last executing test programs: 3m18.975310707s ago: executing program 2 (id=148): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 3m18.835428493s ago: executing program 2 (id=151): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 3m18.810426804s ago: executing program 2 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r4, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) io_destroy(r4) 3m18.68014663s ago: executing program 2 (id=158): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) syz_open_procfs(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x29) 3m18.562438695s ago: executing program 2 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffee1}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x272, 0xb, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb9a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8003, 0x0, 0xffffffff, 0x1, 0x0, 0x800009, 0xfffffffd, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x2, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x5, 0x0, 0x9, 0xfffffffd, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x26c, 0x4, 0x7, 0xffff, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m18.172313832s ago: executing program 2 (id=171): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x7168, 0x3010, 0x2, 0x41}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3m18.172024082s ago: executing program 32 (id=171): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x7168, 0x3010, 0x2, 0x41}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3m10.660312944s ago: executing program 4 (id=323): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x2fd7782f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 3m10.347542668s ago: executing program 4 (id=324): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18) 3m9.511621303s ago: executing program 4 (id=360): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xa97) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfd04, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) accept(r0, 0x0, 0x0) 3m9.492978154s ago: executing program 4 (id=362): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000000), 0x6, 0x507, &(0x7f0000000680)="$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") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20) 3m9.397561758s ago: executing program 4 (id=365): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) 3m4.100252606s ago: executing program 4 (id=487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 3m4.054052198s ago: executing program 33 (id=487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 2m49.362236229s ago: executing program 0 (id=803): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xb10000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) rseq(&(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={0x0, 0x2, 0xc, 0x8, 0x6a39}, 0x4}, 0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000c00)={[{@numtail}, {@uni_xlate}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x7}}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@fat=@quiet}, {@shortname_win95}, {@utf8}, {@nonumtail}, {@shortname_mixed}, {@numtail}, {@shortname_win95}], [{@fsname}, {@appraise}, {@smackfsfloor}, {@euid_eq}, {@seclabel}, {@smackfshat={'smackfshat', 0x3d, '$$:!-T[\x7f\'{.-'}}, {@fsname={'fsname', 0x3d, 'utf8=1'}}]}, 0x0, 0x2a4, &(0x7f0000000580)="$eJzs3T1re1UYAPDnpmkSdUgGJxG8oIPTn7arS4qkUMykZFAHLbYFaYLQQsEXDJ1cXRz9BILg5pdw8RsIroKbHQpHbnIvSWuaNtK0vvx+Q3t67vOc85zTQ18oOf3w5dHJYR7HF1/8Eq1WFrVudOMyi07UopJSSjHT/ToAgH+zy5Ti9zS1Sl4WEa31lQUArNHK3/9/WHtJAMCavfPue2/t9vu9t/O8FXujr84HxW/2xfvp893j+DiGcRRb0Y6r6d8Cqp8Wird7KaVxPS904rXR+HxQZI4++Kkcf/e3iEn+drSjM+m6nr/f723nU3P546KO58v5u0X+TrTjxQXz7/d7OwvyY9CI11+dq/9ZtOPnj+KTGMbhpIhZ/pfbef5m+uaPz98vyivys/H5oDmJm0kbj/ypAQAAAAAAAAAAAAAAAAAAAADgP+xZeXdOMyb39xRd5f07G1fFB5uRVzrX7+eZ5mfVQDfuBxqn+DalZj2i39vK8zyVgbP8erxUj/rTrBoAAAAAAAAAAAAAAAAAAAD+Wc4+/ezkYDg8On2QRnUbQPWy/r87Tneu55VYHtyczVUrm0tGjo0qJotYWkaxiAfalrsaz91W83ffrzpg6+6YzWX78zCN6nSdHGSL97AZVU+rOiQ/zsc04p5zNW57lFY6fo2Fj9orr73xwqQxXhIT2bLC3vh1unNlT3ZzFY3Jri5M3ywbc+k3zsZK5/mvXysyt3UAAAAAAAAAAAAAAAAAAMBazV70u+DhxdLUWmqurSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFSz//+/QmNcJt8juBGnZ0+8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4H/gwAAP//GX9i/A==") sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000180)=@nl=@kern={0x10, 0x0, 0x0, 0x8000000}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="1bde2525359ac870134884d3ce29084b25410fc93f414626275866", 0x1b}, {&(0x7f0000000340)="d7c4ba96f4224676d123bc81ed9b6e9b97a7ef0b7afa89f18255b773741e583c909e95947c12470e59697f0260407277a1eb57f6ad419b42aa6842e1725f6ea6b65901c67d57a9bb99e53dee0c751d9a6b13618724077a9bd0b30ad76bb8d65da7540c2fa789b1e14217a69be558039260ff4f59d574de2824a1003d8f72b1b9328d5ae12bfdfb599a", 0x89}, {0x0}], 0x3, &(0x7f0000001bc0)=[{0x1010, 0x115, 0x9, "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"}, {0xd0, 0x1, 0x4, "ab1b22491b5ea6d6b3f44bf8e4dc2d6c293d2c37e94cb3470374da7260cfc73bd92bb2d4b3085a5d9b12895e6a22d5fac86a37c63aed58f474ecb54d3a3799cc42e050b5fc63c73e740a38d26da009898065d33700052c62f28f496bde6b3ffd8962d63ccfd371cab9693f4fa72e05b377cbbf126eed5cc5ead13c0744d3b45187874162327abfd551644bd3583b6c8cc4f9661fb1f7884fc5d7f52fc51703035ecc57b854a5028667a21b4a1c792b8919409c17ae665394ea4ef9aefd13143f"}, {0x1010, 0x115, 0x0, "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"}, {0xe8, 0x109, 0x400000, "a4b9abb2651136160dd2f734d843100e985a1f74cdafe3e1359991767bbaac205e2e71af749bffbec773dbffe7e5b7f39e1ad4a862318b976e64dd4b61d0553f3d0c54c63131bfd5f53284a48ac76ef21e098a7d125e059d5d88580bf1f93de5cb891ad02d7d8f744a68c6bb1b610143845cbe6aada42373c325607604d37ffcd9c5ad5c50046181d871cc63d2a9c3c3dcbd6d2b48069a86287345af87b1250476f7b5eaf7b7bafad12123180df5434e64d39190bc08b61a593a38df1bb365155c5baace5e303850250b32b425d86c7cd8e1c53e04a204e5"}, {0x38, 0x119, 0x7, "5df02772e20a27d2d69c723022965fe45c33bb0f869738a9672894ab7d513f5fe9e6c15a86d8"}, {0x78, 0x95, 0x4, "cc3e9a3967406437daebd8910215e2b011ff45a50d5eef6f39187e1ba6ab1555cdc3e53267ed070db57663d3f6b050bf4306cb631207f3b992ac53995a163943c0f07cf29ed9615d122cf530f55d88277d8fffc2b07ae7eac406054e958732144622"}, {0xc0, 0x10a, 0x40, "4b179e4c69fdb252806a0a6c0a7c70face7ee4d1936282961733076b92ad0c515db0b103dcce1e3152d27b3a986830497da39fbd25006f3a93757f855c51cc9067b59be6eeee35438f4a1c592d8873434b167bcef520990b7de9ce61c38f494daa4caacebb0ebd2ec98cb4c1adc9157d425495a61e7a4c34530c9426ce6be66009a5aaa0ead3cfcce501505931869903226bd798f7d506ed255e680284159aebe09b3ef346311fb1e36ad93e7d90"}, {0x28, 0xff, 0x10000, "4777bf7fbde835e541f0282f6d82eeb421a24e078da263"}], 0x2370}, 0x41) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2m49.233548064s ago: executing program 0 (id=808): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000002c0)={0x55, 0x80, 0x3, 0x988, 0x6, "345a6a58cf2be7b60ded5d6ef33860fe758018"}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 2m49.189828426s ago: executing program 0 (id=809): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200040000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x5, r2, 0x1, 0x9}, 0x14) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2m49.072287971s ago: executing program 0 (id=812): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000000), 0x6, 0x507, &(0x7f0000000680)="$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") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20) 2m48.86311205s ago: executing program 0 (id=826): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) 2m48.357175232s ago: executing program 0 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x40000000, @remote, 0x7}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xc}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3000000, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x1, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x3, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2m48.331089173s ago: executing program 34 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x40000000, @remote, 0x7}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xc}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3000000, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x1, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x3, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2.468027044s ago: executing program 3 (id=4498): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 1.593527202s ago: executing program 3 (id=4519): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 1.577442582s ago: executing program 3 (id=4521): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) 989.201428ms ago: executing program 1 (id=4530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) r3 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0xfffffffffffffffd]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r3) inotify_init1(0x800) inotify_add_watch(r3, &(0x7f00000000c0)='./control\x00', 0xa400080a) close_range(r2, 0xffffffffffffffff, 0x0) 970.749849ms ago: executing program 1 (id=4531): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000540)={0x100, 0x0, 0x1, 0x0, 0x1, "facfa4d6139dd6504498efef1b6a8c67920e71", 0x56, 0xcfd}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @dev}}}}, 0x0) process_madvise(r2, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2, 0x8, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 944.917079ms ago: executing program 1 (id=4532): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setresuid(0xee01, 0x0, 0x0) setpriority(0x2, 0x0, 0x7) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 'id0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r2, 0x0, 0x2000) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00103c0020010000000000000000000000000000ff0200000000000000000000000000010000000004019078"], 0x0) 914.001511ms ago: executing program 1 (id=4535): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setresuid(0xee01, 0xee00, 0x0) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000020001000500380001000600b1060004030000000b000d00ff000000000000000900000000000000070000000000000009"], 0x178) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 913.503441ms ago: executing program 1 (id=4536): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) recvmmsg(r1, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001300)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x48}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$unix(r3, &(0x7f0000005640)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x48840) 725.430229ms ago: executing program 7 (id=4544): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e2b, 0x2, @empty, 0x5a60}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r4, r2}) sendmmsg$inet(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="e8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)="81", 0x1}], 0x1}}], 0x2, 0x20004050) 724.827399ms ago: executing program 5 (id=4545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060500000000000000000000dd00060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 660.428322ms ago: executing program 7 (id=4546): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 660.040352ms ago: executing program 6 (id=4547): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x4510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_io_uring_setup(0x14f5, &(0x7f0000000400)={0x0, 0xd144, 0x1000, 0xfffffffd, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) io_uring_enter(r1, 0x3516, 0xddd6, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) socket(0x10, 0x3, 0x0) 659.793222ms ago: executing program 3 (id=4548): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 537.425097ms ago: executing program 7 (id=4549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x19, 0x0, "7473d3790cae16da889a2da22c441404b018fe922406b64cddaeb9d3393a4201c2c7d0df8e61740b9af2d4e499d58654a41f830c3279cffcfdff0f00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0x14a, 0x0, 0x0, 0x4000002}) 508.465788ms ago: executing program 3 (id=4550): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@barrier_val={'barrier', 0x3d, 0x2}}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@nodelalloc}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@nojournal_checksum}]}, 0x11, 0x553, &(0x7f0000001080)="$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") listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) creat(0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 466.64019ms ago: executing program 3 (id=4551): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000010000000000000000000000000400000000000e0ca211"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 466.25928ms ago: executing program 7 (id=4552): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0xffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) write$eventfd(r1, &(0x7f0000000080)=0xffffffff00000000, 0x8) read$eventfd(r1, &(0x7f0000000040), 0x8) 409.969732ms ago: executing program 6 (id=4553): socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 395.790183ms ago: executing program 7 (id=4554): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xa97) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xc}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d3b4af6e8da1d0a"}}}}}}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 168.335163ms ago: executing program 5 (id=4555): bpf$MAP_CREATE(0x0, 0x0, 0x50) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '{&'}]}, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r2, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 168.002543ms ago: executing program 5 (id=4556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}]}}}]}, 0x40}}, 0x0) 161.598753ms ago: executing program 7 (id=4557): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000200)=ANY=[], 0x8, 0x25d, &(0x7f0000000f40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000004000000020000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffffffffffffffdd00"/28], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 141.830744ms ago: executing program 5 (id=4558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 110.125345ms ago: executing program 6 (id=4559): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000a00)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[], 0x0) 109.654225ms ago: executing program 6 (id=4560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 95.182306ms ago: executing program 6 (id=4561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 78.255467ms ago: executing program 6 (id=4562): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000680)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000002}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x40000000000000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x0, 0x0, 0x401, 0x0, 0x4507}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 65.743277ms ago: executing program 1 (id=4563): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x400, 0x9, 0x1, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x18) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 270.4µs ago: executing program 5 (id=4564): socket$kcm(0x10, 0x2, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x9, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x34}}, 0x4000004) 0s ago: executing program 5 (id=4565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9}, 0x1c) listen(r2, 0x2000) r3 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): 43 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7725d65e7 code=0x7ffc0000 [ 151.004049][ T29] audit: type=1326 audit(150.862:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe77257b829 code=0x7ffc0000 [ 151.026895][ T29] audit: type=1326 audit(150.862:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe7725df749 code=0x7ffc0000 [ 151.060589][ T29] audit: type=1326 audit(150.932:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7725d65e7 code=0x7ffc0000 [ 151.083558][ T29] audit: type=1326 audit(150.932:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe77257b829 code=0x7ffc0000 [ 152.063265][T11286] netlink: 'syz.6.2778': attribute type 10 has an invalid length. [ 152.086281][T11287] syzkaller0: entered allmulticast mode [ 152.093280][T11287] syzkaller0: entered promiscuous mode [ 152.111310][T11287] syzkaller0 (unregistering): left allmulticast mode [ 152.118020][T11287] syzkaller0 (unregistering): left promiscuous mode [ 152.153067][T11289] loop7: detected capacity change from 0 to 8192 [ 152.234701][T11297] loop5: detected capacity change from 0 to 8192 [ 152.301172][T11297] loop5: p1 p2 p3 p4 [ 152.323181][T11297] loop5: p3 start 331777 is beyond EOD, truncated [ 152.329625][T11297] loop5: p4 size 262144 extends beyond EOD, truncated [ 152.675220][T11358] loop7: detected capacity change from 0 to 128 [ 153.214883][T11400] netlink: 'syz.5.2826': attribute type 13 has an invalid length. [ 154.111555][T11462] netlink: 'syz.5.2851': attribute type 1 has an invalid length. [ 154.150996][T11462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.177403][T11462] bond3 (unregistering): Released all slaves [ 154.195120][T11467] netlink: 'syz.3.2852': attribute type 1 has an invalid length. [ 154.415051][T11477] veth10: entered promiscuous mode [ 154.420497][T11477] veth10: entered allmulticast mode [ 154.777632][T11508] loop7: detected capacity change from 0 to 1024 [ 154.795627][T11508] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 154.819546][T11508] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 154.836840][T11508] EXT4-fs error (device loop7): ext4_get_journal_inode:5808: inode #32: comm syz.7.2871: iget: special inode unallocated [ 154.850706][T11508] EXT4-fs (loop7): no journal found [ 154.970867][T11534] netlink: 'syz.5.2882': attribute type 10 has an invalid length. [ 155.007077][T11534] netlink: 'syz.5.2882': attribute type 10 has an invalid length. [ 155.043647][T11542] syzkaller0: entered promiscuous mode [ 155.049192][T11542] syzkaller0: entered allmulticast mode [ 155.405404][T11564] __nla_validate_parse: 16 callbacks suppressed [ 155.405419][T11564] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 155.424334][T11564] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 155.654928][T11568] macvtap0: entered promiscuous mode [ 155.666174][T11568] macvtap0: left promiscuous mode [ 155.883881][T11548] Set syz1 is full, maxelem 65536 reached [ 156.003725][ T29] kauditd_printk_skb: 854 callbacks suppressed [ 156.003740][ T29] audit: type=1400 audit(155.982:7594): avc: denied { name_bind } for pid=11576 comm="syz.3.2901" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 156.031060][ T29] audit: type=1400 audit(155.982:7595): avc: denied { node_bind } for pid=11576 comm="syz.3.2901" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 156.065619][ T29] audit: type=1326 audit(156.042:7596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 156.088666][ T29] audit: type=1326 audit(156.042:7597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 156.161523][ T29] audit: type=1400 audit(156.122:7598): avc: denied { mount } for pid=11583 comm="syz.3.2905" name="/" dev="ramfs" ino=39187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 156.257849][T11585] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2904'. [ 156.266909][T11585] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2904'. [ 156.396827][T11596] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2909'. [ 156.447522][ T29] audit: type=1326 audit(156.422:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 156.498543][ T29] audit: type=1326 audit(156.452:7600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 156.521685][ T29] audit: type=1326 audit(156.452:7601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 156.544630][ T29] audit: type=1326 audit(156.452:7602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 156.567545][ T29] audit: type=1326 audit(156.452:7603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 156.655892][T11612] veth10: entered promiscuous mode [ 156.661216][T11612] veth10: entered allmulticast mode [ 156.685157][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2916'. [ 156.862782][T11632] netlink: 8 bytes leftover after parsing attributes in process `GPL'. [ 156.873937][T11632] ip6gre2: entered allmulticast mode [ 156.936117][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2927'. [ 157.047295][T11661] loop6: detected capacity change from 0 to 512 [ 157.090710][T11661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.105645][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2941'. [ 157.126986][T11671] bridge8: entered promiscuous mode [ 157.127068][T11661] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, [ 157.132258][T11671] bridge8: entered allmulticast mode [ 157.132257][T11661] block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 157.132544][T11661] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2938: Failed to acquire dquot type 1 [ 157.141979][T11671] bridge0: port 1(team0) entered blocking state [ 157.172183][T11671] bridge0: port 1(team0) entered disabled state [ 157.179128][T11671] team0: entered allmulticast mode [ 157.184315][T11671] team_slave_0: entered allmulticast mode [ 157.190075][T11671] team_slave_1: entered allmulticast mode [ 157.196738][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.206434][T11671] team0: entered promiscuous mode [ 157.211501][T11671] team_slave_0: entered promiscuous mode [ 157.217230][T11671] team_slave_1: entered promiscuous mode [ 157.249012][T11685] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 157.277067][T11688] netlink: 'syz.5.2949': attribute type 30 has an invalid length. [ 157.364144][T11703] netlink: 'syz.3.2956': attribute type 1 has an invalid length. [ 157.397116][T11709] loop7: detected capacity change from 0 to 1024 [ 157.423925][T11709] EXT4-fs: inline encryption not supported [ 157.431189][T11713] syz_tun: entered allmulticast mode [ 157.444738][T11713] syz_tun (unregistering): left allmulticast mode [ 157.460959][T11709] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.488649][T11709] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.2959: Allocating blocks 385-513 which overlap fs metadata [ 157.514339][T11709] EXT4-fs (loop7): pa ffff888104cb67e0: logic 16, phys. 129, len 24 [ 157.522416][T11709] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 157.537416][T11709] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 157.549872][T11709] EXT4-fs (loop7): This should not happen!! Data will be lost [ 157.549872][T11709] [ 157.559524][T11709] EXT4-fs (loop7): Total free blocks count 0 [ 157.565526][T11709] EXT4-fs (loop7): Free/Dirty block details [ 157.571513][T11709] EXT4-fs (loop7): free_blocks=128 [ 157.574998][T11724] loop6: detected capacity change from 0 to 512 [ 157.576684][T11709] EXT4-fs (loop7): dirty_blocks=0 [ 157.588082][T11709] EXT4-fs (loop7): Block reservation details [ 157.594147][T11709] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 157.602720][T11724] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.631063][T11724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.650211][T11728] netlink: 'syz.5.2965': attribute type 1 has an invalid length. [ 157.666644][T11728] bond3: entered promiscuous mode [ 157.671755][T11728] bond3: entered allmulticast mode [ 157.680970][T11728] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 157.690986][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.703614][T11733] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 157.716045][T11728] bond3: (slave bridge0): making interface the new active one [ 157.723576][T11728] bridge0: entered promiscuous mode [ 157.729040][T11728] bridge0: entered allmulticast mode [ 157.756778][T11728] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 157.766038][T11734] bond3: left promiscuous mode [ 157.770849][T11734] bridge0: left promiscuous mode [ 157.775857][T11734] bond3: left allmulticast mode [ 157.780785][T11734] bridge0: left allmulticast mode [ 157.786662][T11734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.114141][ T3624] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.207717][T11764] loop6: detected capacity change from 0 to 1024 [ 158.215501][T11764] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.222966][T11764] EXT4-fs: Ignoring removed nobh option [ 158.231288][T11764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.259561][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.393157][T11778] --map-set only usable from mangle table [ 158.571063][T11785] bridge: RTM_NEWNEIGH with invalid ether address [ 158.583268][T11787] loop6: detected capacity change from 0 to 512 [ 158.591051][T11787] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.659949][T11787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.690386][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.119802][ T3642] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.965117][T11894] sch_tbf: burst 2 is lower than device macvtap0 mtu (1514) ! [ 161.059821][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 161.059836][ T29] audit: type=1400 audit(161.042:7848): avc: denied { setopt } for pid=11896 comm="syz.1.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 161.104221][ T29] audit: type=1400 audit(161.072:7849): avc: denied { write } for pid=11896 comm="syz.1.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 161.141359][T11899] __nla_validate_parse: 6 callbacks suppressed [ 161.141376][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3030'. [ 161.200666][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3030'. [ 161.200678][T11899] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.252937][T11903] bond6 (unregistering): Released all slaves [ 161.267377][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3031'. [ 161.276406][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3031'. [ 161.305214][T11909] wg2: entered promiscuous mode [ 161.310167][T11909] wg2: entered allmulticast mode [ 161.362185][ T29] audit: type=1400 audit(161.342:7850): avc: denied { shutdown } for pid=11916 comm="syz.7.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.420176][ T29] audit: type=1326 audit(161.402:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7725df749 code=0x7ffc0000 [ 161.443131][ T29] audit: type=1326 audit(161.402:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7725df749 code=0x7ffc0000 [ 161.469081][T11925] netlink: 'syz.7.3041': attribute type 1 has an invalid length. [ 161.477192][ T29] audit: type=1326 audit(161.462:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe7725df749 code=0x7ffc0000 [ 161.505979][T11925] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.514352][T11929] loop6: detected capacity change from 0 to 128 [ 161.519933][ T29] audit: type=1326 audit(161.502:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7725df783 code=0x7ffc0000 [ 161.522081][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3041'. [ 161.543266][ T29] audit: type=1326 audit(161.502:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe7725de1ff code=0x7ffc0000 [ 161.575177][ T29] audit: type=1326 audit(161.502:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe7725df7d7 code=0x7ffc0000 [ 161.597962][ T29] audit: type=1326 audit(161.502:7857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7725ddf90 code=0x7ffc0000 [ 161.604881][T11929] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 161.660766][ T5015] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.663811][T11925] bond4 (unregistering): Released all slaves [ 162.828602][T11997] bridge: RTM_NEWNEIGH with invalid ether address [ 163.000230][T12015] bridge: RTM_NEWNEIGH with invalid ether address [ 163.098838][T12020] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 163.707364][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3084'. [ 164.032559][T12062] vlan1: entered allmulticast mode [ 164.037799][T12062] hsr0: entered allmulticast mode [ 164.042926][T12062] hsr_slave_0: entered allmulticast mode [ 164.123115][T12076] loop7: detected capacity change from 0 to 512 [ 164.158055][T12076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.173564][T12076] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 12: comm syz.7.3105: path /356/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 164.194763][T12088] loop6: detected capacity change from 0 to 1024 [ 164.195235][T12076] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 13: comm syz.7.3105: path /356/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 164.202556][T12088] EXT4-fs: Ignoring removed orlov option [ 164.224001][T12076] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 14: comm syz.7.3105: path /356/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 164.248592][T12076] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 15: comm syz.7.3105: path /356/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 164.283148][T12076] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 16: comm syz.7.3105: path /356/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 164.306624][T12076] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 17: comm syz.7.3105: path /356/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 164.308131][T12088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.345777][T12095] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 18: comm syz.7.3105: lblock 23 mapped to illegal pblock 18 (length 1) [ 164.371657][T12076] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 18: comm syz.7.3105: lblock 23 mapped to illegal pblock 18 (length 1) [ 164.387622][T12076] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 19: comm syz.7.3105: path /356/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 164.423135][T12076] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 20: comm syz.7.3105: path /356/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 164.656800][T12113] wg2: left promiscuous mode [ 164.661474][T12113] wg2: left allmulticast mode [ 164.682016][T12113] wg2: entered promiscuous mode [ 164.686905][T12113] wg2: entered allmulticast mode [ 164.774683][T12123] bridge: RTM_NEWNEIGH with invalid ether address [ 164.791577][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.953543][ T6036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.972525][T12145] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3130'. [ 164.991645][T12145] wg2: left promiscuous mode [ 164.996288][T12145] wg2: left allmulticast mode [ 165.004881][T12145] veth2: left promiscuous mode [ 165.009764][T12145] veth2: left allmulticast mode [ 165.015138][T12145] bond1: left promiscuous mode [ 165.019945][T12145] bond1: left allmulticast mode [ 165.028262][T12145] bond3: left promiscuous mode [ 165.033181][T12145] bond3: left allmulticast mode [ 165.044468][T12145] veth14: left promiscuous mode [ 165.049376][T12145] veth14: left allmulticast mode [ 165.059790][T12145] bond4: left promiscuous mode [ 165.068652][T12145] macvlan0: left promiscuous mode [ 165.286574][T12173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3143'. [ 165.326523][T12173] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12173 comm=syz.5.3143 [ 165.509468][T12196] veth0: entered promiscuous mode [ 165.514882][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3154'. [ 165.525276][T12196] veth0 (unregistering): left promiscuous mode [ 165.613859][T12207] ip6gre2: entered allmulticast mode [ 165.666553][T12210] tipc: New replicast peer: 255.255.255.255 [ 165.672662][T12210] tipc: Enabled bearer , priority 10 [ 165.957364][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3165'. [ 166.186989][T12231] Process accounting resumed [ 166.232481][T12235] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 166.278333][T12239] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3172'. [ 166.371452][T12241] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3173'. [ 166.380472][T12241] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3173'. [ 166.881463][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 166.881475][ T29] audit: type=1400 audit(166.862:8031): avc: denied { create } for pid=12287 comm="syz.7.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 167.036640][T12298] veth14: entered promiscuous mode [ 167.041921][T12298] veth14: entered allmulticast mode [ 167.048453][ T29] audit: type=1326 audit(167.022:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.7.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 167.071333][ T29] audit: type=1326 audit(167.022:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.7.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 167.209939][ T29] audit: type=1326 audit(167.162:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.7.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 167.232959][ T29] audit: type=1326 audit(167.162:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.7.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 167.240456][ T3401] IPVS: starting estimator thread 0... [ 167.255847][ T29] audit: type=1326 audit(167.162:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.7.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 167.349864][T12306] IPVS: using max 2688 ests per chain, 134400 per kthread [ 167.390602][ T29] audit: type=1326 audit(167.192:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.7.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 167.413439][ T29] audit: type=1326 audit(167.192:8038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.7.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 167.436377][ T29] audit: type=1326 audit(167.192:8039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.7.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 167.459267][ T29] audit: type=1326 audit(167.192:8040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.7.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 167.541231][T12314] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3203'. [ 167.719192][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3208'. [ 167.749163][T12325] bond4: entered promiscuous mode [ 167.760420][T12325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.786248][T12329] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.800659][T12329] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 167.823770][T12329] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 167.840046][T12325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.847275][T12325] IPv6: NLM_F_CREATE should be set when creating new route [ 167.854501][T12325] IPv6: NLM_F_CREATE should be set when creating new route [ 167.871103][T12325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.895488][T12325] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 167.912365][T12325] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 168.007280][T12342] netlink: 'syz.6.3213': attribute type 10 has an invalid length. [ 168.015455][T12342] netlink: 'syz.6.3213': attribute type 10 has an invalid length. [ 168.054521][T12348] netlink: 'syz.5.3215': attribute type 7 has an invalid length. [ 168.062429][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3215'. [ 168.103390][T12357] netlink: 'syz.7.3219': attribute type 1 has an invalid length. [ 168.116871][T12357] bond5: entered promiscuous mode [ 168.122200][T12357] 8021q: adding VLAN 0 to HW filter on device bond5 [ 168.139169][T12357] 8021q: adding VLAN 0 to HW filter on device bond5 [ 168.146625][T12357] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 168.156660][T12357] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 168.168309][T12357] bond5: (slave gre1): making interface the new active one [ 168.175573][T12357] gre1: entered promiscuous mode [ 168.184004][T12357] bond5: (slave gre1): Enslaving as an active interface with an up link [ 168.219362][T12366] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.227007][T12366] vhci_hcd: invalid port number 253 [ 168.266615][T12368] veth12: entered promiscuous mode [ 168.271802][T12368] veth12: entered allmulticast mode [ 168.336850][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3221'. [ 168.361683][T12378] loop6: detected capacity change from 0 to 2048 [ 168.401117][T12378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.709900][T12407] netlink: 'syz.3.3235': attribute type 1 has an invalid length. [ 168.748282][T12391] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3225: bg 0: block 345: padding at end of block bitmap is not set [ 168.763137][T12391] EXT4-fs (loop6): Remounting filesystem read-only [ 168.769724][ T3594] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 168.775685][T12407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.845803][T12407] bond4: (slave ip6gretap0): making interface the new active one [ 168.855052][T12407] bond4: (slave ip6gretap0): Enslaving as an active interface with an up link [ 168.881193][T12413] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 168.892733][T12413] bond4: entered allmulticast mode [ 168.897946][T12413] ip6gretap0: entered allmulticast mode [ 168.910399][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.962255][ T3401] IPVS: starting estimator thread 0... [ 168.988465][T12434] SELinux: Context Ü is not valid (left unmapped). [ 169.050059][T12431] IPVS: using max 2688 ests per chain, 134400 per kthread [ 169.083089][T12450] 9pnet_fd: Insufficient options for proto=fd [ 169.095803][T12450] loop6: detected capacity change from 0 to 512 [ 169.110173][T12450] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.156883][T12450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.283371][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.351232][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3261'. [ 169.377406][ T3401] IPVS: starting estimator thread 0... [ 169.437929][T12485] veth0: entered promiscuous mode [ 169.466302][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3264'. [ 169.480177][T12480] IPVS: using max 2736 ests per chain, 136800 per kthread [ 169.496733][T12485] veth0 (unregistering): left promiscuous mode [ 169.611470][T12504] veth0: entered promiscuous mode [ 169.616531][T12504] veth0: entered allmulticast mode [ 169.738607][T12510] tipc: New replicast peer: 255.255.255.255 [ 169.744972][T12510] tipc: Enabled bearer , priority 10 [ 170.027718][T12534] veth0: entered promiscuous mode [ 170.037554][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3284'. [ 170.125405][T12534] veth0 (unregistering): left promiscuous mode [ 170.749873][ T2967] tipc: Node number set to 3686416652 [ 171.188961][T12570] netlink: 'syz.5.3301': attribute type 1 has an invalid length. [ 171.239214][T12570] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.269037][T12576] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 171.315963][T12576] bond4: entered allmulticast mode [ 171.349292][T12581] loop7: detected capacity change from 0 to 512 [ 171.355939][T12570] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 171.396707][T12581] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 171.457212][ T6036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 171.509148][T12593] tipc: Enabling of bearer rejected, already enabled [ 171.821254][T12616] netlink: 'syz.5.3317': attribute type 1 has an invalid length. [ 171.844979][T12616] bond5: entered promiscuous mode [ 171.858649][T12606] Process accounting resumed [ 171.860184][T12616] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.885478][T12621] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 171.893703][T12616] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.906620][T12616] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 171.916675][T12616] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 171.928317][T12621] vhci_hcd: invalid port number 253 [ 171.956229][T12616] bond5: (slave gre1): making interface the new active one [ 171.963677][T12616] gre1: entered promiscuous mode [ 171.986381][T12616] bond5: (slave gre1): Enslaving as an active interface with an up link [ 172.522407][T12658] __nla_validate_parse: 1 callbacks suppressed [ 172.522423][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3334'. [ 172.547167][T12654] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 172.556589][T12654] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 172.613074][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3337'. [ 172.640907][T12664] bond1: entered promiscuous mode [ 172.655038][T12664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.671381][T12671] netlink: 'syz.1.3338': attribute type 1 has an invalid length. [ 172.688406][T12667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.700339][T12667] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 172.720836][T12667] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 172.728817][T12664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.736066][T12664] IPv6: NLM_F_CREATE should be set when creating new route [ 172.743277][T12664] IPv6: NLM_F_CREATE should be set when creating new route [ 172.849264][T12668] tipc: Enabling of bearer rejected, already enabled [ 172.857324][T12664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.871397][T12671] bond6: entered promiscuous mode [ 172.894240][T12671] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.920841][T12675] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.941500][T12675] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 172.951593][T12675] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 172.971688][T12675] bond6: (slave gre1): making interface the new active one [ 172.978933][T12675] gre1: entered promiscuous mode [ 172.985833][T12675] bond6: (slave gre1): Enslaving as an active interface with an up link [ 173.003717][T12664] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 173.024043][T12664] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 173.470809][T12715] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3353'. [ 173.622665][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 173.622685][ T29] audit: type=1326 audit(173.602:8307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.5.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 173.622797][ T29] audit: type=1326 audit(173.602:8308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.5.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 173.623408][ T29] audit: type=1326 audit(173.602:8309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.5.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 173.623512][ T29] audit: type=1326 audit(173.602:8310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.5.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 173.623538][ T29] audit: type=1326 audit(173.602:8311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.5.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 173.704722][T12725] netlink: 'syz.5.3369': attribute type 1 has an invalid length. [ 173.722583][ T29] audit: type=1326 audit(173.682:8312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.5.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 173.774946][ T29] audit: type=1326 audit(173.682:8313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.5.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 173.775100][ T29] audit: type=1326 audit(173.682:8314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.5.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 173.775120][ T29] audit: type=1326 audit(173.682:8315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.5.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 173.775219][ T29] audit: type=1326 audit(173.682:8316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.5.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 173.983810][T12737] netlink: 'syz.1.3372': attribute type 1 has an invalid length. [ 174.269161][T12756] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3368'. [ 174.670185][T12769] netlink: 'syz.6.3376': attribute type 1 has an invalid length. [ 174.758107][T12775] loop6: detected capacity change from 0 to 1024 [ 174.766825][T12775] EXT4-fs: inline encryption not supported [ 174.785141][T12775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.812367][T12775] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.3378: Allocating blocks 385-513 which overlap fs metadata [ 174.844201][T12775] EXT4-fs (loop6): pa ffff888100567310: logic 16, phys. 129, len 24 [ 174.852313][T12775] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 174.894377][T12775] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 174.947970][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.966281][T12852] vlan2: entered allmulticast mode [ 175.971559][T12852] hsr0: entered allmulticast mode [ 175.976624][T12852] hsr_slave_0: entered allmulticast mode [ 176.148739][T12864] bridge_slave_0: Caught tx_queue_len zero misconfig [ 176.314885][T12877] netlink: 'syz.6.3419': attribute type 10 has an invalid length. [ 176.323388][T12877] netlink: 'syz.6.3419': attribute type 10 has an invalid length. [ 176.334007][T12877] .`: (slave dummy0): Enslaving as an active interface with an up link [ 176.446346][T12887] random: crng reseeded on system resumption [ 177.422215][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3433'. [ 178.010109][T12932] netlink: 'syz.7.3441': attribute type 10 has an invalid length. [ 178.028378][T12932] batman_adv: batadv0: Removing interface: dummy0 [ 178.050651][T12932] team0: Port device dummy0 added [ 178.070809][T12932] netlink: 'syz.7.3441': attribute type 10 has an invalid length. [ 178.111781][T12932] team0: Port device dummy0 removed [ 178.131745][T12932] .`: (slave dummy0): Enslaving as an active interface with an up link [ 178.179075][T12887] syz.6.3423 (12887) used greatest stack depth: 6136 bytes left [ 178.328475][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3448'. [ 178.391240][T12951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3449'. [ 178.604341][T12977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12977 comm=wÞ£ÿ [ 178.616604][T12977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12977 comm=wÞ£ÿ [ 178.689157][T12982] loop6: detected capacity change from 0 to 128 [ 178.718237][T12982] bio_check_eod: 80 callbacks suppressed [ 178.718253][T12982] syz.6.3466: attempt to access beyond end of device [ 178.718253][T12982] loop6: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 178.754253][T12982] syz.6.3466: attempt to access beyond end of device [ 178.754253][T12982] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 178.767693][T12982] buffer_io_error: 52 callbacks suppressed [ 178.767705][T12982] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 178.822806][T12982] syz.6.3466: attempt to access beyond end of device [ 178.822806][T12982] loop6: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 178.860043][T12982] syz.6.3466: attempt to access beyond end of device [ 178.860043][T12982] loop6: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 178.873602][T12982] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 178.883474][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 178.883486][ T29] audit: type=1400 audit(178.862:8447): avc: denied { map } for pid=12968 comm="syz.3.3458" path="socket:[44389]" dev="sockfs" ino=44389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.912321][ T29] audit: type=1400 audit(178.862:8448): avc: denied { read accept } for pid=12968 comm="syz.3.3458" path="socket:[44389]" dev="sockfs" ino=44389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.940081][T12982] syz.6.3466: attempt to access beyond end of device [ 178.940081][T12982] loop6: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 178.955798][T13002] loop7: detected capacity change from 0 to 4096 [ 179.000437][T12982] syz.6.3466: attempt to access beyond end of device [ 179.000437][T12982] loop6: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 179.013935][T12982] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 179.023399][T12982] syz.6.3466: attempt to access beyond end of device [ 179.023399][T12982] loop6: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 179.037114][T13002] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 179.048265][T12982] syz.6.3466: attempt to access beyond end of device [ 179.048265][T12982] loop6: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 179.061714][T12982] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 179.071143][T13002] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.071543][T12982] syz.6.3466: attempt to access beyond end of device [ 179.071543][T12982] loop6: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 179.085551][T13006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3471'. [ 179.097454][T12982] syz.6.3466: attempt to access beyond end of device [ 179.097454][T12982] loop6: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 179.119621][T12982] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 179.128768][T12982] Buffer I/O error on dev loop6, logical block 116, lost async page write [ 179.138742][ T6036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.159782][T12982] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 179.160298][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3471'. [ 179.168854][T12982] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 179.205606][T12982] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 179.215040][T12982] Buffer I/O error on dev loop6, logical block 124, lost async page write [ 179.231291][T13012] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3473'. [ 179.313967][ T29] audit: type=1326 audit(179.292:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.1.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 179.377302][ T29] audit: type=1326 audit(179.312:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.1.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 179.400311][ T29] audit: type=1326 audit(179.312:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.1.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f397ee0f783 code=0x7ffc0000 [ 179.423058][ T29] audit: type=1326 audit(179.312:8452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.1.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f397ee0e1ff code=0x7ffc0000 [ 179.445920][ T29] audit: type=1326 audit(179.312:8453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.1.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f397ee0f7d7 code=0x7ffc0000 [ 179.468738][ T29] audit: type=1326 audit(179.312:8454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.1.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f397ee0df90 code=0x7ffc0000 [ 179.491634][ T29] audit: type=1326 audit(179.312:8455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.1.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f397ee0e3aa code=0x7ffc0000 [ 179.514540][ T29] audit: type=1326 audit(179.322:8456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.1.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 179.676448][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3485'. [ 179.794816][T13056] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3491'. [ 179.847760][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3491'. [ 179.977127][T13073] netlink: 'syz.5.3497': attribute type 20 has an invalid length. [ 179.985177][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3497'. [ 180.017083][ T3620] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.025587][ T3620] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.035645][T13073] netlink: 'syz.5.3497': attribute type 20 has an invalid length. [ 180.043606][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3497'. [ 180.053035][ T3620] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.061382][ T3620] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.106637][T13083] loop7: detected capacity change from 0 to 1024 [ 180.123746][T13083] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 180.132627][T13083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.146386][T13083] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3503: bg 0: block 88: padding at end of block bitmap is not set [ 180.192012][ T6036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.373746][T13121] blktrace: Concurrent blktraces are not allowed on loop10 [ 180.453160][T13126] loop7: detected capacity change from 0 to 4096 [ 180.473733][T13126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.520204][T13133] netlink: 'syz.5.3524': attribute type 1 has an invalid length. [ 180.558159][T13133] 8021q: adding VLAN 0 to HW filter on device bond6 [ 180.579758][T13136] bond6 (unregistering): Released all slaves [ 180.696393][T13138] bridge: RTM_NEWNEIGH with invalid ether address [ 180.750579][T13140] wg2: left promiscuous mode [ 180.755225][T13140] wg2: left allmulticast mode [ 180.773851][T13140] wg2: entered promiscuous mode [ 180.778739][T13140] wg2: entered allmulticast mode [ 180.827051][T13144] ip6gre1: entered promiscuous mode [ 180.832334][T13144] ip6gre1: entered allmulticast mode [ 180.856489][ T3620] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.864296][ T3620] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.876396][T13144] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.886342][ T3401] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.909986][ T6036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.232847][T13183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.259763][ T3401] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.295220][T13183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.424238][T13212] bridge: RTM_NEWNEIGH with invalid ether address [ 181.473789][T13219] loop7: detected capacity change from 0 to 164 [ 181.524528][T13219] tmpfs: Bad value for 'mpol' [ 181.639838][ T3401] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.891672][T13278] netlink: 'syz.7.3568': attribute type 1 has an invalid length. [ 182.052634][T13295] wg2: left promiscuous mode [ 182.057278][T13295] wg2: left allmulticast mode [ 182.066626][T13293] loop6: detected capacity change from 0 to 512 [ 182.124497][T13295] wg2: entered promiscuous mode [ 182.129428][T13295] wg2: entered allmulticast mode [ 182.143713][T13293] EXT4-fs (loop6): 1 orphan inode deleted [ 182.173994][T13293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.241718][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.832554][T13376] loop7: detected capacity change from 0 to 764 [ 183.216645][T13394] netlink: 'syz.1.3598': attribute type 10 has an invalid length. [ 183.225045][T13394] netlink: 'syz.1.3598': attribute type 10 has an invalid length. [ 183.234519][T13394] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 184.090173][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 184.090189][ T29] audit: type=1326 audit(184.072:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 184.157394][ T29] audit: type=1326 audit(184.102:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 184.180362][ T29] audit: type=1326 audit(184.102:8653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 184.203370][ T29] audit: type=1326 audit(184.102:8654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 184.226378][ T29] audit: type=1326 audit(184.102:8655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 184.249277][ T29] audit: type=1326 audit(184.102:8656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 184.272192][ T29] audit: type=1326 audit(184.102:8657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 184.295138][ T29] audit: type=1326 audit(184.112:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 184.317992][ T29] audit: type=1326 audit(184.112:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 184.340918][ T29] audit: type=1326 audit(184.112:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f397ee11667 code=0x7ffc0000 [ 184.514767][T13444] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 184.514767][T13444] The task syz.5.3618 (13444) triggered the difference, watch for misbehavior. [ 184.568481][T13446] __nla_validate_parse: 11 callbacks suppressed [ 184.568495][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3623'. [ 184.869040][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3627'. [ 184.919698][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.381627][T13478] netlink: 'syz.1.3644': attribute type 1 has an invalid length. [ 185.400087][T13476] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3633'. [ 185.412125][T13478] bond7: entered promiscuous mode [ 185.419756][T13478] 8021q: adding VLAN 0 to HW filter on device bond7 [ 185.459588][T13476] wg2: left promiscuous mode [ 185.464257][T13476] wg2: left allmulticast mode [ 185.487730][T13476] bond1: left promiscuous mode [ 185.492620][T13476] veth7: left promiscuous mode [ 185.497769][T13476] bond1: left allmulticast mode [ 185.502640][T13476] veth7: left allmulticast mode [ 185.507810][T13476] bond2: left promiscuous mode [ 185.512659][T13476] gretap1: left promiscuous mode [ 185.517816][T13476] veth8: left promiscuous mode [ 185.522680][T13476] veth8: left allmulticast mode [ 185.527656][T13476] ip6gre1: left allmulticast mode [ 185.533454][T13480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.540681][T13480] IPv6: NLM_F_CREATE should be set when creating new route [ 185.547886][T13480] IPv6: NLM_F_CREATE should be set when creating new route [ 185.557803][T13480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.567246][T13476] bond3: left promiscuous mode [ 185.574451][T13476] veth10: left promiscuous mode [ 185.579337][T13476] veth10: left allmulticast mode [ 185.586245][T13476] bridge8: left promiscuous mode [ 185.591243][T13476] bridge8: left allmulticast mode [ 185.601569][T13476] ip6gre2: left allmulticast mode [ 185.627701][T13476] bond4: left allmulticast mode [ 185.632698][T13476] ip6gretap0: left allmulticast mode [ 185.644885][T13482] netlink: 'syz.7.3634': attribute type 1 has an invalid length. [ 185.661776][T13478] 8021q: adding VLAN 0 to HW filter on device bond7 [ 185.677074][T13478] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 185.687674][T13478] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 185.702568][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3634'. [ 185.712919][T13478] bond7: (slave wireguard0): making interface the new active one [ 185.720755][T13478] wireguard0: entered promiscuous mode [ 185.730383][T13478] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 185.751225][T13480] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address [ 185.763165][T13480] bond7: (slave wireguard1): Enslaving as a backup interface with an up link [ 185.776944][T13482] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.799204][T13484] bond6 (unregistering): Released all slaves [ 186.065705][T13512] pimreg: entered allmulticast mode [ 186.137789][T13512] pimreg: left allmulticast mode [ 186.462237][T13524] veth0: entered promiscuous mode [ 186.467322][T13524] veth0: entered allmulticast mode [ 186.665839][T13527] loop7: detected capacity change from 0 to 128 [ 186.684156][T13527] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 186.719477][ T6036] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.764654][T13535] netlink: 'syz.1.3655': attribute type 1 has an invalid length. [ 186.801721][T13535] 8021q: adding VLAN 0 to HW filter on device bond8 [ 186.876825][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3655'. [ 186.911483][T13535] bond8 (unregistering): Released all slaves [ 187.061633][T13561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3666'. [ 187.131583][T13561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13561 comm=syz.3.3666 [ 187.393408][T13579] loop7: detected capacity change from 0 to 1024 [ 187.400557][T13579] EXT4-fs: Ignoring removed orlov option [ 187.408242][T13579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.447606][T13587] loop6: detected capacity change from 0 to 512 [ 187.461324][T13587] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.3674: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 187.479556][T13587] EXT4-fs error (device loop6): ext4_quota_enable:7139: comm syz.6.3674: Bad quota inode: 3, type: 0 [ 187.492116][T13587] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 187.507554][T13587] EXT4-fs (loop6): mount failed [ 187.561392][T13594] netlink: 'syz.6.3676': attribute type 1 has an invalid length. [ 187.579549][T13594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.595286][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3676'. [ 187.611495][T13594] bond2 (unregistering): Released all slaves [ 187.745706][ T6036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.771024][T13606] netlink: 'syz.7.3682': attribute type 4 has an invalid length. [ 187.781216][T13606] netlink: 'syz.7.3682': attribute type 4 has an invalid length. [ 187.812482][T13609] vlan2: entered allmulticast mode [ 187.817720][T13609] bridge_slave_0: entered allmulticast mode [ 187.847689][T13611] veth16: entered promiscuous mode [ 187.852875][T13611] veth16: entered allmulticast mode [ 188.072107][T13625] tipc: New replicast peer: 255.255.255.255 [ 188.078153][T13625] tipc: Enabled bearer , priority 10 [ 188.340241][T13637] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3693'. [ 188.374075][T13639] netlink: 'syz.1.3694': attribute type 21 has an invalid length. [ 188.383821][T13637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13637 comm=syz.5.3693 [ 188.399789][T13639] netlink: 'syz.1.3694': attribute type 1 has an invalid length. [ 188.407535][T13639] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3694'. [ 188.493244][T13644] netlink: 8 bytes leftover after parsing attributes in process `GPL'. [ 188.526199][T13644] ip6gre2: entered allmulticast mode [ 188.639985][T13647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13647 comm=syz.1.3697 [ 189.172409][T13681] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 189.200062][T13685] team0 (unregistering): left allmulticast mode [ 189.206323][T13685] team_slave_0: left allmulticast mode [ 189.211931][T13685] team_slave_1: left allmulticast mode [ 189.217486][T13685] team0 (unregistering): left promiscuous mode [ 189.223703][T13685] team_slave_0: left promiscuous mode [ 189.229298][T13685] team_slave_1: left promiscuous mode [ 189.234914][T13685] bridge0: port 1(team0) entered disabled state [ 189.258978][T13685] team0 (unregistering): Port device team_slave_0 removed [ 189.267268][T13685] team0 (unregistering): Port device team_slave_1 removed [ 189.386663][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 189.386726][ T29] audit: type=1326 audit(189.362:8749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.6.3720" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7725df749 code=0x0 [ 189.517868][T13710] loop7: detected capacity change from 0 to 8192 [ 190.259188][T13725] veth0: entered promiscuous mode [ 190.270548][T13725] __nla_validate_parse: 2 callbacks suppressed [ 190.270560][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3726'. [ 190.302699][T13725] veth0 (unregistering): left promiscuous mode [ 190.623081][ T29] audit: type=1326 audit(190.602:8750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13745 comm="syz.1.3732" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f397ee0f749 code=0x0 [ 191.374266][ T29] audit: type=1400 audit(191.352:8751): avc: denied { create } for pid=13750 comm="syz.6.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 191.427818][ T29] audit: type=1400 audit(191.352:8752): avc: denied { ioctl } for pid=13750 comm="syz.6.3734" path="socket:[48405]" dev="sockfs" ino=48405 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 191.452091][ T29] audit: type=1400 audit(191.402:8753): avc: denied { compute_member } for pid=13755 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 191.488833][T13766] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3741'. [ 191.513236][T13766] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13766 comm=syz.6.3741 [ 191.554954][T13764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3751'. [ 192.362729][T13777] veth0: entered promiscuous mode [ 192.367874][ T29] audit: type=1326 audit(192.342:8754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 192.390796][ T29] audit: type=1326 audit(192.342:8755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 192.427714][ T29] audit: type=1326 audit(192.402:8756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 192.431373][T13786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3742'. [ 192.476941][T13783] loop7: detected capacity change from 0 to 128 [ 192.479591][ T29] audit: type=1326 audit(192.402:8757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 192.506125][ T29] audit: type=1326 audit(192.402:8758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 192.530205][T13786] veth0 (unregistering): left promiscuous mode [ 192.570472][T13783] bio_check_eod: 18 callbacks suppressed [ 192.570521][T13783] syz.7.3744: attempt to access beyond end of device [ 192.570521][T13783] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 192.596865][T13783] syz.7.3744: attempt to access beyond end of device [ 192.596865][T13783] loop7: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 192.610443][T13783] buffer_io_error: 4 callbacks suppressed [ 192.610455][T13783] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 192.635559][T13783] syz.7.3744: attempt to access beyond end of device [ 192.635559][T13783] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 192.649056][T13783] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 192.658254][T13794] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.668114][T13783] syz.7.3744: attempt to access beyond end of device [ 192.668114][T13783] loop7: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 192.686118][T13783] syz.7.3744: attempt to access beyond end of device [ 192.686118][T13783] loop7: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 192.699643][T13783] Buffer I/O error on dev loop7, logical block 83, lost async page write [ 192.708708][T13783] syz.7.3744: attempt to access beyond end of device [ 192.708708][T13783] loop7: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 192.722153][T13783] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 192.751933][T13794] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.790865][T13783] syz.7.3744: attempt to access beyond end of device [ 192.790865][T13783] loop7: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 192.823096][T13783] syz.7.3744: attempt to access beyond end of device [ 192.823096][T13783] loop7: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 192.836570][T13783] Buffer I/O error on dev loop7, logical block 95, lost async page write [ 192.858814][T13794] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.879777][T13783] syz.7.3744: attempt to access beyond end of device [ 192.879777][T13783] loop7: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 192.893273][T13783] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 192.933664][T13783] syz.7.3744: attempt to access beyond end of device [ 192.933664][T13783] loop7: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 192.958438][T13783] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 193.000919][T13794] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.025458][T13783] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 193.035166][T13783] Buffer I/O error on dev loop7, logical block 111, lost async page write [ 193.054881][ T3596] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.066478][T13783] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 193.078979][ T3596] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.089512][ T5149] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.109764][ T5149] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.340435][T13824] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.559772][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.630036][T13834] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3769'. [ 193.673649][T13834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13834 comm=syz.7.3769 [ 193.887989][T13846] bridge: RTM_NEWNEIGH with invalid ether address [ 193.948581][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3774'. [ 193.982374][T13849] netlink: 'syz.6.3774': attribute type 5 has an invalid length. [ 193.990256][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3774'. [ 194.548333][T13877] loop7: detected capacity change from 0 to 2048 [ 194.569396][T13879] netlink: 'syz.6.3785': attribute type 13 has an invalid length. [ 194.581488][T13876] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.601151][T13877] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.680378][T13876] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.714624][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 194.714714][ T29] audit: type=1326 audit(194.692:8833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.7.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 194.743835][ T29] audit: type=1326 audit(194.692:8834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.7.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 194.812642][ T29] audit: type=1326 audit(194.752:8835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.7.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 194.820363][ T6036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.835653][ T29] audit: type=1326 audit(194.752:8836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.7.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 194.867696][ T29] audit: type=1326 audit(194.752:8837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.7.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 194.890692][ T29] audit: type=1326 audit(194.752:8838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.7.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 194.913822][ T29] audit: type=1326 audit(194.752:8839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.7.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 194.936789][ T29] audit: type=1326 audit(194.752:8840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.7.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 194.959788][ T29] audit: type=1326 audit(194.752:8841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.7.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 194.982801][ T29] audit: type=1326 audit(194.752:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="syz.7.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0265f749 code=0x7ffc0000 [ 195.008230][T13876] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.142252][T13876] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.226521][ T3631] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.252093][ T3631] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.266097][ T3631] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.289007][ T3631] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.370107][T13912] netlink: 'syz.3.3799': attribute type 13 has an invalid length. [ 195.477197][T13923] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 196.152627][T13958] loop7: detected capacity change from 0 to 8192 [ 196.861548][T13969] netlink: 'syz.3.3831': attribute type 1 has an invalid length. [ 196.886594][T13969] 8021q: adding VLAN 0 to HW filter on device bond5 [ 196.917674][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3831'. [ 196.985514][T13969] bond5 (unregistering): Released all slaves [ 197.008811][T13976] loop6: detected capacity change from 0 to 1024 [ 197.043052][T13976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.062044][T13976] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3819: bg 0: block 393: padding at end of block bitmap is not set [ 197.092393][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.135386][T13986] loop7: detected capacity change from 0 to 1024 [ 197.152813][T13986] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.179113][T13988] loop6: detected capacity change from 0 to 128 [ 197.199805][T13986] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3834: bg 0: block 393: padding at end of block bitmap is not set [ 197.200258][T13988] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 197.221940][T13988] FAT-fs (loop6): Filesystem has been set read-only [ 197.237490][T13988] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 197.240112][ T6036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.245455][T13988] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 197.579664][T13988] bio_check_eod: 5460 callbacks suppressed [ 197.579680][T13988] syz.6.3822: attempt to access beyond end of device [ 197.579680][T13988] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.600881][T13988] syz.6.3822: attempt to access beyond end of device [ 197.600881][T13988] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.615314][T13988] syz.6.3822: attempt to access beyond end of device [ 197.615314][T13988] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.663230][T13988] syz.6.3822: attempt to access beyond end of device [ 197.663230][T13988] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.676945][T13988] syz.6.3822: attempt to access beyond end of device [ 197.676945][T13988] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.690415][T13988] syz.6.3822: attempt to access beyond end of device [ 197.690415][T13988] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.705556][T13988] syz.6.3822: attempt to access beyond end of device [ 197.705556][T13988] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.718925][T13988] syz.6.3822: attempt to access beyond end of device [ 197.718925][T13988] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.734649][T13988] syz.6.3822: attempt to access beyond end of device [ 197.734649][T13988] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.748376][T13988] syz.6.3822: attempt to access beyond end of device [ 197.748376][T13988] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 198.168203][T14050] loop6: detected capacity change from 0 to 512 [ 198.178498][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3848'. [ 198.194728][T14050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 198.240775][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3848'. [ 198.260338][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 198.277776][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3848'. [ 198.287266][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3848'. [ 198.298348][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3848'. [ 198.323067][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3848'. [ 198.366462][T14066] loop6: detected capacity change from 0 to 1024 [ 198.395835][T14066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.431266][T14066] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3857: bg 0: block 393: padding at end of block bitmap is not set [ 198.495917][T14079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3871'. [ 198.504999][T14079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3871'. [ 198.524277][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.553328][T14083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3861'. [ 198.569238][T14083] bond6: entered promiscuous mode [ 198.574608][T14083] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.592283][T14088] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.600401][T14083] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.610106][T14083] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 198.613208][T14088] vhci_hcd: invalid port number 253 [ 198.627129][T14083] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 198.649594][T14095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.656856][T14095] IPv6: NLM_F_CREATE should be set when creating new route [ 198.664093][T14095] IPv6: NLM_F_CREATE should be set when creating new route [ 198.673460][T14095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.684654][T14095] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 198.719211][T14095] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 198.734384][T14105] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.757461][T14105] vhci_hcd: invalid port number 253 [ 198.770125][T14107] smc: net device bond0 applied user defined pnetid SYZ0 [ 198.806785][T14109] vlan0: entered allmulticast mode [ 198.815862][T14109] dummy0: entered allmulticast mode [ 198.939691][T14117] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.959676][T14117] vhci_hcd: invalid port number 253 [ 199.700828][T14124] syz_tun (unregistering): left allmulticast mode [ 199.727466][T14127] loop7: detected capacity change from 0 to 128 [ 199.741802][T14127] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 199.749661][T14127] FAT-fs (loop7): Filesystem has been set read-only [ 199.779717][T14127] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 199.787649][T14127] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 200.097892][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 200.097972][ T29] audit: type=1326 audit(200.072:8934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 200.166197][ T29] audit: type=1326 audit(200.112:8935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 200.189124][ T29] audit: type=1326 audit(200.112:8936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 200.212134][ T29] audit: type=1326 audit(200.112:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 200.235022][ T29] audit: type=1326 audit(200.112:8938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 200.258001][ T29] audit: type=1326 audit(200.112:8939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 200.280930][ T29] audit: type=1326 audit(200.112:8940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 200.303814][ T29] audit: type=1326 audit(200.122:8941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 200.326676][ T29] audit: type=1326 audit(200.122:8942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 200.349699][ T29] audit: type=1326 audit(200.122:8943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 200.850677][T14173] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.876846][T14176] blktrace: Concurrent blktraces are not allowed on loop2 [ 200.885784][T14172] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14172 comm=syz.3.3895 [ 200.901465][T14173] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.914831][T14182] loop7: detected capacity change from 0 to 512 [ 200.937883][T14182] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.3899: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 200.962294][T14188] netlink: 'syz.3.3901': attribute type 21 has an invalid length. [ 200.972221][T14173] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.980216][T14182] EXT4-fs error (device loop7): ext4_quota_enable:7139: comm syz.7.3899: Bad quota inode: 3, type: 0 [ 200.993244][T14182] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 201.008366][T14182] EXT4-fs (loop7): mount failed [ 201.009054][T14188] netlink: 'syz.3.3901': attribute type 1 has an invalid length. [ 201.053663][T14173] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.100124][T14194] loop7: detected capacity change from 0 to 2048 [ 201.130375][T14194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.146770][ T3630] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.166895][ T3630] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.200196][ T3630] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.211219][ T3630] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.230317][ T6036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.322360][T14210] loop7: detected capacity change from 0 to 512 [ 201.353448][T14210] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.409973][ T6036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.459367][T14222] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14222 comm=syz.7.3913 [ 201.467358][T14224] netlink: 'syz.6.3917': attribute type 21 has an invalid length. [ 201.480825][T14224] netlink: 'syz.6.3917': attribute type 1 has an invalid length. [ 201.550736][T14228] 8021q: adding VLAN 0 to HW filter on device bond7 [ 201.573960][T14235] loop6: detected capacity change from 0 to 2048 [ 201.582128][T14228] bond7 (unregistering): Released all slaves [ 201.592036][T14235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.618323][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.700810][T14266] veth16: entered promiscuous mode [ 202.705968][T14266] veth16: entered allmulticast mode [ 202.774554][T14272] netlink: 'syz.5.3931': attribute type 21 has an invalid length. [ 202.791028][T14272] netlink: 'syz.5.3931': attribute type 1 has an invalid length. [ 202.798796][T14272] __nla_validate_parse: 11 callbacks suppressed [ 202.798811][T14272] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3931'. [ 202.817714][T14274] veth0_macvtap: mtu greater than device maximum [ 203.251281][T14298] veth14: entered promiscuous mode [ 203.256435][T14298] veth14: entered allmulticast mode [ 203.373944][T14305] syz_tun: entered allmulticast mode [ 203.376649][T14307] netlink: 'syz.5.3948': attribute type 1 has an invalid length. [ 203.381295][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3949'. [ 203.396636][T14305] syz_tun (unregistering): left allmulticast mode [ 203.409427][T14307] 8021q: adding VLAN 0 to HW filter on device bond7 [ 203.423818][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3948'. [ 203.434179][T14307] bond7 (unregistering): Released all slaves [ 203.536978][T14317] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3953'. [ 203.565178][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3954'. [ 203.615196][T14323] loop6: detected capacity change from 0 to 164 [ 203.626643][T14323] tmpfs: Bad value for 'mpol' [ 203.663164][T14327] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3958'. [ 203.787371][T14336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3961'. [ 203.835457][T14337] syz_tun: entered allmulticast mode [ 203.843249][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3962'. [ 203.890670][T14337] syz_tun (unregistering): left allmulticast mode [ 203.908263][T14336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3961'. [ 203.982220][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3963'. [ 204.040257][T14340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.063660][T14342] vlan2: entered allmulticast mode [ 204.068801][T14342] dummy0: entered allmulticast mode [ 204.102334][T14340] bond5 (unregistering): Released all slaves [ 204.547925][T14377] syz_tun: entered allmulticast mode [ 204.556104][T14377] syz_tun (unregistering): left allmulticast mode [ 204.581998][T14383] 9pnet_fd: Insufficient options for proto=fd [ 204.594711][T14382] syzkaller0: entered promiscuous mode [ 204.600479][T14382] syzkaller0: entered allmulticast mode [ 204.694577][T14390] netlink: 'syz.6.3982': attribute type 1 has an invalid length. [ 204.716845][T14390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.743156][T14390] bond2 (unregistering): Released all slaves [ 204.903712][T14407] netlink: 'syz.6.3992': attribute type 4 has an invalid length. [ 204.919150][T14407] netlink: 'syz.6.3992': attribute type 4 has an invalid length. [ 205.092911][T14418] syzkaller0: entered promiscuous mode [ 205.098470][T14418] syzkaller0: entered allmulticast mode [ 205.133306][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 205.133322][ T29] audit: type=1400 audit(205.112:9088): avc: denied { bind } for pid=14421 comm="syz.5.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 205.193896][T14428] 9pnet_fd: Insufficient options for proto=fd [ 205.195259][T14426] 8021q: adding VLAN 0 to HW filter on device bond8 [ 205.239514][T14426] bond8 (unregistering): Released all slaves [ 205.484528][T14445] veth0_macvtap: mtu greater than device maximum [ 205.565121][T14447] loop6: detected capacity change from 0 to 1024 [ 205.594369][T14447] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 205.679576][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 205.680057][ T29] audit: type=1400 audit(205.592:9089): avc: denied { read write } for pid=14446 comm="syz.6.4009" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 205.712295][ T29] audit: type=1400 audit(205.592:9090): avc: denied { open } for pid=14446 comm="syz.6.4009" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 205.768945][ T29] audit: type=1326 audit(205.742:9091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 205.791900][ T29] audit: type=1326 audit(205.742:9092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 205.814993][ T29] audit: type=1326 audit(205.742:9093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 205.837858][ T29] audit: type=1326 audit(205.742:9094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 205.860757][ T29] audit: type=1326 audit(205.742:9095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 205.883611][ T29] audit: type=1326 audit(205.742:9096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 205.906539][ T29] audit: type=1326 audit(205.742:9097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 206.987588][T14463] Set syz1 is full, maxelem 65536 reached [ 207.074202][T14501] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 207.119834][T14507] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.130458][T14508] loop6: detected capacity change from 0 to 1024 [ 207.151137][T14508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 207.165638][T14507] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.179395][T14508] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.4029: Freeing blocks not in datazone - block = 0, count = 16 [ 207.203979][ T3596] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:28: bg 0: block 112: padding at end of block bitmap is not set [ 207.219095][ T3596] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 207.231546][ T3596] EXT4-fs (loop6): This should not happen!! Data will be lost [ 207.231546][ T3596] [ 207.242438][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 207.264789][T14507] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.295841][T14514] loop6: detected capacity change from 0 to 4096 [ 207.305310][T14514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.352297][T14507] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.554866][ T3596] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.595631][ T3596] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.604047][ T3596] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.612754][ T3596] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.669571][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.129746][T14534] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 208.208752][T14520] Set syz1 is full, maxelem 65536 reached [ 208.231597][T14537] __nla_validate_parse: 20 callbacks suppressed [ 208.231612][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4042'. [ 208.454148][T14556] loop6: detected capacity change from 0 to 2048 [ 208.480377][T14556] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz.6.4049: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 208.514789][T14556] EXT4-fs (loop6): get root inode failed [ 208.520510][T14556] EXT4-fs (loop6): mount failed [ 209.082297][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4051'. [ 209.109031][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4051'. [ 209.126963][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4051'. [ 209.138838][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4051'. [ 209.179801][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4051'. [ 209.423422][T14590] validate_nla: 1 callbacks suppressed [ 209.423437][T14590] netlink: 'syz.5.4059': attribute type 1 has an invalid length. [ 209.446912][T14590] bond7: entered promiscuous mode [ 209.452361][T14590] 8021q: adding VLAN 0 to HW filter on device bond7 [ 209.502855][T14596] loop7: detected capacity change from 0 to 512 [ 209.527968][T14590] 8021q: adding VLAN 0 to HW filter on device bond7 [ 209.535450][T14590] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 209.546121][T14590] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 209.558147][T14601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.565802][T14601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.576540][T14596] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.590521][T14590] bond7: (slave wireguard0): making interface the new active one [ 209.598273][T14590] wireguard0: entered promiscuous mode [ 209.605541][T14590] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 209.630235][T14601] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address [ 209.644264][T14601] bond7: (slave wireguard1): Enslaving as a backup interface with an up link [ 209.901782][ T6036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.998396][T14616] tipc: New replicast peer: 255.255.255.83 [ 210.004351][T14616] tipc: Enabled bearer , priority 10 [ 210.147057][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 210.147070][ T29] audit: type=1400 audit(210.122:9410): avc: denied { create } for pid=14621 comm="syz.7.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 210.180934][T14587] Set syz1 is full, maxelem 65536 reached [ 210.199690][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.504533][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4083'. [ 210.537769][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4083'. [ 210.561184][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4083'. [ 210.590827][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4083'. [ 210.621365][ T29] audit: type=1326 audit(210.602:9411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 210.644359][ T29] audit: type=1326 audit(210.602:9412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 210.667428][ T29] audit: type=1326 audit(210.602:9413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 210.690304][ T29] audit: type=1326 audit(210.602:9414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 210.713318][ T29] audit: type=1326 audit(210.602:9415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 210.753671][ T29] audit: type=1326 audit(210.712:9416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 210.776576][ T29] audit: type=1326 audit(210.712:9417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 210.799531][ T29] audit: type=1326 audit(210.712:9418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 210.822688][ T29] audit: type=1326 audit(210.712:9419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 212.645441][T14774] tipc: New replicast peer: 255.255.255.83 [ 212.651350][T14774] tipc: Enabled bearer , priority 10 [ 213.434093][T14804] netlink: 'syz.7.4137': attribute type 7 has an invalid length. [ 213.441937][T14804] __nla_validate_parse: 6 callbacks suppressed [ 213.441951][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4137'. [ 213.478564][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4140'. [ 213.488127][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4140'. [ 213.497753][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4140'. [ 213.507479][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4140'. [ 213.516975][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4140'. [ 213.526129][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4140'. [ 213.589565][T14819] loop6: detected capacity change from 0 to 128 [ 213.596507][T14819] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 213.607907][T14819] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 213.622394][T14815] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.4142: checksumming directory block 0 [ 213.667338][ T5015] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.099335][T14845] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4154'. [ 214.817149][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4168'. [ 214.832809][T14879] netlink: 'syz.5.4168': attribute type 5 has an invalid length. [ 214.840693][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4168'. [ 214.895740][T14886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14886 comm=syz.5.4179 [ 215.220741][T14912] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 215.286523][ T29] kauditd_printk_skb: 673 callbacks suppressed [ 215.286541][ T29] audit: type=1326 audit(215.262:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 215.315753][ T29] audit: type=1326 audit(215.262:10094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 215.469654][ T29] audit: type=1326 audit(215.332:10095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 215.492817][ T29] audit: type=1326 audit(215.332:10096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 215.515863][ T29] audit: type=1326 audit(215.332:10097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 215.538887][ T29] audit: type=1326 audit(215.332:10098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 215.561944][ T29] audit: type=1326 audit(215.332:10099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 215.584906][ T29] audit: type=1326 audit(215.332:10100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 215.607847][ T29] audit: type=1326 audit(215.332:10101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 215.630850][ T29] audit: type=1326 audit(215.332:10102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 215.765192][T14935] blktrace: Concurrent blktraces are not allowed on loop6 [ 216.622578][T14942] netlink: 'syz.7.4200': attribute type 7 has an invalid length. [ 216.694813][T14954] syzkaller0: entered promiscuous mode [ 216.700389][T14954] syzkaller0: entered allmulticast mode [ 216.927646][T14977] netlink: 'syz.6.4205': attribute type 7 has an invalid length. [ 216.960076][T14981] loop6: detected capacity change from 0 to 1024 [ 216.973140][T14981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.040541][ T5015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.145292][T14987] pim6reg: entered allmulticast mode [ 217.159824][T14987] pim6reg: left allmulticast mode [ 217.560695][T15009] netlink: 'syz.5.4217': attribute type 7 has an invalid length. [ 217.886243][T15031] wireguard2: entered promiscuous mode [ 217.891836][T15031] wireguard2: entered allmulticast mode [ 218.149368][T15045] SELinux: Context system_u:object_r:chfn_exec_t:s0 is not valid (left unmapped). [ 218.487469][T15088] netlink: 'syz.6.4249': attribute type 7 has an invalid length. [ 218.495371][T15088] __nla_validate_parse: 15 callbacks suppressed [ 218.495384][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4249'. [ 218.676765][T15110] loop7: detected capacity change from 0 to 1024 [ 218.693851][T15110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.726988][ T6036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.770068][T15123] bridge: RTM_NEWNEIGH with invalid ether address [ 218.890760][T15135] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 218.920370][T15126] netlink: 'syz.6.4266': attribute type 6 has an invalid length. [ 219.729452][T15148] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.771682][T15148] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.843355][T15148] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.903434][T15148] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.056719][ T3630] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.068792][ T3630] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.084274][ T3630] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.098434][ T3630] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.683661][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 220.683676][ T29] audit: type=1400 audit(220.662:10248): avc: denied { read } for pid=15175 comm="syz.6.4284" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 220.712263][ T29] audit: type=1400 audit(220.662:10249): avc: denied { open } for pid=15175 comm="syz.6.4284" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 220.739959][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4284'. [ 220.889660][ T29] audit: type=1326 audit(220.832:10250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 220.912730][ T29] audit: type=1326 audit(220.832:10251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 220.935740][ T29] audit: type=1326 audit(220.832:10252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 220.958723][ T29] audit: type=1326 audit(220.832:10253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 220.981786][ T29] audit: type=1326 audit(220.842:10254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 221.004840][ T29] audit: type=1326 audit(220.842:10255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 221.027706][ T29] audit: type=1326 audit(220.842:10256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 221.050652][ T29] audit: type=1326 audit(220.842:10257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397ee0f749 code=0x7ffc0000 [ 221.174820][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4288'. [ 221.238327][T15190] wireguard2: entered promiscuous mode [ 221.244120][T15190] wireguard2: entered allmulticast mode [ 221.407897][T15212] bridge: RTM_NEWNEIGH with invalid ether address [ 221.456803][T15218] tipc: Bearer : already 2 bearers with priority 10 [ 221.464199][T15218] tipc: Bearer : trying with adjusted priority [ 221.486161][T15218] tipc: New replicast peer: 255.255.255.83 [ 221.492039][T15218] tipc: Enabled bearer , priority 9 [ 221.505967][T15218] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 221.528741][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4302'. [ 221.662045][T15240] loop7: detected capacity change from 0 to 2048 [ 221.695074][T15240] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.719855][T15240] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.4309: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 221.748932][T15240] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.4309: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 221.778914][ T6036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.803837][T15220] netlink: 'syz.5.4300': attribute type 6 has an invalid length. [ 222.377526][T15278] syzkaller0: entered promiscuous mode [ 222.383059][T15278] syzkaller0: entered allmulticast mode [ 222.532849][T15289] netlink: 'syz.6.4323': attribute type 12 has an invalid length. [ 222.566198][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4335'. [ 222.591771][T15291] wireguard0: entered promiscuous mode [ 222.597267][T15291] wireguard0: entered allmulticast mode [ 222.932948][T15296] netlink: 'syz.3.4324': attribute type 6 has an invalid length. [ 223.042272][T15309] loop6: detected capacity change from 0 to 128 [ 223.054018][T15309] bio_check_eod: 18106 callbacks suppressed [ 223.054031][T15309] syz.6.4331: attempt to access beyond end of device [ 223.054031][T15309] loop6: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 223.115579][T15315] tipc: Bearer : already 2 bearers with priority 10 [ 223.122831][T15315] tipc: Bearer : trying with adjusted priority [ 223.129593][T15315] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 223.172899][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4337'. [ 223.185232][T15321] wireguard0: entered promiscuous mode [ 223.190965][T15321] wireguard0: entered allmulticast mode [ 223.500130][T15341] loop6: detected capacity change from 0 to 1024 [ 223.521601][T15341] ext4: Unknown parameter 'uid' [ 223.532572][T15330] netlink: 'syz.1.4340': attribute type 6 has an invalid length. [ 223.883461][T15347] tipc: Bearer : already 2 bearers with priority 10 [ 223.890750][T15347] tipc: Bearer : trying with adjusted priority [ 223.897716][T15347] tipc: New replicast peer: 255.255.255.83 [ 223.903653][T15347] tipc: Enabled bearer , priority 9 [ 223.910992][T15347] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 224.115982][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4350'. [ 224.128224][T15354] wireguard0: entered promiscuous mode [ 224.133793][T15354] wireguard0: entered allmulticast mode [ 224.194750][T15327] syz.3.4342 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 224.208966][T15327] CPU: 0 UID: 0 PID: 15327 Comm: syz.3.4342 Not tainted syzkaller #0 PREEMPT(voluntary) [ 224.208991][T15327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.209071][T15327] Call Trace: [ 224.209079][T15327] [ 224.209086][T15327] __dump_stack+0x1d/0x30 [ 224.209109][T15327] dump_stack_lvl+0xe8/0x140 [ 224.209128][T15327] dump_stack+0x15/0x1b [ 224.209143][T15327] dump_header+0x81/0x220 [ 224.209158][T15327] oom_kill_process+0x342/0x400 [ 224.209256][T15327] out_of_memory+0x979/0xb80 [ 224.209284][T15327] try_charge_memcg+0x610/0xa10 [ 224.209355][T15327] obj_cgroup_charge_pages+0xa6/0x150 [ 224.209372][T15327] __memcg_kmem_charge_page+0x9f/0x170 [ 224.209384][T15327] __alloc_frozen_pages_noprof+0x188/0x360 [ 224.209524][T15327] alloc_pages_mpol+0xb3/0x260 [ 224.209540][T15327] alloc_pages_noprof+0x90/0x130 [ 224.209560][T15327] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 224.209641][T15327] __kvmalloc_node_noprof+0x483/0x670 [ 224.209667][T15327] ? ip_set_alloc+0x24/0x30 [ 224.209706][T15327] ? ip_set_alloc+0x24/0x30 [ 224.209730][T15327] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 224.209826][T15327] ip_set_alloc+0x24/0x30 [ 224.209854][T15327] hash_netiface_create+0x282/0x740 [ 224.209885][T15327] ? __pfx_hash_netiface_create+0x10/0x10 [ 224.209902][T15327] ip_set_create+0x3cc/0x970 [ 224.209918][T15327] ? __nla_parse+0x40/0x60 [ 224.209976][T15327] nfnetlink_rcv_msg+0x4c6/0x590 [ 224.210037][T15327] netlink_rcv_skb+0x123/0x220 [ 224.210054][T15327] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 224.210081][T15327] nfnetlink_rcv+0x167/0x16c0 [ 224.210095][T15327] ? perf_swevent_event+0x1e8/0x450 [ 224.210112][T15327] ? perf_tp_event+0x9b3/0x9f0 [ 224.210179][T15327] ? perf_event_set_state+0x5a/0x440 [ 224.210196][T15327] ? trace_event_reg+0xdc/0x170 [ 224.210263][T15327] ? perf_trace_add+0x176/0x1a0 [ 224.210275][T15327] ? event_sched_in+0x675/0x750 [ 224.210303][T15327] ? bsearch+0x95/0xc0 [ 224.210350][T15327] ? should_fail_ex+0x30/0x280 [ 224.210397][T15327] ? selinux_nlmsg_lookup+0x99/0x890 [ 224.210430][T15327] ? __rcu_read_unlock+0x34/0x70 [ 224.210444][T15327] ? __netlink_lookup+0x266/0x2a0 [ 224.210497][T15327] netlink_unicast+0x5c0/0x690 [ 224.210514][T15327] netlink_sendmsg+0x58b/0x6b0 [ 224.210526][T15327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.210537][T15327] __sock_sendmsg+0x145/0x180 [ 224.210566][T15327] ____sys_sendmsg+0x31e/0x4e0 [ 224.210578][T15327] ___sys_sendmsg+0x17b/0x1d0 [ 224.210618][T15327] __x64_sys_sendmsg+0xd4/0x160 [ 224.210631][T15327] x64_sys_call+0x191e/0x3000 [ 224.210643][T15327] do_syscall_64+0xd2/0x200 [ 224.210654][T15327] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 224.210745][T15327] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 224.210828][T15327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.210848][T15327] RIP: 0033:0x7f40f261f749 [ 224.210872][T15327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.210889][T15327] RSP: 002b:00007f40f107f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.210930][T15327] RAX: ffffffffffffffda RBX: 00007f40f2875fa0 RCX: 00007f40f261f749 [ 224.210942][T15327] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000005 [ 224.211000][T15327] RBP: 00007f40f26a3f91 R08: 0000000000000000 R09: 0000000000000000 [ 224.211007][T15327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.211014][T15327] R13: 00007f40f2876038 R14: 00007f40f2875fa0 R15: 00007ffce14c6c68 [ 224.211025][T15327] [ 224.553395][T15327] memory: usage 307200kB, limit 307200kB, failcnt 110 [ 224.560171][T15327] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 224.568121][T15327] kmem: usage 161144kB, limit 9007199254740988kB, failcnt 0 [ 224.575417][T15327] Memory cgroup stats for /syz3: [ 224.576498][T15327] cache 148979712 [ 224.585057][T15327] rss 581632 [ 224.588255][T15327] shmem 69246976 [ 224.591911][T15327] mapped_file 266240 [ 224.595785][T15327] dirty 135168 [ 224.599198][T15327] writeback 0 [ 224.602491][T15327] workingset_refault_anon 1536 [ 224.607321][T15327] workingset_refault_file 0 [ 224.611907][T15327] swap 0 [ 224.614744][T15327] swapcached 0 [ 224.618126][T15327] pgpgin 309161 [ 224.621595][T15327] pgpgout 272647 [ 224.625130][T15327] pgfault 277653 [ 224.628720][T15327] pgmajfault 201 [ 224.632282][T15327] inactive_anon 0 [ 224.635947][T15327] active_anon 69824512 [ 224.640045][T15327] inactive_file 4096 [ 224.643927][T15327] active_file 10485760 [ 224.647972][T15327] unevictable 69246976 [ 224.652052][T15327] hierarchical_memory_limit 314572800 [ 224.657406][T15327] hierarchical_memsw_limit 9223372036854771712 [ 224.663608][T15327] total_cache 148979712 [ 224.667754][T15327] total_rss 581632 [ 224.671542][T15327] total_shmem 69246976 [ 224.675675][T15327] total_mapped_file 266240 [ 224.680129][T15327] total_dirty 135168 [ 224.684116][T15327] total_writeback 0 [ 224.687906][T15327] total_workingset_refault_anon 1536 [ 224.693208][T15327] total_workingset_refault_file 0 [ 224.698219][T15327] total_swap 0 [ 224.701607][T15327] total_swapcached 0 [ 224.705491][T15327] total_pgpgin 309161 [ 224.709468][T15327] total_pgpgout 272647 [ 224.713553][T15327] total_pgfault 277653 [ 224.717602][T15327] total_pgmajfault 201 [ 224.721672][T15327] total_inactive_anon 0 [ 224.725840][T15327] total_active_anon 69824512 [ 224.730493][T15327] total_inactive_file 4096 [ 224.734893][T15327] total_active_file 10485760 [ 224.739458][T15327] total_unevictable 69246976 [ 224.744054][T15327] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4342,pid=15325,uid=0 [ 224.758719][T15327] Memory cgroup out of memory: Killed process 15327 (syz.3.4342) total-vm:93836kB, anon-rss:1268kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 224.789317][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4364'. [ 224.846845][T15364] wireguard2: entered promiscuous mode [ 224.852707][T15364] wireguard2: entered allmulticast mode [ 225.710294][T15403] netlink: 'syz.7.4367': attribute type 6 has an invalid length. [ 227.397898][T15427] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4376'. [ 227.483809][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 227.483824][ T29] audit: type=1400 audit(227.462:10299): avc: denied { create } for pid=15428 comm="syz.5.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 227.583661][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4379'. [ 227.751716][ T29] audit: type=1326 audit(227.732:10300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15435 comm="syz.5.4380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee84c5f749 code=0x0 [ 228.094513][ T29] audit: type=1400 audit(228.072:10301): avc: denied { read } for pid=15449 comm="syz.3.4388" lport=39415 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 228.410509][T15468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15468 comm=syz.6.4397 [ 228.474465][T15477] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4401'. [ 228.483535][T15477] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4401'. [ 228.513557][T15478] ip6gre3: entered allmulticast mode [ 228.543088][ T29] audit: type=1326 audit(228.522:10302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.3.4403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40f261f749 code=0x0 [ 228.619201][T15493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.626906][T15493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.148192][T15522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4416'. [ 229.157882][T15522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4416'. [ 229.161784][T15530] veth20: entered promiscuous mode [ 229.172044][T15530] veth20: entered allmulticast mode [ 229.207665][T15532] wg2: left promiscuous mode [ 229.212302][T15532] wg2: left allmulticast mode [ 229.234837][T15532] wg2: entered promiscuous mode [ 229.239775][T15532] wg2: entered allmulticast mode [ 229.304124][T15544] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4426'. [ 229.313197][T15544] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4426'. [ 229.399133][ T29] audit: type=1400 audit(229.372:10303): avc: denied { mounton } for pid=15554 comm="syz.3.4431" path="/892/file0" dev="tmpfs" ino=4670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 229.616524][ T29] audit: type=1400 audit(229.592:10304): avc: denied { map } for pid=15552 comm="syz.6.4430" path="socket:[57648]" dev="sockfs" ino=57648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 229.659515][T15570] tipc: Enabling of bearer rejected, already enabled [ 229.719597][T15574] netlink: 'syz.3.4439': attribute type 10 has an invalid length. [ 229.746694][T15574] netlink: 'syz.3.4439': attribute type 10 has an invalid length. [ 229.859289][T15583] veth22: entered promiscuous mode [ 229.864548][T15583] veth22: entered allmulticast mode [ 229.904681][T15591] netlink: 'syz.3.4444': attribute type 10 has an invalid length. [ 229.907547][T15586] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.931555][ T29] audit: type=1400 audit(229.912:10305): avc: denied { read } for pid=15593 comm="syz.7.4446" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 229.954666][ T29] audit: type=1400 audit(229.912:10306): avc: denied { open } for pid=15593 comm="syz.7.4446" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 229.983399][T15586] bond5 (unregistering): Released all slaves [ 229.988816][ T29] audit: type=1400 audit(229.962:10307): avc: denied { ioctl } for pid=15593 comm="syz.7.4446" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 230.039095][ T29] audit: type=1400 audit(230.012:10308): avc: denied { watch } for pid=15598 comm="syz.7.4448" path="/control" dev="ramfs" ino=57718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 230.068857][T15600] smc: net device bond0 erased user defined pnetid SYZ0 [ 230.127345][T15608] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 230.184947][T15616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4455'. [ 230.294260][T15631] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4463'. [ 230.304028][T15633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4464'. [ 230.313319][T15631] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4463'. [ 230.325599][T15633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4464'. [ 230.356672][T15638] binfmt_misc: register: failed to install interpreter file ./file0 [ 230.471079][T15648] loop7: detected capacity change from 0 to 128 [ 231.119889][T15668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4478'. [ 231.156843][T15670] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15670 comm=syz.3.4479 [ 231.186920][T15674] netlink: 'syz.3.4481': attribute type 4 has an invalid length. [ 231.196325][T15674] netlink: 'syz.3.4481': attribute type 4 has an invalid length. [ 231.279568][T15684] tipc: Bearer : already 2 bearers with priority 10 [ 231.286885][T15684] tipc: Bearer : trying with adjusted priority [ 231.293685][T15684] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 232.131731][T15713] bridge: RTM_NEWNEIGH with invalid ether address [ 232.165002][T15715] IPv6: NLM_F_CREATE should be specified when creating new route [ 232.383081][T15725] 0ªî{X¹¦: renamed from gretap0 [ 232.390236][T15725] 0ªî{X¹¦: entered allmulticast mode [ 232.396095][T15727] loop6: detected capacity change from 0 to 256 [ 232.396369][T15725] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 232.418748][T15727] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.449183][T15727] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.457879][T15727] FAT-fs (loop6): Filesystem has been set read-only [ 232.646985][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 232.646999][ T29] audit: type=1400 audit(232.622:10383): avc: denied { firmware_load } for pid=15732 comm=77DEA305FF07 path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 232.769935][T15744] netlink: 'syz.6.4505': attribute type 7 has an invalid length. [ 232.793011][T15743] geneve2: entered promiscuous mode [ 232.798230][T15743] geneve2: entered allmulticast mode [ 232.808633][ T57] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 232.820159][ T57] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 232.828552][ T57] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 232.837450][ T57] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 232.925129][ T29] audit: type=1400 audit(232.902:10384): avc: denied { nlmsg_read } for pid=15755 comm="syz.5.4514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.019039][ T29] audit: type=1400 audit(232.992:10385): avc: denied { connect } for pid=15764 comm="syz.7.4518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 233.087249][ T29] audit: type=1326 audit(233.062:10386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 233.114793][ T29] audit: type=1326 audit(233.092:10387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 233.137945][ T29] audit: type=1326 audit(233.092:10388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 233.161109][ T29] audit: type=1326 audit(233.092:10389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 233.243620][ T29] audit: type=1326 audit(233.092:10390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 233.266647][ T29] audit: type=1326 audit(233.092:10391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 233.289694][ T29] audit: type=1326 audit(233.092:10392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84c5f749 code=0x7ffc0000 [ 233.635374][T15793] netlink: 'syz.5.4529': attribute type 30 has an invalid length. [ 234.515283][T15858] loop7: detected capacity change from 0 to 128 [ 234.678436][T15872] ================================================================== [ 234.686551][T15872] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 234.695151][T15872] [ 234.697472][T15872] write to 0xffff88815d8a28e8 of 8 bytes by task 15878 on cpu 1: [ 234.705189][T15872] shmem_file_splice_read+0x470/0x600 [ 234.710563][T15872] splice_direct_to_actor+0x26f/0x680 [ 234.715933][T15872] do_splice_direct+0xda/0x150 [ 234.720690][T15872] do_sendfile+0x380/0x650 [ 234.725124][T15872] __x64_sys_sendfile64+0x105/0x150 [ 234.730322][T15872] x64_sys_call+0x2bb4/0x3000 [ 234.734988][T15872] do_syscall_64+0xd2/0x200 [ 234.739485][T15872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.745379][T15872] [ 234.747689][T15872] write to 0xffff88815d8a28e8 of 8 bytes by task 15872 on cpu 0: [ 234.755397][T15872] shmem_file_splice_read+0x470/0x600 [ 234.760776][T15872] splice_direct_to_actor+0x26f/0x680 [ 234.766143][T15872] do_splice_direct+0xda/0x150 [ 234.770902][T15872] do_sendfile+0x380/0x650 [ 234.775319][T15872] __x64_sys_sendfile64+0x105/0x150 [ 234.780522][T15872] x64_sys_call+0x2bb4/0x3000 [ 234.785199][T15872] do_syscall_64+0xd2/0x200 [ 234.789700][T15872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.795591][T15872] [ 234.797905][T15872] value changed: 0x0000000000018323 -> 0x00000000000183ad [ 234.805003][T15872] [ 234.807317][T15872] Reported by Kernel Concurrency Sanitizer on: [ 234.813455][T15872] CPU: 0 UID: 0 PID: 15872 Comm: syz.1.4563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 234.823258][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.833323][T15872] ================================================================== [ 242.209680][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!