, &(0x7f0000000280), 0x0, 0x0, 0x0) 9m52.203861087s ago: executing program 2 (id=16817): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x40000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 9m52.072696781s ago: executing program 2 (id=16832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) write$cgroup_subtree(r0, 0x0, 0x66) 9m51.254302151s ago: executing program 2 (id=16834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) close(r2) 9m51.215780225s ago: executing program 2 (id=16825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 9m51.15760474s ago: executing program 2 (id=16828): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x2a, &(0x7f00000016c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @echo}}}}, 0x0) 9m47.81393663s ago: executing program 45 (id=16489): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000380)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x203}}, {@norecovery}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 9m36.126933451s ago: executing program 46 (id=16828): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x2a, &(0x7f00000016c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @echo}}}}, 0x0) 9m7.590145541s ago: executing program 6 (id=18077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) 9m7.543621006s ago: executing program 6 (id=18078): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000200)='skb_copy_datagram_iovec\x00', r0, 0x0, 0x6}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 9m7.515324778s ago: executing program 6 (id=18081): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 9m7.394282211s ago: executing program 6 (id=18084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) 9m7.3938299s ago: executing program 6 (id=18085): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m7.114311228s ago: executing program 6 (id=18093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$kcm(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40100, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff7f000000000000060000008500000018000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 9m7.114029098s ago: executing program 47 (id=18093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$kcm(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40100, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff7f000000000000060000008500000018000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 4m37.242892593s ago: executing program 1 (id=24909): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x2dbe, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x44) 4m37.0741667s ago: executing program 1 (id=24916): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000850, &(0x7f0000000040)={[{@barrier}, {@errors_remount}]}, 0x1, 0x519, &(0x7f0000000a00)="$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") 4m36.818646134s ago: executing program 1 (id=24922): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r2, 0x0, 0xbf5, 0x2000402) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 4m33.255626896s ago: executing program 1 (id=24922): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r2, 0x0, 0xbf5, 0x2000402) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 4m33.176525584s ago: executing program 1 (id=24994): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 4m33.130792198s ago: executing program 1 (id=24995): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 4m18.08224015s ago: executing program 48 (id=24995): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 3m35.43310525s ago: executing program 5 (id=26140): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) fsetxattr$security_selinux(r1, 0x0, 0x0, 0x0, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) 3m35.311495511s ago: executing program 5 (id=26144): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) pipe(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) capset(0x0, 0x0) 3m35.2296553s ago: executing program 5 (id=26145): setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000007c0)=@newsa={0x2a8, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@empty, {}, {0xfffffffffffffffd, 0x7, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x151, 0x14, {{'cmac(aes)\x00'}, 0x828, 0x18, "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"}}]}, 0x2a8}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 3m35.206302022s ago: executing program 5 (id=26146): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 3m34.10499441s ago: executing program 5 (id=26154): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 3m33.509888999s ago: executing program 5 (id=26161): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x451dcc9220c79529) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r2, 0x3, 0x0) 3m33.305355179s ago: executing program 49 (id=26161): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x451dcc9220c79529) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r2, 0x3, 0x0) 3m10.164745468s ago: executing program 9 (id=26560): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x2000101c}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x16000715) close_range(r0, 0xffffffffffffffff, 0x0) 3m10.118740503s ago: executing program 9 (id=26563): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 3m9.927038952s ago: executing program 9 (id=26569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 3m9.899038044s ago: executing program 9 (id=26572): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) 3m9.605857673s ago: executing program 9 (id=26593): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3m9.368809686s ago: executing program 9 (id=26605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0x10, 0xfff1}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3m9.323055821s ago: executing program 50 (id=26605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0x10, 0xfff1}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.497874432s ago: executing program 0 (id=30472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) fcntl$setlease(r1, 0x400, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x2439, &(0x7f0000000700)={0x0, 0x1064, 0x1000, 0x2, 0x69}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r3, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 2.21702975s ago: executing program 0 (id=30476): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 1.938143527s ago: executing program 0 (id=30478): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x40, 0x0) prctl$PR_SET_NAME(0xf, 0x0) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 1.854372275s ago: executing program 0 (id=30479): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 1.851505846s ago: executing program 0 (id=30480): bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) getrandom(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x28}, &(0x7f00000001c0), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003300)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) copy_file_range(r0, &(0x7f0000000100)=0x3, 0xffffffffffffffff, &(0x7f0000000200)=0xf15b, 0x3, 0x0) 1.602353891s ago: executing program 8 (id=30483): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00', 0xa) fsetxattr$system_posix_acl(r1, &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {0x1, 0x1}, [], {0x20, 0x5}, [], {}, {0x20, 0x1}}, 0x4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.569261314s ago: executing program 8 (id=30484): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 1.544607087s ago: executing program 8 (id=30485): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.477955263s ago: executing program 3 (id=30486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.374305474s ago: executing program 8 (id=30487): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0xbc, &(0x7f0000002480)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@generic={0x6007, "1d16679ccf26f2b46c037c29d90755ec99668ca235c2084b5465caaf25def733f7388c244afce70b70c5bf4ee542687ee2ac76ee3d8a42297b115d8b0a61b3488bad0a9400b3d94b5e428f7ddca64a2502d917e58a8989ffa4f0c305b65694a35a761e6b79154c354bbfaab038d7f72fe53a98eb122df29f0fd3c63cfdb4f41b4d69c8a0b2a8a03f17811ba2a81984dcbed782e2219b2725408037639dc2337d20ea3cce6b0f6d9a1838928df9bd"}}}, 0x0) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) r2 = socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 1.373935884s ago: executing program 3 (id=30488): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.370003434s ago: executing program 0 (id=30489): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x8, &(0x7f0000000040)=[{0x32, 0x7, 0x1, 0xff}, {0x58, 0x1, 0xad, 0xffff}, {0x9, 0xc0, 0xa, 0x9}, {0xc4, 0xaf, 0x3, 0x1}, {0x7ff, 0x8, 0xf, 0xd}, {0x7, 0x2, 0x2d, 0x1ff}, {0x5, 0x9, 0x4, 0x9}, {0x2, 0x1, 0x1, 0x3}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0x1}, 0x18) syz_usb_disconnect(0xffffffffffffffff) 1.326138388s ago: executing program 3 (id=30490): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x10040045}, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fdatasync(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x9, 0xfff, 0x9}) 1.258390015s ago: executing program 3 (id=30492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x7460) 900.689221ms ago: executing program 8 (id=30495): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x2, [@ptr, @func, @int, @int, @volatile={0xe}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {0x1}]}]}}, 0x0, 0x8e}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000100), 0x0}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x1a0, 0x3d0, 0x1a0, 0x300, 0x1a0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) getpid() lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [], {}, [], {0x10, 0x3}}, 0x24, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000086d0415c240000102030109022400010105a022889c120d953fe999105a33cd9883ef00090400c0010301020309bc"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 803.8913ms ago: executing program 7 (id=30496): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x180a0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000f83239ab093740a019eead40d54d6ebc743b050a362824b25dfcd48e5d37355329551e"], &(0x7f0000000000)='GPL\x00', 0x3, 0xe8, &(0x7f0000000500)=""/232, 0x0, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) socketpair(0x1, 0x1, 0xe0a, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000004000000ff0f0013159a4500070000000000b1bc0f74f4066d632231e09a3bc7fd0cd1a0a6fdf1c6de663a06197f37085c6594952528bb16e0487ecc1d8299e382928cb6470a4fa925a8faf20994d513453aa856fb0b1f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 706.23875ms ago: executing program 7 (id=30497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x23, 0x0) 676.215403ms ago: executing program 4 (id=30498): bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x8f0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x1650c000, 0x4) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=""/19, 0x13}, 0x5}], 0x1, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 648.851495ms ago: executing program 7 (id=30499): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd29, 0x3503}]}, 0x98}, 0x1, 0x7}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0xf00) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x4e6b}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000040)={'pimreg0\x00', @multicast}) 371.787293ms ago: executing program 8 (id=30500): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 371.106263ms ago: executing program 7 (id=30510): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 370.800243ms ago: executing program 4 (id=30501): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 366.161164ms ago: executing program 3 (id=30511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 307.006779ms ago: executing program 4 (id=30502): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x896ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x3, 0xfff}, 0x1000, 0x58, 0x80000000, 0x4, 0x1ff, 0xffffffff, 0x1, 0x0, 0x4000, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89b0, &(0x7f0000000040)={'vlan0\x00', @random="18faff000020"}) 209.541649ms ago: executing program 7 (id=30503): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 207.784089ms ago: executing program 4 (id=30504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x43c02, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 144.037936ms ago: executing program 3 (id=30505): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r4, 0x0) 143.226906ms ago: executing program 4 (id=30517): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffedf, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000900)="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", 0x45c) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r5, 0x0, 0x0}, 0x10) 221.79µs ago: executing program 7 (id=30506): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") socket$igmp(0x2, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$sg(0x0, 0x0, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) 0s ago: executing program 4 (id=30507): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x28) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e00), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000080), 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r4, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) kernel console output (not intermixed with test programs): ontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 1017.406666][ T29] audit: type=1326 audit(2000002266.555:42754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11102 comm="syz.7.29176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1017.430418][ T29] audit: type=1326 audit(2000002266.555:42755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11102 comm="syz.7.29176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1017.454148][ T29] audit: type=1326 audit(2000002266.555:42756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11102 comm="syz.7.29176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1017.478203][ T29] audit: type=1326 audit(2000002266.555:42757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11102 comm="syz.7.29176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1017.502013][ T29] audit: type=1326 audit(2000002266.555:42758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11102 comm="syz.7.29176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1017.525899][ T29] audit: type=1326 audit(2000002266.555:42759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11102 comm="syz.7.29176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1017.543216][T11110] _cac speed is unknown, defaulting to 1000 [ 1017.668761][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29181'. [ 1017.696994][T11110] lo speed is unknown, defaulting to 1000 [ 1017.723137][T11126] Ÿë: port 1(veth0_to_team) entered blocking state [ 1017.729920][T11126] Ÿë: port 1(veth0_to_team) entered disabled state [ 1017.766371][T11126] veth0_to_team: entered allmulticast mode [ 1017.781114][T11126] veth0_to_team: entered promiscuous mode [ 1018.321622][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.7.29184'. [ 1019.101252][T11177] _cac speed is unknown, defaulting to 1000 [ 1019.147324][T11177] lo speed is unknown, defaulting to 1000 [ 1019.316144][T11185] _cac speed is unknown, defaulting to 1000 [ 1019.384830][T11185] lo speed is unknown, defaulting to 1000 [ 1019.634851][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.8.29214'. [ 1019.684515][T11214] _cac speed is unknown, defaulting to 1000 [ 1019.724228][T11214] lo speed is unknown, defaulting to 1000 [ 1019.908045][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1020.574636][T11246] loop7: detected capacity change from 0 to 1024 [ 1020.604952][T11246] EXT4-fs: Ignoring removed nobh option [ 1020.610692][T11246] EXT4-fs: inline encryption not supported [ 1020.680255][T11246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.746969][T11246] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.29226: Allocating blocks 497-513 which overlap fs metadata [ 1020.822822][T11258] EXT4-fs (loop7): pa ffff8881072bcf50: logic 16, phys. 129, len 24 [ 1020.831006][T11258] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 1021.392495][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.519560][T11289] loop7: detected capacity change from 0 to 128 [ 1021.540280][T11289] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1021.559654][T11289] ext4 filesystem being mounted at /468/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.478407][ T4972] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1022.580517][ T4972] team0: Port device geneve1 removed [ 1022.888135][ T4972] bridge0 (unregistering): left allmulticast mode [ 1022.954946][ T4972] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1022.982086][ T4972] bond0 (unregistering): Released all slaves [ 1023.006474][ T4972] bond1 (unregistering): Released all slaves [ 1023.034278][ T4972] bond2 (unregistering): Released all slaves [ 1023.065968][ T4972] bond3 (unregistering): Released all slaves [ 1023.078252][T11396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29249'. [ 1023.122020][ T4972] bond4 (unregistering): Released all slaves [ 1023.148265][T11399] netlink: 14 bytes leftover after parsing attributes in process `syz.3.29250'. [ 1023.333348][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 1023.333443][ T29] audit: type=1326 audit(2000002272.688:43083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.29252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1023.363635][ T29] audit: type=1326 audit(2000002272.688:43084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.29252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1023.389158][ T29] audit: type=1326 audit(2000002272.748:43085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.29252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1023.413347][ T29] audit: type=1326 audit(2000002272.748:43086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.29252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f71d4c9ef03 code=0x7ffc0000 [ 1023.439055][ T29] audit: type=1326 audit(2000002272.748:43087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.29252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f71d4c9d97f code=0x7ffc0000 [ 1023.462730][ T29] audit: type=1326 audit(2000002272.748:43088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.29252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f71d4c9ef57 code=0x7ffc0000 [ 1023.534707][ T29] audit: type=1326 audit(2000002272.878:43089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.29252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71d4c9d710 code=0x7ffc0000 [ 1023.558510][ T29] audit: type=1326 audit(2000002272.878:43090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.29252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f71d4c9db2a code=0x7ffc0000 [ 1023.588483][ T29] audit: type=1326 audit(2000002272.878:43091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.29252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1023.612401][ T29] audit: type=1326 audit(2000002272.938:43092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.29252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1023.762255][T11451] _cac: entered allmulticast mode [ 1023.767699][T11451] tunl0: entered allmulticast mode [ 1023.772946][T11451] gre0: entered allmulticast mode [ 1023.778125][T11451] gretap0: entered allmulticast mode [ 1023.783525][T11451] erspan0: entered allmulticast mode [ 1023.788986][T11451] ip_vti0: entered allmulticast mode [ 1023.794407][T11451] v: entered allmulticast mode [ 1023.799306][T11451] sit0: entered allmulticast mode [ 1023.804477][T11451] ip6tnl0: entered allmulticast mode [ 1023.810071][T11451] ip6gre0: entered allmulticast mode [ 1023.816170][T11451] dummy0: left promiscuous mode [ 1023.840102][T11451] nlmon0: entered allmulticast mode [ 1023.845547][T11451] 0ªX¹¦À: entered allmulticast mode [ 1023.850943][T11451] veth0: entered allmulticast mode [ 1023.856204][T11451] veth1: entered allmulticast mode [ 1023.861678][T11451] wg1: entered allmulticast mode [ 1023.866840][T11451] wg2: left promiscuous mode [ 1023.871552][T11451] veth0_to_bridge: entered allmulticast mode [ 1023.877819][T11451] veth1_to_bridge: entered allmulticast mode [ 1023.883976][T11451] bridge_slave_1: entered allmulticast mode [ 1023.890110][T11451] veth0_to_bond: entered allmulticast mode [ 1023.896045][T11451] bond_slave_0: entered allmulticast mode [ 1023.902003][T11451] veth1_to_bond: entered allmulticast mode [ 1023.908178][T11451] bond_slave_1: entered allmulticast mode [ 1023.914152][T11451] veth1_to_team: entered allmulticast mode [ 1023.920180][T11451] team_slave_1: entered allmulticast mode [ 1023.926081][T11451] veth0_to_batadv: entered allmulticast mode [ 1023.932282][T11451] batadv_slave_0: left promiscuous mode [ 1023.938000][T11451] batadv_slave_0: entered allmulticast mode [ 1023.944211][T11451] xfrm0: entered allmulticast mode [ 1023.949727][T11451] veth0_to_hsr: entered allmulticast mode [ 1023.955647][T11451] hsr_slave_0: entered allmulticast mode [ 1023.961408][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29257'. [ 1023.961657][T11451] hsr0: entered allmulticast mode [ 1023.975714][T11451] veth1_virt_wifi: entered allmulticast mode [ 1023.982040][T11451] veth0_virt_wifi: entered allmulticast mode [ 1023.988192][T11451] geneve0: entered allmulticast mode [ 1023.993632][T11451] geneve1: entered allmulticast mode [ 1023.999057][T11451] bridge1: entered allmulticast mode [ 1024.004552][T11451] bond1: entered allmulticast mode [ 1024.009783][T11451] @: entered allmulticast mode [ 1024.014664][T11451] ip6tnl1: entered allmulticast mode [ 1024.020041][T11451] ipip0: entered allmulticast mode [ 1024.025319][T11451] ip6tnl2: entered allmulticast mode [ 1024.030787][T11451] vxlan0: entered allmulticast mode [ 1024.036188][T11451] sit1: entered allmulticast mode [ 1024.041393][T11451] bridge2: entered allmulticast mode [ 1024.046856][T11451] bond2: entered allmulticast mode [ 1024.052079][T11451] ÿÿÿÿÿÿ: entered allmulticast mode [ 1024.057438][T11451] gre1: entered allmulticast mode [ 1024.062575][T11451] batadv1: entered allmulticast mode [ 1024.068103][T11451] ipip1: entered allmulticast mode [ 1024.073293][T11451] ip6_vti1: entered allmulticast mode [ 1024.078795][T11451] gretap1: entered allmulticast mode [ 1024.084227][T11451] batadv2: entered allmulticast mode [ 1024.089727][T11451] ipip2: entered allmulticast mode [ 1024.094920][T11451] bond3: entered allmulticast mode [ 1024.100153][T11451] gretap2: entered allmulticast mode [ 1024.105676][T11451] veth2: entered allmulticast mode [ 1024.111016][T11451] veth3: entered allmulticast mode [ 1024.116342][T11451] gre2: entered allmulticast mode [ 1024.121496][T11451] ip6gre1: entered allmulticast mode [ 1024.126991][T11451] sit2: entered allmulticast mode [ 1024.132131][T11451] ip6_vti2: entered allmulticast mode [ 1024.137625][T11451] bridge3: entered allmulticast mode [ 1024.143256][T11451] veth4: entered allmulticast mode [ 1024.148593][T11451] veth5: entered allmulticast mode [ 1024.153815][T11451] bridge4: entered allmulticast mode [ 1024.159474][T11451] veth6: entered allmulticast mode [ 1024.164799][T11451] veth7: entered allmulticast mode [ 1024.170069][T11451] bond0: entered allmulticast mode [ 1024.175375][T11451] veth8: entered allmulticast mode [ 1024.180680][T11451] veth9: entered allmulticast mode [ 1024.186230][T11451] veth10: entered allmulticast mode [ 1024.191541][T11451] veth11: entered allmulticast mode [ 1024.196843][T11451] ip6tnl3: entered allmulticast mode [ 1024.202243][T11451] veth12: entered allmulticast mode [ 1024.207641][T11451] veth13: entered allmulticast mode [ 1024.212983][T11451] bridge5: entered allmulticast mode [ 1024.218391][T11451] syztnl2: entered allmulticast mode [ 1024.223744][T11451] veth14: entered allmulticast mode [ 1024.229141][T11451] veth15: entered allmulticast mode [ 1024.234504][T11451] bond4: entered allmulticast mode [ 1024.239883][T11451] bridge6: entered allmulticast mode [ 1024.245364][T11451] veth16: entered allmulticast mode [ 1024.250784][T11451] veth17: entered allmulticast mode [ 1024.256235][T11451] bridge7: entered allmulticast mode [ 1024.261728][T11451] bridge8: entered allmulticast mode [ 1024.267186][T11451] veth18: entered allmulticast mode [ 1024.272557][T11451] veth19: entered allmulticast mode [ 1024.277859][T11451] veth20: entered allmulticast mode [ 1024.283294][T11451] veth21: entered allmulticast mode [ 1024.288592][T11451] bridge9: entered allmulticast mode [ 1024.294117][T11451] bridge10: entered allmulticast mode [ 1024.299680][T11451] bridge11: entered allmulticast mode [ 1024.305165][T11451] : entered allmulticast mode [ 1024.310213][T11451] veth22: entered allmulticast mode [ 1024.315526][T11451] veth23: entered allmulticast mode [ 1024.320883][T11451] veth24: entered allmulticast mode [ 1024.326388][T11451] veth25: entered allmulticast mode [ 1024.331701][T11451] gre3: entered allmulticast mode [ 1024.336859][T11451] bridge12: entered allmulticast mode [ 1024.342508][T11451] gre4: entered allmulticast mode [ 1024.347691][T11451] gre5: entered allmulticast mode [ 1024.352834][T11451] veth26: entered allmulticast mode [ 1024.358186][T11451] veth27: entered allmulticast mode [ 1024.363688][T11451] bond5: entered allmulticast mode [ 1024.368934][T11451] bridge13: entered allmulticast mode [ 1024.374488][T11451] bond6: entered allmulticast mode [ 1024.379928][T11451] bond7: entered allmulticast mode [ 1024.385168][T11451] bridge14: entered allmulticast mode [ 1024.390774][T11451] bridge15: entered allmulticast mode [ 1024.396440][T11451] bridge16: entered allmulticast mode [ 1024.401908][T11451] veth28: entered allmulticast mode [ 1024.407233][T11451] veth29: entered allmulticast mode [ 1024.412607][T11451] team1: entered allmulticast mode [ 1024.417903][T11451] bridge17: entered allmulticast mode [ 1024.423520][T11451] bridge18: entered allmulticast mode [ 1024.429027][T11451] veth30: entered allmulticast mode [ 1024.434461][T11451] veth31: entered allmulticast mode [ 1024.439822][T11451] bond8: entered allmulticast mode [ 1024.445232][T11451] veth32: entered allmulticast mode [ 1024.450621][T11451] veth33: entered allmulticast mode [ 1024.456020][T11451] gre6: entered allmulticast mode [ 1024.461279][T11451] bridge19: entered allmulticast mode [ 1024.466907][T11451] bond10: entered allmulticast mode [ 1024.472268][T11451] ip6erspan0: entered allmulticast mode [ 1024.478003][T11451] bridge20: entered allmulticast mode [ 1024.484298][T11451] bond11: entered allmulticast mode [ 1024.506630][T11451] veth34: left promiscuous mode [ 1024.511680][T11451] veth35: entered allmulticast mode [ 1024.517222][T11451] veth36: left promiscuous mode [ 1024.522214][T11451] veth37: entered allmulticast mode [ 1024.538264][T11451] bridge21: entered allmulticast mode [ 1024.547191][T11451] netdevsim netdevsim0 eth0: entered allmulticast mode [ 1024.562669][T11451] netdevsim netdevsim0 eth1: entered allmulticast mode [ 1024.570488][T11451] netdevsim netdevsim0 eth2: entered allmulticast mode [ 1024.581512][T11451] netdevsim netdevsim0 eth3: entered allmulticast mode [ 1024.588723][T11451] bond12: entered allmulticast mode [ 1024.594084][T11451] bond14: entered allmulticast mode [ 1024.598579][T11472] netlink: 24 bytes leftover after parsing attributes in process `syz.8.29262'. [ 1024.599800][T11451] veth38: left promiscuous mode [ 1024.613585][T11451] veth39: entered allmulticast mode [ 1024.619163][T11451] veth40: entered allmulticast mode [ 1024.624910][T11451] veth41: left promiscuous mode [ 1024.629900][T11451] veth41: entered allmulticast mode [ 1024.644680][T11451] veth42: entered allmulticast mode [ 1024.650317][T11451] veth43: entered allmulticast mode [ 1024.656520][T11451] vxlan1: entered allmulticast mode [ 1024.665799][T11451] veth44: entered allmulticast mode [ 1024.671270][T11451] veth45: entered allmulticast mode [ 1024.685064][ T4963] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.693557][ T4963] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.702402][ T4963] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.710881][ T4963] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.721019][T11474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11474 comm=syz.8.29262 [ 1024.735628][ T4963] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.744129][ T4963] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.798744][ T4963] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.807384][ T4963] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.901591][ T3946] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1024.956181][ T4972] tipc: Disabling bearer [ 1024.961391][ T4972] tipc: Left network mode [ 1025.379609][T11516] netlink: 'syz.7.29279': attribute type 10 has an invalid length. [ 1025.405068][T11516] team0: Port device dummy0 added [ 1025.421634][T11516] netlink: 'syz.7.29279': attribute type 10 has an invalid length. [ 1025.431074][T11516] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1025.443258][T11516] team0: Failed to send options change via netlink (err -105) [ 1025.451525][T11516] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1025.460839][T11516] team0: Port device dummy0 removed [ 1025.468335][T11516] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1025.603609][ T4972] IPVS: stop unused estimator thread 0... [ 1025.658821][ T4972] ------------[ cut here ]------------ [ 1025.664503][ T4972] WARNING: CPU: 0 PID: 4972 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 1025.674345][ T4972] Modules linked in: [ 1025.678380][ T4972] CPU: 0 UID: 0 PID: 4972 Comm: kworker/u8:52 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1025.690109][ T4972] Tainted: [W]=WARN [ 1025.693941][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1025.704074][ T4972] Workqueue: netns cleanup_net [ 1025.708909][ T4972] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 1025.714598][ T4972] Code: 48 8d bb 70 0e 00 00 e8 65 a8 b7 fc 48 8b bb 70 0e 00 00 e8 e9 53 c4 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 38 51 9c fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 2a 51 9c fc 90 0f 0b 90 4c 89 f7 e8 2e [ 1025.734388][ T4972] RSP: 0018:ffffc9001049fc60 EFLAGS: 00010293 [ 1025.740647][ T4972] RAX: ffffffff84baee48 RBX: ffff88811850c680 RCX: ffff88810a245280 [ 1025.748854][ T4972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811850d4c0 [ 1025.756982][ T4972] RBP: ffffffff86c91000 R08: 0001ffff8684802f R09: 0000000000000000 [ 1025.765035][ T4972] R10: ffffc9001049fbe8 R11: 0001c9001049fbe8 R12: ffffffff86c91020 [ 1025.773095][ T4972] R13: ffff88811850c6a8 R14: ffff88811850d4c0 R15: ffff88811850c680 [ 1025.781310][ T4972] FS: 0000000000000000(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 1025.790309][ T4972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1025.797025][ T4972] CR2: 00007ffc5d469528 CR3: 000000011ed28000 CR4: 00000000003506f0 [ 1025.805190][ T4972] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1025.813285][ T4972] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1025.821316][ T4972] Call Trace: [ 1025.824616][ T4972] [ 1025.827752][ T4972] xfrm_net_exit+0x2d/0x60 [ 1025.832265][ T4972] ops_undo_list+0x27b/0x410 [ 1025.836990][ T4972] cleanup_net+0x2f4/0x4f0 [ 1025.841510][ T4972] process_scheduled_works+0x4ce/0x9d0 [ 1025.847261][ T4972] worker_thread+0x582/0x770 [ 1025.851985][ T4972] kthread+0x489/0x510 [ 1025.856210][ T4972] ? finish_task_switch+0xad/0x2b0 [ 1025.861368][ T4972] ? __pfx_worker_thread+0x10/0x10 [ 1025.866635][ T4972] ? __pfx_kthread+0x10/0x10 [ 1025.871602][ T4972] ret_from_fork+0x122/0x1b0 [ 1025.876249][ T4972] ? __pfx_kthread+0x10/0x10 [ 1025.880971][ T4972] ret_from_fork_asm+0x1a/0x30 [ 1025.886033][ T4972] [ 1025.889176][ T4972] ---[ end trace 0000000000000000 ]--- [ 1025.895979][ T4972] ------------[ cut here ]------------ [ 1025.901537][ T4972] WARNING: CPU: 0 PID: 4972 at net/xfrm/xfrm_state.c:3313 xfrm_state_fini+0x1b9/0x1f0 [ 1025.911283][ T4972] Modules linked in: [ 1025.915223][ T4972] CPU: 0 UID: 0 PID: 4972 Comm: kworker/u8:52 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1025.926900][ T4972] Tainted: [W]=WARN [ 1025.930723][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1025.940949][ T4972] Workqueue: netns cleanup_net [ 1025.946026][ T4972] RIP: 0010:xfrm_state_fini+0x1b9/0x1f0 [ 1025.951624][ T4972] Code: a8 b7 fc 4d 8b 3e e9 06 ff ff ff e8 11 51 9c fc 90 0f 0b 90 4c 89 f7 e8 15 a8 b7 fc 4d 8b 3e e9 24 ff ff ff e8 f8 50 9c fc 90 <0f> 0b 90 4c 89 f7 e8 fc a7 b7 fc 4d 8b 3e e9 42 ff ff ff e8 df 50 [ 1025.972454][ T4972] RSP: 0018:ffffc9001049fc60 EFLAGS: 00010293 [ 1025.978909][ T4972] RAX: ffffffff84baee88 RBX: ffff88811850c680 RCX: ffff88810a245280 [ 1025.987488][ T4972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881237fd980 [ 1025.995625][ T4972] RBP: 0000000000000080 R08: 000188811850d4df R09: 0000000000000000 [ 1026.003629][ T4972] R10: ffff8881237fd780 R11: 00018881237fd2ff R12: ffffffff86c91020 [ 1026.011681][ T4972] R13: ffff88811850c6a8 R14: ffff88811850d4d8 R15: ffff8881237fd980 [ 1026.019997][ T4972] FS: 0000000000000000(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 1026.029090][ T4972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1026.035739][ T4972] CR2: 00007ffc5d469528 CR3: 000000011ed28000 CR4: 00000000003506f0 [ 1026.043781][ T4972] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1026.051830][ T4972] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1026.060029][ T4972] Call Trace: [ 1026.063333][ T4972] [ 1026.066316][ T4972] xfrm_net_exit+0x2d/0x60 [ 1026.070787][ T4972] ops_undo_list+0x27b/0x410 [ 1026.075540][ T4972] cleanup_net+0x2f4/0x4f0 [ 1026.080002][ T4972] process_scheduled_works+0x4ce/0x9d0 [ 1026.085681][ T4972] worker_thread+0x582/0x770 [ 1026.090361][ T4972] kthread+0x489/0x510 [ 1026.094526][ T4972] ? finish_task_switch+0xad/0x2b0 [ 1026.099748][ T4972] ? __pfx_worker_thread+0x10/0x10 [ 1026.104923][ T4972] ? __pfx_kthread+0x10/0x10 [ 1026.109719][ T4972] ret_from_fork+0x122/0x1b0 [ 1026.114468][ T4972] ? __pfx_kthread+0x10/0x10 [ 1026.119198][ T4972] ret_from_fork_asm+0x1a/0x30 [ 1026.124011][ T4972] [ 1026.127122][ T4972] ---[ end trace 0000000000000000 ]--- [ 1026.133501][ T4972] ------------[ cut here ]------------ [ 1026.139369][ T4972] WARNING: CPU: 0 PID: 4972 at net/xfrm/xfrm_state.c:3315 xfrm_state_fini+0x1d2/0x1f0 [ 1026.149129][ T4972] Modules linked in: [ 1026.153040][ T4972] CPU: 0 UID: 0 PID: 4972 Comm: kworker/u8:52 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1026.164917][ T4972] Tainted: [W]=WARN [ 1026.168738][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1026.178919][ T4972] Workqueue: netns cleanup_net [ 1026.183882][ T4972] RIP: 0010:xfrm_state_fini+0x1d2/0x1f0 [ 1026.189570][ T4972] Code: a8 b7 fc 4d 8b 3e e9 24 ff ff ff e8 f8 50 9c fc 90 0f 0b 90 4c 89 f7 e8 fc a7 b7 fc 4d 8b 3e e9 42 ff ff ff e8 df 50 9c fc 90 <0f> 0b 90 4c 89 f7 e8 e3 a7 b7 fc 4d 8b 3e e9 60 ff ff ff 66 66 2e [ 1026.209343][ T4972] RSP: 0018:ffffc9001049fc60 EFLAGS: 00010293 [ 1026.215481][ T4972] RAX: ffffffff84baeea1 RBX: ffff88811850c680 RCX: ffff88810a245280 [ 1026.223475][ T4972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881237fdc80 [ 1026.231562][ T4972] RBP: 0000000000000080 R08: 000188811850d4d7 R09: 0000000000000000 [ 1026.239655][ T4972] R10: ffff8881237fd280 R11: 00018881237fd9ff R12: ffffffff86c91020 [ 1026.247678][ T4972] R13: ffff88811850c6a8 R14: ffff88811850d4d0 R15: ffff8881237fdc80 [ 1026.255823][ T4972] FS: 0000000000000000(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 1026.264889][ T4972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1026.271505][ T4972] CR2: 00007ffc5d469528 CR3: 000000011ed28000 CR4: 00000000003506f0 [ 1026.279529][ T4972] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1026.287650][ T4972] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1026.295707][ T4972] Call Trace: [ 1026.299006][ T4972] [ 1026.301957][ T4972] xfrm_net_exit+0x2d/0x60 [ 1026.306540][ T4972] ops_undo_list+0x27b/0x410 [ 1026.311251][ T4972] cleanup_net+0x2f4/0x4f0 [ 1026.315826][ T4972] process_scheduled_works+0x4ce/0x9d0 [ 1026.321428][ T4972] worker_thread+0x582/0x770 [ 1026.326187][ T4972] kthread+0x489/0x510 [ 1026.330371][ T4972] ? finish_task_switch+0xad/0x2b0 [ 1026.335622][ T4972] ? __pfx_worker_thread+0x10/0x10 [ 1026.340991][ T4972] ? __pfx_kthread+0x10/0x10 [ 1026.345737][ T4972] ret_from_fork+0x122/0x1b0 [ 1026.350385][ T4972] ? __pfx_kthread+0x10/0x10 [ 1026.355152][ T4972] ret_from_fork_asm+0x1a/0x30 [ 1026.359981][ T4972] [ 1026.363025][ T4972] ---[ end trace 0000000000000000 ]--- [ 1027.551687][T11609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=11609 comm=syz.3.29315 [ 1027.564474][T11609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11609 comm=syz.3.29315 [ 1027.577659][T11609] netlink: 'syz.3.29315': attribute type 27 has an invalid length. [ 1027.585725][T11609] netlink: 'syz.3.29315': attribute type 4 has an invalid length. [ 1027.593686][T11609] netlink: 144 bytes leftover after parsing attributes in process `syz.3.29315'. [ 1027.628373][T11612] bridge: RTM_NEWNEIGH with invalid ether address [ 1027.783935][T11628] bridge: RTM_NEWNEIGH with invalid ether address [ 1027.836436][T11630] netlink: 24 bytes leftover after parsing attributes in process `syz.7.29324'. [ 1028.021621][T11664] ªªªªªª: renamed from lo [ 1028.117074][T11676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29345'. [ 1028.242596][T11684] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1028.265183][T11670] _cac speed is unknown, defaulting to 1000 [ 1028.308548][T11684] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1028.368252][T11684] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1028.462610][T11684] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1028.546652][ T3884] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1028.580626][ T3884] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1028.594008][ T3884] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1028.602446][ T3884] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1028.742095][T11705] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1028.799656][T11670] lo speed is unknown, defaulting to 1000 [ 1028.843528][T11705] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1028.925624][T11705] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1028.996649][T11705] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1029.938413][ T4963] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1029.951299][ T4963] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1029.962253][ T4963] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1029.974255][ T4963] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1030.532536][T11767] syzkaller0: entered promiscuous mode [ 1030.538218][T11767] syzkaller0: entered allmulticast mode [ 1030.659183][T11777] _cac speed is unknown, defaulting to 1000 [ 1030.716349][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 1030.716364][ T29] audit: type=1326 audit(2000002280.072:43231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.7.29373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1030.765967][T11777] lo speed is unknown, defaulting to 1000 [ 1030.787257][ T29] audit: type=1326 audit(2000002280.112:43232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.7.29373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1030.811628][ T29] audit: type=1326 audit(2000002280.112:43233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.7.29373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1030.835736][ T29] audit: type=1326 audit(2000002280.112:43234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.7.29373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1030.859625][ T29] audit: type=1326 audit(2000002280.112:43235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.7.29373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1030.883871][ T29] audit: type=1326 audit(2000002280.112:43236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.7.29373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1030.907671][ T29] audit: type=1326 audit(2000002280.112:43237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.7.29373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1030.931439][ T29] audit: type=1326 audit(2000002280.112:43238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.7.29373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1030.955504][ T29] audit: type=1326 audit(2000002280.112:43239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.7.29373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1030.980609][ T29] audit: type=1326 audit(2000002280.112:43240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.7.29373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1031.216508][T11813] loop7: detected capacity change from 0 to 512 [ 1031.258468][T11813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.300850][T11813] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.487672][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.619651][T11853] loop7: detected capacity change from 0 to 512 [ 1031.656269][T11853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.690720][T11853] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.757600][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.058359][T11927] loop7: detected capacity change from 0 to 1024 [ 1032.076269][T11927] EXT4-fs: Ignoring removed orlov option [ 1032.120280][T11927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.477022][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.497695][T11959] loop7: detected capacity change from 0 to 128 [ 1032.660288][T11959] syz.7.29399: attempt to access beyond end of device [ 1032.660288][T11959] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1032.676255][T11959] syz.7.29399: attempt to access beyond end of device [ 1032.676255][T11959] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 1032.794948][T11986] _cac speed is unknown, defaulting to 1000 [ 1032.844326][T11986] lo speed is unknown, defaulting to 1000 [ 1033.411266][T12064] netlink: 5452 bytes leftover after parsing attributes in process `syz.8.29427'. [ 1034.212940][T12138] netlink: 36 bytes leftover after parsing attributes in process `syz.7.29442'. [ 1034.243449][T12138] netlink: 36 bytes leftover after parsing attributes in process `syz.7.29442'. [ 1034.416042][T14273] IPVS: starting estimator thread 0... [ 1034.422733][T12163] netlink: 14 bytes leftover after parsing attributes in process `syz.7.29445'. [ 1034.441002][T12163] hsr_slave_0: left promiscuous mode [ 1034.457083][T12163] hsr_slave_1: left promiscuous mode [ 1034.510970][T12164] IPVS: using max 2352 ests per chain, 117600 per kthread [ 1034.740413][T12192] _cac speed is unknown, defaulting to 1000 [ 1034.777563][T12192] lo speed is unknown, defaulting to 1000 [ 1035.126425][T12234] netlink: 48 bytes leftover after parsing attributes in process `syz.8.29457'. [ 1035.264589][T12234] _cac speed is unknown, defaulting to 1000 [ 1035.339076][T12244] _cac speed is unknown, defaulting to 1000 [ 1035.339301][T12234] lo speed is unknown, defaulting to 1000 [ 1035.431568][T12244] lo speed is unknown, defaulting to 1000 [ 1035.972230][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29479'. [ 1036.106833][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 1036.106849][ T29] audit: type=1326 audit(2000002285.464:43329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.29484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1036.137367][ T29] audit: type=1326 audit(2000002285.464:43330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.29484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1036.165340][ T29] audit: type=1326 audit(2000002285.464:43331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.29484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1036.189489][ T29] audit: type=1326 audit(2000002285.464:43332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.29484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1036.213415][ T29] audit: type=1326 audit(2000002285.464:43333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.29484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1036.237356][ T29] audit: type=1326 audit(2000002285.524:43334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.29484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1036.261532][ T29] audit: type=1326 audit(2000002285.524:43335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.29484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1036.285320][ T29] audit: type=1326 audit(2000002285.524:43336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.29484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1036.314425][T12311] loop7: detected capacity change from 0 to 128 [ 1036.332548][ T29] audit: type=1326 audit(2000002285.524:43337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.29484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1036.356945][ T29] audit: type=1326 audit(2000002285.674:43338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.29484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1036.385780][T12311] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1036.428818][T12311] ext4 filesystem being mounted at /514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.543442][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.8.29488'. [ 1036.570638][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.8.29488'. [ 1037.589148][T12446] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1037.626842][T12455] wg2: left allmulticast mode [ 1037.635684][T12455] wg2: entered promiscuous mode [ 1037.640696][T12455] wg2: entered allmulticast mode [ 1037.650804][T12446] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1037.721257][T12446] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1037.760998][T12446] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1037.859405][ T4972] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1037.873162][ T4963] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1037.881182][T12491] netlink: 'syz.8.29515': attribute type 39 has an invalid length. [ 1037.892831][ T4963] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1037.917461][ T4963] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1038.456285][T12538] netlink: 48 bytes leftover after parsing attributes in process `syz.4.29524'. [ 1038.480925][T12538] _cac speed is unknown, defaulting to 1000 [ 1038.519528][T12538] lo speed is unknown, defaulting to 1000 [ 1038.648599][T12545] _cac speed is unknown, defaulting to 1000 [ 1038.684861][T12545] lo speed is unknown, defaulting to 1000 [ 1038.757455][ T3946] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1038.824558][T12545] pimreg: entered allmulticast mode [ 1038.861289][T12545] pimreg: left allmulticast mode [ 1039.121718][T12577] wg2: entered promiscuous mode [ 1039.126635][T12577] wg2: entered allmulticast mode [ 1039.393838][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29540'. [ 1039.403518][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29540'. [ 1039.412845][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29540'. [ 1039.422440][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29540'. [ 1039.431590][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29540'. [ 1039.440873][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29540'. [ 1039.450069][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29540'. [ 1039.459431][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29540'. [ 1039.468725][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29540'. [ 1040.085274][T12615] loop7: detected capacity change from 0 to 128 [ 1040.159147][T12619] loop7: detected capacity change from 0 to 1024 [ 1040.166238][T12619] EXT4-fs: Ignoring removed orlov option [ 1040.182981][T12619] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.206539][T12619] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.226255][T12619] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.29555: Freeing blocks not in datazone - block = 0, count = 16 [ 1040.257244][T31155] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1040.272899][T31155] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1040.285279][T31155] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1040.285279][T31155] [ 1040.295162][T31155] EXT4-fs (loop7): Total free blocks count 0 [ 1040.301208][T31155] EXT4-fs (loop7): Free/Dirty block details [ 1040.307171][T31155] EXT4-fs (loop7): free_blocks=4293918736 [ 1040.313050][T31155] EXT4-fs (loop7): dirty_blocks=16 [ 1040.318454][T31155] EXT4-fs (loop7): Block reservation details [ 1040.324447][T31155] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 1040.332513][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1040.507846][T12636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1041.110493][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 1041.110512][ T29] audit: type=1326 audit(2000002290.477:43465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.7.29567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1041.154644][ T29] audit: type=1326 audit(2000002290.517:43466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.7.29567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1041.178640][ T29] audit: type=1326 audit(2000002290.517:43467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.7.29567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1041.202404][ T29] audit: type=1326 audit(2000002290.517:43468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.0.29566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1041.226284][ T29] audit: type=1326 audit(2000002290.517:43469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.7.29567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1041.250343][ T29] audit: type=1326 audit(2000002290.517:43470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.0.29566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1041.274164][ T29] audit: type=1326 audit(2000002290.517:43471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.7.29567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1041.298264][ T29] audit: type=1326 audit(2000002290.517:43473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.7.29567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1041.322182][ T29] audit: type=1326 audit(2000002290.517:43472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.0.29566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1041.346001][ T29] audit: type=1326 audit(2000002290.517:43474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.7.29567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1041.495393][T12672] netlink: 'syz.3.29572': attribute type 39 has an invalid length. [ 1041.643726][T12675] _cac speed is unknown, defaulting to 1000 [ 1041.696879][T12675] lo speed is unknown, defaulting to 1000 [ 1042.364125][T12699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12699 comm=syz.4.29584 [ 1042.634611][T12717] _cac speed is unknown, defaulting to 1000 [ 1042.771111][T12717] lo speed is unknown, defaulting to 1000 [ 1043.771041][T12747] bridge: RTM_NEWNEIGH with invalid ether address [ 1044.270736][T12766] __nla_validate_parse: 16 callbacks suppressed [ 1044.270758][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.29609'. [ 1044.425683][T12782] _cac speed is unknown, defaulting to 1000 [ 1044.568140][T12785] _cac speed is unknown, defaulting to 1000 [ 1044.574671][T12782] lo speed is unknown, defaulting to 1000 [ 1044.666525][T12785] lo speed is unknown, defaulting to 1000 [ 1044.674132][T12790] bridge: RTM_NEWNEIGH with invalid ether address [ 1044.834074][T12800] loop7: detected capacity change from 0 to 128 [ 1044.856472][T12800] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1044.871067][T12800] ext4 filesystem being mounted at /530/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.940013][T12806] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.967202][ T3946] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1044.995199][T12808] netlink: 14 bytes leftover after parsing attributes in process `syz.3.29632'. [ 1045.018580][T12806] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.062759][T12808] hsr_slave_0: left promiscuous mode [ 1045.070616][T12808] hsr_slave_1: left promiscuous mode [ 1045.092937][T12806] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.167603][T12806] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.232484][ T4963] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.249600][ T4963] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.262996][ T4963] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.271773][ T4963] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.462285][T12832] netlink: 'syz.0.29631': attribute type 39 has an invalid length. [ 1045.496880][T12834] _cac speed is unknown, defaulting to 1000 [ 1045.531218][T12834] lo speed is unknown, defaulting to 1000 [ 1045.978476][T12847] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1046.037372][T12847] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1046.037486][T12849] netlink: 14 bytes leftover after parsing attributes in process `syz.4.29648'. [ 1046.072964][T12849] hsr_slave_0: left promiscuous mode [ 1046.096967][T12849] hsr_slave_1: left promiscuous mode [ 1046.125808][T12847] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1046.186851][T12847] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1046.259730][ T4963] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1046.284860][ T4963] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1046.327677][ T4963] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1046.349331][ T4963] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1046.559795][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 1046.559898][ T29] audit: type=1326 audit(2000002295.929:43906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.4.29644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1046.590392][ T29] audit: type=1326 audit(2000002295.929:43907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.4.29644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1046.614191][ T29] audit: type=1326 audit(2000002295.929:43908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.4.29644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1046.737474][ T29] audit: type=1326 audit(2000002295.939:43909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.4.29644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1046.761500][ T29] audit: type=1326 audit(2000002295.939:43910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.4.29644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1046.785296][ T29] audit: type=1326 audit(2000002295.939:43911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.4.29644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1046.809206][ T29] audit: type=1326 audit(2000002295.979:43912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.4.29644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1046.833329][ T29] audit: type=1326 audit(2000002295.979:43913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.4.29644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1046.857477][ T29] audit: type=1326 audit(2000002296.009:43914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.4.29644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1046.881471][ T29] audit: type=1326 audit(2000002296.009:43915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.4.29644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185f85eec9 code=0x7ffc0000 [ 1046.921958][T12879] loop7: detected capacity change from 0 to 512 [ 1046.939275][T12879] EXT4-fs: Ignoring removed bh option [ 1046.950113][T12879] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1046.959274][T12879] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1046.978240][T12879] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1046.995263][T12879] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1047.015066][T12879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.033510][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29651'. [ 1047.042545][T12879] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.29647: bg 0: block 353: padding at end of block bitmap is not set [ 1047.058135][T12888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1047.087119][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.115197][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1047.128051][T12895] loop7: detected capacity change from 0 to 512 [ 1047.155806][ T4963] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1047.156350][T12902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29656'. [ 1047.174671][T12895] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.196191][T12895] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.267459][T12911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29660'. [ 1047.285275][T12911] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12911 comm=syz.3.29660 [ 1047.336139][T12916] _cac speed is unknown, defaulting to 1000 [ 1047.376982][T12916] lo speed is unknown, defaulting to 1000 [ 1047.404879][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1047.513229][T12916] pimreg: entered allmulticast mode [ 1047.639307][T12942] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.653910][T12916] pimreg: left allmulticast mode [ 1047.694586][T12942] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.782020][T12942] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.846604][T12942] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.951633][ T4963] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.963590][ T4963] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.972511][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.196976][T12989] tipc: Enabling of bearer rejected, failed to enable media [ 1048.214905][ T3884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1048.222883][ T3884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1048.250490][ T4963] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.259560][ T4963] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.374425][ T3395] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1049.191889][T13050] loop7: detected capacity change from 0 to 512 [ 1049.216579][T13050] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1049.289464][T13050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee01c, mo2=0002] [ 1049.384101][T13050] System zones: 1-12 [ 1049.390481][T13050] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1049.408215][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29691'. [ 1049.417492][T13057] netlink: 'syz.4.29691': attribute type 30 has an invalid length. [ 1049.426062][T13050] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.29690: invalid indirect mapped block 12 (level 1) [ 1049.443461][T13050] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.29690: invalid indirect mapped block 2 (level 2) [ 1049.475755][T13050] EXT4-fs (loop7): 1 truncate cleaned up [ 1049.483170][T13050] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 1049.524246][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1049.551803][ T4962] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.579137][T31155] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.593925][T31155] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.612428][T31155] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1050.541963][T13127] veth46: entered promiscuous mode [ 1050.547207][T13127] veth46: entered allmulticast mode [ 1050.632641][T13138] bond_slave_1: mtu less than device minimum [ 1051.285130][T13162] vlan0: entered promiscuous mode [ 1051.290236][T13162] hsr_slave_1: entered promiscuous mode [ 1051.295982][T13162] vlan0: entered allmulticast mode [ 1051.301162][T13162] hsr_slave_1: entered allmulticast mode [ 1051.450813][T13170] loop7: detected capacity change from 0 to 512 [ 1051.457831][T13170] EXT4-fs: Ignoring removed i_version option [ 1051.493119][T13170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.508112][T13170] ext4 filesystem being mounted at /548/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.555350][T13170] EXT4-fs error (device loop7): ext4_readdir:264: inode #12: block 32: comm syz.7.29711: path /548/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1051.576843][T13170] EXT4-fs (loop7): Remounting filesystem read-only [ 1051.664770][T13188] _cac speed is unknown, defaulting to 1000 [ 1051.699664][T13188] lo speed is unknown, defaulting to 1000 [ 1051.740909][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 1051.740943][ T29] audit: type=1326 audit(2000002301.102:44172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.0.29716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1051.802848][ T29] audit: type=1326 audit(2000002301.102:44173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.0.29716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1051.826991][ T29] audit: type=1326 audit(2000002301.102:44174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.0.29716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1051.851059][ T29] audit: type=1326 audit(2000002301.102:44175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.0.29716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1051.874808][ T29] audit: type=1326 audit(2000002301.102:44176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.0.29716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1051.898695][ T29] audit: type=1326 audit(2000002301.102:44177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.0.29716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1051.922600][ T29] audit: type=1326 audit(2000002301.102:44178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.0.29716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1051.946801][ T29] audit: type=1326 audit(2000002301.102:44179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.0.29716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1051.970589][ T29] audit: type=1326 audit(2000002301.102:44180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.0.29716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1051.994744][ T29] audit: type=1326 audit(2000002301.102:44181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.0.29716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1052.081316][T13201] veth34: entered promiscuous mode [ 1052.086519][T13201] veth34: entered allmulticast mode [ 1052.255190][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.292465][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1052.525146][T13229] xt_hashlimit: max too large, truncated to 1048576 [ 1052.557228][T13231] _cac speed is unknown, defaulting to 1000 [ 1052.595564][T13231] lo speed is unknown, defaulting to 1000 [ 1052.793991][T13246] netlink: 96 bytes leftover after parsing attributes in process `syz.4.29735'. [ 1052.936930][T14273] Process accounting resumed [ 1053.150886][ T4962] Bluetooth: hci0: Frame reassembly failed (-84) [ 1053.158327][T13269] Bluetooth: hci0: Frame reassembly failed (-90) [ 1053.811837][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1053.862887][T13274] _cac speed is unknown, defaulting to 1000 [ 1053.898858][T13280] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.925379][T13274] lo speed is unknown, defaulting to 1000 [ 1053.953565][T13280] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.004422][T13280] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.066870][T13280] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.161388][ T4972] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.183959][ T4973] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.199309][ T4962] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.216614][ T4962] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.333559][T13314] netlink: 36 bytes leftover after parsing attributes in process `syz.3.29766'. [ 1054.344388][T13314] netlink: 36 bytes leftover after parsing attributes in process `syz.3.29766'. [ 1055.171254][ T4928] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1055.212135][T13324] _cac speed is unknown, defaulting to 1000 [ 1055.275142][T13324] lo speed is unknown, defaulting to 1000 [ 1055.356488][T13340] _cac speed is unknown, defaulting to 1000 [ 1055.406991][T13340] lo speed is unknown, defaulting to 1000 [ 1055.416567][T13351] loop7: detected capacity change from 0 to 128 [ 1055.485127][T13351] syz.7.29778: attempt to access beyond end of device [ 1055.485127][T13351] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1055.544873][T13351] syz.7.29778: attempt to access beyond end of device [ 1055.544873][T13351] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1055.587078][T13361] syz.7.29778: attempt to access beyond end of device [ 1055.587078][T13361] loop7: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 1055.590919][T13351] syz.7.29778: attempt to access beyond end of device [ 1055.590919][T13351] loop7: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 1055.616542][T13351] syz.7.29778: attempt to access beyond end of device [ 1055.616542][T13351] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1055.632671][T13351] syz.7.29778: attempt to access beyond end of device [ 1055.632671][T13351] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1055.646761][T13361] syz.7.29778: attempt to access beyond end of device [ 1055.646761][T13361] loop7: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 1055.664939][T13361] syz.7.29778: attempt to access beyond end of device [ 1055.664939][T13361] loop7: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 1055.698287][T13351] syz.7.29778: attempt to access beyond end of device [ 1055.698287][T13351] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1055.726475][T13361] syz.7.29778: attempt to access beyond end of device [ 1055.726475][T13361] loop7: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 1055.778201][T13371] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 1055.884325][T13374] _cac speed is unknown, defaulting to 1000 [ 1055.929748][T13374] lo speed is unknown, defaulting to 1000 [ 1055.930989][T13378] _cac speed is unknown, defaulting to 1000 [ 1056.015445][T13378] lo speed is unknown, defaulting to 1000 [ 1056.113832][T13370] netlink: 44 bytes leftover after parsing attributes in process `syz.0.29788'. [ 1056.130387][T13370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29788'. [ 1056.161982][T13386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29794'. [ 1056.289458][T13403] netlink: 96 bytes leftover after parsing attributes in process `syz.8.29799'. [ 1056.447841][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29802'. [ 1056.524878][T13415] pim6reg1: entered promiscuous mode [ 1056.530328][T13415] pim6reg1: entered allmulticast mode [ 1056.646390][T13420] loop7: detected capacity change from 0 to 2048 [ 1056.715269][T13420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1056.738459][T13425] _cac speed is unknown, defaulting to 1000 [ 1056.753163][ T29] kauditd_printk_skb: 647 callbacks suppressed [ 1056.753261][ T29] audit: type=1400 audit(2000002306.124:44829): avc: denied { mounton } for pid=13419 comm="syz.7.29805" path="/556/file0/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1056.811577][T13425] lo speed is unknown, defaulting to 1000 [ 1056.811753][ T3946] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1056.841625][ T29] audit: type=1400 audit(2000002306.214:44830): avc: denied { unmount } for pid=3946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1056.862629][ T29] audit: type=1400 audit(2000002306.234:44831): avc: denied { unlink } for pid=3946 comm="syz-executor" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1056.886383][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.952699][ T29] audit: type=1326 audit(2000002306.314:44832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.8.29809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1056.976468][ T29] audit: type=1326 audit(2000002306.314:44833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.8.29809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1057.000366][ T29] audit: type=1326 audit(2000002306.314:44834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.8.29809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1057.024299][ T29] audit: type=1326 audit(2000002306.314:44835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.8.29809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1057.048795][ T29] audit: type=1326 audit(2000002306.324:44836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.8.29809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1057.057127][T13437] loop7: detected capacity change from 0 to 128 [ 1057.072697][ T29] audit: type=1326 audit(2000002306.324:44837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.8.29809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1057.103385][ T29] audit: type=1326 audit(2000002306.324:44838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.8.29809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1057.475272][T13461] xt_hashlimit: max too large, truncated to 1048576 [ 1057.581990][T13475] : renamed from bond0 [ 1057.622749][T13479] netlink: 24 bytes leftover after parsing attributes in process `syz.7.29830'. [ 1057.890906][T13496] _cac speed is unknown, defaulting to 1000 [ 1057.930159][T13497] bridge0: port 1(gretap0) entered blocking state [ 1057.936774][T13497] bridge0: port 1(gretap0) entered disabled state [ 1057.944196][T13497] gretap0: entered promiscuous mode [ 1057.951037][T13496] lo speed is unknown, defaulting to 1000 [ 1057.951581][T13497] gretap0: left promiscuous mode [ 1057.962511][T13497] bridge0: port 1(gretap0) entered disabled state [ 1058.069787][T13500] geneve2: entered promiscuous mode [ 1058.075068][T13500] geneve2: entered allmulticast mode [ 1058.117720][T13502] netlink: 'syz.8.29839': attribute type 7 has an invalid length. [ 1058.125898][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.29839'. [ 1058.208104][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29841'. [ 1058.226298][T13512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1058.292314][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29846'. [ 1058.310584][T13518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.326001][T13518] vlan1: entered allmulticast mode [ 1058.331271][T13518] bond0: entered allmulticast mode [ 1058.465545][T13534] netlink: 'syz.4.29852': attribute type 10 has an invalid length. [ 1058.568750][T13544] netlink: 'syz.3.29856': attribute type 1 has an invalid length. [ 1058.585924][T13544] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1058.600561][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29856'. [ 1058.621126][T13544] bond14 (unregistering): Released all slaves [ 1058.858113][T13563] loop7: detected capacity change from 0 to 4096 [ 1058.867513][T13563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1058.888563][T13563] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.170153][T13573] netlink: 'syz.4.29866': attribute type 27 has an invalid length. [ 1059.229977][T13573] bond5: left promiscuous mode [ 1059.234855][T13573] bridge8: left promiscuous mode [ 1059.240340][T13573] bond5: left allmulticast mode [ 1059.245304][T13573] bridge8: left allmulticast mode [ 1059.250977][T13573] bond6: left allmulticast mode [ 1059.256154][T13573] bond8: left promiscuous mode [ 1059.261126][T13573] bond8: left allmulticast mode [ 1059.286815][T13573] team1: left promiscuous mode [ 1059.291826][T13573] team1: left allmulticast mode [ 1059.330959][T13573] veth16: left promiscuous mode [ 1059.333345][T13580] xt_hashlimit: max too large, truncated to 1048576 [ 1059.335902][T13573] veth16: left allmulticast mode [ 1059.365664][T13573] geneve0: left promiscuous mode [ 1059.371015][T13573] geneve0: left allmulticast mode [ 1059.389612][ T4973] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.398162][ T4973] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1059.431683][ T4973] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.440214][ T4973] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1059.464228][ T4973] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.472704][ T4973] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1059.500016][ T4973] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.508483][ T4973] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1059.710648][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.948464][T13588] cgroup: fork rejected by pids controller in /syz0 [ 1060.385778][T13900] _cac speed is unknown, defaulting to 1000 [ 1060.427276][T13900] lo speed is unknown, defaulting to 1000 [ 1060.533251][T13944] netlink: 'syz.3.29892': attribute type 7 has an invalid length. [ 1060.603291][T13952] loop7: detected capacity change from 0 to 512 [ 1060.614656][T13952] EXT4-fs: Ignoring removed nobh option [ 1060.659637][T13952] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #3: comm syz.7.29894: corrupted inode contents [ 1060.691882][T13952] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #3: comm syz.7.29894: mark_inode_dirty error [ 1060.722144][T13952] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #3: comm syz.7.29894: corrupted inode contents [ 1060.764415][T13952] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.29894: mark_inode_dirty error [ 1060.776924][T13952] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.29894: Failed to acquire dquot type 0 [ 1060.795291][T13952] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #16: comm syz.7.29894: corrupted inode contents [ 1060.808003][T13952] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #16: comm syz.7.29894: mark_inode_dirty error [ 1060.821028][T13952] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #16: comm syz.7.29894: corrupted inode contents [ 1060.833516][T13952] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.29894: mark_inode_dirty error [ 1060.846226][T13952] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #16: comm syz.7.29894: corrupted inode contents [ 1060.858378][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1060.867829][T13952] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1060.876914][T13952] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #16: comm syz.7.29894: corrupted inode contents [ 1060.889435][T13952] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.29894: mark_inode_dirty error [ 1060.900892][T13952] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1060.910330][T13952] EXT4-fs (loop7): 1 truncate cleaned up [ 1060.916678][T13952] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.929682][T13952] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.954916][T13952] xt_hashlimit: max too large, truncated to 1048576 [ 1060.963290][T13972] 9pnet: Could not find request transport: fdÿÿÿÿ [ 1060.991112][T13968] _cac speed is unknown, defaulting to 1000 [ 1060.992520][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.008071][T13978] bridge0: port 1(gretap0) entered blocking state [ 1061.014799][T13978] bridge0: port 1(gretap0) entered disabled state [ 1061.024504][T13978] gretap0: entered allmulticast mode [ 1061.039397][T13978] gretap0: entered promiscuous mode [ 1061.073647][T13968] lo speed is unknown, defaulting to 1000 [ 1061.075686][T13983] gretap0: left allmulticast mode [ 1061.084599][T13983] gretap0: left promiscuous mode [ 1061.089813][T13983] bridge0: port 1(gretap0) entered disabled state [ 1061.221126][T14000] netlink: 'syz.8.29912': attribute type 1 has an invalid length. [ 1061.236724][T14000] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1061.255644][T14000] __nla_validate_parse: 14 callbacks suppressed [ 1061.255706][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.8.29912'. [ 1061.274669][T14000] bond19 (unregistering): Released all slaves [ 1061.293786][T14006] loop7: detected capacity change from 0 to 512 [ 1061.304047][T14006] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1061.336997][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.503615][T14013] pim6reg: entered allmulticast mode [ 1061.509790][T14013] pim6reg: left allmulticast mode [ 1061.520971][T14012] geneve3: entered promiscuous mode [ 1061.523445][T14015] xt_hashlimit: max too large, truncated to 1048576 [ 1061.526244][T14012] geneve3: entered allmulticast mode [ 1061.605897][T14022] _cac speed is unknown, defaulting to 1000 [ 1061.667786][T14022] lo speed is unknown, defaulting to 1000 [ 1061.700146][T14026] _cac speed is unknown, defaulting to 1000 [ 1061.717121][T14028] bridge0: port 2(gretap0) entered blocking state [ 1061.723788][T14028] bridge0: port 2(gretap0) entered disabled state [ 1061.754703][T14028] gretap0: entered allmulticast mode [ 1061.765436][T14028] gretap0: entered promiscuous mode [ 1061.788433][T14034] gretap0: left allmulticast mode [ 1061.793530][T14034] gretap0: left promiscuous mode [ 1061.799000][T14034] bridge0: port 2(gretap0) entered disabled state [ 1061.812039][T14026] lo speed is unknown, defaulting to 1000 [ 1061.998918][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 1061.998937][ T29] audit: type=1326 audit(2000002311.377:45226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.0.29931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1062.036377][T14051] xt_hashlimit: max too large, truncated to 1048576 [ 1062.088136][ T29] audit: type=1326 audit(2000002311.407:45227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.0.29931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1062.112565][ T29] audit: type=1326 audit(2000002311.407:45228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.0.29931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1062.136578][ T29] audit: type=1326 audit(2000002311.407:45229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.0.29931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1062.160445][ T29] audit: type=1326 audit(2000002311.407:45230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.0.29931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1062.184299][ T29] audit: type=1326 audit(2000002311.407:45231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.0.29931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1062.208455][ T29] audit: type=1326 audit(2000002311.407:45232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.0.29931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1062.232409][ T29] audit: type=1326 audit(2000002311.407:45233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.0.29931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1062.256634][ T29] audit: type=1326 audit(2000002311.407:45234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.0.29931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1062.280582][ T29] audit: type=1326 audit(2000002311.407:45235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.0.29931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d4c9eec9 code=0x7ffc0000 [ 1062.827660][ T3884] batman_adv: batadv2: IGMP Querier appeared [ 1062.833741][ T3884] batman_adv: batadv2: MLD Querier appeared [ 1062.958034][T14070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29937'. [ 1062.993468][T14070] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1063.028859][T14070] vlan2: entered allmulticast mode [ 1063.034173][T14070] bond12: entered allmulticast mode [ 1063.139704][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29942'. [ 1063.148961][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29942'. [ 1063.167234][T14084] veth36: entered promiscuous mode [ 1063.170536][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29942'. [ 1063.172586][T14084] veth36: entered allmulticast mode [ 1063.220621][T14087] 9pnet: Could not find request transport: fdÿÿÿÿ [ 1063.230405][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29942'. [ 1063.239600][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29942'. [ 1063.287364][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29942'. [ 1063.337481][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29942'. [ 1063.346542][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29942'. [ 1063.590754][T14113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.609226][T14113] vlan0: entered allmulticast mode [ 1063.614411][T14113] bond0: entered allmulticast mode [ 1063.695610][T14123] netlink: 'syz.7.29957': attribute type 1 has an invalid length. [ 1063.711271][T14123] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1063.725547][T14123] bond6 (unregistering): Released all slaves [ 1063.813857][T14129] loop7: detected capacity change from 0 to 1024 [ 1063.821668][T14129] EXT4-fs: Ignoring removed bh option [ 1063.839310][T14129] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1063.871795][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.918913][T14134] loop7: detected capacity change from 0 to 8192 [ 1064.073670][T14136] netlink: 'syz.7.29961': attribute type 27 has an invalid length. [ 1064.090143][T14136] team1: left promiscuous mode [ 1064.095173][T14136] team1: left allmulticast mode [ 1064.102963][T14136] bond3: left allmulticast mode [ 1064.249459][T14147] geneve3: entered promiscuous mode [ 1064.254731][T14147] geneve3: entered allmulticast mode [ 1064.411685][T14153] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1064.431431][T14153] vlan1: entered allmulticast mode [ 1064.436655][T14153] bond15: entered allmulticast mode [ 1064.466384][T14155] _cac speed is unknown, defaulting to 1000 [ 1064.506487][T14155] lo speed is unknown, defaulting to 1000 [ 1064.659337][T14177] _cac speed is unknown, defaulting to 1000 [ 1064.703867][T14177] lo speed is unknown, defaulting to 1000 [ 1064.902790][T14195] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1064.927916][T14195] vlan0: entered allmulticast mode [ 1064.933118][T14195] bond19: entered allmulticast mode [ 1065.438279][T14216] netlink: 'syz.0.29993': attribute type 27 has an invalid length. [ 1065.446312][T14216] _cac: left allmulticast mode [ 1065.451174][T14216] tunl0: left allmulticast mode [ 1065.456356][T14216] gre0: left allmulticast mode [ 1065.461463][T14216] erspan0: left allmulticast mode [ 1065.466641][T14216] ip_vti0: left allmulticast mode [ 1065.471752][T14216] v: left allmulticast mode [ 1065.476551][T14216] sit0: left allmulticast mode [ 1065.481669][T14216] ip6tnl0: left allmulticast mode [ 1065.487082][T14216] ip6gre0: left allmulticast mode [ 1065.492908][T14216] nlmon0: left allmulticast mode [ 1065.497995][T14216] 0ªX¹¦À: left allmulticast mode [ 1065.503101][T14216] veth0: left allmulticast mode [ 1065.508164][T14216] veth1: left allmulticast mode [ 1065.513155][T14216] wg1: left allmulticast mode [ 1065.518479][T14216] wg2: left promiscuous mode [ 1065.523100][T14216] wg2: left allmulticast mode [ 1065.537166][T14216] veth0_to_bridge: left allmulticast mode [ 1065.543147][T14216] veth1_to_bridge: left allmulticast mode [ 1065.549036][T14216] bridge_slave_1: left allmulticast mode [ 1065.554756][T14216] veth0_to_bond: left allmulticast mode [ 1065.560677][T14216] bond_slave_0: left allmulticast mode [ 1065.566267][T14216] veth1_to_bond: left allmulticast mode [ 1065.571986][T14216] bond_slave_1: left allmulticast mode [ 1065.577668][T14216] veth1_to_team: left allmulticast mode [ 1065.583344][T14216] team_slave_1: left allmulticast mode [ 1065.588995][T14216] veth0_to_batadv: left allmulticast mode [ 1065.594901][T14216] batadv_slave_0: left allmulticast mode [ 1065.600623][T14216] xfrm0: left allmulticast mode [ 1065.605571][T14216] veth0_to_hsr: left allmulticast mode [ 1065.611181][T14216] hsr0: left allmulticast mode [ 1065.616036][T14216] hsr_slave_0: left allmulticast mode [ 1065.621697][T14216] veth1_virt_wifi: left allmulticast mode [ 1065.627598][T14216] veth0_virt_wifi: left allmulticast mode [ 1065.633463][T14216] geneve0: left allmulticast mode [ 1065.638606][T14216] geneve1: left allmulticast mode [ 1065.643793][T14216] bridge1: left allmulticast mode [ 1065.649062][T14216] bond1: left allmulticast mode [ 1065.654090][T14216] @: left allmulticast mode [ 1065.658769][T14216] ip6tnl1: left allmulticast mode [ 1065.663889][T14216] ipip0: left allmulticast mode [ 1065.668940][T14216] ip6tnl2: left allmulticast mode [ 1065.674138][T14216] vxlan0: left allmulticast mode [ 1065.679261][T14216] sit1: left allmulticast mode [ 1065.684195][T14216] bridge2: left allmulticast mode [ 1065.689351][T14216] bond2: left allmulticast mode [ 1065.694442][T14216] ÿÿÿÿÿÿ: left allmulticast mode [ 1065.699420][T14216] gretap0: left allmulticast mode [ 1065.704761][T14216] gre1: left allmulticast mode [ 1065.709636][T14216] batadv1: left allmulticast mode [ 1065.714825][T14216] ipip1: left allmulticast mode [ 1065.719782][T14216] ip6_vti1: left allmulticast mode [ 1065.725119][T14216] gretap1: left allmulticast mode [ 1065.730336][T14216] batadv2: left allmulticast mode [ 1065.735436][T14216] ipip2: left allmulticast mode [ 1065.740456][T14216] bond3: left allmulticast mode [ 1065.745509][T14216] gretap2: left allmulticast mode [ 1065.750656][T14216] veth2: left allmulticast mode [ 1065.755668][T14216] veth3: left allmulticast mode [ 1065.760620][T14216] gre2: left allmulticast mode [ 1065.765469][T14216] ip6gre1: left allmulticast mode [ 1065.770678][T14216] sit2: left allmulticast mode [ 1065.775517][T14216] ip6_vti2: left allmulticast mode [ 1065.780756][T14216] bridge3: left allmulticast mode [ 1065.786023][T14216] veth4: left allmulticast mode [ 1065.791004][T14216] veth5: left allmulticast mode [ 1065.796107][T14216] bridge4: left allmulticast mode [ 1065.801235][T14216] veth6: left allmulticast mode [ 1065.806395][T14216] veth7: left allmulticast mode [ 1065.811329][T14216] bond0: left allmulticast mode [ 1065.816310][T14216] veth8: left allmulticast mode [ 1065.821376][T14216] veth9: left allmulticast mode [ 1065.826479][T14216] veth10: left allmulticast mode [ 1065.831942][T14216] veth11: left allmulticast mode [ 1065.837075][T14216] ip6tnl3: left allmulticast mode [ 1065.842175][T14216] veth12: left allmulticast mode [ 1065.847261][T14216] veth13: left allmulticast mode [ 1065.852441][T14216] bridge5: left allmulticast mode [ 1065.857603][T14216] veth14: left allmulticast mode [ 1065.862699][T14216] veth15: left allmulticast mode [ 1065.867791][T14216] bond4: left allmulticast mode [ 1065.872730][T14216] bridge6: left allmulticast mode [ 1065.877968][T14216] veth16: left allmulticast mode [ 1065.883156][T14216] veth17: left allmulticast mode [ 1065.888258][T14216] bridge7: left allmulticast mode [ 1065.893388][T14216] bridge8: left allmulticast mode [ 1065.898600][T14216] veth18: left allmulticast mode [ 1065.903708][T14216] veth19: left allmulticast mode [ 1065.908797][T14216] veth20: left allmulticast mode [ 1065.913959][T14216] veth21: left allmulticast mode [ 1065.919024][T14216] bridge9: left allmulticast mode [ 1065.924184][T14216] bridge10: left allmulticast mode [ 1065.929560][T14216] bridge11: left allmulticast mode [ 1065.934837][T14216] : left allmulticast mode [ 1065.939637][T14216] veth22: left allmulticast mode [ 1065.944691][T14216] veth23: left allmulticast mode [ 1065.949750][T14216] veth24: left allmulticast mode [ 1065.954902][T14216] veth25: left allmulticast mode [ 1065.959995][T14216] gre3: left allmulticast mode [ 1065.964824][T14216] bridge12: left allmulticast mode [ 1065.970225][T14216] gre4: left allmulticast mode [ 1065.975131][T14216] gre5: left allmulticast mode [ 1065.980002][T14216] veth26: left allmulticast mode [ 1065.985130][T14216] veth27: left allmulticast mode [ 1065.987052][T14223] cgroup: fork rejected by pids controller in /syz4 [ 1065.990324][T14216] bond5: left allmulticast mode [ 1065.990345][T14223] [ 1066.004253][T14216] bridge13: left allmulticast mode [ 1066.009700][T14216] bond6: left allmulticast mode [ 1066.014709][T14216] bond7: left allmulticast mode [ 1066.019774][T14216] bridge14: left allmulticast mode [ 1066.025216][T14216] bridge15: left allmulticast mode [ 1066.030652][T14216] bridge16: left allmulticast mode [ 1066.036062][T14216] veth28: left allmulticast mode [ 1066.041167][T14216] veth29: left allmulticast mode [ 1066.046245][T14216] team1: left allmulticast mode [ 1066.051187][T14216] bridge17: left allmulticast mode [ 1066.056539][T14216] bridge18: left allmulticast mode [ 1066.061865][T14216] veth30: left allmulticast mode [ 1066.067038][T14216] veth31: left allmulticast mode [ 1066.072188][T14216] bond8: left allmulticast mode [ 1066.077281][T14216] veth32: left allmulticast mode [ 1066.082377][T14216] veth33: left allmulticast mode [ 1066.087593][T14216] gre6: left allmulticast mode [ 1066.092491][T14216] bridge19: left allmulticast mode [ 1066.097932][T14216] bond10: left allmulticast mode [ 1066.103164][T14216] ip6erspan0: left allmulticast mode [ 1066.108826][T14216] bridge20: left allmulticast mode [ 1066.114186][T14216] bond11: left allmulticast mode [ 1066.120072][T14216] geneve2: left allmulticast mode [ 1066.125299][T14216] veth34: left allmulticast mode [ 1066.130450][T14216] veth35: left allmulticast mode [ 1066.135463][T14216] veth36: left allmulticast mode [ 1066.140508][T14216] veth37: left allmulticast mode [ 1066.145665][T14216] bridge21: left allmulticast mode [ 1066.151033][T14216] bond12: left allmulticast mode [ 1066.156137][T14216] bond14: left allmulticast mode [ 1066.161436][T14216] veth38: left allmulticast mode [ 1066.166581][T14216] veth39: left allmulticast mode [ 1066.171609][T14216] bond13: left allmulticast mode [ 1066.176697][T14216] veth40: left allmulticast mode [ 1066.181772][T14216] veth41: left allmulticast mode [ 1066.186825][T14216] veth42: left allmulticast mode [ 1066.191903][T14216] veth43: left allmulticast mode [ 1066.197063][T14216] vxlan1: left allmulticast mode [ 1066.202120][T14216] veth44: left allmulticast mode [ 1066.207197][T14216] veth45: left allmulticast mode [ 1066.259584][T14216] veth46: left promiscuous mode [ 1066.264588][T14216] veth46: left allmulticast mode [ 1066.307339][T14325] _cac speed is unknown, defaulting to 1000 [ 1066.406088][T14221] _cac speed is unknown, defaulting to 1000 [ 1066.406447][T14325] lo speed is unknown, defaulting to 1000 [ 1066.492890][T14221] lo speed is unknown, defaulting to 1000 [ 1066.879417][T14601] _cac speed is unknown, defaulting to 1000 [ 1066.956621][T14601] lo speed is unknown, defaulting to 1000 [ 1067.119289][T14610] __nla_validate_parse: 9 callbacks suppressed [ 1067.119309][T14610] netlink: 24 bytes leftover after parsing attributes in process `syz.8.30021'. [ 1067.180704][T14618] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1067.321491][ T29] kauditd_printk_skb: 1388 callbacks suppressed [ 1067.321507][ T29] audit: type=1326 audit(2000002316.699:46624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.8.30025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1067.372446][ T29] audit: type=1326 audit(2000002316.729:46625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.8.30025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1067.396437][ T29] audit: type=1326 audit(2000002316.729:46626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.8.30025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1067.420443][ T29] audit: type=1326 audit(2000002316.729:46627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.8.30025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1067.444643][ T29] audit: type=1326 audit(2000002316.729:46628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.8.30025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1067.468785][ T29] audit: type=1326 audit(2000002316.729:46629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.8.30025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1067.492744][ T29] audit: type=1326 audit(2000002316.729:46630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.8.30025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1067.516720][ T29] audit: type=1326 audit(2000002316.729:46631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.8.30025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1067.540728][ T29] audit: type=1326 audit(2000002316.729:46632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.8.30025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1067.564805][ T29] audit: type=1326 audit(2000002316.729:46633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.8.30025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1067.682885][T14636] loop7: detected capacity change from 0 to 512 [ 1067.703053][T14639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30029'. [ 1067.712299][T14639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30029'. [ 1067.815921][T14636] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1067.971459][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.035095][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30034'. [ 1068.065832][T14653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30034'. [ 1068.107945][T14656] loop7: detected capacity change from 0 to 736 [ 1068.201125][T14660] veth0: entered promiscuous mode [ 1068.206290][T14660] veth0: entered allmulticast mode [ 1068.392193][T14668] _cac speed is unknown, defaulting to 1000 [ 1068.445102][T14668] lo speed is unknown, defaulting to 1000 [ 1068.517954][T14682] team0 (unregistering): Port device vlan1 removed [ 1068.554161][T14682] team0 (unregistering): Port device geneve1 removed [ 1069.029728][T14797] loop7: detected capacity change from 0 to 4096 [ 1069.037315][T14797] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1069.046573][T14797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1069.356661][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.727781][T14815] loop7: detected capacity change from 0 to 8192 [ 1069.785776][T14815] bio_check_eod: 29 callbacks suppressed [ 1069.785794][T14815] syz.7.30071: attempt to access beyond end of device [ 1069.785794][T14815] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1069.834453][T14815] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 1069.842338][T14815] FAT-fs (loop7): Filesystem has been set read-only [ 1069.934901][T14818] _cac speed is unknown, defaulting to 1000 [ 1070.666703][T14818] lo speed is unknown, defaulting to 1000 [ 1072.287332][T12324] lo speed is unknown, defaulting to 1000 [ 1072.293158][T12324] syz2: Port: 1 Link DOWN [ 1072.425690][ T29] kauditd_printk_skb: 783 callbacks suppressed [ 1072.425725][ T29] audit: type=1400 audit(2000002321.801:47417): avc: denied { write } for pid=14912 comm="syz.7.30099" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1072.491921][T14917] netlink: 20 bytes leftover after parsing attributes in process `syz.8.30101'. [ 1072.512753][T14921] bridge: RTM_NEWNEIGH with invalid ether address [ 1072.548664][T14924] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 1072.575960][T14928] _cac speed is unknown, defaulting to 1000 [ 1072.640069][ T29] audit: type=1326 audit(2000002322.011:47418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14941 comm="syz.8.30111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1072.663968][ T29] audit: type=1326 audit(2000002322.011:47419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14941 comm="syz.8.30111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1072.665434][T14928] lo speed is unknown, defaulting to 1000 [ 1072.700151][ T29] audit: type=1326 audit(2000002322.071:47420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14941 comm="syz.8.30111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1072.724050][ T29] audit: type=1326 audit(2000002322.071:47421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14941 comm="syz.8.30111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1072.747754][ T29] audit: type=1326 audit(2000002322.071:47422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14941 comm="syz.8.30111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1072.771615][ T29] audit: type=1326 audit(2000002322.071:47423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14941 comm="syz.8.30111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1072.795555][ T29] audit: type=1326 audit(2000002322.071:47424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14941 comm="syz.8.30111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc22ceaef03 code=0x7ffc0000 [ 1072.819429][ T29] audit: type=1326 audit(2000002322.071:47425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14941 comm="syz.8.30111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc22cead97f code=0x7ffc0000 [ 1072.843174][ T29] audit: type=1326 audit(2000002322.071:47426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14941 comm="syz.8.30111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc22ceaef57 code=0x7ffc0000 [ 1073.021278][T14959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.30118'. [ 1073.037621][T14959] netdevsi: renamed from sit0 [ 1073.054728][T14959] netdevsi: entered promiscuous mode [ 1074.299781][T15047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.30147'. [ 1074.485806][T15051] blktrace: Concurrent blktraces are not allowed on loop9 [ 1074.790512][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30163'. [ 1074.806398][T15081] team0: entered promiscuous mode [ 1074.811542][T15081] team0: entered allmulticast mode [ 1075.964356][T15135] loop7: detected capacity change from 0 to 764 [ 1075.981789][T15135] ISOFS: Logical zone size(255) < hardware blocksize(2048) [ 1076.011939][T15135] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1076.160410][T15143] rdma_rxe: rxe_newlink: failed to add bond0 [ 1076.271181][T15149] loop7: detected capacity change from 0 to 512 [ 1076.283170][T15149] EXT4-fs: Mount option(s) incompatible with ext3 [ 1076.354208][T15157] ip6gre1: entered allmulticast mode [ 1076.400751][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.8.30193'. [ 1076.415029][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.8.30193'. [ 1077.036588][T15169] netlink: 'syz.3.30196': attribute type 10 has an invalid length. [ 1077.046532][T15169] netlink: 'syz.3.30196': attribute type 10 has an invalid length. [ 1077.139873][T15177] loop7: detected capacity change from 0 to 1024 [ 1077.211104][T15177] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1077.278737][T15177] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.30199: Allocating blocks 449-513 which overlap fs metadata [ 1077.353361][T15176] EXT4-fs (loop7): pa ffff8881072bcf50: logic 48, phys. 177, len 21 [ 1077.361556][T15176] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 1077.428718][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.628327][T15206] netlink: 4 bytes leftover after parsing attributes in process `syz.7.30208'. [ 1077.652800][T15206] team0: Port device team_slave_1 removed [ 1077.826917][ T29] kauditd_printk_skb: 1193 callbacks suppressed [ 1077.826935][ T29] audit: type=1400 audit(2000002327.204:48620): avc: denied { write } for pid=15211 comm="syz.7.30211" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1078.407809][T15236] netlink: 184 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 1078.437481][T15236] xt_socket: unknown flags 0xd0 [ 1078.685683][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30223'. [ 1078.740368][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30223'. [ 1078.760275][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1079.165048][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30231'. [ 1079.332933][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30230'. [ 1079.493144][T15283] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1079.579965][T15283] netlink: 'syz.0.30236': attribute type 10 has an invalid length. [ 1079.588070][T15283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.30236'. [ 1079.690776][T15290] netlink: 12 bytes leftover after parsing attributes in process `syz.8.30240'. [ 1080.137417][T15291] _cac speed is unknown, defaulting to 1000 [ 1080.561537][ T29] audit: type=1326 audit(2000002329.945:48621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15310 comm="syz.8.30247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x50000 [ 1080.585167][ T29] audit: type=1326 audit(2000002329.945:48622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15310 comm="syz.8.30247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x50000 [ 1080.608697][ T29] audit: type=1326 audit(2000002329.945:48623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15310 comm="syz.8.30247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x50000 [ 1080.632283][ T29] audit: type=1326 audit(2000002329.945:48624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15310 comm="syz.8.30247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x50000 [ 1080.655755][ T29] audit: type=1326 audit(2000002329.945:48625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15310 comm="syz.8.30247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x50000 [ 1080.679302][ T29] audit: type=1326 audit(2000002329.945:48626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15310 comm="syz.8.30247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x50000 [ 1080.702736][ T29] audit: type=1326 audit(2000002329.945:48627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15310 comm="syz.8.30247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x50000 [ 1080.726369][ T29] audit: type=1326 audit(2000002329.945:48628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15310 comm="syz.8.30247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x50000 [ 1080.749845][ T29] audit: type=1326 audit(2000002329.945:48629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15310 comm="syz.8.30247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22ceaeec9 code=0x50000 [ 1081.275536][T15291] lo speed is unknown, defaulting to 1000 [ 1081.283899][T15307] _cac speed is unknown, defaulting to 1000 [ 1081.410818][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30250'. [ 1081.523814][T15307] lo speed is unknown, defaulting to 1000 [ 1081.530247][T15320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30250'. [ 1082.518393][T15365] bridge_slave_0: left allmulticast mode [ 1082.524473][T15365] bridge_slave_0: left promiscuous mode [ 1082.531837][T15365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.829448][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 1082.829465][ T29] audit: type=1326 audit(2000002332.216:48836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.8.30263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc22cea5d67 code=0x7ffc0000 [ 1082.868484][ T29] audit: type=1326 audit(2000002332.216:48837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.8.30263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc22ce4af79 code=0x7ffc0000 [ 1082.892277][ T29] audit: type=1326 audit(2000002332.216:48838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.8.30263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1082.916314][ T29] audit: type=1326 audit(2000002332.216:48839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.8.30263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc22cea5d67 code=0x7ffc0000 [ 1082.939997][ T29] audit: type=1326 audit(2000002332.216:48840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.8.30263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc22ce4af79 code=0x7ffc0000 [ 1082.963763][ T29] audit: type=1326 audit(2000002332.216:48841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.8.30263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1082.987743][ T29] audit: type=1326 audit(2000002332.216:48842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.8.30263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc22cea5d67 code=0x7ffc0000 [ 1083.011515][ T29] audit: type=1326 audit(2000002332.216:48843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.8.30263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc22ce4af79 code=0x7ffc0000 [ 1083.035126][ T29] audit: type=1326 audit(2000002332.216:48844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.8.30263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fc22ceaeec9 code=0x7ffc0000 [ 1083.059107][ T29] audit: type=1326 audit(2000002332.246:48845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.8.30263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc22cea5d67 code=0x7ffc0000 [ 1083.174980][T15387] __nla_validate_parse: 2 callbacks suppressed [ 1083.174999][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.30279'. [ 1083.254177][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30280'. [ 1083.273288][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30280'. [ 1083.441349][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30290'. [ 1083.660537][T15432] loop7: detected capacity change from 0 to 1024 [ 1083.664316][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30297'. [ 1083.667498][T15432] EXT4-fs: Ignoring removed orlov option [ 1083.684965][T15432] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.704420][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30297'. [ 1083.901447][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30299'. [ 1083.993779][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30302'. [ 1084.008810][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.049931][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.7.30304'. [ 1084.152231][T15472] netlink: 24 bytes leftover after parsing attributes in process `syz.7.30309'. [ 1084.701175][T15520] loop7: detected capacity change from 0 to 128 [ 1084.719312][T15520] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 1084.726918][T15520] FAT-fs (loop7): Filesystem has been set read-only [ 1085.044367][T15561] loop7: detected capacity change from 0 to 128 [ 1085.118914][T15568] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.138123][T15561] syz.7.30328: attempt to access beyond end of device [ 1085.138123][T15561] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1085.152942][T15561] syz.7.30328: attempt to access beyond end of device [ 1085.152942][T15561] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1085.166946][T15561] syz.7.30328: attempt to access beyond end of device [ 1085.166946][T15561] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1085.189617][T15561] syz.7.30328: attempt to access beyond end of device [ 1085.189617][T15561] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1085.203320][T15561] syz.7.30328: attempt to access beyond end of device [ 1085.203320][T15561] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1085.218558][T15568] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.248249][T15561] syz.7.30328: attempt to access beyond end of device [ 1085.248249][T15561] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1085.263730][T15561] syz.7.30328: attempt to access beyond end of device [ 1085.263730][T15561] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1085.279552][T15568] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.291239][T15561] syz.7.30328: attempt to access beyond end of device [ 1085.291239][T15561] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1085.305019][T15561] syz.7.30328: attempt to access beyond end of device [ 1085.305019][T15561] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1085.318915][T15561] syz.7.30328: attempt to access beyond end of device [ 1085.318915][T15561] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 1085.338886][T15568] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.471611][ T4973] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.526250][ T4973] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.567192][ T4973] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.575452][ T4973] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.761128][T15640] wg2: entered promiscuous mode [ 1085.766085][T15640] wg2: entered allmulticast mode [ 1085.990499][T15650] _cac speed is unknown, defaulting to 1000 [ 1086.025196][T15653] IPVS: Unknown mcast interface: hsr0 [ 1086.048990][T15657] netlink: 'syz.0.30348': attribute type 17 has an invalid length. [ 1086.061488][T15650] lo speed is unknown, defaulting to 1000 [ 1086.079936][T15659] netlink: 'syz.4.30349': attribute type 13 has an invalid length. [ 1086.123337][T15659] 0ªî{X¹¦: refused to change device tx_queue_len [ 1086.138124][T15659] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1086.175095][T15665] macvtap0: entered allmulticast mode [ 1087.376097][T15703] netlink: 'syz.0.30365': attribute type 12 has an invalid length. [ 1087.513240][T15713] veth0_to_team: left allmulticast mode [ 1087.518953][T15713] veth0_to_team: left promiscuous mode [ 1087.524571][T15713] Ÿë: port 1(veth0_to_team) entered disabled state [ 1087.538060][ T3395] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1087.584324][T15721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.593152][T15721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.602228][T15713] bond3: (slave ip6gretap1): Releasing active interface [ 1087.637537][T15713] bond7: (slave bridge14): Removing an active aggregator [ 1087.646194][T15713] bond7: (slave bridge14): Releasing backup interface [ 1087.654205][T15713] bridge14: left promiscuous mode [ 1087.659564][T15713] bridge14: left allmulticast mode [ 1087.665433][T15713] bond8: left allmulticast mode [ 1087.670603][T15713] bridge15: port 1(bond8) entered disabled state [ 1087.681225][T15713] bond10: (slave geneve0): Releasing active interface [ 1087.690401][T15728] netlink: 'syz.3.30369': attribute type 10 has an invalid length. [ 1087.710899][T15713] bond11: (slave veth25): Releasing active interface [ 1087.730739][T15713] bond12: (slave ip6gretap2): Releasing active interface [ 1087.738237][ T3395] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1087.757298][T15713] bond13: (slave wireguard0): Releasing backup interface [ 1087.764372][T15713] wireguard0: left promiscuous mode [ 1087.769769][T15713] bond13: (slave wireguard1): making interface the new active one [ 1087.777621][T15713] wireguard1: entered promiscuous mode [ 1087.794726][T15713] bond13: (slave wireguard1): Releasing backup interface [ 1087.802283][T15713] wireguard1: left promiscuous mode [ 1087.827989][T15726] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1087.841500][T15727] vlan2: entered allmulticast mode [ 1087.846810][T15727] bond13: entered allmulticast mode [ 1087.857078][ T4963] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.865853][ T4963] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.896227][ T4963] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.918973][T15733] netlink: 'syz.3.30376': attribute type 17 has an invalid length. [ 1087.929405][ T4963] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.054144][ T29] kauditd_printk_skb: 769 callbacks suppressed [ 1088.054164][ T29] audit: type=1326 audit(2000002337.438:49615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15741 comm="syz.3.30378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485200eec9 code=0x7ffc0000 [ 1088.084629][ T29] audit: type=1326 audit(2000002337.449:49616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15741 comm="syz.3.30378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f485200eec9 code=0x7ffc0000 [ 1088.108707][ T29] audit: type=1326 audit(2000002337.449:49617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15741 comm="syz.3.30378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485200eec9 code=0x7ffc0000 [ 1088.132690][ T29] audit: type=1326 audit(2000002337.449:49618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15741 comm="syz.3.30378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485200eec9 code=0x7ffc0000 [ 1088.248217][T15752] loop7: detected capacity change from 0 to 1024 [ 1088.276604][T15752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.291799][T15752] ext4 filesystem being mounted at /670/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1088.336538][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1088.356710][T15762] __nla_validate_parse: 8 callbacks suppressed [ 1088.356732][T15762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30381'. [ 1088.389588][T15762] IPVS: Unknown mcast interface: ipvlan1 [ 1088.822876][T15789] loop7: detected capacity change from 0 to 512 [ 1089.019057][T15789] EXT4-fs (loop7): 1 orphan inode deleted [ 1089.031834][T15789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.058736][ T29] audit: type=1326 audit(2000002338.449:49619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15786 comm="syz.7.30395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1089.082668][ T29] audit: type=1326 audit(2000002338.449:49620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15786 comm="syz.7.30395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1089.122741][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.134156][ T29] audit: type=1326 audit(2000002338.499:49621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15786 comm="syz.7.30395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1089.157988][ T29] audit: type=1326 audit(2000002338.499:49622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15786 comm="syz.7.30395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1089.181793][ T29] audit: type=1326 audit(2000002338.499:49623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15786 comm="syz.7.30395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1089.285412][T15809] wg2: entered promiscuous mode [ 1089.290344][T15809] wg2: entered allmulticast mode [ 1089.391141][T15820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.30404'. [ 1090.007589][ T29] audit: type=1326 audit(2000002339.399:49624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15836 comm="syz.0.30409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f71d4c95d67 code=0x7ffc0000 [ 1090.707879][T15866] netlink: 4 bytes leftover after parsing attributes in process `syz.8.30419'. [ 1090.779605][T15870] wg2: left promiscuous mode [ 1090.784277][T15870] wg2: left allmulticast mode [ 1090.818989][T15870] wg2: entered promiscuous mode [ 1090.823927][T15870] wg2: entered allmulticast mode [ 1090.953963][T15878] netlink: 'syz.8.30427': attribute type 30 has an invalid length. [ 1091.079198][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.8.30431'. [ 1091.088265][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.8.30431'. [ 1091.193485][T15893] macvtap0: entered allmulticast mode [ 1091.199025][T15893] bridge0: entered allmulticast mode [ 1091.216468][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30436'. [ 1091.235388][T15893] bridge0: left allmulticast mode [ 1091.240863][T15895] netlink: 'syz.8.30435': attribute type 13 has an invalid length. [ 1091.276302][T15897] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1091.289185][T15895] gretap0: refused to change device tx_queue_len [ 1091.296893][T15895] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1091.342949][T15902] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1091.368727][T15902] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1091.399167][T15902] bond16: (slave vxcan1): Error -95 calling set_mac_address [ 1091.426966][ T9] lo speed is unknown, defaulting to 1000 [ 1091.432857][ T9] syz2: Port: 1 Link ACTIVE [ 1091.442754][T15897] macvlan0: entered promiscuous mode [ 1091.448417][T15897] macvlan0: entered allmulticast mode [ 1091.455083][T15909] netlink: 'syz.3.30439': attribute type 8 has an invalid length. [ 1091.469757][T15897] bond16: (slave macvlan0): Error -98 calling set_mac_address [ 1091.483631][T15908] netlink: 40 bytes leftover after parsing attributes in process `syz.8.30438'. [ 1091.496591][T15901] _cac speed is unknown, defaulting to 1000 [ 1091.502884][T15909] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1091.546626][T15901] lo speed is unknown, defaulting to 1000 [ 1092.550605][T15952] netlink: 40 bytes leftover after parsing attributes in process `syz.7.30455'. [ 1092.756907][T15967] loop7: detected capacity change from 0 to 128 [ 1092.767902][T15967] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 1092.775894][T15967] System zones: 1-3, 19-19, 35-36 [ 1092.781532][T15967] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1092.822725][T15967] ext4 filesystem being mounted at /682/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.961091][ T3946] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1093.004388][T15978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30465'. [ 1093.051774][T15983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30467'. [ 1093.152446][ T29] kauditd_printk_skb: 736 callbacks suppressed [ 1093.152462][ T29] audit: type=1400 audit(2000002342.531:50361): avc: denied { sys_module } for pid=15988 comm="syz.7.30470" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1093.303367][ T29] audit: type=1400 audit(2000002342.681:50362): avc: denied { allowed } for pid=15998 comm="syz.0.30472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1093.323325][ T29] audit: type=1400 audit(2000002342.681:50363): avc: denied { create } for pid=15998 comm="syz.0.30472" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1093.344939][ T29] audit: type=1400 audit(2000002342.681:50364): avc: denied { map } for pid=15998 comm="syz.0.30472" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=269746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1093.369598][ T29] audit: type=1400 audit(2000002342.681:50365): avc: denied { read write } for pid=15998 comm="syz.0.30472" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=269746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1093.404589][T16000] netlink: 'syz.7.30473': attribute type 30 has an invalid length. [ 1093.579505][ T29] audit: type=1400 audit(2000002342.921:50366): avc: denied { read } for pid=16007 comm="syz.7.30474" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1093.602646][ T29] audit: type=1400 audit(2000002342.921:50367): avc: denied { open } for pid=16007 comm="syz.7.30474" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1093.626441][ T29] audit: type=1326 audit(2000002342.921:50368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.7.30474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1093.650322][ T29] audit: type=1326 audit(2000002342.921:50369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.7.30474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1093.674111][ T29] audit: type=1326 audit(2000002342.921:50370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.7.30474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ec8ceec9 code=0x7ffc0000 [ 1093.816106][T16016] __nla_validate_parse: 1 callbacks suppressed [ 1093.816125][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.8.30477'. [ 1093.849289][T16016] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1093.898147][T16018] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1093.917684][T16018] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1093.963715][T16018] bond21: (slave vxcan1): Error -95 calling set_mac_address [ 1093.990662][T16016] macvlan0: entered promiscuous mode [ 1093.996167][T16016] macvlan0: entered allmulticast mode [ 1094.002404][T16016] bond21: (slave macvlan0): Error -98 calling set_mac_address [ 1094.491792][T16047] _cac speed is unknown, defaulting to 1000 [ 1094.620717][T16047] lo speed is unknown, defaulting to 1000 [ 1095.456725][T16081] loop7: detected capacity change from 0 to 512 [ 1095.463647][T16081] EXT4-fs: Ignoring removed nobh option [ 1095.472233][T16087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30511'. [ 1095.495714][T16081] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #3: comm syz.7.30510: corrupted inode contents [ 1095.514200][T16081] EXT4-fs (loop7): Remounting filesystem read-only [ 1095.516226][T16087] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1095.530561][T16081] EXT4-fs (loop7): 1 truncate cleaned up [ 1095.537549][T16081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.550471][T16081] ext4 filesystem being mounted at /695/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.558070][T16087] vlan1: entered allmulticast mode [ 1095.561933][T16081] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.566264][T16087] bond14: entered allmulticast mode [ 1095.615503][T16100] tipc: Enabling of bearer rejected, failed to enable media [ 1095.703293][T16103] _cac speed is unknown, defaulting to 1000 [ 1095.757871][T16103] lo speed is unknown, defaulting to 1000 [ 1095.829123][T16111] loop7: detected capacity change from 0 to 1024 [ 1095.836448][T16111] EXT4-fs: Ignoring removed orlov option [ 1095.845111][T16111] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.922173][T16114] ================================================================== [ 1095.930313][T16114] BUG: KCSAN: data-race in filemap_read / filemap_read [ 1095.937221][T16114] [ 1095.939565][T16114] write to 0xffff88810385fe28 of 8 bytes by task 16111 on cpu 1: [ 1095.947311][T16114] filemap_read+0x974/0xa00 [ 1095.951855][T16114] generic_file_read_iter+0x79/0x330 [ 1095.957195][T16114] ext4_file_read_iter+0x1cc/0x290 [ 1095.962374][T16114] copy_splice_read+0x442/0x660 [ 1095.967264][T16114] splice_direct_to_actor+0x290/0x680 [ 1095.972686][T16114] do_splice_direct+0xda/0x150 [ 1095.977473][T16114] do_sendfile+0x380/0x650 [ 1095.981927][T16114] __x64_sys_sendfile64+0x105/0x150 [ 1095.987270][T16114] x64_sys_call+0x2bb4/0x3000 [ 1095.991980][T16114] do_syscall_64+0xd2/0x200 [ 1095.996523][T16114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.002490][T16114] [ 1096.004837][T16114] read to 0xffff88810385fe28 of 8 bytes by task 16114 on cpu 0: [ 1096.012579][T16114] filemap_read+0x6f/0xa00 [ 1096.017039][T16114] generic_file_read_iter+0x79/0x330 [ 1096.022385][T16114] ext4_file_read_iter+0x1cc/0x290 [ 1096.027627][T16114] copy_splice_read+0x442/0x660 [ 1096.032539][T16114] splice_direct_to_actor+0x290/0x680 [ 1096.037948][T16114] do_splice_direct+0xda/0x150 [ 1096.042752][T16114] do_sendfile+0x380/0x650 [ 1096.047219][T16114] __x64_sys_sendfile64+0x105/0x150 [ 1096.052462][T16114] x64_sys_call+0x2bb4/0x3000 [ 1096.057223][T16114] do_syscall_64+0xd2/0x200 [ 1096.061802][T16114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.067714][T16114] [ 1096.070052][T16114] value changed: 0x00000000000000c7 -> 0x00000000000000c8 [ 1096.077166][T16114] [ 1096.079507][T16114] Reported by Kernel Concurrency Sanitizer on: [ 1096.085703][T16114] CPU: 0 UID: 0 PID: 16114 Comm: syz.7.30506 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1096.097194][T16114] Tainted: [W]=WARN [ 1096.101012][T16114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1096.111279][T16114] ================================================================== [ 1096.240571][ T3946] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.