last executing test programs: 6m58.370821496s ago: executing program 4 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 6m58.161829739s ago: executing program 4 (id=254): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000000c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x0) 6m57.691345765s ago: executing program 4 (id=262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x0, 0x10000000000000, {0x0, 0xff, 0x4}, {0x2}, 0x0, 0xff}, {0x3, 0x1, {0x0, 0x1, 0x1}, {0x2}}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 6m56.593699811s ago: executing program 4 (id=277): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1054, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x5, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 6m55.516611067s ago: executing program 4 (id=293): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) 6m55.128987332s ago: executing program 4 (id=302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 6m55.063789823s ago: executing program 32 (id=302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 6m50.796242594s ago: executing program 3 (id=369): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x3}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0) 6m50.776756625s ago: executing program 3 (id=379): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) r1 = syz_io_uring_setup(0x5bf, &(0x7f0000000440)={0x0, 0xe7a4, 0x0, 0x1, 0x294}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_READ=@pass_buffer={0x16, 0xa, 0x0, @fd_index=0x9, 0xc, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x68c2, 0xc994, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) 6m49.841759338s ago: executing program 3 (id=386): mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r0, 0x0, 0x1000}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 6m49.783283479s ago: executing program 3 (id=387): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1054, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x5, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 6m49.086147219s ago: executing program 3 (id=403): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 6m48.893460401s ago: executing program 3 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mq_open(0x0, 0x42, 0x108, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r2, &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x0) 6m48.893312921s ago: executing program 33 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mq_open(0x0, 0x42, 0x108, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r2, &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x0) 6m30.404202396s ago: executing program 1 (id=836): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) 6m30.16685537s ago: executing program 1 (id=841): mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0xc1) fcntl$notify(r1, 0x402, 0x1e) r2 = open(&(0x7f0000000400)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x114, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(r3, &(0x7f0000000340)=[{&(0x7f00000004c0)='B', 0x1}], 0x1, 0x0) 6m30.017740702s ago: executing program 1 (id=844): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) 6m29.901147024s ago: executing program 1 (id=845): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@nouid32}, {@minixdf}, {@jqfmt_vfsold}, {@nombcache}]}, 0x1, 0x504, &(0x7f0000001480)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9sCWE0KoEqJHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lAMSPyJQg8TBaMaT1E3tJtokdhR/PtJo3ps3nu97cea9+Dn2C2BoXY2I3YgYi4h7ETGdHc9lW9xqb8l5z/ceLe3vPVrKRat155+5tDw5Fh2PSVzJrlmMiB9+N+InuVfjNrZ31har1cpmlp9t1jZmG9s7N1ZriyuVlcp6ubwwvzD3yc2Py2fW1vdqY1nqq8/+sPutnyXVmsqOdLbjLLWbXjiMkxiNiO+fR7ABGMnaMzboivC55CPi7Yh4P73/p2MkfTYBgMus1ZqO1nRnHgC47PLpHFguX8rmAqYiny+V2nN478RkvlpvNK/fr2+tL7fnymaikL+/Wq3MZXOFM1HIJfn5NP0iXz6SvxkRb0XEL8Yn0nxpqV5dHuQfPgAwxK4cGf//M94e/wGAS6446AoAAH1n/AeA4WP8B4DhY/wHgOHTHv8nBl0NAKCPvP4HgOFj/AeAofKD27eTrbWfff/18oPtrbX6gxvLlcZaqba1VFqqb26UVur1lfQ7e2rHXa9ar2/MfxRbD2e+vdFozja2d+7W6lvrzbvp93rfrRTSs3b70DIAoJe33nv651wyIn86kW7RsZZDYaA1A85bftAVAAZmZNAVAAbGal8wvE7xGt/0AFwSXZbofUmx2weEWq1W6/yqBJyza18y/w/DqmP+338Bw5Ax/w/Dy/w/DK9WK3fSNf/jpCcCABebOX6gx/v/b2f732ZvDvx4+egZT7o+bjfrXs6uggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHABHaz/W8rWAp+KfL5UingjImaikLu/Wq3MRcSbEfGn8cJ4kp8fcJ0BgNPK/y2Xrf91bfrDqZeK3r1ymByLiJ/+6s4vHy42m5t/jBjL/Wv84HjzSXa83P/aAwDHOxin033HC/nne4+WDrZ+1ufv34mIYjv+/t5Y7B/GH43RdF+MQkRM/juX5dtyHXMXp7H7OCK+2K39uZhK50DaK58ejZ/EfqOv8fMvxc+nZe198rP4whnUBYbN06T/udXt/svH1XTf/f4vpj3U6WX9X3Kppf20D3wR/6D/G+nR/109aYyPfv+9dmri1bLHEV8ejTiIvd/R/xzEz/WI/+EJ4//lK+++36us9euIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m85Rz/YeDf7x6fU3e5Ul7Z/sEb94TPu/fsL2/+Z/9370tdfE/+YH3eLn453XxE/GxG+cMP7i5O+KvcqS+Ms92n/c83/9hPGf/XXnlWXDAYDBaWzvrC1Wq5VNCYmLn0h+ZS9ANbomPutXrLHoXvTzD9r39JGiVuv1F/yse1GvHuMsZt2Ai+Dwpo+I/w66MgAAAAAAAAAAAAAAQFf9+MTSoNsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fX/AAAA//+YXdZi") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") r1 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fallocate(r1, 0x20, 0x0, 0x7000000) 6m29.423015841s ago: executing program 1 (id=850): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 6m29.342574332s ago: executing program 1 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 6m29.286707433s ago: executing program 34 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 6m17.232870735s ago: executing program 2 (id=1020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r3, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000001b00)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x38, 0xd73, 0x66, 0x0, 0xce, 0x6, 0x0, @loopback, @remote}, {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x6, 0x0, 0x80}, {"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"}}}}}}, 0x0) 6m17.151605747s ago: executing program 2 (id=1022): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m17.087309617s ago: executing program 2 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newnexthop={0x30, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@grpquota}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4be, &(0x7f0000000980)="$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") setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000003c0)={0xff, {{0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2e6}}}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000380)=""/79, 0x4f}], 0x1) 6m16.169483041s ago: executing program 2 (id=1035): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 6m16.101872372s ago: executing program 2 (id=1038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000edff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000640)='console\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 6m16.029466862s ago: executing program 2 (id=1040): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 6m16.000863933s ago: executing program 35 (id=1040): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 5m4.723578285s ago: executing program 0 (id=2747): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 5m4.673783805s ago: executing program 0 (id=2749): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x41) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x80) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 5m4.575518877s ago: executing program 0 (id=2753): r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 5m4.437674389s ago: executing program 0 (id=2765): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x7000000) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 5m4.108062674s ago: executing program 0 (id=2760): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 5m3.965701956s ago: executing program 0 (id=2776): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) fallocate(r0, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r0, 0x0, 0x478) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 5m3.922577156s ago: executing program 36 (id=2776): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) fallocate(r0, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r0, 0x0, 0x478) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 6.793090812s ago: executing program 6 (id=5671): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.258916162s ago: executing program 6 (id=5680): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 2.992990012s ago: executing program 9 (id=5686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) socket$packet(0x11, 0x3, 0x300) 2.771685966s ago: executing program 8 (id=5687): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) sendmmsg(r2, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000380)="ae675c59f67696e70ee12544", 0xc}], 0x1}}], 0x1, 0x41) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.769188946s ago: executing program 6 (id=5688): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2.356703312s ago: executing program 7 (id=5689): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.940341139s ago: executing program 8 (id=5691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x4e, {}, 'lo\x00'}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x781002, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x10000}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.732252692s ago: executing program 9 (id=5692): unshare(0x20000400) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unshare(0x26020280) 1.524486576s ago: executing program 7 (id=5693): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1.315925969s ago: executing program 9 (id=5694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.315687439s ago: executing program 8 (id=5695): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) close_range(r2, 0xffffffffffffffff, 0x0) 1.092588833s ago: executing program 7 (id=5696): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_newaddr={0x18, 0x14, 0x4}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) 884.785436ms ago: executing program 9 (id=5697): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0xb) 676.429779ms ago: executing program 8 (id=5698): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180900"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x1012}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 469.093063ms ago: executing program 9 (id=5699): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000000ffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 467.849973ms ago: executing program 7 (id=5700): syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_emit_ethernet(0x0, 0x0, 0x0) 467.091523ms ago: executing program 8 (id=5701): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="00005fc459a603ef6060c5f038edc5fd2c000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40004) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 245.012766ms ago: executing program 6 (id=5702): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}, 0x80}, {{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000380)=[{0x0, 0x34}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000002a00)=""/4096, 0xfffffffffffffe15}, {&(0x7f00000004c0)=""/75, 0x4b}], 0x2, &(0x7f0000000340)=""/45, 0x2d}, 0x8}, {{&(0x7f0000000540)=@xdp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)=""/18, 0x12}], 0x1, &(0x7f0000000640)=""/130, 0x82}, 0xe9a8}, {{&(0x7f0000000700)=@caif, 0x80, &(0x7f00000008c0)=[{&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/226, 0xe2}], 0x2}, 0x6}], 0x6, 0x0, 0x0) 220.496436ms ago: executing program 7 (id=5704): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x2, 0xa, 0x73) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 217.393567ms ago: executing program 9 (id=5705): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 209.589327ms ago: executing program 8 (id=5706): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x7fffffe, 0x3e8, 0xe8, 0x0, 0x1f8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@empty, @empty, 0x0, 0xffffffff, 0xa, 0xe, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x0, 0x401, 0x1, 0x0, 0x6, 0x9, 'syzkaller1\x00', 'ip6gretap0\x00', {0xff}, {}, 0x0, 0xc30184ff0a93acbb}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@remote, @loopback, @local, 0x4, 0xfffffffe}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x9d}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) close(r3) 209.398987ms ago: executing program 5 (id=5707): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) syncfs(0xffffffffffffffff) 158.145787ms ago: executing program 5 (id=5708): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000100)) 115.278958ms ago: executing program 5 (id=5709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 114.640178ms ago: executing program 6 (id=5710): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 90.667649ms ago: executing program 5 (id=5711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x0) 52.293709ms ago: executing program 5 (id=5712): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) lsm_set_self_attr(0x66, 0x0, 0x40, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 28.07806ms ago: executing program 6 (id=5713): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x400000, 0x0) 17.81704ms ago: executing program 7 (id=5714): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r4 = fsmount(r1, 0x0, 0x0) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=5715): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): oad } for pid=16891 comm="syz.8.4727" path="/56/file0/bus" dev="loop8" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 278.883185][T16898] wg2: left promiscuous mode [ 278.887833][T16898] wg2: left allmulticast mode [ 278.905549][T16898] wg2: entered promiscuous mode [ 278.910486][T16898] wg2: entered allmulticast mode [ 279.716515][T16908] loop9: detected capacity change from 0 to 512 [ 279.730844][T16908] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 279.743487][T16908] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.756458][ T29] audit: type=1400 audit(1746753836.350:18203): avc: denied { read } for pid=16907 comm="syz.9.4734" path="/405/file1/file1" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 279.779492][ T29] audit: type=1400 audit(1746753836.350:18204): avc: denied { setattr } for pid=16907 comm="syz.9.4734" path="/405/file1/file1" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 279.812610][ T29] audit: type=1400 audit(1746753836.400:18205): avc: denied { append } for pid=16907 comm="syz.9.4734" name="file1" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 279.837525][ T29] audit: type=1400 audit(1746753836.430:18206): avc: denied { ioctl } for pid=16907 comm="syz.9.4734" path="/405/file1/file1" dev="loop9" ino=18 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 279.837724][T16908] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #19: comm syz.9.4734: corrupted inode contents [ 279.874160][T16908] EXT4-fs error (device loop9): ext4_dirty_inode:6103: inode #19: comm syz.9.4734: mark_inode_dirty error [ 279.885689][T16908] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #19: comm syz.9.4734: corrupted inode contents [ 279.897726][T16908] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #19: comm syz.9.4734: mark_inode_dirty error [ 279.910004][T16908] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #19: comm syz.9.4734: mark inode dirty (error -117) [ 279.922789][T16908] EXT4-fs warning (device loop9): ext4_evict_inode:279: xattr delete (err -117) [ 279.947428][T11880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 280.078728][ C0] TCP: out of memory -- consider tuning tcp_mem [ 281.826544][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4744'. [ 282.033923][T16935] netlink: 'syz.9.4746': attribute type 21 has an invalid length. [ 282.041839][T16935] netlink: 'syz.9.4746': attribute type 20 has an invalid length. [ 282.049753][T16935] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.245418][ T29] audit: type=1400 audit(1746753838.830:18207): avc: denied { remount } for pid=16936 comm="syz.5.4747" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 283.158216][T16953] loop7: detected capacity change from 0 to 8192 [ 283.165034][T16953] vfat: Unknown parameter '01777777777777777777777' [ 283.183541][ T29] audit: type=1400 audit(1746753839.770:18208): avc: denied { getopt } for pid=16952 comm="syz.7.4754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 283.781789][ T29] audit: type=1326 audit(1746753840.370:18209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.9.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 283.805651][ T29] audit: type=1326 audit(1746753840.370:18210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.9.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 283.829312][ T29] audit: type=1326 audit(1746753840.370:18211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.9.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 283.853033][ T29] audit: type=1326 audit(1746753840.370:18212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.9.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 283.876741][ T29] audit: type=1326 audit(1746753840.370:18213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.9.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 286.937386][T16997] -1: renamed from syzkaller0 [ 287.137840][ T29] audit: type=1400 audit(1746753843.720:18214): avc: denied { connect } for pid=16998 comm="syz.9.4775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.157637][ T29] audit: type=1400 audit(1746753843.720:18215): avc: denied { write } for pid=16998 comm="syz.9.4775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.559168][T17007] bridge0: entered promiscuous mode [ 287.564484][T17007] macvlan2: entered promiscuous mode [ 287.570847][T17007] bridge0: port 3(macvlan2) entered blocking state [ 287.577486][T17007] bridge0: port 3(macvlan2) entered disabled state [ 287.584255][T17007] macvlan2: entered allmulticast mode [ 287.589787][T17007] bridge0: entered allmulticast mode [ 287.595910][T17007] macvlan2: left allmulticast mode [ 287.601110][T17007] bridge0: left allmulticast mode [ 287.606587][T17007] bridge0: left promiscuous mode [ 288.597161][T17019] openvswitch: netlink: Message has 6 unknown bytes. [ 290.718103][T17032] loop9: detected capacity change from 0 to 4096 [ 290.726881][T17032] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.759409][T11880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.608406][T17038] hub 2-0:1.0: USB hub found [ 291.614126][T17038] hub 2-0:1.0: 8 ports detected [ 291.776228][T17040] netlink: 'syz.7.4792': attribute type 27 has an invalid length. [ 291.784934][T17040] sit0: left promiscuous mode [ 291.789774][T17040] : left promiscuous mode [ 291.794230][T17040] !: left promiscuous mode [ 291.800046][T17040] wg2: left promiscuous mode [ 291.804642][T17040] wg2: left allmulticast mode [ 291.810276][T17040] 0: left allmulticast mode [ 291.815260][T17040] ipvlan0: left allmulticast mode [ 291.820351][T17040] veth0_vlan: left allmulticast mode [ 291.826102][T17040] ip6gre1: left allmulticast mode [ 291.832937][T17040] ip6gre2: left allmulticast mode [ 291.839180][T17040] bond0: left promiscuous mode [ 291.844036][T17040] bond0: left allmulticast mode [ 293.028360][T17047] : (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 293.040488][T17047] : (slave ipvlan2): The slave device specified does not support setting the MAC address [ 293.050580][T17047] : (slave ipvlan2): Error -95 calling set_mac_address [ 293.460946][T17049] loop8: detected capacity change from 0 to 2048 [ 293.470081][T17049] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.638729][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.778511][T17058] lo speed is unknown, defaulting to 1000 [ 295.561430][T17075] loop7: detected capacity change from 0 to 2048 [ 295.568116][T17075] msdos: Unknown parameter '184467440737095516150xffffffffffffffff' [ 296.181194][ T29] audit: type=1400 audit(1746753852.770:18216): avc: denied { read } for pid=17076 comm="syz.9.4806" path="socket:[49010]" dev="sockfs" ino=49010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 297.029914][T17082] netlink: 'syz.8.4808': attribute type 4 has an invalid length. [ 297.037684][T17082] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4808'. [ 297.051121][T17082] : renamed from bond0 (while UP) [ 297.446333][ T29] audit: type=1326 audit(1746753854.030:18217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17087 comm="syz.8.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 297.487860][ T29] audit: type=1326 audit(1746753854.070:18218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17087 comm="syz.8.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 297.511718][ T29] audit: type=1326 audit(1746753854.070:18219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17087 comm="syz.8.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 297.531528][T17092] -1: renamed from syzkaller0 [ 297.535455][ T29] audit: type=1326 audit(1746753854.070:18220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17090 comm="syz.8.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cbb121225 code=0x7ffc0000 [ 297.563755][ T29] audit: type=1326 audit(1746753854.070:18221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17087 comm="syz.8.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 297.587436][ T29] audit: type=1326 audit(1746753854.070:18222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17087 comm="syz.8.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 297.611139][ T29] audit: type=1326 audit(1746753854.070:18223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17087 comm="syz.8.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 297.634854][ T29] audit: type=1326 audit(1746753854.070:18224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17087 comm="syz.8.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 297.658490][ T29] audit: type=1326 audit(1746753854.070:18225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17087 comm="syz.8.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 298.556534][T17113] netlink: '+}[@': attribute type 1 has an invalid length. [ 298.569305][T17113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.581218][T17113] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 298.591158][T17113] bond1 (unregistering): Released all slaves [ 298.990786][T17116] xt_hashlimit: size too large, truncated to 1048576 [ 299.018206][T17120] siw: device registration error -23 [ 299.039627][T17121] loop9: detected capacity change from 0 to 7 [ 299.046326][T17121] buffer_io_error: 6 callbacks suppressed [ 299.046396][T17121] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.060443][T17121] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.068318][T17121] loop9: unable to read partition table [ 299.074460][T17121] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 299.074460][T17121] U) failed (rc=-5) [ 300.148483][T17144] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4832'. [ 300.969013][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4839'. [ 300.978251][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4839'. [ 300.987694][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4839'. [ 303.041519][T17173] bond0: (slave syz_tun): Releasing backup interface [ 303.049420][T17173] bond0: (slave bond_slave_0): Releasing backup interface [ 303.057386][T17173] bond0: (slave bond_slave_1): Releasing backup interface [ 303.065852][T17173] team0: Port device team_slave_0 removed [ 303.072587][T17173] team0: Port device team_slave_1 removed [ 303.078506][T17173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.086208][T17173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.877615][T17180] loop9: detected capacity change from 0 to 512 [ 303.884677][T17180] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 303.896887][T17180] EXT4-fs (loop9): 1 truncate cleaned up [ 303.903046][T17180] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.966928][T11880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.105542][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4852'. [ 304.945629][T17191] loop8: detected capacity change from 0 to 512 [ 304.952394][T17191] EXT4-fs: Ignoring removed bh option [ 304.957839][T17191] EXT4-fs: Ignoring removed orlov option [ 304.963947][T17191] EXT4-fs (loop8): blocks per group (255) and clusters per group (8192) inconsistent [ 305.778297][T17200] loop8: detected capacity change from 0 to 164 [ 305.785566][T17200] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 305.794385][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 305.794401][ T29] audit: type=1400 audit(1746753862.380:18243): avc: denied { mount } for pid=17199 comm="syz.8.4859" name="/" dev="loop8" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 305.796155][T17200] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 305.831652][T17200] Symlink component flag not implemented [ 305.837319][T17200] Symlink component flag not implemented [ 305.843378][T17200] Symlink component flag not implemented (7) [ 305.849411][T17200] Symlink component flag not implemented (116) [ 305.957780][ T29] audit: type=1400 audit(1746753862.540:18244): avc: denied { unmount } for pid=16187 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 306.198592][ T29] audit: type=1326 audit(1746753862.780:18245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.9.4860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 306.222470][ T29] audit: type=1326 audit(1746753862.790:18246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.9.4860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 306.246151][ T29] audit: type=1326 audit(1746753862.790:18247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.9.4860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 306.270059][ T29] audit: type=1326 audit(1746753862.790:18248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.9.4860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 306.293817][ T29] audit: type=1326 audit(1746753862.790:18249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.9.4860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 306.317553][ T29] audit: type=1326 audit(1746753862.790:18250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.9.4860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 306.341264][ T29] audit: type=1326 audit(1746753862.790:18251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.9.4860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 306.366631][ T29] audit: type=1326 audit(1746753862.880:18252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.9.4860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 306.612235][T17207] bridge: RTM_NEWNEIGH with invalid ether address [ 307.031197][T17209] loop9: detected capacity change from 0 to 1024 [ 307.038074][T17209] EXT4-fs: Ignoring removed orlov option [ 307.045049][T17209] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 307.070362][T17209] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.096828][T11880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.337344][T17238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17238 comm=syz.8.4875 [ 309.754595][T17241] loop9: detected capacity change from 0 to 128 [ 309.984719][T17248] tipc: New replicast peer: 255.255.255.255 [ 309.990912][T17248] tipc: Enabled bearer , priority 10 [ 310.671424][T17261] loop7: detected capacity change from 0 to 4096 [ 310.684841][T17261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.702526][T17261] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 310.712568][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4886'. [ 310.721566][T17261] team0: left allmulticast mode [ 310.726464][T17261] team0: left promiscuous mode [ 310.731454][T17261] bridge0: port 1(team0) entered disabled state [ 310.805954][T17245] TCP: out of memory -- consider tuning tcp_mem [ 310.851338][ T6478] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.867821][T17273] netlink: 'syz.9.4890': attribute type 11 has an invalid length. [ 310.875910][T17273] netlink: 448 bytes leftover after parsing attributes in process `syz.9.4890'. [ 311.109365][ T8929] tipc: Node number set to 737949018 [ 311.726263][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 311.726281][ T29] audit: type=1326 audit(1746753868.310:18386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.6.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 311.756307][ T29] audit: type=1326 audit(1746753868.310:18387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.6.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 311.780160][ T29] audit: type=1326 audit(1746753868.310:18388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.6.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 311.803922][ T29] audit: type=1326 audit(1746753868.310:18389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.6.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 311.827566][ T29] audit: type=1326 audit(1746753868.310:18390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.6.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 311.851353][ T29] audit: type=1326 audit(1746753868.310:18391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.6.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 311.874952][ T29] audit: type=1326 audit(1746753868.310:18392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.6.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 311.898874][ T29] audit: type=1326 audit(1746753868.310:18393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.6.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 311.922576][ T29] audit: type=1326 audit(1746753868.310:18394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.6.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 311.946217][ T29] audit: type=1326 audit(1746753868.310:18395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.6.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 312.784980][T17283] loop7: detected capacity change from 0 to 164 [ 312.792303][T17283] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 312.802053][T17283] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 312.810553][T17283] Symlink component flag not implemented [ 312.816183][T17283] Symlink component flag not implemented [ 312.821914][T17283] Symlink component flag not implemented (7) [ 312.827985][T17283] Symlink component flag not implemented (116) [ 312.993230][T17285] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4896'. [ 313.686261][T17301] loop7: detected capacity change from 0 to 512 [ 313.693059][T17301] EXT4-fs: Ignoring removed oldalloc option [ 313.701718][T17301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.714512][T17301] ext4 filesystem being mounted at /808/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.723029][T17303] pim6reg1: entered promiscuous mode [ 313.730239][T17303] pim6reg1: entered allmulticast mode [ 313.748219][ T6478] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.872673][T17307] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 314.707549][T17314] loop9: detected capacity change from 0 to 1024 [ 314.720213][T17314] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.744040][T11880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.325982][T17318] loop8: detected capacity change from 0 to 128 [ 315.335153][T17317] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 315.343152][T17317] FAT-fs (loop8): Filesystem has been set read-only [ 315.349860][T17317] bio_check_eod: 102 callbacks suppressed [ 315.349875][T17317] syz.8.4908: attempt to access beyond end of device [ 315.349875][T17317] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 315.369588][T17317] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 315.377413][T17317] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 315.387368][T17317] syz.8.4908: attempt to access beyond end of device [ 315.387368][T17317] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 315.400811][T17317] syz.8.4908: attempt to access beyond end of device [ 315.400811][T17317] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 315.414210][T17317] syz.8.4908: attempt to access beyond end of device [ 315.414210][T17317] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 315.427621][T17318] syz.8.4908: attempt to access beyond end of device [ 315.427621][T17318] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 315.441117][T17318] syz.8.4908: attempt to access beyond end of device [ 315.441117][T17318] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 315.542423][T17320] pim6reg1: entered promiscuous mode [ 315.547780][T17320] pim6reg1: entered allmulticast mode [ 318.880150][T17352] loop9: detected capacity change from 0 to 512 [ 318.887418][T17352] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 318.900157][T17352] __quota_error: 11 callbacks suppressed [ 318.900175][T17352] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 318.916287][T17352] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 318.925825][T17352] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.4924: Failed to acquire dquot type 0 [ 318.937503][T17352] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 318.952700][T17352] EXT4-fs (loop9): 1 truncate cleaned up [ 318.958828][T17352] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.975024][ T29] audit: type=1326 audit(1746753875.560:18407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.9.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 318.998839][ T29] audit: type=1326 audit(1746753875.560:18408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.9.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 319.022524][ T29] audit: type=1326 audit(1746753875.560:18409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.9.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 319.046195][ T29] audit: type=1326 audit(1746753875.560:18410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.9.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 319.053094][T17352] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 319.069963][ T29] audit: type=1326 audit(1746753875.560:18411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.9.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 319.076550][T17352] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 319.100187][ T29] audit: type=1326 audit(1746753875.560:18412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.9.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 319.108466][T17352] vhci_hcd vhci_hcd.0: Device attached [ 319.131992][ T29] audit: type=1326 audit(1746753875.560:18413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.9.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 319.135953][ T29] audit: type=1326 audit(1746753875.610:18414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.9.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7ffc0000 [ 319.168781][T17356] vhci_hcd: connection closed [ 319.185795][ T4011] vhci_hcd: stop threads [ 319.195058][ T4011] vhci_hcd: release socket [ 319.199579][ T4011] vhci_hcd: disconnect device [ 319.566610][T17360] loop7: detected capacity change from 0 to 2048 [ 319.581258][T17360] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.593963][T17360] ext4 filesystem being mounted at /814/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.619235][ T6478] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.714590][T11880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.439530][T17370] loop7: detected capacity change from 0 to 1024 [ 320.446445][T17370] EXT4-fs: Ignoring removed nobh option [ 320.452223][T17370] ext2: Unknown parameter 'dont_hash' [ 320.460786][T17370] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 320.664591][T17372] loop8: detected capacity change from 0 to 512 [ 320.671422][T17372] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 320.683803][T17372] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 320.694556][T17377] netlink: 'syz.9.4931': attribute type 7 has an invalid length. [ 320.698614][T17372] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.4930: corrupted in-inode xattr: e_value size too large [ 320.702383][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4931'. [ 320.718331][T17372] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4930: couldn't read orphan inode 15 (err -117) [ 320.738201][T17372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.773862][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.306181][T17380] netlink: '+}[@': attribute type 7 has an invalid length. [ 321.313610][T17380] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 323.848351][T17422] SELinux: failed to load policy [ 324.450723][T17427] pim6reg1: entered promiscuous mode [ 324.456059][T17427] pim6reg1: entered allmulticast mode [ 325.329734][T17431] vhci_hcd: invalid port number 224 [ 325.711713][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 325.711730][ T29] audit: type=1400 audit(1746753882.300:18432): avc: denied { read } for pid=17434 comm="GPL" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 325.740908][ T29] audit: type=1400 audit(1746753882.300:18433): avc: denied { open } for pid=17434 comm="GPL" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 326.351433][ T29] audit: type=1326 audit(1746753882.940:18434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.7.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 326.375431][ T29] audit: type=1326 audit(1746753882.940:18435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.7.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 326.399223][ T29] audit: type=1326 audit(1746753882.940:18436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.7.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 326.422997][ T29] audit: type=1400 audit(1746753882.940:18437): avc: denied { getattr } for pid=17436 comm="syz.7.4952" name="/" dev="iomem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 326.445792][ T29] audit: type=1326 audit(1746753882.940:18438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.7.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 326.469494][ T29] audit: type=1326 audit(1746753882.960:18439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.7.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 326.561950][T17439] pim6reg1: entered promiscuous mode [ 326.567454][T17439] pim6reg1: entered allmulticast mode [ 326.772362][T17441] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 327.182569][ T29] audit: type=1400 audit(1746753883.770:18440): avc: denied { append } for pid=17442 comm="syz.9.4955" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 327.182606][T17443] random: crng reseeded on system resumption [ 327.206609][ T29] audit: type=1400 audit(1746753883.770:18441): avc: denied { open } for pid=17442 comm="syz.9.4955" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 327.244134][T17445] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4955'. [ 327.263571][T17446] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 327.942601][T17452] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4958'. [ 329.139516][T17473] vhci_hcd: invalid port number 96 [ 329.144969][T17473] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 329.386049][T17482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4969'. [ 330.611278][T17494] loop8: detected capacity change from 0 to 1024 [ 330.617910][T17494] EXT4-fs: Ignoring removed oldalloc option [ 330.623936][T17494] EXT4-fs: Ignoring removed orlov option [ 330.630250][T17494] EXT4-fs (loop8): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 330.650738][T17494] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.678525][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.679989][T17506] loop9: detected capacity change from 0 to 512 [ 331.686662][T17506] EXT4-fs: Ignoring removed i_version option [ 331.693499][T17506] EXT4-fs: Ignoring removed mblk_io_submit option [ 331.700299][T17506] EXT4-fs: test_dummy_encryption option not supported [ 331.729459][T17511] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4983'. [ 331.741922][T17511] 0X: renamed from caif0 [ 331.839814][T17511] 0X: entered allmulticast mode [ 331.846038][T17511] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 331.874383][T17520] tipc: New replicast peer: 255.255.255.83 [ 331.880385][T17520] tipc: Enabled bearer , priority 10 [ 332.036065][T17532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4992'. [ 332.155324][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 332.155343][ T29] audit: type=1400 audit(1746753888.740:18452): avc: denied { setattr } for pid=17535 comm="syz.6.4994" name="/" dev="configfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 332.222073][ T29] audit: type=1326 audit(1746753888.810:18453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 332.264181][ T29] audit: type=1326 audit(1746753888.810:18454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 332.288562][ T29] audit: type=1326 audit(1746753888.810:18455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 332.312993][ T29] audit: type=1326 audit(1746753888.810:18456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 332.336988][ T29] audit: type=1326 audit(1746753888.810:18457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 332.361250][ T29] audit: type=1326 audit(1746753888.830:18458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2c1e969 code=0x7ffc0000 [ 333.143370][ T29] audit: type=1400 audit(1746753889.730:18459): avc: denied { setopt } for pid=17569 comm="syz.8.5010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 333.195392][T17573] ip6gre3: entered allmulticast mode [ 333.214766][ T29] audit: type=1400 audit(1746753889.800:18460): avc: denied { write } for pid=17569 comm="syz.8.5010" path="socket:[49773]" dev="sockfs" ino=49773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 333.225456][T17571] lo speed is unknown, defaulting to 1000 [ 333.341413][ T29] audit: type=1326 audit(1746753889.930:18461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17588 comm="syz.7.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 334.334457][T17632] bond_slave_1: mtu greater than device maximum [ 334.377607][T17640] netlink: 'syz.5.5039': attribute type 7 has an invalid length. [ 334.385656][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5039'. [ 334.891291][T17648] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5042'. [ 337.229019][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 337.229037][ T29] audit: type=1326 audit(1746753893.820:18484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 337.259574][ T29] audit: type=1326 audit(1746753893.820:18485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 337.283403][ T29] audit: type=1326 audit(1746753893.820:18486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 337.307963][ T29] audit: type=1326 audit(1746753893.820:18487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 337.332408][ T29] audit: type=1326 audit(1746753893.820:18488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 337.356076][ T29] audit: type=1326 audit(1746753893.820:18489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 337.380593][ T29] audit: type=1326 audit(1746753893.820:18490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 337.404619][ T29] audit: type=1326 audit(1746753893.820:18491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 337.429019][ T29] audit: type=1326 audit(1746753893.870:18492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 337.452909][ T29] audit: type=1326 audit(1746753893.880:18493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 339.040154][T17679] loop8: detected capacity change from 0 to 512 [ 339.047332][T17679] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 339.061324][T17679] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.074450][T17679] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 339.104072][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.451928][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 342.451946][ T29] audit: type=1326 audit(1746753899.040:18532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17715 comm="syz.7.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 342.481806][ T29] audit: type=1326 audit(1746753899.040:18533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17715 comm="syz.7.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 342.523099][ T29] audit: type=1326 audit(1746753899.100:18534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17715 comm="syz.7.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 342.546777][ T29] audit: type=1326 audit(1746753899.100:18535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17715 comm="syz.7.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 342.570720][ T29] audit: type=1326 audit(1746753899.100:18536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17715 comm="syz.7.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 342.594412][ T29] audit: type=1326 audit(1746753899.100:18537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17715 comm="syz.7.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 342.618101][ T29] audit: type=1326 audit(1746753899.100:18538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17715 comm="syz.7.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 342.641855][ T29] audit: type=1326 audit(1746753899.100:18539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17715 comm="syz.7.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 342.665582][ T29] audit: type=1326 audit(1746753899.100:18540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17715 comm="syz.7.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 342.689416][ T29] audit: type=1326 audit(1746753899.100:18541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17715 comm="syz.7.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 343.076273][T17722] loop7: detected capacity change from 0 to 128 [ 343.286343][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5078'. [ 343.303511][T17729] syzkaller0: entered promiscuous mode [ 343.309660][T17729] syzkaller0: entered allmulticast mode [ 343.316734][ T4037] syzkaller0: tun_net_xmit 48 [ 343.329490][T17729] syzkaller0: tun_net_xmit 1280 [ 343.334767][T17729] syzkaller0: create flow: hash 759149925 index 1 [ 343.345229][T17726] syzkaller0: delete flow: hash 759149925 index 1 [ 344.127622][T17739] netlink: 100 bytes leftover after parsing attributes in process `syz.9.5083'. [ 344.760386][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5087'. [ 344.769516][T17747] hsr_slave_0: left promiscuous mode [ 344.775516][T17747] 0: left promiscuous mode [ 344.967938][T17751] loop8: detected capacity change from 0 to 512 [ 344.980831][T17751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.993813][T17751] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.997934][T17756] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 345.011419][T17751] EXT4-fs (loop8): shut down requested (0) [ 345.032392][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.129924][T17780] loop7: detected capacity change from 0 to 2048 [ 347.141338][T17780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.214047][ T6478] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.559289][T17785] loop9: detected capacity change from 0 to 1024 [ 347.570375][T17785] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.582527][T17785] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.599580][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 347.599650][ T29] audit: type=1400 audit(1746753904.190:18579): avc: denied { rename } for pid=17784 comm="+}[@" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 347.600048][T17785] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 347.642574][T17785] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 347.655290][T17785] EXT4-fs (loop9): This should not happen!! Data will be lost [ 347.655290][T17785] [ 347.680084][T11880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.940072][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5102'. [ 347.949797][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5102'. [ 347.990062][ T29] audit: type=1400 audit(1746753904.580:18580): avc: denied { ioctl } for pid=17792 comm="syz.7.5103" path="socket:[50129]" dev="sockfs" ino=50129 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 348.015273][T17794] loop7: detected capacity change from 0 to 164 [ 348.022397][T17794] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 348.871694][ T29] audit: type=1326 audit(1746753905.460:18581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17806 comm="syz.8.5109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x0 [ 349.494236][ T29] audit: type=1326 audit(1746753906.080:18582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17801 comm="syz.9.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4718e969 code=0x7fc00000 [ 349.984184][ T29] audit: type=1400 audit(1746753906.570:18583): avc: denied { mount } for pid=17816 comm="syz.7.5114" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 350.018055][ T29] audit: type=1400 audit(1746753906.600:18584): avc: denied { unmount } for pid=6478 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 350.379231][ T29] audit: type=1326 audit(1746753906.960:18585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17825 comm="syz.8.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 350.403813][ T29] audit: type=1326 audit(1746753906.960:18586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17825 comm="syz.8.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 350.427452][ T29] audit: type=1326 audit(1746753906.960:18587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17825 comm="syz.8.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 350.451777][ T29] audit: type=1326 audit(1746753906.970:18588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17825 comm="syz.8.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 350.802362][T17840] netlink: 'syz.7.5121': attribute type 1 has an invalid length. [ 350.998557][T17842] syzkaller0: entered promiscuous mode [ 351.004118][T17842] syzkaller0: entered allmulticast mode [ 351.404066][T17846] loop7: detected capacity change from 0 to 2048 [ 351.449895][T17846] Alternate GPT is invalid, using primary GPT. [ 351.456303][T17846] loop7: p1 p2 p3 [ 352.885316][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 352.885329][ T29] audit: type=1400 audit(1746753909.470:18593): avc: denied { ioctl } for pid=17853 comm="syz.8.5128" path="/dev/input/event3" dev="devtmpfs" ino=250 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 353.568277][ T29] audit: type=1400 audit(1746753910.150:18594): avc: denied { read } for pid=17855 comm="syz.9.5129" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 353.593819][ T29] audit: type=1400 audit(1746753910.150:18595): avc: denied { open } for pid=17855 comm="syz.9.5129" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 353.618980][ T29] audit: type=1400 audit(1746753910.150:18596): avc: denied { ioctl } for pid=17855 comm="syz.9.5129" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 353.645342][ T29] audit: type=1400 audit(1746753910.150:18597): avc: denied { read } for pid=17855 comm="syz.9.5129" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 353.741146][T17862] syzkaller0: entered promiscuous mode [ 353.746639][T17862] syzkaller0: entered allmulticast mode [ 355.208734][ T29] audit: type=1400 audit(1746753911.790:18598): avc: denied { mount } for pid=17873 comm="syz.9.5136" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 355.451309][T17877] lo speed is unknown, defaulting to 1000 [ 355.822771][T17883] netlink: 'syz.7.5139': attribute type 7 has an invalid length. [ 355.830605][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5139'. [ 357.499825][ T29] audit: type=1326 audit(1746753914.090:18599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.7.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 357.524582][ T29] audit: type=1326 audit(1746753914.090:18600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.7.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 357.548219][ T29] audit: type=1326 audit(1746753914.090:18601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.7.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 357.571771][ T29] audit: type=1326 audit(1746753914.090:18602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.7.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 358.334928][T17907] tipc: Started in network mode [ 358.340552][T17907] tipc: Node identity ac14140f, cluster identity 4711 [ 358.347736][T17907] tipc: New replicast peer: 255.255.255.223 [ 358.353819][T17907] tipc: Enabled bearer , priority 10 [ 358.540639][T17909] netlink: 'syz.6.5151': attribute type 1 has an invalid length. [ 358.554393][T17909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.567568][T17909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5151'. [ 358.578472][T17909] bond2 (unregistering): Released all slaves [ 359.358752][ T8930] tipc: Node number set to 2886997007 [ 359.508798][ T5611] page_pool_release_retry() stalled pool shutdown: id 134, 1 inflight 60 sec [ 359.818426][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 359.818444][ T29] audit: type=1400 audit(1746753916.400:18616): avc: denied { create } for pid=17934 comm="syz.7.5162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 359.845114][ T29] audit: type=1400 audit(1746753916.400:18617): avc: denied { ioctl } for pid=17934 comm="syz.7.5162" path="socket:[51498]" dev="sockfs" ino=51498 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 360.238724][T17939] loop8: detected capacity change from 0 to 128 [ 360.247909][T17939] syz.8.5164: attempt to access beyond end of device [ 360.247909][T17939] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 360.261917][T17939] Buffer I/O error on dev loop8, logical block 2065, async page read [ 360.270134][T17939] syz.8.5164: attempt to access beyond end of device [ 360.270134][T17939] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 360.283416][T17939] Buffer I/O error on dev loop8, logical block 2066, async page read [ 360.292159][T17939] syz.8.5164: attempt to access beyond end of device [ 360.292159][T17939] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 360.305624][T17939] Buffer I/O error on dev loop8, logical block 2067, async page read [ 360.313877][T17939] syz.8.5164: attempt to access beyond end of device [ 360.313877][T17939] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 360.327739][T17939] Buffer I/O error on dev loop8, logical block 2068, async page read [ 360.335890][T17939] syz.8.5164: attempt to access beyond end of device [ 360.335890][T17939] loop8: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 360.349771][T17939] Buffer I/O error on dev loop8, logical block 2069, async page read [ 360.357900][T17939] syz.8.5164: attempt to access beyond end of device [ 360.357900][T17939] loop8: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 360.371154][T17939] Buffer I/O error on dev loop8, logical block 2070, async page read [ 360.379875][T17939] syz.8.5164: attempt to access beyond end of device [ 360.379875][T17939] loop8: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 360.393157][T17939] Buffer I/O error on dev loop8, logical block 2071, async page read [ 360.401460][T17939] syz.8.5164: attempt to access beyond end of device [ 360.401460][T17939] loop8: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 360.415389][T17939] Buffer I/O error on dev loop8, logical block 2072, async page read [ 360.423504][T17939] syz.8.5164: attempt to access beyond end of device [ 360.423504][T17939] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 360.436724][T17939] Buffer I/O error on dev loop8, logical block 2065, async page read [ 360.445607][T17939] syz.8.5164: attempt to access beyond end of device [ 360.445607][T17939] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 360.459060][T17939] Buffer I/O error on dev loop8, logical block 2066, async page read [ 360.728061][T17943] lo speed is unknown, defaulting to 1000 [ 361.337879][T17953] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 361.754019][T17955] x_tables: duplicate underflow at hook 2 [ 361.965386][ T29] audit: type=1326 audit(1746753918.550:18618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.8.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 361.990987][ T29] audit: type=1326 audit(1746753918.550:18619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.8.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 362.015172][ T29] audit: type=1326 audit(1746753918.550:18620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.8.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 362.042368][ T29] audit: type=1326 audit(1746753918.550:18621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17962 comm="syz.8.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cbb121225 code=0x7ffc0000 [ 362.066036][ T29] audit: type=1326 audit(1746753918.550:18622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.8.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 362.089746][ T29] audit: type=1326 audit(1746753918.560:18623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.8.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 362.113561][ T29] audit: type=1326 audit(1746753918.560:18624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.8.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 362.137188][ T29] audit: type=1326 audit(1746753918.560:18625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.8.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 362.395017][T17972] wireguard1: entered promiscuous mode [ 362.400764][T17972] wireguard1: entered allmulticast mode [ 363.848072][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5181'. [ 363.857025][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5181'. [ 363.871689][T17981] bond1: entered promiscuous mode [ 363.876735][T17981] bond1: entered allmulticast mode [ 363.882592][T17981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.904801][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 364.904839][ T29] audit: type=1400 audit(1746753921.490:18671): avc: denied { execute } for pid=18000 comm="syz.6.5190" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=51600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 364.940219][ T4006] bond0 (unregistering): Released all slaves [ 364.969900][ T4006] tipc: Disabling bearer [ 364.975184][ T4006] tipc: Left network mode [ 364.998018][ T4006] hsr_slave_0: left promiscuous mode [ 365.003918][ T4006] hsr_slave_1: left promiscuous mode [ 365.227907][T18005] lo speed is unknown, defaulting to 1000 [ 365.283111][T18005] chnl_net:caif_netlink_parms(): no params data found [ 365.318928][T18005] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.326019][T18005] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.333300][T18005] bridge_slave_0: entered allmulticast mode [ 365.339826][T18005] bridge_slave_0: entered promiscuous mode [ 365.346687][T18005] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.354005][T18005] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.361278][T18005] bridge_slave_1: entered allmulticast mode [ 365.367590][T18005] bridge_slave_1: entered promiscuous mode [ 365.387597][T18005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.398024][T18005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.417632][T18005] team0: Port device team_slave_0 added [ 365.424334][T18005] team0: Port device team_slave_1 added [ 365.441730][T18005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.448834][T18005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.475557][T18005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.486819][T18005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.494474][T18005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.521053][T18005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.551147][T18005] hsr_slave_0: entered promiscuous mode [ 365.557203][T18005] hsr_slave_1: entered promiscuous mode [ 365.747834][T18027] netlink: 'syz.8.5196': attribute type 10 has an invalid length. [ 365.761178][T18027] : (slave dummy0): Enslaving as an active interface with an up link [ 365.799782][T18005] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 365.808406][T18005] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 365.817393][T18005] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 365.826576][T18005] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 365.859511][T18005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.871637][T18005] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.881419][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.888509][ T4037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.899269][ T4006] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.906379][ T4006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.970294][T18005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.074453][T18005] veth0_vlan: entered promiscuous mode [ 366.083169][T18005] veth1_vlan: entered promiscuous mode [ 366.098293][T18005] veth0_macvtap: entered promiscuous mode [ 366.105826][T18005] veth1_macvtap: entered promiscuous mode [ 366.116290][T18005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.126897][T18005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.137509][T18005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.148535][T18005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.159152][T18005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.170626][T18005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.182059][T18005] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.190894][T18005] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.200348][T18005] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.209081][T18005] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.228616][T18061] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5201'. [ 367.238492][T18061] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5201'. [ 367.247692][T18061] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5201'. [ 367.264659][T18061] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5201'. [ 367.273915][T18061] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5201'. [ 367.283021][T18061] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5201'. [ 367.298122][ T29] audit: type=1326 audit(1746753923.890:18672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.8.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 367.322100][ T29] audit: type=1326 audit(1746753923.890:18673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.8.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 367.346053][ T29] audit: type=1326 audit(1746753923.890:18674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.8.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 367.360915][T18061] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5201'. [ 367.370117][ T29] audit: type=1326 audit(1746753923.920:18675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.8.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 367.370157][ T29] audit: type=1326 audit(1746753923.920:18676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.8.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 367.370321][ T29] audit: type=1326 audit(1746753923.920:18677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18065 comm="syz.8.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cbb121225 code=0x7ffc0000 [ 367.370358][ T29] audit: type=1326 audit(1746753923.920:18678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.8.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 367.370397][ T29] audit: type=1326 audit(1746753923.920:18679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.8.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 367.370450][ T29] audit: type=1326 audit(1746753923.920:18680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.8.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 367.523694][T18061] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5201'. [ 370.212411][T18090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.051173][T18101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18101 comm=syz.8.5217 [ 371.691398][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 371.691417][ T29] audit: type=1400 audit(1746753928.280:18683): avc: denied { create } for pid=18102 comm="syz.9.5218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 371.717160][ T29] audit: type=1400 audit(1746753928.280:18684): avc: denied { ioctl } for pid=18102 comm="syz.9.5218" path="socket:[52079]" dev="sockfs" ino=52079 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 372.109020][ T29] audit: type=1400 audit(1746753928.700:18685): avc: denied { shutdown } for pid=18111 comm="syz.7.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 372.527757][ T29] audit: type=1400 audit(1746753929.110:18686): avc: denied { setattr } for pid=18118 comm="syz.6.5223" name="bus" dev="tmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 372.740241][T18121] pim6reg1: entered promiscuous mode [ 372.745593][T18121] pim6reg1: entered allmulticast mode [ 374.428754][T18135] loop9: detected capacity change from 0 to 1024 [ 374.435660][T18135] EXT4-fs: Ignoring removed nobh option [ 374.451099][T18135] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.466730][T18135] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.5230: Allocating blocks 385-513 which overlap fs metadata [ 374.483292][T18135] EXT4-fs (loop9): pa ffff888106da0700: logic 16, phys. 129, len 24 [ 374.492152][T18135] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 374.517416][T18005] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.648272][T18144] __nla_validate_parse: 3 callbacks suppressed [ 374.648290][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5233'. [ 375.273637][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5236'. [ 375.284713][T18153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.297797][T18153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.478054][ T29] audit: type=1400 audit(1746753932.060:18687): avc: denied { setopt } for pid=18156 comm="syz.7.5238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 376.107091][T18159] loop9: detected capacity change from 0 to 1024 [ 376.114160][T18159] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 376.124805][T18159] JBD2: no valid journal superblock found [ 376.131198][T18159] EXT4-fs (loop9): Could not load journal inode [ 376.141659][ T29] audit: type=1400 audit(1746753932.730:18688): avc: denied { watch watch_reads } for pid=18158 comm="syz.9.5239" path="/14/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 376.173709][ T29] audit: type=1400 audit(1746753932.760:18689): avc: denied { unmount } for pid=18005 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 376.936795][ T29] audit: type=1326 audit(1746753933.520:18690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18170 comm="syz.9.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 376.961550][ T29] audit: type=1326 audit(1746753933.520:18691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18170 comm="syz.9.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 376.987338][ T29] audit: type=1326 audit(1746753933.520:18692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18170 comm="syz.9.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 377.011320][ T29] audit: type=1326 audit(1746753933.520:18693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18170 comm="syz.9.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 377.034963][ T29] audit: type=1326 audit(1746753933.520:18694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18170 comm="syz.9.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 377.058715][ T29] audit: type=1326 audit(1746753933.520:18695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18170 comm="syz.9.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 377.082306][ T29] audit: type=1326 audit(1746753933.520:18696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18170 comm="syz.9.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 377.106049][ T29] audit: type=1326 audit(1746753933.520:18697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18170 comm="syz.9.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 377.375143][ T29] audit: type=1400 audit(1746753933.960:18698): avc: denied { read } for pid=18172 comm="syz.7.5245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 378.847581][T18194] 9pnet_fd: Insufficient options for proto=fd [ 379.890544][T18216] SELinux: policydb version 1910932992 does not match my version range 15-34 [ 379.900714][T18216] SELinux: failed to load policy [ 381.380125][T18229] loop7: detected capacity change from 0 to 4096 [ 381.395736][T18229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.504799][ T6478] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.778584][T18236] loop9: detected capacity change from 0 to 1024 [ 381.790749][T18236] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.888045][T18005] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.001254][T18244] IPv4: Oversized IP packet from 127.202.26.0 [ 382.423446][T18254] loop7: detected capacity change from 0 to 2048 [ 382.451279][T18254] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.520735][T18258] EXT4-fs (loop7): shut down requested (0) [ 382.554289][ T6478] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.636788][T18260] msdos: Unknown parameter 'a?eIWYwE幦U7Ve@LSa-}jz3B.p;q+a8P?cez-i@../PAI(3#V#LJd-]!h> qXx餉[A3V5^mxr1Aj4aġ)' [ 384.299724][ T29] audit: type=1400 audit(1746753940.890:18699): avc: denied { read write } for pid=18273 comm="syz.7.5281" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 384.324218][ T29] audit: type=1400 audit(1746753940.890:18700): avc: denied { open } for pid=18273 comm="syz.7.5281" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 384.350193][ T29] audit: type=1400 audit(1746753940.920:18701): avc: denied { bind } for pid=18275 comm="syz.6.5282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 384.925900][T18285] loop8: detected capacity change from 0 to 512 [ 384.932964][T18285] EXT4-fs: Ignoring removed oldalloc option [ 384.939768][T18285] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 384.951863][T18285] EXT4-fs (loop8): 1 truncate cleaned up [ 384.957884][T18285] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.056021][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.546192][T18292] loop9: detected capacity change from 0 to 512 [ 385.553797][T18292] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 385.564638][T18292] EXT4-fs (loop9): 1 truncate cleaned up [ 385.570743][T18292] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.628500][T18005] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.963529][T18295] loop7: detected capacity change from 0 to 1024 [ 385.970251][T18295] EXT4-fs: Ignoring removed oldalloc option [ 385.976496][T18295] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 385.990506][T18295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.036370][ T6478] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.602334][ T29] audit: type=1326 audit(1746753943.190:18702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 386.626256][ T29] audit: type=1326 audit(1746753943.190:18703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 386.673155][ T29] audit: type=1326 audit(1746753943.250:18704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 386.697533][ T29] audit: type=1326 audit(1746753943.250:18705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 386.721956][ T29] audit: type=1326 audit(1746753943.250:18706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 386.745543][ T29] audit: type=1326 audit(1746753943.250:18707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 386.769820][ T29] audit: type=1326 audit(1746753943.250:18708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 388.163508][T18317] ip6gre3: left allmulticast mode [ 388.163607][T18315] ALSA: seq fatal error: cannot create timer (-19) [ 388.176075][T18317] wireguard1: left promiscuous mode [ 388.181423][T18317] wireguard1: left allmulticast mode [ 388.188360][T18317] bond1: left promiscuous mode [ 388.193866][T18317] bond1: left allmulticast mode [ 388.201671][T18320] netlink: 'syz.8.5299': attribute type 4 has an invalid length. [ 389.882035][T18332] loop9: detected capacity change from 0 to 512 [ 389.889707][T18332] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 389.910244][T18332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 389.918396][T18332] System zones: 1-12 [ 389.922911][T18332] EXT4-fs (loop9): 1 truncate cleaned up [ 389.929591][T18332] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.944893][T18332] EXT4-fs (loop9): shut down requested (2) [ 389.960630][T18005] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.058056][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5317'. [ 394.526108][T18365] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5319'. [ 394.539298][T18365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.549560][T18365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.559808][T18365] bond0 (unregistering): Released all slaves [ 395.102548][T18371] syzkaller0: entered allmulticast mode [ 395.108409][T18371] syzkaller0: entered promiscuous mode [ 395.116864][T18371] syzkaller0 (unregistering): left promiscuous mode [ 395.123655][T18371] syzkaller0 (unregistering): left allmulticast mode [ 395.533276][T18378] loop8: detected capacity change from 0 to 1024 [ 395.551101][T18378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.563389][T18378] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.637927][ T3702] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:12: bg 0: block 393: padding at end of block bitmap is not set [ 395.652731][ T3702] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 395.665499][ T3702] EXT4-fs (loop8): This should not happen!! Data will be lost [ 395.665499][ T3702] [ 395.684781][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.168237][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 396.168256][ T29] audit: type=1326 audit(1746753952.750:18730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18382 comm="syz.9.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 396.200058][ T29] audit: type=1326 audit(1746753952.750:18731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18382 comm="syz.9.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 396.223746][ T29] audit: type=1326 audit(1746753952.760:18732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18382 comm="syz.9.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 396.226797][T18383] Invalid ELF header magic: != ELF [ 396.247361][ T29] audit: type=1326 audit(1746753952.760:18733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18382 comm="syz.9.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 396.247399][ T29] audit: type=1326 audit(1746753952.760:18734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18382 comm="syz.9.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 396.247430][ T29] audit: type=1326 audit(1746753952.760:18735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18382 comm="syz.9.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 396.324999][ T29] audit: type=1326 audit(1746753952.760:18736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18382 comm="syz.9.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 396.349327][ T29] audit: type=1326 audit(1746753952.760:18737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18382 comm="syz.9.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 396.373009][ T29] audit: type=1326 audit(1746753952.760:18738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18382 comm="syz.9.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 396.396687][ T29] audit: type=1326 audit(1746753952.760:18739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18382 comm="syz.9.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 396.432937][T18385] netlink: 'syz.7.5327': attribute type 4 has an invalid length. [ 396.440838][T18385] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.5327'. [ 398.197091][T18407] loop9: detected capacity change from 0 to 8192 [ 398.389573][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5339'. [ 398.398564][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5339'. [ 399.453923][T18434] syzkaller0: entered promiscuous mode [ 399.459477][T18434] syzkaller0: entered allmulticast mode [ 399.645594][T18436] $H: renamed from bond0 (while UP) [ 399.653192][T18436] $H: entered promiscuous mode [ 399.658355][T18436] bond_slave_0: entered promiscuous mode [ 399.664162][T18436] bond_slave_1: entered promiscuous mode [ 399.862641][T18439] team0: Port device team_slave_1 removed [ 400.686679][T18446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5348'. [ 400.687034][T18448] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 400.702551][T18448] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 400.711057][T18448] vhci_hcd vhci_hcd.0: Device attached [ 400.725050][T18448] : renamed from vlan0 (while UP) [ 400.733239][T18449] vhci_hcd: connection closed [ 400.733416][ T3702] vhci_hcd: stop threads [ 400.742560][ T3702] vhci_hcd: release socket [ 400.746983][ T3702] vhci_hcd: disconnect device [ 402.209788][T18477] pim6reg1: entered promiscuous mode [ 402.215206][T18477] pim6reg1: entered allmulticast mode [ 402.253329][T18478] : (slave 0!): Releasing backup interface [ 402.281479][T18478] !: left allmulticast mode [ 402.311874][T18473] lo speed is unknown, defaulting to 1000 [ 402.617215][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 402.617229][ T29] audit: type=1326 audit(1746753959.200:18760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.9.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 402.627574][T18484] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5365'. [ 402.663554][ T29] audit: type=1326 audit(1746753959.240:18761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.9.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 402.687269][ T29] audit: type=1326 audit(1746753959.250:18762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.9.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87cee0e9a3 code=0x7ffc0000 [ 402.711258][ T29] audit: type=1326 audit(1746753959.250:18763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.9.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87cee0e9a3 code=0x7ffc0000 [ 402.734735][ T29] audit: type=1326 audit(1746753959.250:18764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.9.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 402.758393][ T29] audit: type=1326 audit(1746753959.250:18765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.9.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 402.783419][ T29] audit: type=1326 audit(1746753959.250:18766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.9.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 402.807196][ T29] audit: type=1326 audit(1746753959.250:18767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.9.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 402.831275][ T29] audit: type=1326 audit(1746753959.250:18768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.9.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 402.855070][ T29] audit: type=1326 audit(1746753959.250:18769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.9.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 403.264450][T18497] loop9: detected capacity change from 0 to 1024 [ 403.271433][T18497] EXT4-fs: Ignoring removed nobh option [ 403.292418][T18497] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.303941][T18496] lo speed is unknown, defaulting to 1000 [ 403.311719][T18497] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.5368: Allocating blocks 385-513 which overlap fs metadata [ 403.374161][T18497] lo speed is unknown, defaulting to 1000 [ 403.386523][T18503] EXT4-fs (loop9): pa ffff888106dbcf50: logic 16, phys. 129, len 24 [ 403.394636][T18503] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 403.456053][T18005] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.667921][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5371'. [ 403.677916][T18508] IPVS: Error joining to the multicast group [ 404.290191][T18514] netlink: 'syz.8.5374': attribute type 39 has an invalid length. [ 405.337750][T18522] netlink: 'syz.7.5377': attribute type 13 has an invalid length. [ 405.357163][T18522] 8021q: adding VLAN 0 to HW filter on device  [ 405.365315][T18522] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.375136][T18522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.762331][T18526] netlink: 996 bytes leftover after parsing attributes in process `syz.6.5379'. [ 405.764075][T18525] loop8: detected capacity change from 0 to 1024 [ 405.778277][T18525] EXT4-fs: Ignoring removed bh option [ 405.783772][T18525] EXT4-fs: inline encryption not supported [ 405.790442][T18525] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 405.801607][T18525] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 405.811574][T18525] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.5378: lblock 2 mapped to illegal pblock 2 (length 1) [ 405.825821][T18525] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.5378: lblock 0 mapped to illegal pblock 48 (length 1) [ 405.840195][T18525] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5378: Failed to acquire dquot type 0 [ 405.852749][T18525] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 405.862445][T18525] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.5378: mark_inode_dirty error [ 405.874104][T18525] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 405.884875][T18525] EXT4-fs (loop8): 1 orphan inode deleted [ 405.890969][T18525] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.903758][ T4037] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1) [ 405.918436][ T4037] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:48: Failed to release dquot type 0 [ 405.930739][T18525] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 405.949736][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.026990][T18531] loop8: detected capacity change from 0 to 8192 [ 407.034919][T18531] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.470648][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 408.470667][ T29] audit: type=1400 audit(1746753965.060:18787): avc: denied { write } for pid=18540 comm="syz.7.5386" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 410.827096][T18574] loop8: detected capacity change from 0 to 256 [ 410.833750][T18574] msdos: Bad value for 'gid' [ 410.838352][T18574] msdos: Bad value for 'gid' [ 410.845305][ T29] audit: type=1400 audit(1746753967.430:18788): avc: denied { append } for pid=18573 comm="syz.8.5400" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 411.040702][T18577] pim6reg1: entered promiscuous mode [ 411.046105][T18577] pim6reg1: entered allmulticast mode [ 411.261167][T18580] loop8: detected capacity change from 0 to 2048 [ 411.680405][T18584] pim6reg1: entered promiscuous mode [ 411.685756][T18584] pim6reg1: entered allmulticast mode [ 411.896710][T18586] loop7: detected capacity change from 0 to 512 [ 411.910865][T18586] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.923683][T18586] ext4 filesystem being mounted at /941/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 411.941991][T18586] bridge0: port 1(macvlan2) entered blocking state [ 411.948673][T18586] bridge0: port 1(macvlan2) entered disabled state [ 411.955413][T18586] macvlan2: entered allmulticast mode [ 411.960858][T18586] bridge0: entered allmulticast mode [ 411.966656][T18586] macvlan2: left allmulticast mode [ 411.971822][T18586] bridge0: left allmulticast mode [ 412.023151][ T6478] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.160307][T18593] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5407'. [ 412.170059][T18592] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5407'. [ 414.870351][T18620] veth1_macvtap: left promiscuous mode [ 414.875940][T18620] macsec0: entered promiscuous mode [ 417.035329][T18635] lo speed is unknown, defaulting to 1000 [ 417.059300][T18636] bond0: entered promiscuous mode [ 417.064391][T18636] bond0: entered allmulticast mode [ 417.070304][T18636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.080156][T18636] bond0 (unregistering): Released all slaves [ 417.264235][T18641] tipc: Enabled bearer , priority 0 [ 417.271896][T18640] tipc: Resetting bearer [ 417.285298][T18640] tipc: Disabling bearer [ 418.910629][T18660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5437'. [ 419.542940][ T29] audit: type=1326 audit(1746753976.130:18789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18663 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 419.566836][ T29] audit: type=1326 audit(1746753976.130:18790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18663 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 419.590533][ T29] audit: type=1326 audit(1746753976.130:18791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18663 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 419.615401][ T29] audit: type=1326 audit(1746753976.160:18792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18663 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 419.639134][ T29] audit: type=1326 audit(1746753976.160:18793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18663 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 419.662755][ T29] audit: type=1326 audit(1746753976.160:18794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18663 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 419.686428][ T29] audit: type=1326 audit(1746753976.160:18795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18663 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 419.710094][ T29] audit: type=1326 audit(1746753976.160:18796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18663 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 419.733779][ T29] audit: type=1326 audit(1746753976.160:18797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18663 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 419.757456][ T29] audit: type=1326 audit(1746753976.160:18798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18663 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 421.068918][T18681] lo speed is unknown, defaulting to 1000 [ 421.076282][ T8932] Process accounting resumed [ 421.258718][T18685] Process accounting resumed [ 422.063052][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5452'. [ 424.593266][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 424.593285][ T29] audit: type=1400 audit(1746753981.180:18867): avc: denied { remount } for pid=18711 comm="syz.7.5460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 425.864766][ T29] audit: type=1326 audit(1746753982.450:18868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18723 comm="syz.8.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 425.889887][ T29] audit: type=1326 audit(1746753982.450:18869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18723 comm="syz.8.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 425.913507][ T29] audit: type=1326 audit(1746753982.450:18870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18723 comm="syz.8.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 425.937286][ T29] audit: type=1326 audit(1746753982.480:18871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18723 comm="syz.8.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 425.960980][ T29] audit: type=1326 audit(1746753982.480:18872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18723 comm="syz.8.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 425.984608][ T29] audit: type=1326 audit(1746753982.490:18873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18723 comm="syz.8.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 426.008540][ T29] audit: type=1326 audit(1746753982.490:18874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18723 comm="syz.8.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 426.032283][ T29] audit: type=1326 audit(1746753982.490:18875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18723 comm="syz.8.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 426.056195][ T29] audit: type=1326 audit(1746753982.490:18876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18723 comm="syz.8.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 427.962262][T18742] netlink: 'syz.9.5473': attribute type 4 has an invalid length. [ 428.667577][T18758] lo speed is unknown, defaulting to 1000 [ 429.480467][T18765] netlink: 'syz.7.5484': attribute type 4 has an invalid length. [ 429.737593][T18768] IPv6: NLM_F_CREATE should be specified when creating new route [ 430.105171][T18771] loop9: detected capacity change from 0 to 128 [ 430.112568][T18771] EXT4-fs: Ignoring removed nobh option [ 430.121404][T18771] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.134580][T18771] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 430.151026][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 430.151044][ T29] audit: type=1400 audit(1746753986.740:18943): avc: denied { create } for pid=18769 comm="syz.9.5486" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 430.248759][T18771] loop9: detected capacity change from 128 to 64 [ 430.255334][T18775] EXT4-fs error (device loop9): ext4_dx_csum_verify:472: inode #2: comm syz.9.5486: dir seems corrupt? Run e2fsck -D. [ 430.268721][T18775] EXT4-fs error (device loop9): dx_probe:793: inode #2: comm syz.9.5486: Directory index failed checksum [ 430.290473][T18005] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 430.326914][ T29] audit: type=1326 audit(1746753986.910:18944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18776 comm="syz.8.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 430.351569][ T29] audit: type=1326 audit(1746753986.910:18945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18776 comm="syz.8.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 430.375210][ T29] audit: type=1326 audit(1746753986.910:18946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18776 comm="syz.8.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 430.400088][ T29] audit: type=1326 audit(1746753986.960:18947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18776 comm="syz.8.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 430.423732][ T29] audit: type=1326 audit(1746753986.960:18948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18776 comm="syz.8.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 430.424072][T18777] loop8: detected capacity change from 0 to 512 [ 430.449321][ T29] audit: type=1326 audit(1746753986.990:18949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18776 comm="syz.8.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 430.477898][ T29] audit: type=1326 audit(1746753986.990:18950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18776 comm="syz.8.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 430.491032][T18777] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.502264][ T29] audit: type=1326 audit(1746753986.990:18951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18776 comm="syz.8.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 430.514180][T18777] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 430.537598][ T29] audit: type=1326 audit(1746753986.990:18952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18776 comm="syz.8.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 430.661464][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.046689][T18791] lo speed is unknown, defaulting to 1000 [ 432.127884][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5498'. [ 432.137577][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5498'. [ 432.281443][T18807] tipc: Enabling of bearer rejected, failed to enable media [ 432.304043][T18811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.311329][T18811] IPv6: NLM_F_CREATE should be set when creating new route [ 432.340836][T18815] xt_hashlimit: size too large, truncated to 1048576 [ 432.511497][T18830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.547351][T18830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.574038][T18830] ref_ctr going negative. vaddr: 0x200000ffc018, curr val: -17644, delta: 1 [ 432.583774][T18830] ref_ctr increment failed for inode: 0x4bc offset: 0x2 ref_ctr_offset: 0x18 of mm: 0xffff888104135800 [ 432.597198][T18833] netlink: 'syz.5.5511': attribute type 1 has an invalid length. [ 432.622948][T18833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.624750][T18836] loop9: detected capacity change from 0 to 2048 [ 432.645364][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5511'. [ 432.660668][T18830] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 432.669756][T18830] ref_ctr decrement failed for inode: 0x4bc offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888104135800 [ 432.683566][T18836] loop9: p1 < > p4 [ 432.688500][T18830] uprobe: syz.8.5509:18830 failed to unregister, leaking uprobe [ 432.696461][T18836] loop9: p4 size 8388608 extends beyond EOD, truncated [ 432.705912][T18833] bond1 (unregistering): Released all slaves [ 432.748049][T18836] SELinux: failed to load policy [ 432.782088][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5514'. [ 433.474940][T18856] sd 0:0:1:0: device reset [ 433.506185][T18848] syzkaller0: entered promiscuous mode [ 433.511787][T18848] syzkaller0: entered allmulticast mode [ 433.861801][T18870] loop7: detected capacity change from 0 to 1024 [ 433.880968][T18870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.895068][T18870] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 433.920688][ T6478] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.562786][T18892] pim6reg1: entered promiscuous mode [ 435.568215][T18892] pim6reg1: entered allmulticast mode [ 436.006700][T18906] ip6gre1: entered allmulticast mode [ 436.031252][T18907] pim6reg1: entered promiscuous mode [ 436.036609][T18907] pim6reg1: entered allmulticast mode [ 436.052874][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 436.052891][ T29] audit: type=1326 audit(1746753992.640:18981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18899 comm="syz.7.5539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x0 [ 436.436723][T18915] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5545'. [ 436.484389][ T29] audit: type=1326 audit(1746753993.070:18982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18911 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 436.529417][ T29] audit: type=1326 audit(1746753993.090:18983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18911 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 436.553160][ T29] audit: type=1326 audit(1746753993.100:18984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18911 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 436.577437][ T29] audit: type=1326 audit(1746753993.100:18985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18911 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 436.601617][ T29] audit: type=1326 audit(1746753993.100:18986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18911 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 436.625764][ T29] audit: type=1326 audit(1746753993.100:18987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18911 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 436.650027][ T29] audit: type=1326 audit(1746753993.100:18988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18911 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 436.674073][ T29] audit: type=1326 audit(1746753993.100:18989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18911 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 437.302035][ T29] audit: type=1326 audit(1746753993.890:18990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.7.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 437.515388][T18937] pim6reg1: entered promiscuous mode [ 437.520743][T18937] pim6reg1: entered allmulticast mode [ 438.165580][T18939] netlink: 3136 bytes leftover after parsing attributes in process `syz.6.5555'. [ 439.403346][T18952] pim6reg1: entered promiscuous mode [ 439.408730][T18952] pim6reg1: entered allmulticast mode [ 439.816389][T18954] loop7: detected capacity change from 0 to 1024 [ 439.823647][T18954] EXT4-fs: Ignoring removed orlov option [ 439.829464][T18954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 439.840407][T18954] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.855550][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5561'. [ 439.866059][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5561'. [ 439.884350][ T6478] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.461767][T18972] sd 0:0:1:0: device reset [ 442.176035][T18997] loop9: detected capacity change from 0 to 512 [ 442.203245][T18997] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.216589][T18997] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 442.537789][T18005] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.780966][T19007] loop9: detected capacity change from 0 to 128 [ 442.793634][T19007] wireguard0: entered promiscuous mode [ 442.799204][T19007] wireguard0: entered allmulticast mode [ 443.195693][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 443.195708][ T29] audit: type=1400 audit(1746753999.780:19023): avc: denied { create } for pid=19009 comm="syz.7.5580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 443.197998][ T8930] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 443.221782][T19010] loop7: detected capacity change from 0 to 1024 [ 443.222132][T19010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 443.223607][T19010] EXT4-fs: Mount option(s) incompatible with ext2 [ 443.230275][ T8930] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 443.630536][T19016] hub 9-0:1.0: USB hub found [ 443.635458][T19016] hub 9-0:1.0: 8 ports detected [ 444.666600][T19025] 9pnet_fd: Insufficient options for proto=fd [ 444.877620][T19027] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5587'. [ 446.332312][ T29] audit: type=1326 audit(1746754002.920:19024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.7.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 446.356918][ T29] audit: type=1326 audit(1746754002.920:19025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.7.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 446.380781][ T29] audit: type=1326 audit(1746754002.920:19026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.7.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 446.405238][ T29] audit: type=1326 audit(1746754002.920:19027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.7.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60f6e969 code=0x7ffc0000 [ 446.974961][T19043] loop8: detected capacity change from 0 to 1024 [ 446.983780][T19043] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 446.992912][T19043] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 447.002415][T19043] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5595: Failed to acquire dquot type 0 [ 447.014192][T19043] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 447.028863][T19043] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #13: comm syz.8.5595: corrupted inode contents [ 447.041055][T19043] EXT4-fs error (device loop8): ext4_dirty_inode:6103: inode #13: comm syz.8.5595: mark_inode_dirty error [ 447.052787][T19043] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #13: comm syz.8.5595: corrupted inode contents [ 447.065660][T19043] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #13: comm syz.8.5595: mark_inode_dirty error [ 447.077128][T19043] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #13: comm syz.8.5595: corrupted inode contents [ 447.089780][T19043] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 447.098516][T19043] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #13: comm syz.8.5595: corrupted inode contents [ 447.110800][T19043] EXT4-fs error (device loop8): ext4_truncate:4255: inode #13: comm syz.8.5595: mark_inode_dirty error [ 447.122785][T19043] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 447.132156][T19043] EXT4-fs (loop8): 1 truncate cleaned up [ 447.138389][T19043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.165645][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.604221][T19050] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 448.870827][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5603'. [ 449.340140][T19078] loop7: detected capacity change from 0 to 1024 [ 449.361221][T19078] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.374208][T19078] ext4 filesystem being mounted at /997/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.445513][T19078] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5607: bg 0: block 393: padding at end of block bitmap is not set [ 449.460819][T19078] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 449.473561][T19078] EXT4-fs (loop7): This should not happen!! Data will be lost [ 449.473561][T19078] [ 449.544448][ T29] audit: type=1326 audit(1746754006.130:19028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.8.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 449.546648][ T6478] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.568796][ T29] audit: type=1326 audit(1746754006.130:19029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.8.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 449.601353][ T29] audit: type=1326 audit(1746754006.130:19030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.8.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 449.626587][ T29] audit: type=1326 audit(1746754006.210:19031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.8.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 449.651008][ T29] audit: type=1326 audit(1746754006.210:19032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.8.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 449.674654][ T29] audit: type=1326 audit(1746754006.210:19033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.8.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 449.699132][ T29] audit: type=1326 audit(1746754006.210:19034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.8.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0cbb0ed5ca code=0x7ffc0000 [ 449.722583][ T29] audit: type=1326 audit(1746754006.210:19035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.8.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cbb121225 code=0x7ffc0000 [ 449.756700][ T29] audit: type=1326 audit(1746754006.340:19036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.8.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f0cbb121225 code=0x7ffc0000 [ 449.826325][ T29] audit: type=1326 audit(1746754006.410:19037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.8.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbb0ee969 code=0x7ffc0000 [ 450.813864][T19108] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5620'. [ 451.018437][T19110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5621'. [ 451.030513][T19110] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.038794][T19110] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.047012][T19110] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.055297][T19110] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.065073][T19110] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.073502][T19110] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.081971][T19110] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.090404][T19110] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.071099][T19114] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5623'. [ 452.080683][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5623'. [ 452.545483][T19119] tipc: Started in network mode [ 452.550473][T19119] tipc: Node identity ac14140f, cluster identity 4711 [ 452.557365][T19119] tipc: New replicast peer: 255.255.255.255 [ 452.564000][T19119] tipc: Enabled bearer , priority 10 [ 453.558680][ T8930] tipc: Node number set to 2886997007 [ 453.572476][T19129] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 453.580477][T19129] syzkaller0: entered promiscuous mode [ 453.586199][T19129] syzkaller0: entered allmulticast mode [ 453.787694][T19136] syzkaller0: entered promiscuous mode [ 453.793260][T19136] syzkaller0: entered allmulticast mode [ 454.702160][T19150] Set syz1 is full, maxelem 65536 reached [ 454.888894][T19156] Falling back ldisc for ttyS3. [ 455.882995][T19164] netlink: 'syz.7.5644': attribute type 21 has an invalid length. [ 455.890960][T19164] netlink: 'syz.7.5644': attribute type 1 has an invalid length. [ 455.898928][T19164] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5644'. [ 456.112493][T19166] SELinux: failed to load policy [ 456.939545][T19168] loop7: detected capacity change from 0 to 128 [ 457.147896][T19170] syzkaller0: entered allmulticast mode [ 457.153951][T19170] syzkaller0: entered promiscuous mode [ 457.162493][T19170] syzkaller0 (unregistering): left promiscuous mode [ 457.170056][T19170] syzkaller0 (unregistering): left allmulticast mode [ 458.443980][T19175] syzkaller0: entered promiscuous mode [ 458.450321][T19175] syzkaller0: entered allmulticast mode [ 458.457336][T19179] loop7: detected capacity change from 0 to 8192 [ 459.478568][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 459.478585][ T29] audit: type=1400 audit(1746754016.060:19040): avc: denied { lock } for pid=19189 comm="syz.8.5655" path="socket:[55806]" dev="sockfs" ino=55806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 460.103516][T19196] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 460.968685][ T29] audit: type=1326 audit(1746754017.550:19041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.9.5664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x0 [ 461.406268][T19225] vlan2: entered allmulticast mode [ 463.269477][T19234] loop7: detected capacity change from 0 to 128 [ 464.544562][ T29] audit: type=1400 audit(1746754021.130:19042): avc: denied { watch } for pid=19243 comm="syz.6.5680" path="/" dev="ramfs" ino=56803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 464.713582][T19248] loop9: detected capacity change from 0 to 1024 [ 464.721292][T19248] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 464.729976][T19248] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 464.740972][T19248] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 464.749692][T19248] EXT4-fs (loop9): orphan cleanup on readonly fs [ 464.756821][T19248] EXT4-fs error (device loop9): __ext4_get_inode_loc:4450: comm syz.9.5677: Invalid inode table block 0 in block_group 0 [ 464.769702][T19248] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 464.781477][T19248] EXT4-fs error (device loop9): ext4_quota_write:7324: inode #3: comm syz.9.5677: mark_inode_dirty error [ 464.794038][T19248] Quota error (device loop9): write_blk: dquota write failed [ 464.801625][T19248] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 464.812247][T19248] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.5677: Failed to acquire dquot type 0 [ 464.825307][T19248] EXT4-fs error (device loop9): __ext4_get_inode_loc:4450: comm syz.9.5677: Invalid inode table block 0 in block_group 0 [ 464.838296][T19248] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 464.849432][T19248] EXT4-fs error (device loop9): ext4_ext_truncate:4457: inode #15: comm syz.9.5677: mark_inode_dirty error [ 464.861112][T19248] EXT4-fs error (device loop9): __ext4_get_inode_loc:4450: comm syz.9.5677: Invalid inode table block 0 in block_group 0 [ 464.875845][T19248] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 464.885459][T19248] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 464.895498][T19248] EXT4-fs error (device loop9): __ext4_get_inode_loc:4450: comm syz.9.5677: Invalid inode table block 0 in block_group 0 [ 464.910343][T19248] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 464.920036][T19248] EXT4-fs error (device loop9): ext4_truncate:4255: inode #15: comm syz.9.5677: mark_inode_dirty error [ 464.931633][T19248] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 464.941386][T19248] EXT4-fs (loop9): 1 truncate cleaned up [ 464.947490][T19248] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.028362][T18005] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.858099][T19283] netlink: 'syz.8.5691': attribute type 4 has an invalid length. [ 467.066423][ T29] audit: type=1326 audit(1746754023.650:19043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19284 comm="syz.9.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 467.091958][ T29] audit: type=1326 audit(1746754023.650:19044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19284 comm="syz.9.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 467.116023][ T29] audit: type=1326 audit(1746754023.650:19045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19284 comm="syz.9.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 467.140377][ T29] audit: type=1326 audit(1746754023.680:19046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19284 comm="syz.9.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 467.164088][ T29] audit: type=1326 audit(1746754023.680:19047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19284 comm="syz.9.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 467.704143][T19293] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5696'. [ 467.920449][ T29] audit: type=1326 audit(1746754024.510:19048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19294 comm="syz.9.5697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 467.944235][ T29] audit: type=1326 audit(1746754024.510:19049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19294 comm="syz.9.5697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cee0e969 code=0x7ffc0000 [ 468.335496][T19302] $H: renamed from  [ 468.342788][T19302] $H: entered promiscuous mode [ 468.347987][T19302] bond_slave_0: entered promiscuous mode [ 468.353851][T19302] bond_slave_1: entered promiscuous mode [ 468.360242][T19302] dummy0: entered promiscuous mode [ 468.365715][T19301] tipc: New replicast peer: 0.0.255.255 [ 468.371392][T19301] tipc: Enabled bearer , priority 10 [ 468.831889][ C1] ================================================================== [ 468.840013][ C1] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 468.846475][ C1] [ 468.848810][ C1] read to 0xffffc90004957bd0 of 4 bytes by task 19336 on cpu 0: [ 468.856452][ C1] do_sys_poll+0x97b/0xbc0 [ 468.860872][ C1] __se_sys_ppoll+0x1b9/0x200 [ 468.865546][ C1] __x64_sys_ppoll+0x67/0x80 [ 468.870134][ C1] x64_sys_call+0x2de5/0x2fb0 [ 468.874808][ C1] do_syscall_64+0xd0/0x1a0 [ 468.879309][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.885284][ C1] [ 468.887599][ C1] write to 0xffffc90004957bd0 of 4 bytes by interrupt on cpu 1: [ 468.895219][ C1] pollwake+0xb6/0x100 [ 468.899298][ C1] __wake_up+0x63/0xb0 [ 468.903371][ C1] bpf_ringbuf_notify+0x22/0x30 [ 468.908235][ C1] irq_work_run+0xdf/0x2d0 [ 468.912666][ C1] __sysvec_irq_work+0x22/0x170 [ 468.917522][ C1] sysvec_irq_work+0x66/0x80 [ 468.922115][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 468.927053][ C1] native_apic_msr_write+0x3d/0x60 [ 468.932164][ C1] x2apic_send_IPI_self+0x10/0x20 [ 468.937189][ C1] arch_irq_work_raise+0x46/0x50 [ 468.942132][ C1] __irq_work_queue_local+0x80/0x1b0 [ 468.947431][ C1] irq_work_queue+0x70/0x100 [ 468.952035][ C1] bpf_ringbuf_discard+0xd3/0xf0 [ 468.956991][ C1] bpf_prog_fe0ed97373b08409+0x47/0x4b [ 468.962547][ C1] bpf_trace_run3+0x10c/0x1d0 [ 468.967228][ C1] kmem_cache_free+0x246/0x2f0 [ 468.971993][ C1] decay_va_pool_node+0x3fd/0x8b0 [ 468.977023][ C1] __purge_vmap_area_lazy+0xe1/0x6d0 [ 468.982309][ C1] drain_vmap_area_work+0x25/0x40 [ 468.987337][ C1] process_scheduled_works+0x4cb/0x9d0 [ 468.992802][ C1] worker_thread+0x582/0x770 [ 468.997416][ C1] kthread+0x486/0x510 [ 469.001491][ C1] ret_from_fork+0x4b/0x60 [ 469.005930][ C1] ret_from_fork_asm+0x1a/0x30 [ 469.010710][ C1] [ 469.013022][ C1] value changed: 0x00000001 -> 0x00000000 [ 469.018729][ C1] [ 469.021044][ C1] Reported by Kernel Concurrency Sanitizer on: [ 469.027188][ C1] CPU: 1 UID: 0 PID: 8930 Comm: kworker/1:13 Tainted: G W 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 469.041347][ C1] Tainted: [W]=WARN [ 469.045142][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 469.055203][ C1] Workqueue: events drain_vmap_area_work [ 469.060850][ C1] ================================================================== SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 469.667714][ T3702] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.740596][ T3702] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.840222][ T3702] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.890455][ T3702] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.962948][ T3702] bridge_slave_1: left allmulticast mode [ 469.969319][ T3702] bridge_slave_1: left promiscuous mode [ 469.975101][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.982938][ T3702] bridge_slave_0: left allmulticast mode [ 469.988715][ T3702] bridge_slave_0: left promiscuous mode [ 469.994514][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.121292][ T3702] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.130134][ T3702] bond_slave_0: left promiscuous mode [ 470.136601][ T3702] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.145354][ T3702] bond_slave_1: left promiscuous mode [ 470.151844][ T3702] $H (unregistering): (slave dummy0): Releasing backup interface [ 470.160362][ T3702] dummy0: left promiscuous mode [ 470.166118][ T3702] $H (unregistering): Released all slaves [ 470.210134][ T3702] tipc: Disabling bearer [ 470.215107][ T3702] tipc: Left network mode [ 470.236341][ T3702] hsr_slave_0: left promiscuous mode [ 470.241996][ T3702] hsr_slave_1: left promiscuous mode [ 470.247638][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.255176][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.264704][ T3702] veth1_macvtap: left promiscuous mode [ 470.271022][ T3702] veth0_macvtap: left promiscuous mode [ 470.276602][ T3702] veth1_vlan: left promiscuous mode [ 470.281870][ T3702] veth0_vlan: left promiscuous mode [ 470.338253][ T3702] team0 (unregistering): Port device team_slave_1 removed [ 470.349569][ T3702] team0 (unregistering): Port device team_slave_0 removed [ 470.661988][ T3702] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.730749][ T3702] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.790883][ T3702] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.841268][ T3702] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.102544][ T3702] bridge_slave_1: left allmulticast mode [ 471.108373][ T3702] bridge_slave_1: left promiscuous mode [ 471.114094][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.122023][ T3702] bridge_slave_0: left promiscuous mode [ 471.127712][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.461017][ T3702] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.469760][ T3702] bond_slave_0: left promiscuous mode [ 471.476218][ T3702] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.485114][ T3702] bond_slave_1: left promiscuous mode [ 471.491330][ T3702] $H (unregistering): Released all slaves [ 471.499768][ T3702] bond1 (unregistering): Released all slaves [ 471.508294][ T3702]  (unregistering): Released all slaves [ 471.518508][ T3702] bond0 (unregistering): Released all slaves [ 471.527033][ T3702] bond1 (unregistering): Released all slaves [ 471.571897][ T3702] tipc: Left network mode [ 471.610670][ T3702] hsr_slave_0: left promiscuous mode [ 471.616232][ T3702] hsr_slave_1: left promiscuous mode [ 471.627417][ T3702] veth1_macvtap: left promiscuous mode [ 471.633251][ T3702] veth0_macvtap: left promiscuous mode [ 471.687014][ T3702] team0 (unregistering): Port device team_slave_1 removed [ 471.696436][ T3702] team0 (unregistering): Port device team_slave_0 removed [ 471.787282][ T5611] lo speed is unknown, defaulting to 1000 [ 471.793219][ T5611] infiniband syz0: ib_query_port failed (-19) [ 472.188038][ T3702] IPVS: stop unused estimator thread 0... [ 472.194089][ T3702] IPVS: stop unused estimator thread 0... [ 472.261876][ T3702] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.311659][ T3702] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.351015][ T3702] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.391260][ T3702] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.472454][ T3702] bridge_slave_1: left allmulticast mode [ 472.478133][ T3702] bridge_slave_1: left promiscuous mode [ 472.483882][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.491640][ T3702] bridge_slave_0: left allmulticast mode [ 472.497282][ T3702] bridge_slave_0: left promiscuous mode [ 472.503012][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.629651][ T3702] tipc: Disabling bearer [ 472.635016][ T3702] tipc: Disabling bearer [ 472.640063][ T3702] tipc: Left network mode [ 472.662811][ T3702] hsr_slave_0: left promiscuous mode [ 472.668503][ T3702] hsr_slave_1: left promiscuous mode [ 472.674066][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.681511][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.689220][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.696752][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.706340][ T3702] veth0_macvtap: left promiscuous mode [ 472.712027][ T3702] veth1_vlan: left promiscuous mode [ 472.717518][ T3702] veth0_vlan: left promiscuous mode [ 472.772037][ T3702] team0 (unregistering): Port device team_slave_0 removed