last executing test programs: 2m8.109309339s ago: executing program 32 (id=5884): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8901, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @mcast1, @loopback, 0x9, 0x0, 0x0, 0x0, 0x780000000, 0x272001b}) 2m3.008604788s ago: executing program 33 (id=5962): sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[@ANYBLOB="08012dbd7000bbdbdf83fafb528f96256b0000000a001a0008021100000100000a001a00ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffffe4ff0900060008021100000100000a001a0008021100000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x44000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = dup3(0xffffffffffffffff, r0, 0x0) read$eventfd(r1, &(0x7f0000000340), 0x8) 1m51.650018315s ago: executing program 34 (id=6361): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m47.107497119s ago: executing program 35 (id=6541): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m46.972025845s ago: executing program 36 (id=6549): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006119a8000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) 1m46.603255191s ago: executing program 37 (id=6557): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x21f, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendfile(r0, r1, 0x0, 0x85ea) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x106, 0x4}}, 0x20) 1m42.42805682s ago: executing program 9 (id=6593): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(0x0, &(0x7f0000000280)={0xfffffffc, 0x0, 0x0, 0x1, 0xfffffffc, 0x10003}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, 0x0, 0x0, 0x8010) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, [0x7, 0x1, 0x100000000000, 0x9, 0x1, 0x5, 0xb1dc, 0xffffffffffffffff, 0x3, 0x81, 0x6, 0x7fff, 0x1843e0, 0x4, 0x3]}, &(0x7f0000000200)=0xfc) setsockopt(0xffffffffffffffff, 0xff, 0x5, 0x0, 0x0) 1m41.472151241s ago: executing program 9 (id=6617): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r0, 0x5a718000) 1m41.472064751s ago: executing program 9 (id=6618): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.453675382s ago: executing program 9 (id=6620): mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x8008c9, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='\x00', 0x89901) 1m41.408445264s ago: executing program 9 (id=6625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000140)="bad330fbc9b55400040000ea0756f27c8efbd61ceaf38c12a693b1b169281c8ca3cf517e07d7eae409d43bde6793c055f06063f0ef5e71b292efe0a5ecd96573facba997b31f55c4d37649f0ab2b5f1fb1e17acf7867", 0x56, 0xc081, &(0x7f0000000080)={0x11, 0x88a8, 0x0, 0x1, 0xf8, 0x6, @multicast}, 0x14) 1m40.34441295s ago: executing program 38 (id=6688): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x4, 0xfa00, {&(0x7f0000000340), r1, r0}}, 0x18) 1m40.063930522s ago: executing program 9 (id=6700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m40.063858471s ago: executing program 39 (id=6700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m36.299622963s ago: executing program 1 (id=6800): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x1, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x24}, 0x94) 1m36.280227003s ago: executing program 1 (id=6801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x20000011, &(0x7f0000000080)={0x11, 0xf5, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1m36.244956495s ago: executing program 1 (id=6802): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m36.211820296s ago: executing program 1 (id=6803): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x8008c9, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 1m36.104073771s ago: executing program 1 (id=6804): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)}, 0x9}], 0x1, 0x10162, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x7676, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r4, 0x3b00, 0x809c, 0x24, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r7, 0x0, 0x0, 0x4000000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ipv6_route\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x40006901, 0x0) 1m35.249672848s ago: executing program 1 (id=6815): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0x5, 0x7, 0x6, 0x4, 0xa, 0x0, 0x1, 0xde, 0x0, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240), &(0x7f0000000300)=0x8) 1m35.249531458s ago: executing program 40 (id=6815): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0x5, 0x7, 0x6, 0x4, 0xa, 0x0, 0x1, 0xde, 0x0, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240), &(0x7f0000000300)=0x8) 1m15.505426844s ago: executing program 8 (id=7648): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000100000000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r1, 0x0, 0x25, 0x2, @val=@netkit}, 0x1c) syz_emit_ethernet(0xcf, &(0x7f0000002940)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, 'Sk>', 0x99, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x3, 0x0, 0x0, 0x1, 0x6, 0x10}, 0x1, {0x400}}}, {0x8, 0x22eb, 0x3, {{0xe, 0x2, 0xe, 0x3, 0x1, 0x2, 0x7, 0x5}, 0x2, {0x0, 0x4994, 0x0, 0x7, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x4, "d45c7e8dc6c3d74843442c790c81df992ebb5e2923b96adafaa126d8f650b49345a3b9302a869206cbbff60f97ea4e3991f76b83f639651f64ce8390952ae34b14cd9856e7d65282ccd2c88f112645263089f9467c"}}}}}}}, 0x0) 1m15.504781784s ago: executing program 8 (id=7649): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000400)={0x19980330}, &(0x7f00000003c0)={0xffc, 0x10ffff, 0xffffff88, 0x8000, 0x0, 0x1}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) 1m15.387042409s ago: executing program 8 (id=7650): syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) 1m15.386465899s ago: executing program 8 (id=7651): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00') 1m15.290508673s ago: executing program 8 (id=7652): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x406, r1) unshare(0x22020400) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) 1m14.981774416s ago: executing program 8 (id=7658): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/37, 0x25}], 0x1, 0x144, 0x0) 1m14.957483027s ago: executing program 41 (id=7658): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/37, 0x25}], 0x1, 0x144, 0x0) 55.840265897s ago: executing program 2 (id=8263): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 55.331812248s ago: executing program 2 (id=8277): socket(0x28, 0x5, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x2, 0x400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x654, &(0x7f0000000040)={0x0, 0xa132, 0xc000, 0xa, 0x2000277}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 55.257808042s ago: executing program 2 (id=8284): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x8000002, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x80, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) 54.327981772s ago: executing program 2 (id=8343): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x164) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x23091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x222101e, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket(0x1, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x588) 54.289988373s ago: executing program 2 (id=8345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000085000000d0"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 53.683461389s ago: executing program 2 (id=8356): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r0 = creat(0x0, 0x1a2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x5}) 53.65719597s ago: executing program 42 (id=8356): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r0 = creat(0x0, 0x1a2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x5}) 18.256118317s ago: executing program 5 (id=9453): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x10044, 0x0) 17.313581788s ago: executing program 5 (id=9459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000010200"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000000000000"], 0x3c}}, 0x4008044) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='thermal_power_devfreq_get_power\x00'}, 0x18) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES8=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 17.246793661s ago: executing program 5 (id=9462): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 17.160212804s ago: executing program 5 (id=9466): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x18e) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200890, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file7\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x2925099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x242) 17.149327045s ago: executing program 5 (id=9467): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) getrandom(0x0, 0x0, 0x0) 16.760000652s ago: executing program 5 (id=9469): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) close_range(r4, r3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000003c0)={0x2, 0x1, 0x6, 0x6, 0x4}) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000002900000004000000020000000000000024000000"], 0x40}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000001000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r10 = dup(r9) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES16=r8], 0x64}}, 0x20008000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200ef0a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 16.743055952s ago: executing program 43 (id=9469): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) close_range(r4, r3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000003c0)={0x2, 0x1, 0x6, 0x6, 0x4}) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000002900000004000000020000000000000024000000"], 0x40}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000001000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r10 = dup(r9) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES16=r8], 0x64}}, 0x20008000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200ef0a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 4.708264828s ago: executing program 0 (id=9738): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xa00) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x86c9460748f085ce}) poll(&(0x7f00000000c0)=[{r2, 0x1009}], 0x1, 0x8000007) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r4, 0x5453, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x1, 0x220}, &(0x7f0000000000), &(0x7f0000000340)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r8, @ANYBLOB="001a000000000000b7b7566d78f0fe2d228af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x3a, 0x30, 0x68, 0x0, 0xe, 0x1, 0x0, @multicast2, @remote}, @redirect={0x5, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, {0x5, 0x4, 0x0, 0x2, 0xb5ca, 0x66, 0x4fbf, 0xa6, 0x1, 0x8, @remote, @private=0xa010101}}}}}}, 0x0) 3.563729897s ago: executing program 0 (id=9754): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x80001) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x72) 2.515260012s ago: executing program 0 (id=9774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) fchdir(r4) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000001c0)={0x1, 0x8000}, 0x4) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX=r2], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',cache=fscache,']) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x84, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r12}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000580)={0x10001, r3, 'id1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd175, 0x0, 0x0, 0x0, 0xfffffff8}, [@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @ldst={0x3, 0x1, 0x2, 0x6, 0x0, 0xfffffffffffffffe, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x789, 0xb8, &(0x7f00000004c0)=""/184, 0x41100, 0xb, '\x00', r12, 0x25, r4, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x7, 0x1000, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, r0, r13, r0, r4, r0, r4], 0x0, 0x10, 0x4}, 0x94) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r14, 0x89f2, 0x0) 1.911394218s ago: executing program 6 (id=9786): r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x508, &(0x7f0000000600)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e0020000280080003000000000008000100100000000a000400aaaaaaaaaaaa000008000500", @ANYRES32, @ANYBLOB="bfd680f37955180500d43c4b88814441a655ba8cfb7abba7c5cb82972092c67f1b59ab640a43363dce29c0c5aed5c5f115701627babf40fd310b36bf18b3000019666520cf96c6677f26c5bc878ff93a471e32344b93e2d9fcd6a266b86be604cdcbe96ee12c90ddd7180c4e0f6fa78087ba52cab8b793784381b28556b0e5b6bcfea96579e31ca54ee4cabd5ce368bcc02f649afd117bddf1f5b934b829b62645fb23ac7db2883bacef99deaac6a05c3bf16db54481e7a9c06ba22acd7db471512c8f582138a738f5df9ea9a3f991d0bc419d83ea8e6e1f3bb251fcfd7da82a02e2d659cf818454d0b6af795865192060a52c30"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001900)={'gre0\x00', &(0x7f0000001840)={'ip_vti0\x00', 0x0, 0x8, 0x1, 0x8000, 0x6, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @local}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000056bddc7f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="18500000004a3700000000000000000000000002b0fe935a661a00f1000000000000a2ca52061764490c2dfcfafa69a2c9fa1d1bda424092d1741c1d2f33d22ebc86abd83a305c33b8f24efe901f4d1bbca84e3d013e9bb3d27e92488423db0fe1a9921fe608270873c9ba3c85af706da763c6eed6477a5806898016cbb09e81404d819f7c25959bc60b24761f23da58b32a9c01fffa05603ea564cc5c513e8bf60f0df5b2d84d8bddcb53a68499"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r4]}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xf, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="a28e407500"/20, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="04000008020000000500"/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x700, 0x40, 0xa, 0x8, {{0x21, 0x4, 0x2, 0x5, 0x84, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x4c, 0x78, 0x3, 0x2, [{@rand_addr=0x64010102, 0x4}, {@multicast1, 0x7fff}, {@empty, 0x9}, {@local, 0x1}, {@multicast1, 0x8c49}, {@local, 0x7f}, {@remote, 0x8}, {@multicast1, 0x6072d220}, {@remote, 0x56}]}, @timestamp={0x44, 0x24, 0x51, 0x0, 0x7, [0x3, 0xfffffffe, 0x7, 0xc95, 0x7f, 0x0, 0xf6cf, 0x2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x1, 0x80, 0x6, 0x7, {{0x31, 0x4, 0x2, 0x9, 0xc4, 0x64, 0x0, 0xf, 0x4, 0x0, @remote, @multicast1, {[@rr={0x7, 0x17, 0x19, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @private=0xa010101]}, @cipso={0x86, 0x5a, 0x1, [{0x6, 0x11, "321c4c5d767f8200d83cbaecbd3a2a"}, {0x2, 0xd, "d627cae95ed136977ad5ad"}, {0x0, 0x2}, {0x2, 0x10, "df5d4a4bbb713e2f2175e318b643"}, {0x0, 0x4, "dbf8"}, {0x6, 0x10, "52cc4cf978c59e5071d877115a72"}, {0x0, 0xc, "738d620598f2603f19c9"}, {0x7, 0x4, "18ca"}]}, @generic={0x83, 0x2}, @generic={0x0, 0x9, "09d47bc3f2af05"}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2a, 0x3, [{0x5, 0xf, "a714a043374119bad5376e6f2b"}, {0x0, 0x5, "ed9ab2"}, {0x0, 0x10, "af970d8a7ffc05270dac63704af0"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000001180)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0xfc, 0x9000, 0x2f, @private2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x700, 0x40, 0x80, 0x9}}) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=@delqdisc={0xe4, 0x25, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xc, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xd00}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x9, 0x1, 0x2, 0x7, 0x3, 0x9}}, {0x16, 0x2, [0x8, 0x8, 0xc, 0x7, 0x0, 0x3, 0x7, 0x2, 0x1]}}, {{0x1c, 0x1, {0x6, 0x9, 0x3, 0x0, 0x2, 0xe, 0x5, 0x2}}, {0x8, 0x2, [0x8, 0x5]}}, {{0x1c, 0x1, {0xc, 0x6, 0x0, 0x9, 0x1, 0x1, 0x468, 0x1}}, {0x6, 0x2, [0x40]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x800}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x7800, 0x1, 0x71dd, 0x3, {{0x1d, 0x4, 0x3, 0x37, 0x74, 0x67, 0x0, 0x1, 0x4, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x19, [@multicast2, @multicast1, @loopback, @multicast2, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x6, [{@local, 0x400}, {@multicast2, 0xffff}, {@empty, 0xb292}, {@rand_addr=0x64010100, 0xd}, {@remote, 0x2}, {@remote, 0x1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000d00)={'gretap0\x00', 0x0, 0x20, 0x8000, 0x2, 0x100, {{0x15, 0x4, 0x0, 0xd, 0x54, 0x68, 0x0, 0x4b, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0xb, 0xdd, [@local, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp={0x44, 0x8, 0x7a, 0x0, 0x4, [0xd462]}, @timestamp={0x44, 0x2c, 0xfd, 0x0, 0x0, [0x3, 0x5, 0xffffffff, 0x515, 0x40, 0x2, 0x0, 0x3, 0x8, 0x9]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="0fa30000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdf25040000009c000180080003000100000014000200697036746e6c30000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766c616e000000000000140002006d61637674617030000000000000000014000200766c616e30000000000000000000000014000200766c616e31000000000000000000000008000300020000001400020065727370616e300000000000000000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468315f746f5f68737200000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300000000000800030002000000080003000200000038000180140002006d61637674617030000000000000000008000100", @ANYRES32=r7, @ANYBLOB="080003000300000008000100", @ANYRES32=r8, @ANYBLOB="08000300020000007c000180080003000200000008000100", @ANYRES32=r9, @ANYBLOB="080003000300000008000100", @ANYRES32=r10, @ANYBLOB="1400020064766d72703000000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=r13, @ANYBLOB, @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="080003000600000014000200626f6e645f736c6176655f30000000001400020076657468315f746f5f62617461647600"], 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) r17 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r17) 1.887646589s ago: executing program 3 (id=9787): ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x8004587d, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x32, 0x33, 0x18, 0xa, 0x0, 0xff, 0x0, 0x44, 0xffffffffffffffff}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet_sctp(r2, &(0x7f0000003000)=[{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x6c, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)='n', 0x1}], 0x1}], 0x1, 0x4000884) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x6, 0x3, 0x7ffcfffc}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 1.842820041s ago: executing program 6 (id=9788): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x22, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x10000001, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000140)={0x800100, 0x0, 0x97e, 0x0, 0x0, 0x4000003}) close_range(r2, 0xffffffffffffffff, 0x0) 1.839205761s ago: executing program 4 (id=9789): r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x508, &(0x7f0000000600)="$eJzs3e9rVWUcAPDvufvlz6ZkVBa4qNAMN3UrNBLSehNEUGoihTnc/JHzR26BCpZSlvgiXwlBBJYRoRAjoRdS4X/Qi14ZEkLRC20I/aCwYHHu7p1Xd7epmzvk+Xzg6HOes/F87/lyznOf57lnN4DcaoqI/RFRHxHrI6KxVJ+UtnhqYEt/rre1d3O6JdHfv/JSUjx+vLV3c1T8Tmpq+k8hYlJErPg5ifkHh7bbvWfv1vaurs5dpf2Wnm07W7r37F2wZVv7ps5Nndtbl7a1ti1ZuLR1ybi91nOPXG5Y/dKKDQfbLr6VvPzw52m800rHKl/HeGmKpsFzcpUk4pnxbiwjNRFRW3EeU0nt8D9/V+eRbyYiLka37Os3vyhU5HB9NEZNDCTv38ZXfmuMo+1ZxwgAjL/+/v7+a/cBgNtdos8HgJwpj/uPt/ZuLm8TNfew9tREtcRw+pZHcaH2eGltt3cw/7WllaBJURcRU35PonJZL7lmze9mrDkf0RSXN/164rF30i1u0Tosw9t/ICLuqXb9J8X8ziiu4g/Nf01EzBpj2z/9neZ/w/zKOvmfWGPJ/91jbPuzfWn+1/1VWSf/+TH7hawjIEvfHco6ArL0fV/WEZClF1dmHQFZev7xrCMgSx9eyjoCziyPiCXVxn+FuL/4f/XxX0NETB9j2+9fTMd/na9X1g0d/xUujLEZRtC3POLJimc7eivyXzKjprQ3vTgfUJds3NLVuTAi7oiIeVHXkO4vGqGNI8lXz1arP702zf8/a8rzf+mWtl+eCyzFcaG24erf62jv8bn0cdJ3IGJ2bbX8J4Pzv8kw87+zr7ONX75ddbha/dSzaf7bPhg5/9xK/R9HzK16/V95cikZ+fmsluL9oKV8Vxjqy8uHV1erX/Z2mv/TC+Q/O+n1P2Xk/Bfv/4PP63XfeBtzVl6o+lZh8Xtp/tecuJn7f32yqhhgfalud3tPz65FEfXJc0PrF994zLer8vkon680//MerN7/D6zvVL//10XEfdfZ5sl17+6sVn/qk+L8/3nXf3bS/HeMcv0nV13/N15o+/PYQ9Xa3tee5v+1k6Nf/23FYOaVarz/G931JijrOAEAAAAAAAAYH4Xic9xJoXmwXCg0Nw/8De9ZMaXQtaO759GNO97Y3hGl50HrCuVPejVWfB50UbF8ZX/xNfutETEzIg41TC7uN2/Y0dWR9YsHgJyZFvHjDwufPjZ1mP4/da4h6ygBgPGU9v/nH7jz07T8h34eAHIh7f9f3f3R0dD/A0Bu6P8BIH/0/wCQP/p/AMgf/T8A5E+5/58558zZJCL2PzG5uEXFd2fUZRohcKsVsg4AyExN1gEAmanNOgAgM8b4QDLK8UnDHaj6za7A/8Hce83/Q16Z/4f8Mv8P+WX+H/LLGB8w/w/5071n79b2rq7OXQoKCgqDhazvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzkvwAAAP//h7ctEg==") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e00200002800800", @ANYRES32, @ANYBLOB="bfd680f37955180500d43c4b88814441a655ba8cfb7abba7c5cb82972092c67f1b59ab640a43363dce29c0c5aed5c5f115701627babf40fd310b36bf18b3000019666520cf96c6677f26c5bc878ff93a471e32344b93e2d9fcd6a266b86be604cdcbe96ee12c90ddd7180c4e0f6fa78087ba52cab8b793784381b28556b0e5b6bcfea96579e31ca54ee4cabd5ce368bcc02f649afd117bddf1f5b934b829b62645fb23ac7db2883bacef99deaac6a05c3bf16db54481e7a9c06ba22acd7db471512c8f582138a738f5df9ea9a3f991d0bc419d83ea8e6e1f3bb251fcfd7da82a02e2d659cf818454d0b6af795865192060a52c30"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001900)={'gre0\x00', &(0x7f0000001840)={'ip_vti0\x00', 0x0, 0x8, 0x1, 0x8000, 0x6, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @local}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000056bddc7f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="18500000004a3700000000000000000000000002b0fe935a661a00f1000000000000a2ca52061764490c2dfcfafa69a2c9fa1d1bda424092d1741c1d2f33d22ebc86abd83a305c33b8f24efe901f4d1bbca84e3d013e9bb3d27e92488423db0fe1a9921fe608270873c9ba3c85af706da763c6eed6477a5806898016cbb09e81404d819f7c25959bc60b24761f23da58b32a9c01fffa05603ea564cc5c513e8bf60f0df5b2d84d8bddcb53a68499"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r4]}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xf, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="a28e407500"/20, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="04000008020000000500"/25], 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x700, 0x40, 0xa, 0x8, {{0x21, 0x4, 0x2, 0x5, 0x84, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x4c, 0x78, 0x3, 0x2, [{@rand_addr=0x64010102, 0x4}, {@multicast1, 0x7fff}, {@empty, 0x9}, {@local, 0x1}, {@multicast1, 0x8c49}, {@local, 0x7f}, {@remote, 0x8}, {@multicast1, 0x6072d220}, {@remote, 0x56}]}, @timestamp={0x44, 0x24, 0x51, 0x0, 0x7, [0x3, 0xfffffffe, 0x7, 0xc95, 0x7f, 0x0, 0xf6cf, 0x2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x1, 0x80, 0x6, 0x7, {{0x31, 0x4, 0x2, 0x9, 0xc4, 0x64, 0x0, 0xf, 0x4, 0x0, @remote, @multicast1, {[@rr={0x7, 0x17, 0x19, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @private=0xa010101]}, @cipso={0x86, 0x5a, 0x1, [{0x6, 0x11, "321c4c5d767f8200d83cbaecbd3a2a"}, {0x2, 0xd, "d627cae95ed136977ad5ad"}, {0x0, 0x2}, {0x2, 0x10, "df5d4a4bbb713e2f2175e318b643"}, {0x0, 0x4, "dbf8"}, {0x6, 0x10, "52cc4cf978c59e5071d877115a72"}, {0x0, 0xc, "738d620598f2603f19c9"}, {0x7, 0x4, "18ca"}]}, @generic={0x83, 0x2}, @generic={0x0, 0x9, "09d47bc3f2af05"}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2a, 0x3, [{0x5, 0xf, "a714a043374119bad5376e6f2b"}, {0x0, 0x5, "ed9ab2"}, {0x0, 0x10, "af970d8a7ffc05270dac63704af0"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000001180)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0xfc, 0x9000, 0x2f, @private2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x700, 0x40, 0x80, 0x9}}) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=@delqdisc={0xe4, 0x25, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xc, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xd00}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x9, 0x1, 0x2, 0x7, 0x3, 0x9}}, {0x16, 0x2, [0x8, 0x8, 0xc, 0x7, 0x0, 0x3, 0x7, 0x2, 0x1]}}, {{0x1c, 0x1, {0x6, 0x9, 0x3, 0x0, 0x2, 0xe, 0x5, 0x2}}, {0x8, 0x2, [0x8, 0x5]}}, {{0x1c, 0x1, {0xc, 0x6, 0x0, 0x9, 0x1, 0x1, 0x468, 0x1}}, {0x6, 0x2, [0x40]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x800}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x7800, 0x1, 0x71dd, 0x3, {{0x1d, 0x4, 0x3, 0x37, 0x74, 0x67, 0x0, 0x1, 0x4, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x19, [@multicast2, @multicast1, @loopback, @multicast2, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x6, [{@local, 0x400}, {@multicast2, 0xffff}, {@empty, 0xb292}, {@rand_addr=0x64010100, 0xd}, {@remote, 0x2}, {@remote, 0x1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000d00)={'gretap0\x00', 0x0, 0x20, 0x8000, 0x2, 0x100, {{0x15, 0x4, 0x0, 0xd, 0x54, 0x68, 0x0, 0x4b, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0xb, 0xdd, [@local, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp={0x44, 0x8, 0x7a, 0x0, 0x4, [0xd462]}, @timestamp={0x44, 0x2c, 0xfd, 0x0, 0x0, [0x3, 0x5, 0xffffffff, 0x515, 0x40, 0x2, 0x0, 0x3, 0x8, 0x9]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="0fa30000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdf25040000009c000180080003000100000014000200697036746e6c30000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766c616e000000000000140002006d61637674617030000000000000000014000200766c616e30000000000000000000000014000200766c616e31000000000000000000000008000300020000001400020065727370616e300000000000000000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468315f746f5f68737200000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300000000000800030002000000080003000200000038000180140002006d61637674617030000000000000000008000100", @ANYRES32=r7, @ANYBLOB="080003000300000008000100", @ANYRES32=r8, @ANYBLOB="08000300020000007c000180080003000200000008000100", @ANYRES32=r9, @ANYBLOB="080003000300000008000100", @ANYRES32=r10, @ANYBLOB="1400020064766d72703000000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="140002006e657464657673696d300000000000001400020070696d367265670000000000000000000c00018008000300030000004c000180080003000200000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="080003000600000014000200626f6e645f736c6176655f30000000001400020076657468315f746f5f62617461647600"], 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) r17 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r17) 1.797375083s ago: executing program 4 (id=9790): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x1ff, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x23, 0x0, 0xfffffffffffffffc, 0x0, 0x200000, 0x1}, 0x0, 0x0, 0x0) 1.790034973s ago: executing program 6 (id=9791): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x80001) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x72) 1.744261935s ago: executing program 4 (id=9792): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x80001) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x72) 1.524385745s ago: executing program 7 (id=9796): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1000000000000}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.341462943s ago: executing program 0 (id=9797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000540)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x10, 0x3, 0xfffffff9) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x1000000000000}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.043645715s ago: executing program 0 (id=9798): r0 = socket(0x28, 0x801, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 990.077528ms ago: executing program 0 (id=9799): r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x508, &(0x7f0000000600)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e0020000280080003000000000008000100100000000a000400aaaaaaaaaaaa000008000500", @ANYRES32, @ANYBLOB="bfd680f37955180500d43c4b88814441a655ba8cfb7abba7c5cb82972092c67f1b59ab640a43363dce29c0c5aed5c5f115701627babf40fd310b36bf18b3000019666520cf96c6677f26c5bc878ff93a471e32344b93e2d9fcd6a266b86be604cdcbe96ee12c90ddd7180c4e0f6fa78087ba52cab8b793784381b28556b0e5b6bcfea96579e31ca54ee4cabd5ce368bcc02f649afd117bddf1f5b934b829b62645fb23ac7db2883bacef99deaac6a05c3bf16db54481e7a9c06ba22acd7db471512c8f582138a738f5df9ea9a3f991d0bc419d83ea8e6e1f3bb251fcfd7da82a02e2d659cf818454d0b6af795865192060a52c30"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001900)={'gre0\x00', &(0x7f0000001840)={'ip_vti0\x00', 0x0, 0x8, 0x1, 0x8000, 0x6, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @local}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000056bddc7f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="18500000004a3700000000000000000000000002b0fe935a661a00f1000000000000a2ca52061764490c2dfcfafa69a2c9fa1d1bda424092d1741c1d2f33d22ebc86abd83a305c33b8f24efe901f4d1bbca84e3d013e9bb3d27e92488423db0fe1a9921fe608270873c9ba3c85af706da763c6eed6477a5806898016cbb09e81404d819f7c25959bc60b24761f23da58b32a9c01fffa05603ea564cc5c513e8bf60f0df5b2d84d8bddcb53a68499"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r4]}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xf, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="a28e407500"/20, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="04000008020000000500"/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x700, 0x40, 0xa, 0x8, {{0x21, 0x4, 0x2, 0x5, 0x84, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x4c, 0x78, 0x3, 0x2, [{@rand_addr=0x64010102, 0x4}, {@multicast1, 0x7fff}, {@empty, 0x9}, {@local, 0x1}, {@multicast1, 0x8c49}, {@local, 0x7f}, {@remote, 0x8}, {@multicast1, 0x6072d220}, {@remote, 0x56}]}, @timestamp={0x44, 0x24, 0x51, 0x0, 0x7, [0x3, 0xfffffffe, 0x7, 0xc95, 0x7f, 0x0, 0xf6cf, 0x2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x1, 0x80, 0x6, 0x7, {{0x31, 0x4, 0x2, 0x9, 0xc4, 0x64, 0x0, 0xf, 0x4, 0x0, @remote, @multicast1, {[@rr={0x7, 0x17, 0x19, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @private=0xa010101]}, @cipso={0x86, 0x5a, 0x1, [{0x6, 0x11, "321c4c5d767f8200d83cbaecbd3a2a"}, {0x2, 0xd, "d627cae95ed136977ad5ad"}, {0x0, 0x2}, {0x2, 0x10, "df5d4a4bbb713e2f2175e318b643"}, {0x0, 0x4, "dbf8"}, {0x6, 0x10, "52cc4cf978c59e5071d877115a72"}, {0x0, 0xc, "738d620598f2603f19c9"}, {0x7, 0x4, "18ca"}]}, @generic={0x83, 0x2}, @generic={0x0, 0x9, "09d47bc3f2af05"}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2a, 0x3, [{0x5, 0xf, "a714a043374119bad5376e6f2b"}, {0x0, 0x5, "ed9ab2"}, {0x0, 0x10, "af970d8a7ffc05270dac63704af0"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000001180)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0xfc, 0x9000, 0x2f, @private2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x700, 0x40, 0x80, 0x9}}) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=@delqdisc={0xe4, 0x25, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xc, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xd00}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x9, 0x1, 0x2, 0x7, 0x3, 0x9}}, {0x16, 0x2, [0x8, 0x8, 0xc, 0x7, 0x0, 0x3, 0x7, 0x2, 0x1]}}, {{0x1c, 0x1, {0x6, 0x9, 0x3, 0x0, 0x2, 0xe, 0x5, 0x2}}, {0x8, 0x2, [0x8, 0x5]}}, {{0x1c, 0x1, {0xc, 0x6, 0x0, 0x9, 0x1, 0x1, 0x468, 0x1}}, {0x6, 0x2, [0x40]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x800}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x7800, 0x1, 0x71dd, 0x3, {{0x1d, 0x4, 0x3, 0x37, 0x74, 0x67, 0x0, 0x1, 0x4, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x19, [@multicast2, @multicast1, @loopback, @multicast2, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x6, [{@local, 0x400}, {@multicast2, 0xffff}, {@empty, 0xb292}, {@rand_addr=0x64010100, 0xd}, {@remote, 0x2}, {@remote, 0x1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000d00)={'gretap0\x00', 0x0, 0x20, 0x8000, 0x2, 0x100, {{0x15, 0x4, 0x0, 0xd, 0x54, 0x68, 0x0, 0x4b, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0xb, 0xdd, [@local, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp={0x44, 0x8, 0x7a, 0x0, 0x4, [0xd462]}, @timestamp={0x44, 0x2c, 0xfd, 0x0, 0x0, [0x3, 0x5, 0xffffffff, 0x515, 0x40, 0x2, 0x0, 0x3, 0x8, 0x9]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="0fa30000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdf25040000009c000180080003000100000014000200697036746e6c30000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766c616e000000000000140002006d61637674617030000000000000000014000200766c616e30000000000000000000000014000200766c616e31000000000000000000000008000300020000001400020065727370616e300000000000000000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468315f746f5f68737200000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300000000000800030002000000080003000200000038000180140002006d61637674617030000000000000000008000100", @ANYRES32=r7, @ANYBLOB="080003000300000008000100", @ANYRES32=r8, @ANYBLOB="08000300020000007c000180080003000200000008000100", @ANYRES32=r9, @ANYBLOB="080003000300000008000100", @ANYRES32=r10, @ANYBLOB="1400020064766d72703000000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="140002006e657464657673696d300000000000001400020070696d36726567000000", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="080003000600000014000200626f6e645f736c6176655f30000000001400020076657468315f746f5f62617461647600"], 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) r17 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r17) 967.343728ms ago: executing program 7 (id=9800): r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x508, &(0x7f0000000600)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e00200002800800", @ANYRES32, @ANYBLOB="bfd680f37955180500d43c4b88814441a655ba8cfb7abba7c5cb82972092c67f1b59ab640a43363dce29c0c5aed5c5f115701627babf40fd310b36bf18b3000019666520cf96c6677f26c5bc878ff93a471e32344b93e2d9fcd6a266b86be604cdcbe96ee12c90ddd7180c4e0f6fa78087ba52cab8b793784381b28556b0e5b6bcfea96579e31ca54ee4cabd5ce368bcc02f649afd117bddf1f5b934b829b62645fb23ac7db2883bacef99deaac6a05c3bf16db54481e7a9c06ba22acd7db471512c8f582138a738f5df9ea9a3f991d0bc419d83ea8e6e1f3bb251fcfd7da82a02e2d659cf818454d0b6af795865192060a52c30"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001900)={'gre0\x00', &(0x7f0000001840)={'ip_vti0\x00', 0x0, 0x8, 0x1, 0x8000, 0x6, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @local}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000056bddc7f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="18500000004a3700000000000000000000000002b0fe935a661a00f1000000000000a2ca52061764490c2dfcfafa69a2c9fa1d1bda424092d1741c1d2f33d22ebc86abd83a305c33b8f24efe901f4d1bbca84e3d013e9bb3d27e92488423db0fe1a9921fe608270873c9ba3c85af706da763c6eed6477a5806898016cbb09e81404d819f7c25959bc60b24761f23da58b32a9c01fffa05603ea564cc5c513e8bf60f0df5b2d84d8bddcb53a68499"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r4]}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xf, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="a28e407500"/20, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="04000008020000000500"/25], 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x700, 0x40, 0xa, 0x8, {{0x21, 0x4, 0x2, 0x5, 0x84, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x4c, 0x78, 0x3, 0x2, [{@rand_addr=0x64010102, 0x4}, {@multicast1, 0x7fff}, {@empty, 0x9}, {@local, 0x1}, {@multicast1, 0x8c49}, {@local, 0x7f}, {@remote, 0x8}, {@multicast1, 0x6072d220}, {@remote, 0x56}]}, @timestamp={0x44, 0x24, 0x51, 0x0, 0x7, [0x3, 0xfffffffe, 0x7, 0xc95, 0x7f, 0x0, 0xf6cf, 0x2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x1, 0x80, 0x6, 0x7, {{0x31, 0x4, 0x2, 0x9, 0xc4, 0x64, 0x0, 0xf, 0x4, 0x0, @remote, @multicast1, {[@rr={0x7, 0x17, 0x19, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @private=0xa010101]}, @cipso={0x86, 0x5a, 0x1, [{0x6, 0x11, "321c4c5d767f8200d83cbaecbd3a2a"}, {0x2, 0xd, "d627cae95ed136977ad5ad"}, {0x0, 0x2}, {0x2, 0x10, "df5d4a4bbb713e2f2175e318b643"}, {0x0, 0x4, "dbf8"}, {0x6, 0x10, "52cc4cf978c59e5071d877115a72"}, {0x0, 0xc, "738d620598f2603f19c9"}, {0x7, 0x4, "18ca"}]}, @generic={0x83, 0x2}, @generic={0x0, 0x9, "09d47bc3f2af05"}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2a, 0x3, [{0x5, 0xf, "a714a043374119bad5376e6f2b"}, {0x0, 0x5, "ed9ab2"}, {0x0, 0x10, "af970d8a7ffc05270dac63704af0"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000001180)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0xfc, 0x9000, 0x2f, @private2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x700, 0x40, 0x80, 0x9}}) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=@delqdisc={0xe4, 0x25, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xc, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xd00}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x9, 0x1, 0x2, 0x7, 0x3, 0x9}}, {0x16, 0x2, [0x8, 0x8, 0xc, 0x7, 0x0, 0x3, 0x7, 0x2, 0x1]}}, {{0x1c, 0x1, {0x6, 0x9, 0x3, 0x0, 0x2, 0xe, 0x5, 0x2}}, {0x8, 0x2, [0x8, 0x5]}}, {{0x1c, 0x1, {0xc, 0x6, 0x0, 0x9, 0x1, 0x1, 0x468, 0x1}}, {0x6, 0x2, [0x40]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x800}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x7800, 0x1, 0x71dd, 0x3, {{0x1d, 0x4, 0x3, 0x37, 0x74, 0x67, 0x0, 0x1, 0x4, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x19, [@multicast2, @multicast1, @loopback, @multicast2, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x6, [{@local, 0x400}, {@multicast2, 0xffff}, {@empty, 0xb292}, {@rand_addr=0x64010100, 0xd}, {@remote, 0x2}, {@remote, 0x1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000d00)={'gretap0\x00', 0x0, 0x20, 0x8000, 0x2, 0x100, {{0x15, 0x4, 0x0, 0xd, 0x54, 0x68, 0x0, 0x4b, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0xb, 0xdd, [@local, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp={0x44, 0x8, 0x7a, 0x0, 0x4, [0xd462]}, @timestamp={0x44, 0x2c, 0xfd, 0x0, 0x0, [0x3, 0x5, 0xffffffff, 0x515, 0x40, 0x2, 0x0, 0x3, 0x8, 0x9]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="0fa30000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdf25040000009c000180080003000100000014000200697036746e6c30000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766c616e000000000000140002006d61637674617030000000000000000014000200766c616e30000000000000000000000014000200766c616e31000000000000000000000008000300020000001400020065727370616e300000000000000000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468315f746f5f68737200000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300000000000800030002000000080003000200000038000180140002006d61637674617030000000000000000008000100", @ANYRES32=r7, @ANYBLOB="080003000300000008000100", @ANYRES32=r8, @ANYBLOB="08000300020000007c000180080003000200000008000100", @ANYRES32=r9, @ANYBLOB="080003000300000008000100", @ANYRES32=r10, @ANYBLOB="1400020064766d72703000000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="140002006e657464657673696d300000000000001400020070696d367265670000000000000000000c00018008000300030000004c000180080003000200000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="080003000600000014000200626f6e645f736c6176655f30000000001400020076657468315f746f5f62617461647600"], 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) r17 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r17) 928.24627ms ago: executing program 3 (id=9801): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "4a45a414837b5631403a65a9a78b5cd295cf632f26dc1d960331da4fbcf3f8597d3ab892eb3dd3fbbaf6a0867af7cfc628d1ff6fbb6f907142c8ebc3a17723f8", 0x29}, 0x48, 0xfffffffffffffffa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000001280)=ANY=[@ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xd4, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd3}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdb88}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x44e0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x19}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x193a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x58}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c850) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 753.713148ms ago: executing program 7 (id=9803): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) 697.84041ms ago: executing program 6 (id=9804): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x15, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r0, 0x10}}, 0x20) 680.208261ms ago: executing program 4 (id=9805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001800)=""/201, 0xc9}, {0x0}], 0x2, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 670.630451ms ago: executing program 3 (id=9806): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300e7eaffffff000000000001000000000000000000000057b78008d1b812796bf7ffffff7a229fda94047c7e6243822ef1de6c36f92060c609a4d60cf3ee61363b5bb5a080cbfdc5f2780171ac2a4b46ba3d1bcd0da2dd5432bff12fb46e2763aa6ae0577a0eb93011d02a6d6cd074fd23ec0a8a9ba4ff8c6851845ff01d000800000000000026a30ccf73ad1396840203"], 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0xf6) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/48, 0x30) inotify_add_watch(r0, &(0x7f00000009c0)='./file1\x00', 0x2000021) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@bsdgroups}, {@jqfmt_vfsv1}, {@nolazytime}, {@noblock_validity}, {@grpjquota}, {@jqfmt_vfsv1}, {@errors_remount}]}, 0x11, 0x565, &(0x7f0000000440)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) listen(r6, 0x9) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x81, 0x1, "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"}) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getpid() 662.923471ms ago: executing program 7 (id=9807): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x65, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0x19, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36e", 0x0}, 0x50) 584.102875ms ago: executing program 4 (id=9808): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 583.190685ms ago: executing program 7 (id=9809): r0 = socket(0x28, 0x801, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 553.854546ms ago: executing program 6 (id=9810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) unshare(0x22020400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(r2, 0x0, 0x0) 519.865648ms ago: executing program 7 (id=9811): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001600)={{r0}, "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"}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc", 0xf) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3ffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) gettid() timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff3000/0xa000)=nil, 0xa000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) 384.286464ms ago: executing program 3 (id=9812): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000140)={0x800100, 0x0, 0x97e, 0x0, 0x0, 0x4000003}) close_range(r2, 0xffffffffffffffff, 0x0) 371.598574ms ago: executing program 6 (id=9813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 335.633436ms ago: executing program 4 (id=9814): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x22, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x10000001, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000140)={0x800100, 0x0, 0x97e, 0x0, 0x0, 0x4000003}) close_range(r1, 0xffffffffffffffff, 0x0) 120.816555ms ago: executing program 3 (id=9815): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0a", 0x2}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x87a]}}) 0s ago: executing program 3 (id=9816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001800)=""/201, 0xc9}, {0x0}], 0x2, 0x0, 0x1}) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): veth0_macvtap: left promiscuous mode [ 474.051776][ T4214] veth1_vlan: left promiscuous mode [ 474.057375][ T4214] veth0_vlan: left promiscuous mode [ 474.156622][ T4214] team0 (unregistering): Port device team_slave_1 removed [ 474.177702][ T4214] team0 (unregistering): Port device team_slave_0 removed [ 474.223205][T32047] syzkaller0: entered promiscuous mode [ 474.228782][T32047] syzkaller0: entered allmulticast mode [ 474.394758][T31391] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.437795][T31253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.449586][T31391] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.473352][T31253] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.492917][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.500006][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.518462][T31391] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.539102][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.546195][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.586130][T31391] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.619841][ T4214] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.684154][ T4214] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.707467][T31391] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 474.724145][T31391] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 474.733975][T31391] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 474.743751][T31391] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 474.758705][ T4214] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.783374][T31253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.805156][ T4214] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.918538][T32219] bond2: (slave syz_tun): Releasing backup interface [ 474.942953][T32219] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 474.988698][T31391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.022841][T31391] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.060925][ T4214] bridge_slave_1: left allmulticast mode [ 475.066633][ T4214] bridge_slave_1: left promiscuous mode [ 475.072502][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.081562][ T4214] bridge_slave_0: left allmulticast mode [ 475.087259][ T4214] bridge_slave_0: left promiscuous mode [ 475.093121][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.210334][T32262] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6798'. [ 475.327000][ T4214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.338637][ T4214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.353362][ T4214] bond0 (unregistering): Released all slaves [ 475.416793][ T4214] hsr_slave_0: left promiscuous mode [ 475.423925][ T4214] hsr_slave_1: left promiscuous mode [ 475.429752][ T4214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.437227][ T4214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.445415][ T4214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.452955][ T4214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.466115][ T4214] veth1_macvtap: left promiscuous mode [ 475.471975][ T4214] veth0_macvtap: left promiscuous mode [ 475.478978][ T4214] veth1_vlan: left promiscuous mode [ 475.484867][ T4214] veth0_vlan: left promiscuous mode [ 475.608542][ T4214] team0 (unregistering): Port device team_slave_1 removed [ 475.618924][ T4214] team0 (unregistering): Port device team_slave_0 removed [ 475.656926][T16598] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.664037][T16598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.684715][T16579] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.692014][T16579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.703704][T31253] veth0_vlan: entered promiscuous mode [ 475.718557][T31253] veth1_vlan: entered promiscuous mode [ 475.752143][T31253] veth0_macvtap: entered promiscuous mode [ 475.766239][T31253] veth1_macvtap: entered promiscuous mode [ 475.800218][T31253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.828132][T31253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.856255][ T4206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.866688][T31391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.883926][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.918455][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.935846][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.042466][T32308] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 476.062094][T32302] syzkaller0: entered promiscuous mode [ 476.067684][T32302] syzkaller0: entered allmulticast mode [ 476.159854][T31391] veth0_vlan: entered promiscuous mode [ 476.180542][T31391] veth1_vlan: entered promiscuous mode [ 476.214438][T32330] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6819'. [ 476.223400][T32330] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6819'. [ 476.238815][T32330] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6819'. [ 476.247981][T32330] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6819'. [ 476.260526][T32330] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6819'. [ 476.269477][T32330] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6819'. [ 476.279481][T32330] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6819'. [ 476.288419][T32330] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6819'. [ 476.346457][T31391] veth0_macvtap: entered promiscuous mode [ 476.368219][T31391] veth1_macvtap: entered promiscuous mode [ 476.396429][T31391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.414139][T31391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.426925][ T4207] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.447146][ T4207] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.477368][ T4207] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.486784][ T4207] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.511604][T32331] lo speed is unknown, defaulting to 1000 [ 476.700322][T32400] loop8: detected capacity change from 0 to 8192 [ 476.758375][T32331] chnl_net:caif_netlink_parms(): no params data found [ 476.777882][T32400] loop8: p1 p2 < > p3 [ 476.782001][T32400] loop8: partition table partially beyond EOD, truncated [ 476.789141][T32400] loop8: p1 start 16777216 is beyond EOD, truncated [ 476.795752][T32400] loop8: p2 start 268435456 is beyond EOD, truncated [ 476.802489][T32400] loop8: p3 size 60489728 extends beyond EOD, truncated [ 476.908335][T32331] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.915469][T32331] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.955824][T32331] bridge_slave_0: entered allmulticast mode [ 476.965271][T32331] bridge_slave_0: entered promiscuous mode [ 477.002669][T32331] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.009774][T32331] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.017663][T32331] bridge_slave_1: entered allmulticast mode [ 477.035077][T32331] bridge_slave_1: entered promiscuous mode [ 477.122335][T32331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.138912][T32331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.149874][T32578] loop8: detected capacity change from 0 to 128 [ 477.172179][T32578] bio_check_eod: 31 callbacks suppressed [ 477.172194][T32578] syz.8.6842: attempt to access beyond end of device [ 477.172194][T32578] loop8: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 477.194867][T32331] team0: Port device team_slave_0 added [ 477.212519][T32331] team0: Port device team_slave_1 added [ 477.219187][T32578] syz.8.6842: attempt to access beyond end of device [ 477.219187][T32578] loop8: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 477.232645][T32578] buffer_io_error: 17 callbacks suppressed [ 477.232662][T32578] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 477.261376][T32578] syz.8.6842: attempt to access beyond end of device [ 477.261376][T32578] loop8: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 477.274916][T32578] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 477.284962][T32331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.291954][T32331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.300958][T32578] syz.8.6842: attempt to access beyond end of device [ 477.300958][T32578] loop8: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 477.317991][T32331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.354382][T32578] syz.8.6842: attempt to access beyond end of device [ 477.354382][T32578] loop8: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 477.367972][T32578] Buffer I/O error on dev loop8, logical block 83, lost async page write [ 477.383281][T32578] syz.8.6842: attempt to access beyond end of device [ 477.383281][T32578] loop8: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 477.386739][T32331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.396760][T32578] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 477.404934][T32331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.439209][T32331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.450269][T32578] syz.8.6842: attempt to access beyond end of device [ 477.450269][T32578] loop8: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 477.487697][T32331] hsr_slave_0: entered promiscuous mode [ 477.496542][T32578] syz.8.6842: attempt to access beyond end of device [ 477.496542][T32578] loop8: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 477.497374][T32331] hsr_slave_1: entered promiscuous mode [ 477.510113][T32578] Buffer I/O error on dev loop8, logical block 95, lost async page write [ 477.520332][T32331] debugfs: 'hsr0' already exists in 'hsr' [ 477.528948][T32578] syz.8.6842: attempt to access beyond end of device [ 477.528948][T32578] loop8: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 477.529838][T32331] Cannot create hsr debugfs directory [ 477.543249][T32578] Buffer I/O error on dev loop8, logical block 96, lost async page write [ 477.565652][T32578] syz.8.6842: attempt to access beyond end of device [ 477.565652][T32578] loop8: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 477.727022][T32578] Buffer I/O error on dev loop8, logical block 99, lost async page write [ 477.773894][T32578] Buffer I/O error on dev loop8, logical block 100, lost async page write [ 477.807623][T32578] Buffer I/O error on dev loop8, logical block 111, lost async page write [ 477.857678][T32578] Buffer I/O error on dev loop8, logical block 112, lost async page write [ 478.204967][T32331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 478.218857][T32331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 478.232004][T32331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 478.248694][T32331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 478.339813][T32331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.359795][T32331] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.381808][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.388914][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.410346][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.417536][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.549178][T32331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.673772][T32331] veth0_vlan: entered promiscuous mode [ 478.702511][T32331] veth1_vlan: entered promiscuous mode [ 478.719375][T32331] veth0_macvtap: entered promiscuous mode [ 478.725969][ T437] 9pnet_fd: Insufficient options for proto=fd [ 478.750290][T32331] veth1_macvtap: entered promiscuous mode [ 478.785139][T32331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.807309][T32331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.831798][ T4207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.854285][T16598] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.881897][T16598] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.896677][T16598] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.070645][ T490] loop7: detected capacity change from 0 to 2048 [ 479.134826][ T490] loop7: p2 < > p3 < p5 > p4 [ 479.139554][ T490] loop7: partition table partially beyond EOD, truncated [ 479.170388][ T490] loop7: p2 start 4278190080 is beyond EOD, truncated [ 479.178310][ T490] loop7: p4 size 8192 extends beyond EOD, truncated [ 479.212238][ T490] loop7: p5 size 8192 extends beyond EOD, truncated [ 479.232891][ T29] audit: type=1400 audit(2000000184.570:18235): avc: denied { append } for pid=488 comm="syz.7.6927" name="loop7" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.305649][ T29] audit: type=1400 audit(2000000184.598:18236): avc: denied { map } for pid=488 comm="syz.7.6927" path="/dev/loop7" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.411971][ T29] audit: type=1400 audit(2000000184.748:18237): avc: denied { block_suspend } for pid=556 comm="syz.6.6948" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 479.801969][ T29] audit: type=1400 audit(2000000185.103:18238): avc: denied { write } for pid=620 comm="syz.2.6970" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 480.061392][ T29] audit: type=1400 audit(2000000185.356:18239): avc: denied { write } for pid=655 comm="syz.2.6983" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 480.180361][ T668] __nla_validate_parse: 132 callbacks suppressed [ 480.180382][ T668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6987'. [ 480.419555][ T713] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 480.623137][ T749] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 480.934275][ T791] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 481.362496][ T821] syzkaller0: entered promiscuous mode [ 481.368118][ T821] syzkaller0: entered allmulticast mode [ 482.118948][ T913] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 482.479514][ T947] loop8: detected capacity change from 0 to 256 [ 482.498502][ T3499] kernel write not supported for file bpf-prog (pid: 3499 comm: kworker/0:7) [ 482.505481][ T947] FAT-fs (loop8): error, corrupted file size (i_pos 196, 2097152) [ 482.515220][ T947] FAT-fs (loop8): Filesystem has been set read-only [ 482.522207][ T947] FAT-fs (loop8): error, corrupted file size (i_pos 196, 2097152) [ 482.588902][ T962] loop7: detected capacity change from 0 to 2048 [ 482.647918][ T962] loop7: p2 < > p3 < p5 > p4 [ 482.652694][ T962] loop7: partition table partially beyond EOD, truncated [ 482.660199][ T962] loop7: p2 start 4278190080 is beyond EOD, truncated [ 482.668381][ T962] loop7: p4 size 8192 extends beyond EOD, truncated [ 482.675703][ T962] loop7: p5 size 8192 extends beyond EOD, truncated [ 483.684616][ T29] audit: type=1400 audit(2000000188.742:18240): avc: denied { bind } for pid=1055 comm="syz.0.7116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 483.726626][ T29] audit: type=1400 audit(2000000188.742:18241): avc: denied { setopt } for pid=1055 comm="syz.0.7116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 484.082798][ T1121] IPv6: addrconf: prefix option has invalid lifetime [ 484.094449][ T1123] syzkaller0: entered promiscuous mode [ 484.099967][ T1123] syzkaller0: entered allmulticast mode [ 484.269404][ T4199] kernel write not supported for file bpf-prog (pid: 4199 comm: kworker/1:10) [ 484.295813][ T1162] syzkaller0: entered promiscuous mode [ 484.301338][ T1162] syzkaller0: entered allmulticast mode [ 484.361408][ T1175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7158'. [ 485.103158][ T1232] syzkaller0: entered promiscuous mode [ 485.108786][ T1232] syzkaller0: entered allmulticast mode [ 485.216205][ T1271] IPv6: addrconf: prefix option has invalid lifetime [ 485.726699][ T1353] netlink: 'syz.8.7211': attribute type 1 has an invalid length. [ 485.734574][ T1353] netlink: 'syz.8.7211': attribute type 2 has an invalid length. [ 485.742464][ T1353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7211'. [ 485.869776][ T1370] loop8: detected capacity change from 0 to 256 [ 485.897427][ T1375] IPv6: addrconf: prefix option has invalid lifetime [ 486.090133][ T1409] lo speed is unknown, defaulting to 1000 [ 486.737069][ T1492] syzkaller0: entered promiscuous mode [ 486.742771][ T1492] syzkaller0: entered allmulticast mode [ 487.094379][ T1547] IPv6: addrconf: prefix option has invalid lifetime [ 487.130769][ T29] audit: type=1400 audit(2000000191.960:18242): avc: denied { mount } for pid=1557 comm="syz.6.7270" name="/" dev="hugetlbfs" ino=95607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 487.168096][ T29] audit: type=1400 audit(2000000191.997:18243): avc: denied { unmount } for pid=31391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 488.413879][ T1717] program syz.2.7331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.430350][ T29] audit: type=1400 audit(2000000193.167:18244): avc: denied { append } for pid=1716 comm="syz.2.7331" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 488.904728][ T1748] syzkaller0: entered promiscuous mode [ 488.910372][ T1748] syzkaller0: entered allmulticast mode [ 489.017338][ T1773] netlink: 'syz.8.7354': attribute type 12 has an invalid length. [ 489.025288][ T1773] netlink: 'syz.8.7354': attribute type 29 has an invalid length. [ 489.033650][ T1773] netlink: 148 bytes leftover after parsing attributes in process `syz.8.7354'. [ 489.110108][ T1777] syzkaller0: entered promiscuous mode [ 489.115791][ T1777] syzkaller0: entered allmulticast mode [ 489.123820][ T1782] netlink: 'syz.6.7357': attribute type 1 has an invalid length. [ 489.131731][ T1782] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7357'. [ 489.140755][ T1782] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.152922][ T1782] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.160112][ T1782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.270458][ T1805] 9pnet_fd: Insufficient options for proto=fd [ 489.285191][ T1811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7366'. [ 489.343708][ T1807] syzkaller0: entered promiscuous mode [ 489.349297][ T1807] syzkaller0: entered allmulticast mode [ 489.524359][ T1838] syzkaller0: entered promiscuous mode [ 489.529899][ T1838] syzkaller0: entered allmulticast mode [ 489.579184][ T1855] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 489.606231][ T1855] team0 (unregistering): Port device team_slave_0 removed [ 489.620176][ T1855] team0 (unregistering): Failed to send options change via netlink (err -105) [ 489.636637][ T1855] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 489.647732][ T1855] team0 (unregistering): Port device team_slave_1 removed [ 489.770521][ T29] audit: type=1400 audit(2000000194.429:18245): avc: denied { listen } for pid=1915 comm="syz.2.7391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 489.824545][ T29] audit: type=1400 audit(2000000194.485:18246): avc: denied { ioctl } for pid=1915 comm="syz.2.7391" path="socket:[96824]" dev="sockfs" ino=96824 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 489.849763][ T1925] loop8: detected capacity change from 0 to 256 [ 489.967201][ T1938] syzkaller0: entered promiscuous mode [ 489.972854][ T1938] syzkaller0: entered allmulticast mode [ 490.109965][ T1960] loop8: detected capacity change from 0 to 512 [ 490.155174][ T1969] program syz.8.7403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.758414][ T2004] lo speed is unknown, defaulting to 1000 [ 490.855610][ T2043] IPv6: addrconf: prefix option has invalid lifetime [ 491.127728][ T2077] vlan0: entered promiscuous mode [ 491.163697][ T2081] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7436'. [ 491.213294][ T2087] syzkaller0: entered promiscuous mode [ 491.218831][ T2087] syzkaller0: entered allmulticast mode [ 491.660006][ T2174] IPv6: addrconf: prefix option has invalid lifetime [ 491.825733][ T2208] IPv6: addrconf: prefix option has invalid lifetime [ 491.834926][ T2199] syzkaller0: entered promiscuous mode [ 491.840488][ T2199] syzkaller0: entered allmulticast mode [ 492.021791][ T2250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7489'. [ 492.180310][ T2269] TCP: TCP_TX_DELAY enabled [ 492.212868][ T2271] syzkaller0: entered promiscuous mode [ 492.218504][ T2271] syzkaller0: entered allmulticast mode [ 492.339597][ T2285] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7497'. [ 492.452272][ T2297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7502'. [ 492.521243][ T2301] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 492.591214][ T2307] syzkaller0: entered promiscuous mode [ 492.596728][ T2307] syzkaller0: entered allmulticast mode [ 492.739285][ T2321] loop8: detected capacity change from 0 to 2048 [ 492.770961][ T2321] loop8: p2 < > p3 < p5 > p4 [ 492.775801][ T2321] loop8: partition table partially beyond EOD, truncated [ 492.783253][ T2321] loop8: p2 start 4278190080 is beyond EOD, truncated [ 492.790734][ T2321] loop8: p4 size 8192 extends beyond EOD, truncated [ 492.798423][ T2321] loop8: p5 size 8192 extends beyond EOD, truncated [ 492.849024][ T2332] program syz.8.7513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.017203][ T2350] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7518'. [ 493.131988][ T2362] IPv6: addrconf: prefix option has invalid lifetime [ 493.186740][ T2369] program syz.6.7525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.381920][ T29] audit: type=1400 audit(2000000197.815:18247): avc: denied { write } for pid=2403 comm="syz.7.7539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 493.427168][ T2412] netlink: 'syz.6.7543': attribute type 12 has an invalid length. [ 493.435166][ T2412] netlink: 'syz.6.7543': attribute type 29 has an invalid length. [ 493.443136][ T2412] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7543'. [ 493.473532][ T2418] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 493.505757][ T2421] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7548'. [ 493.505868][ T29] audit: type=1400 audit(2000000197.928:18248): avc: denied { setopt } for pid=2424 comm="syz.6.7549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 493.615691][ T2442] raw_sendmsg: syz.6.7552 forgot to set AF_INET. Fix it! [ 493.686782][ T2441] syzkaller0: entered promiscuous mode [ 493.692404][ T2441] syzkaller0: entered allmulticast mode [ 493.703178][ T29] audit: type=1400 audit(2000000198.115:18249): avc: denied { write } for pid=2454 comm="syz.0.7562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 493.762543][ T2471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7566'. [ 493.850881][ T2479] loop8: detected capacity change from 0 to 128 [ 493.862901][ T2479] bio_check_eod: 33 callbacks suppressed [ 493.862918][ T2479] syz.8.7568: attempt to access beyond end of device [ 493.862918][ T2479] loop8: rw=2049, sector=153, nr_sectors = 3 limit=128 [ 493.934510][ T4206] kworker/u8:19: attempt to access beyond end of device [ 493.934510][ T4206] loop8: rw=1, sector=145, nr_sectors = 8 limit=128 [ 494.098319][ T2502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7577'. [ 494.384201][ T2524] program syz.8.7584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.468707][ T2532] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7588'. [ 494.577170][ T2549] program syz.2.7596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.783758][ T2580] program syz.8.7609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.948478][ T29] audit: type=1400 audit(2000000199.265:18250): avc: denied { sqpoll } for pid=2601 comm="syz.2.7618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 494.997658][ T2617] program syz.6.7623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.069551][ T2624] IPv6: addrconf: prefix option has invalid lifetime [ 495.310311][ T2642] program syz.2.7633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.446244][ T2650] program syz.7.7636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.641369][ T2670] loop7: detected capacity change from 0 to 256 [ 495.649072][ T2670] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 495.702165][ T2675] lo speed is unknown, defaulting to 1000 [ 496.034711][ T29] audit: type=1400 audit(2000000200.294:18251): avc: denied { mount } for pid=2708 comm="syz.8.7651" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 496.114091][ T29] audit: type=1400 audit(2000000200.313:18252): avc: denied { mounton } for pid=2708 comm="syz.8.7651" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 496.136254][ T29] audit: type=1400 audit(2000000200.341:18253): avc: denied { unmount } for pid=29602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 496.160233][ T2711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.381501][ T2722] IPv6: addrconf: prefix option has invalid lifetime [ 496.523077][ T2733] program syz.2.7661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.659297][ T2731] lo speed is unknown, defaulting to 1000 [ 496.721758][ T2776] loop7: detected capacity change from 0 to 128 [ 496.843581][ T2870] program syz.7.7674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.854383][ T2731] chnl_net:caif_netlink_parms(): no params data found [ 496.926052][ T2876] netlink: 'syz.2.7677': attribute type 12 has an invalid length. [ 496.933977][ T2876] netlink: 'syz.2.7677': attribute type 29 has an invalid length. [ 496.941906][ T2876] __nla_validate_parse: 6 callbacks suppressed [ 496.941956][ T2876] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7677'. [ 497.016918][ T2892] lo speed is unknown, defaulting to 1000 [ 497.063532][ T2939] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7684'. [ 497.082501][ T2731] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.089692][ T2731] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.116465][ T2731] bridge_slave_0: entered allmulticast mode [ 497.140630][ T2731] bridge_slave_0: entered promiscuous mode [ 497.157850][ T2960] IPv6: addrconf: prefix option has invalid lifetime [ 497.183900][ T2939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 497.353479][ T2731] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.360654][ T2731] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.378376][ T2731] bridge_slave_1: entered allmulticast mode [ 497.390639][ T2731] bridge_slave_1: entered promiscuous mode [ 497.500405][ T2731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.512072][ T2731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.613921][ T2731] team0: Port device team_slave_0 added [ 497.624183][ T3056] syzkaller0: entered promiscuous mode [ 497.629744][ T3056] syzkaller0: entered allmulticast mode [ 497.648060][ T2731] team0: Port device team_slave_1 added [ 497.693000][ T2731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.700045][ T2731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.726069][ T2731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.914859][ T2731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.921856][ T2731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.948234][ T2731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.994254][ T2731] hsr_slave_0: entered promiscuous mode [ 498.004064][ T2731] hsr_slave_1: entered promiscuous mode [ 498.010546][ T2731] debugfs: 'hsr0' already exists in 'hsr' [ 498.016317][ T2731] Cannot create hsr debugfs directory [ 498.043487][ T29] audit: type=1400 audit(2000000202.165:18254): avc: denied { connect } for pid=3151 comm="syz.7.7695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 498.063353][ T3154] IPv6: addrconf: prefix option has invalid lifetime [ 498.104004][ T3176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7698'. [ 498.200024][ T2731] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.228079][ T3234] lo speed is unknown, defaulting to 1000 [ 498.248929][ T2731] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.357269][ T2731] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.440712][ T2731] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.537803][ T2731] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 498.656641][ T2731] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 498.674044][ T2731] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 498.688791][ T2731] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 498.810928][ T2731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.844689][ T2731] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.863771][T16577] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.870914][T16577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.898839][T16577] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.905962][T16577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.017601][ T2731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.389654][ T2731] veth0_vlan: entered promiscuous mode [ 499.413375][ T2731] veth1_vlan: entered promiscuous mode [ 499.428961][ T3363] lo speed is unknown, defaulting to 1000 [ 499.461928][ T2731] veth0_macvtap: entered promiscuous mode [ 499.511828][ T2731] veth1_macvtap: entered promiscuous mode [ 499.517899][ T3369] ./file0: Can't lookup blockdev [ 499.552120][ T2731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.576743][ T2731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.611283][ T4216] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.652166][ T4216] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.686240][T16577] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.700977][T16577] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.748798][ T3404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7735'. [ 499.790747][ T3410] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7660'. [ 500.165812][ T3450] 9pnet_fd: Insufficient options for proto=fd [ 500.195033][ T3452] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7750'. [ 500.299391][ T29] audit: type=1326 audit(2000000204.279:18255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3463 comm="syz.5.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4355ff749 code=0x7ffc0000 [ 500.340304][ T29] audit: type=1326 audit(2000000204.279:18256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3463 comm="syz.5.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4355ff749 code=0x7ffc0000 [ 500.364026][ T29] audit: type=1326 audit(2000000204.307:18257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3463 comm="syz.5.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc4355ff749 code=0x7ffc0000 [ 500.368332][ T3467] loop7: detected capacity change from 0 to 8192 [ 500.387781][ T29] audit: type=1326 audit(2000000204.307:18258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3463 comm="syz.5.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4355ff749 code=0x7ffc0000 [ 500.387819][ T29] audit: type=1326 audit(2000000204.307:18259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3463 comm="syz.5.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fc4355ff749 code=0x7ffc0000 [ 500.441236][ T29] audit: type=1326 audit(2000000204.307:18260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3463 comm="syz.5.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4355ff749 code=0x7ffc0000 [ 500.472156][ T3467] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 500.534645][ T3479] 9pnet_fd: Insufficient options for proto=fd [ 500.626459][ T3490] lo speed is unknown, defaulting to 1000 [ 500.863834][ T3553] netlink: 'syz.5.7778': attribute type 12 has an invalid length. [ 500.871722][ T3553] netlink: 'syz.5.7778': attribute type 29 has an invalid length. [ 500.879629][ T3553] netlink: 148 bytes leftover after parsing attributes in process `syz.5.7778'. [ 501.047717][ T3567] program syz.5.7783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.101761][ T3573] loop5: detected capacity change from 0 to 512 [ 501.354918][ T3605] program syz.5.7798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.404272][ T3606] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3606 comm=syz.0.7797 [ 501.410326][ T3608] syzkaller0: entered promiscuous mode [ 501.422428][ T3608] syzkaller0: entered allmulticast mode [ 501.681616][ T3638] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7810'. [ 501.749893][ T3646] lo speed is unknown, defaulting to 1000 [ 502.275459][ T29] audit: type=1326 audit(2000000206.131:18261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d9faf749 code=0x7ffc0000 [ 502.299057][ T29] audit: type=1326 audit(2000000206.131:18262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d9faf749 code=0x7ffc0000 [ 502.323524][ T29] audit: type=1326 audit(2000000206.131:18263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d9faf749 code=0x7ffc0000 [ 502.347077][ T29] audit: type=1326 audit(2000000206.131:18264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d9faf749 code=0x7ffc0000 [ 502.447106][ T3696] netlink: 'syz.0.7824': attribute type 12 has an invalid length. [ 502.455102][ T3696] netlink: 'syz.0.7824': attribute type 29 has an invalid length. [ 502.463179][ T3696] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7824'. [ 502.595427][ T3707] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7828'. [ 502.668101][ T3730] loop5: detected capacity change from 0 to 128 [ 502.736104][ T3740] 9pnet_fd: Insufficient options for proto=fd [ 502.756675][ T3742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7840'. [ 502.771941][ T3731] lo speed is unknown, defaulting to 1000 [ 502.887280][ T3765] syz_tun: entered promiscuous mode [ 502.912589][ T3765] syz_tun: left promiscuous mode [ 503.095770][ T3794] syzkaller0: entered promiscuous mode [ 503.101311][ T3794] syzkaller0: entered allmulticast mode [ 503.631494][ T3823] netlink: 'syz.0.7861': attribute type 12 has an invalid length. [ 503.639521][ T3823] netlink: 'syz.0.7861': attribute type 29 has an invalid length. [ 503.646024][ T3821] loop7: detected capacity change from 0 to 256 [ 503.647480][ T3823] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7861'. [ 503.674831][ T3821] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 503.868097][ T3845] lo speed is unknown, defaulting to 1000 [ 504.070360][ T3892] loop7: detected capacity change from 0 to 256 [ 504.080540][ T3892] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 506.165957][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 506.165973][ T29] audit: type=1400 audit(2000000209.761:18275): avc: denied { write } for pid=3953 comm="syz.7.7903" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 506.424034][ T3969] lo speed is unknown, defaulting to 1000 [ 506.675770][ T4011] netlink: 'syz.2.7919': attribute type 12 has an invalid length. [ 506.683688][ T4011] netlink: 'syz.2.7919': attribute type 29 has an invalid length. [ 506.691636][ T4011] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7919'. [ 507.027824][ T4025] loop5: detected capacity change from 0 to 8192 [ 507.048516][ T4025] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 507.222395][ T4064] loop5: detected capacity change from 0 to 128 [ 507.375600][ T4092] netlink: 'syz.7.7948': attribute type 12 has an invalid length. [ 507.383570][ T4092] netlink: 'syz.7.7948': attribute type 29 has an invalid length. [ 507.391483][ T4092] netlink: 148 bytes leftover after parsing attributes in process `syz.7.7948'. [ 507.400955][ T4088] syzkaller0: entered promiscuous mode [ 507.406529][ T4088] syzkaller0: entered allmulticast mode [ 507.441619][ T4097] loop5: detected capacity change from 0 to 128 [ 507.560216][ T4102] lo speed is unknown, defaulting to 1000 [ 507.697641][ T4134] netlink: 'syz.0.7954': attribute type 1 has an invalid length. [ 507.705616][ T4134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7954'. [ 508.312682][ T4193] 9pnet_fd: Insufficient options for proto=fd [ 508.451650][ T4235] lo speed is unknown, defaulting to 1000 [ 508.738730][ T4273] 9pnet_fd: Insufficient options for proto=fd [ 509.028781][ T4281] lo speed is unknown, defaulting to 1000 [ 509.037142][ T4308] 9pnet_fd: Insufficient options for proto=fd [ 509.222857][ T4333] syzkaller0: entered promiscuous mode [ 509.228510][ T4333] syzkaller0: entered allmulticast mode [ 509.326586][ T4344] netlink: 'syz.0.8009': attribute type 62 has an invalid length. [ 509.396835][ T4356] dummy0: entered allmulticast mode [ 509.421693][ T4355] dummy0: left allmulticast mode [ 509.641124][ T4375] syzkaller0: entered promiscuous mode [ 509.646745][ T4375] syzkaller0: entered allmulticast mode [ 509.819632][ T4400] netlink: 'syz.5.8027': attribute type 1 has an invalid length. [ 509.848323][ T4400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.862948][ T29] audit: type=1400 audit(2000000213.222:18276): avc: denied { ioctl } for pid=4399 comm="syz.5.8027" path="socket:[102491]" dev="sockfs" ino=102491 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 509.891460][ T4400] macvlan2: entered promiscuous mode [ 509.896799][ T4400] macvlan2: entered allmulticast mode [ 509.923424][ T4400] bond1: entered promiscuous mode [ 509.934177][ T4400] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 509.955869][ T4400] team0: Port device macvlan2 added [ 510.153296][ T4452] syzkaller0: entered promiscuous mode [ 510.159007][ T4452] syzkaller0: entered allmulticast mode [ 510.210816][ T4456] lo speed is unknown, defaulting to 1000 [ 511.040572][ T4571] syzkaller0: entered promiscuous mode [ 511.046237][ T4571] syzkaller0: entered allmulticast mode [ 511.732789][ T4609] syzkaller0: entered promiscuous mode [ 511.738400][ T4609] syzkaller0: entered allmulticast mode [ 511.914779][ T4633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4633 comm=syz.2.8093 [ 512.106639][ T4666] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8109'. [ 512.276829][ T29] audit: type=1400 audit(2000000215.485:18277): avc: denied { write } for pid=4696 comm="syz.5.8123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 512.307015][ T29] audit: type=1400 audit(2000000215.485:18278): avc: denied { accept } for pid=4696 comm="syz.5.8123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 513.169440][ T29] audit: type=1400 audit(2000000216.327:18279): avc: denied { append } for pid=4756 comm="syz.7.8147" name="vcs2" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 513.246198][ T4767] netlink: 92 bytes leftover after parsing attributes in process `syz.6.8152'. [ 513.308116][ T29] audit: type=1400 audit(2000000216.458:18280): avc: denied { ioctl } for pid=4779 comm="syz.7.8156" path="socket:[102968]" dev="sockfs" ino=102968 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 513.411368][ T4796] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8166'. [ 513.508553][ T4809] bridge_slave_0: left allmulticast mode [ 513.514398][ T4809] bridge_slave_0: left promiscuous mode [ 513.520143][ T4809] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.535028][ T4809] bridge_slave_1: left allmulticast mode [ 513.540746][ T4809] bridge_slave_1: left promiscuous mode [ 513.546605][ T4809] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.557650][ T4809] bond0: (slave bond_slave_0): Releasing backup interface [ 513.568921][ T4809] bond0: (slave bond_slave_1): Releasing backup interface [ 513.583152][ T4809] team0: Port device team_slave_0 removed [ 513.593460][ T4809] team0: Port device team_slave_1 removed [ 513.600686][ T4809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.608206][ T4809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.618225][ T4809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.625734][ T4809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.636126][ T4809] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 514.045470][ T4882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8205'. [ 514.286546][ T4907] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8216'. [ 514.390115][ T4918] netlink: 'syz.5.8219': attribute type 12 has an invalid length. [ 514.398190][ T4918] netlink: 'syz.5.8219': attribute type 29 has an invalid length. [ 514.406084][ T4918] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8219'. [ 514.428491][ T29] audit: type=1326 audit(2000000217.496:18281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.0.8177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d9faf749 code=0x7fc00000 [ 514.680959][ T4943] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8229'. [ 514.737128][ T4949] loop5: detected capacity change from 0 to 256 [ 514.756285][ T4949] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 514.764252][ T4949] FAT-fs (loop5): Filesystem has been set read-only [ 514.818186][ T4951] 9pnet_fd: Insufficient options for proto=fd [ 514.836055][ T29] audit: type=1326 audit(2000000217.861:18282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.6.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 514.859718][ T29] audit: type=1326 audit(2000000217.861:18283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.6.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 514.883242][ T29] audit: type=1326 audit(2000000217.861:18284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.6.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 514.907296][ T29] audit: type=1326 audit(2000000217.861:18285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.6.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 514.930825][ T29] audit: type=1326 audit(2000000217.861:18286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.6.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 515.038357][ T4977] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8244'. [ 515.253395][ T5000] netlink: 'syz.6.8254': attribute type 12 has an invalid length. [ 515.261280][ T5000] netlink: 'syz.6.8254': attribute type 29 has an invalid length. [ 515.269202][ T5000] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8254'. [ 515.867708][ T5032] netlink: 'syz.0.8268': attribute type 12 has an invalid length. [ 515.875625][ T5032] netlink: 'syz.0.8268': attribute type 29 has an invalid length. [ 515.883481][ T5032] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8268'. [ 516.284301][ T5101] netlink: 'syz.0.8297': attribute type 12 has an invalid length. [ 516.292197][ T5101] netlink: 'syz.0.8297': attribute type 29 has an invalid length. [ 516.483084][ T5151] netlink: 'syz.0.8311': attribute type 12 has an invalid length. [ 516.490985][ T5151] netlink: 'syz.0.8311': attribute type 29 has an invalid length. [ 517.850382][ T5258] lo speed is unknown, defaulting to 1000 [ 517.919592][ T5258] chnl_net:caif_netlink_parms(): no params data found [ 517.962866][ T5258] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.969986][ T5258] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.977296][ T5258] bridge_slave_0: entered allmulticast mode [ 517.983932][ T5258] bridge_slave_0: entered promiscuous mode [ 517.990937][ T5258] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.998052][ T5258] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.005382][ T5258] bridge_slave_1: entered allmulticast mode [ 518.012016][ T5258] bridge_slave_1: entered promiscuous mode [ 518.033236][ T5258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.044088][ T5258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.068071][ T5258] team0: Port device team_slave_0 added [ 518.074839][ T5258] team0: Port device team_slave_1 added [ 518.079740][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 518.079756][ T29] audit: type=1326 audit(2000000220.911:18290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b726f749 code=0x7ffc0000 [ 518.128261][ T29] audit: type=1326 audit(2000000220.920:18291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b726f749 code=0x7ffc0000 [ 518.151945][ T29] audit: type=1326 audit(2000000220.920:18292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f80b726f749 code=0x7ffc0000 [ 518.175532][ T29] audit: type=1326 audit(2000000220.920:18293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b726f749 code=0x7ffc0000 [ 518.199201][ T29] audit: type=1326 audit(2000000220.920:18294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b726f749 code=0x7ffc0000 [ 518.235642][ T5258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.242660][ T5258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.268636][ T5258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.282237][ T5258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.289265][ T5258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.315281][ T5258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.329054][ T5502] __nla_validate_parse: 6 callbacks suppressed [ 518.329150][ T5502] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8363'. [ 518.372368][ T5258] hsr_slave_0: entered promiscuous mode [ 518.378833][ T5258] hsr_slave_1: entered promiscuous mode [ 518.394474][ T5258] debugfs: 'hsr0' already exists in 'hsr' [ 518.400359][ T5258] Cannot create hsr debugfs directory [ 518.498341][ T5258] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.528211][ T5258] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.546440][ T5614] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8375'. [ 518.591654][ T5258] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.613017][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8380'. [ 518.645952][ T5258] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.691118][ T5644] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8386'. [ 518.745436][ T5258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 518.755689][ T5258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 518.765159][ T5258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 518.774619][ T5258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 518.803330][ T5680] 9pnet_fd: Insufficient options for proto=fd [ 518.872439][ T5258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.889128][ T5258] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.900852][T16577] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.907997][T16577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.932018][T16577] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.939160][T16577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.062978][ T5258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.072608][ T5713] serio: Serial port ptm0 [ 519.110054][ T5723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5723 comm=syz.7.8407 [ 519.166533][ T5258] veth0_vlan: entered promiscuous mode [ 519.184688][ T5258] veth1_vlan: entered promiscuous mode [ 519.214391][ T5258] veth0_macvtap: entered promiscuous mode [ 519.224245][ T5258] veth1_macvtap: entered promiscuous mode [ 519.239306][ T5258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.247101][ T5713] serio: Serial port ptm0 [ 519.256205][ T5258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.279225][T16598] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.292183][T16598] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.304508][T16598] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.319184][T16598] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.388030][ T5758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5758 comm=syz.7.8417 [ 519.470437][ T5768] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8422'. [ 519.493742][ T5770] lo speed is unknown, defaulting to 1000 [ 519.660103][ T5807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5807 comm=syz.0.8429 [ 519.737056][ T5818] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8434'. [ 519.778595][ T5822] 9pnet_fd: Insufficient options for proto=fd [ 519.826682][ T5830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5830 comm=syz.6.8440 [ 519.871766][ T5838] 9pnet_fd: Insufficient options for proto=fd [ 520.067128][ T5856] 9pnet_fd: Insufficient options for proto=fd [ 520.116642][ T5864] ip6gre1: entered promiscuous mode [ 520.122109][ T5864] ip6gre1: entered allmulticast mode [ 520.428564][ T5908] netlink: 92 bytes leftover after parsing attributes in process `syz.7.8471'. [ 520.463518][ T5917] loop5: detected capacity change from 0 to 128 [ 520.623833][ T5942] netlink: 92 bytes leftover after parsing attributes in process `syz.7.8484'. [ 520.821544][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8495'. [ 520.931061][ T5984] loop7: detected capacity change from 0 to 256 [ 520.951018][ T5984] FAT-fs (loop7): Directory bread(block 64) failed [ 520.959081][ T5984] FAT-fs (loop7): Directory bread(block 65) failed [ 520.965826][ T5984] FAT-fs (loop7): Directory bread(block 66) failed [ 520.972677][ T5984] FAT-fs (loop7): Directory bread(block 67) failed [ 520.979535][ T5984] FAT-fs (loop7): Directory bread(block 68) failed [ 520.981797][ T5989] xt_TCPMSS: Only works on TCP SYN packets [ 520.986370][ T5984] FAT-fs (loop7): Directory bread(block 69) failed [ 520.998982][ T5984] FAT-fs (loop7): Directory bread(block 70) failed [ 521.005871][ T5984] FAT-fs (loop7): Directory bread(block 71) failed [ 521.012432][ T5984] FAT-fs (loop7): Directory bread(block 72) failed [ 521.019038][ T5984] FAT-fs (loop7): Directory bread(block 73) failed [ 521.042545][ T5984] syz.7.8502: attempt to access beyond end of device [ 521.042545][ T5984] loop7: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 521.469703][ T6026] loop5: detected capacity change from 0 to 512 [ 521.526585][ T6026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.622563][ T2731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.818266][ T6054] loop5: detected capacity change from 0 to 512 [ 521.842316][ T6054] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.855189][ T6054] ext4 filesystem being mounted at /184/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.231975][ T6096] validate_nla: 15 callbacks suppressed [ 522.231993][ T6096] netlink: 'syz.0.8548': attribute type 13 has an invalid length. [ 522.303565][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.310856][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.454402][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.473510][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.648393][ T4206] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.665767][ T4206] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.695209][ T4206] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.718668][ T4206] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.823616][ T2731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.470396][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8568'. [ 523.481120][ T6151] netlink: 'syz.7.8569': attribute type 13 has an invalid length. [ 523.705509][T16599] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.733010][T16599] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.743782][T16599] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.765566][T16599] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.560067][ T6206] 9pnet_fd: Insufficient options for proto=fd [ 524.748003][ T6220] loop7: detected capacity change from 0 to 512 [ 524.769903][ T6220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.792679][ T6220] ext4 filesystem being mounted at /455/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.828250][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8599'. [ 525.000552][ T6262] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8610'. [ 525.217760][ T6291] loop5: detected capacity change from 0 to 256 [ 525.246728][ T6291] FAT-fs (loop5): Directory bread(block 64) failed [ 525.254091][ T6291] FAT-fs (loop5): Directory bread(block 65) failed [ 525.275878][ T6291] FAT-fs (loop5): Directory bread(block 66) failed [ 525.282635][ T6291] FAT-fs (loop5): Directory bread(block 67) failed [ 525.289338][ T6296] veth0: entered promiscuous mode [ 525.297953][ T6291] FAT-fs (loop5): Directory bread(block 68) failed [ 525.304868][ T6291] FAT-fs (loop5): Directory bread(block 69) failed [ 525.311593][ T6291] FAT-fs (loop5): Directory bread(block 70) failed [ 525.344859][ T6291] FAT-fs (loop5): Directory bread(block 71) failed [ 525.344900][ T6291] FAT-fs (loop5): Directory bread(block 72) failed [ 525.344981][ T6291] FAT-fs (loop5): Directory bread(block 73) failed [ 525.353798][ T29] audit: type=1326 audit(2000000227.711:18295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.3.8626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x0 [ 525.458969][ T6311] veth0: left promiscuous mode [ 525.530349][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8635'. [ 525.608041][T28573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.636711][ T6324] netlink: 592 bytes leftover after parsing attributes in process `syz.5.8637'. [ 525.864263][ T6356] netlink: 592 bytes leftover after parsing attributes in process `syz.7.8650'. [ 526.608171][ T29] audit: type=1326 audit(2000000228.889:18296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.0.8669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d9faf749 code=0x7ffc0000 [ 526.633458][ T6407] program syz.0.8669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.637811][ T29] audit: type=1326 audit(2000000228.918:18297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.0.8669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71d9fadf90 code=0x7ffc0000 [ 526.666535][ T29] audit: type=1326 audit(2000000228.918:18298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.0.8669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f71d9fb0f77 code=0x7ffc0000 [ 526.690219][ T29] audit: type=1326 audit(2000000228.918:18299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.0.8669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71d9faf749 code=0x7ffc0000 [ 526.714017][ T29] audit: type=1326 audit(2000000228.918:18300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.0.8669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f71d9fb0f77 code=0x7ffc0000 [ 526.737664][ T29] audit: type=1326 audit(2000000228.918:18301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.0.8669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f71d9fae3aa code=0x7ffc0000 [ 526.761102][ T29] audit: type=1326 audit(2000000228.918:18302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.0.8669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d9faf749 code=0x7ffc0000 [ 526.784636][ T29] audit: type=1326 audit(2000000228.918:18303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.0.8669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f71d9faf749 code=0x7ffc0000 [ 526.808044][ T29] audit: type=1326 audit(2000000228.918:18304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.0.8669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d9faf749 code=0x7ffc0000 [ 526.865989][ T6417] loop3: detected capacity change from 0 to 512 [ 526.886069][ T6417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.888997][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8674'. [ 526.898897][ T6417] ext4 filesystem being mounted at /38/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.951858][ T6426] netlink: 'syz.0.8676': attribute type 13 has an invalid length. [ 527.013457][ T6441] xt_TCPMSS: Only works on TCP SYN packets [ 527.086533][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8685'. [ 527.125544][ T6448] block device autoloading is deprecated and will be removed. [ 528.074399][ T6479] netlink: 'syz.6.8692': attribute type 13 has an invalid length. [ 528.177735][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.228783][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8694'. [ 528.233760][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.244999][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.330077][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.342819][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.476755][T16577] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.488319][T16577] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.509502][T16577] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.534071][T16577] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.549289][ T6530] loop7: detected capacity change from 0 to 128 [ 528.560775][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8707'. [ 528.674166][ T6548] program syz.7.8712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.742876][ T6557] netlink: 'syz.3.8715': attribute type 13 has an invalid length. [ 528.798794][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.806055][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.864545][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.878165][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.938037][T16599] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.959362][T16599] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.985228][T16599] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.005362][T16599] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.068079][ T6587] loop3: detected capacity change from 0 to 256 [ 529.103208][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8725'. [ 529.114828][ T6595] loop5: detected capacity change from 0 to 512 [ 529.131652][ T6595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.190127][ T2731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.205011][ T6604] program syz.3.8730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.432323][ T6647] program syz.3.8746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.624282][ T6685] block device autoloading is deprecated and will be removed. [ 529.707948][ T6705] 9pnet_fd: Insufficient options for proto=fd [ 529.823636][ T6717] program syz.5.8773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.738954][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 530.738973][ T29] audit: type=1326 audit(2000000232.753:18536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.6.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 530.783593][ T29] audit: type=1326 audit(2000000232.753:18537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.6.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 530.807177][ T29] audit: type=1326 audit(2000000232.753:18538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.6.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 530.903553][ T29] audit: type=1326 audit(2000000232.902:18539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.3.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 530.927161][ T29] audit: type=1326 audit(2000000232.902:18540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.3.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 530.951137][ T29] audit: type=1326 audit(2000000232.902:18541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.3.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 530.974750][ T29] audit: type=1326 audit(2000000232.902:18542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.3.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 530.998268][ T29] audit: type=1326 audit(2000000232.902:18543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.3.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 530.998304][ T29] audit: type=1326 audit(2000000232.902:18544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.3.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 530.998330][ T29] audit: type=1326 audit(2000000232.902:18545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.3.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 531.106114][ T6804] __nla_validate_parse: 3 callbacks suppressed [ 531.106131][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8808'. [ 531.157192][ T6809] loop3: detected capacity change from 0 to 512 [ 531.182219][ T6809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.212870][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.589303][ T6845] loop3: detected capacity change from 0 to 512 [ 531.599687][ T6845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.615260][ T6851] netlink: 'syz.0.8825': attribute type 13 has an invalid length. [ 531.756399][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.298586][ T6914] loop5: detected capacity change from 0 to 512 [ 532.326430][ T6920] xt_TCPMSS: Only works on TCP SYN packets [ 532.349787][ T6914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.396232][ T2731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.266517][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8876'. [ 533.290012][ T6987] netlink: 'syz.5.8875': attribute type 13 has an invalid length. [ 533.410168][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.417435][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.528314][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.539192][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.664929][ T6987] bond1: left promiscuous mode [ 533.689584][T16588] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.708278][T16588] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.739185][T16588] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.771638][T16588] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.794422][ T7039] xt_TCPMSS: Only works on TCP SYN packets [ 533.828276][ T7045] loop7: detected capacity change from 0 to 512 [ 533.868639][ T7045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.909899][ T7060] netlink: 'syz.0.8900': attribute type 13 has an invalid length. [ 533.923885][ T7045] ext4 filesystem being mounted at /504/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.007904][ T7062] block device autoloading is deprecated and will be removed. [ 534.247176][ T7093] loop3: detected capacity change from 0 to 512 [ 534.268352][ T7093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.306929][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.450037][ T7102] netlink: 'syz.0.8913': attribute type 13 has an invalid length. [ 534.963768][ T7133] netlink: 'syz.6.8924': attribute type 13 has an invalid length. [ 534.978415][T28573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.953742][ T7183] loop7: detected capacity change from 0 to 512 [ 535.972524][ T7183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.011716][T28573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.038994][ T7198] netlink: 'syz.7.8945': attribute type 13 has an invalid length. [ 536.510934][ T7236] loop7: detected capacity change from 0 to 512 [ 536.519714][ T7236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.547836][T28573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.598406][ T7246] netlink: 'syz.7.8961': attribute type 13 has an invalid length. [ 536.643310][ T7250] lo speed is unknown, defaulting to 1000 [ 536.851554][ T7289] loop7: detected capacity change from 0 to 512 [ 536.861133][ T7289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.902911][T28573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.036977][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 537.036995][ T29] audit: type=1326 audit(2000000238.646:18589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.7.8971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80b726f749 code=0x0 [ 537.143756][ T7319] loop5: detected capacity change from 0 to 512 [ 537.153760][ T7319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.183812][ T2731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.255160][ T7332] lo speed is unknown, defaulting to 1000 [ 537.429241][ T7372] loop3: detected capacity change from 0 to 2048 [ 537.448442][ T7372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.551072][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.574070][ T7382] loop3: detected capacity change from 0 to 512 [ 537.583206][ T7382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.612518][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.117653][ T3972] kernel read not supported for file /1188/stack (pid: 3972 comm: kworker/0:9) [ 538.134930][ T7410] loop5: detected capacity change from 0 to 512 [ 538.147461][ T7410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.180068][ T2731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.214120][ T29] audit: type=1326 audit(2000000239.740:18590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.5.9007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4355ff749 code=0x0 [ 538.361153][ T29] audit: type=1326 audit(2000000239.880:18591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.7.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b726f749 code=0x7ffc0000 [ 538.384783][ T29] audit: type=1326 audit(2000000239.880:18592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.7.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b726f749 code=0x7ffc0000 [ 538.408324][ T29] audit: type=1326 audit(2000000239.880:18593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.7.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80b726f749 code=0x7ffc0000 [ 538.431877][ T29] audit: type=1326 audit(2000000239.880:18594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.7.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b726f749 code=0x7ffc0000 [ 538.455373][ T29] audit: type=1326 audit(2000000239.880:18595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.7.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80b726f749 code=0x7ffc0000 [ 538.478987][ T29] audit: type=1326 audit(2000000239.880:18596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.7.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b726f749 code=0x7ffc0000 [ 538.502494][ T29] audit: type=1326 audit(2000000239.880:18597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.7.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80b726f749 code=0x7ffc0000 [ 538.526303][ T29] audit: type=1326 audit(2000000239.955:18598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.7.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b726f749 code=0x7ffc0000 [ 539.160502][ T7500] loop5: detected capacity change from 0 to 512 [ 539.169189][ T7500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.196858][ T2731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.476461][ T7533] lo speed is unknown, defaulting to 1000 [ 539.511511][ T7557] loop5: detected capacity change from 0 to 512 [ 539.521825][ T7557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.552347][ T2731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.132056][ T7599] loop5: detected capacity change from 0 to 2048 [ 540.153835][ T7599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.269210][ T2731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.695189][ T7634] loop3: detected capacity change from 0 to 2048 [ 540.708892][ T7634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.802136][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.737294][ T7692] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9097'. [ 541.776652][ T7700] loop3: detected capacity change from 0 to 2048 [ 541.788870][ T7700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.924516][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.279785][ T7735] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9110'. [ 542.414317][ T7756] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 542.450610][ T7762] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9121'. [ 542.676770][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 542.676786][ T29] audit: type=1326 audit(2000000243.921:18645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 542.718538][ T29] audit: type=1326 audit(2000000243.921:18646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 542.742259][ T29] audit: type=1326 audit(2000000243.921:18647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 542.765862][ T29] audit: type=1326 audit(2000000243.921:18648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 542.789410][ T29] audit: type=1326 audit(2000000243.921:18649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 542.813145][ T29] audit: type=1326 audit(2000000243.921:18650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 542.836924][ T29] audit: type=1326 audit(2000000243.921:18651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 542.860507][ T29] audit: type=1326 audit(2000000243.921:18652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 542.884230][ T29] audit: type=1326 audit(2000000243.921:18653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 542.907829][ T29] audit: type=1326 audit(2000000243.921:18654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900093f749 code=0x7ffc0000 [ 542.952636][ T7797] loop5: detected capacity change from 0 to 2048 [ 542.961156][ T7800] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9133'. [ 542.997876][ T7797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.080700][ T2731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.124570][ T7836] lo speed is unknown, defaulting to 1000 [ 543.404143][ T7888] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9153'. [ 543.924512][ T7959] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9180'. [ 544.456431][ T8008] loop7: detected capacity change from 0 to 1024 [ 544.466831][ T8008] EXT4-fs: inline encryption not supported [ 544.535716][ T8008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.592450][ T8013] program syz.3.9197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 544.805861][ T8019] loop3: detected capacity change from 0 to 512 [ 544.833353][ T8019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.869686][T28573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.929391][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.178855][ T8066] loop5: detected capacity change from 0 to 512 [ 545.200955][ T8066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.232684][ T2731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.663180][ T8149] loop3: detected capacity change from 0 to 1024 [ 545.669901][ T8149] EXT4-fs: inline encryption not supported [ 545.679711][ T8156] xt_TCPMSS: Only works on TCP SYN packets [ 545.694529][ T8149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.849927][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.252847][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9251'. [ 546.332702][ T8189] program syz.7.9251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.513123][ T8200] loop7: detected capacity change from 0 to 1024 [ 546.519861][ T8200] EXT4-fs: inline encryption not supported [ 546.533154][ T8205] loop3: detected capacity change from 0 to 2048 [ 546.541604][ T8200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.599574][ T8205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.729746][T28573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.790317][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.856551][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9267'. [ 546.929918][ T8238] program syz.3.9267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.223500][ T8255] loop3: detected capacity change from 0 to 1024 [ 547.230426][ T8255] EXT4-fs: inline encryption not supported [ 547.247834][ T8255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.288835][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.386263][ T8265] loop3: detected capacity change from 0 to 2048 [ 547.486617][ T8265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.676630][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.700547][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9280'. [ 547.734444][ T8288] program syz.7.9280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.853907][ T8318] loop3: detected capacity change from 0 to 2048 [ 547.876101][ T8318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.032131][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.152805][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9295'. [ 548.209256][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 548.209274][ T29] audit: type=1326 audit(2000000249.094:18818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.3.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 548.211240][ T8341] program syz.3.9295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.259709][ T29] audit: type=1326 audit(2000000249.094:18819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.3.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e5904df90 code=0x7ffc0000 [ 548.283351][ T29] audit: type=1326 audit(2000000249.094:18820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.3.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8e59050f77 code=0x7ffc0000 [ 548.306862][ T29] audit: type=1326 audit(2000000249.094:18821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.3.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 548.330289][ T29] audit: type=1326 audit(2000000249.094:18822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.3.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8e59050f77 code=0x7ffc0000 [ 548.354020][ T29] audit: type=1326 audit(2000000249.094:18823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.3.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8e5904e3aa code=0x7ffc0000 [ 548.377390][ T29] audit: type=1326 audit(2000000249.094:18824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.3.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 548.400894][ T29] audit: type=1326 audit(2000000249.094:18825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.3.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 548.424338][ T29] audit: type=1326 audit(2000000249.094:18826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.3.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 548.448012][ T29] audit: type=1326 audit(2000000249.094:18827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.3.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e5904df90 code=0x7ffc0000 [ 548.629886][ T8367] loop3: detected capacity change from 0 to 2048 [ 548.685957][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9306'. [ 548.721753][ T8375] program syz.0.9306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.872026][ T8395] lo speed is unknown, defaulting to 1000 [ 548.913192][ T8421] loop7: detected capacity change from 0 to 512 [ 549.721224][ T8513] lo speed is unknown, defaulting to 1000 [ 549.832167][ T8513] chnl_net:caif_netlink_parms(): no params data found [ 549.909270][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.916418][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.944570][ T8513] bridge_slave_0: entered allmulticast mode [ 549.951302][ T8513] bridge_slave_0: entered promiscuous mode [ 549.978679][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.985789][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.008411][ T8513] bridge_slave_1: entered allmulticast mode [ 550.015101][ T8513] bridge_slave_1: entered promiscuous mode [ 550.071316][ T8737] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9363'. [ 550.091972][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.118089][ T8747] lo speed is unknown, defaulting to 1000 [ 550.127617][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.174427][ T8513] team0: Port device team_slave_0 added [ 550.189378][ T8513] team0: Port device team_slave_1 added [ 550.241415][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.248539][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.274806][ T8513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.287492][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.294463][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.320454][ T8513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.393138][ T8513] hsr_slave_0: entered promiscuous mode [ 550.406359][ T8513] hsr_slave_1: entered promiscuous mode [ 550.422897][ T8513] debugfs: 'hsr0' already exists in 'hsr' [ 550.428758][ T8513] Cannot create hsr debugfs directory [ 550.886019][ T8513] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 550.896100][ T8513] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 550.905407][ T8513] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 550.918725][ T8513] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 550.982740][ T8513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.994753][ T8513] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.008725][T16577] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.015919][T16577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.058346][T16577] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.065511][T16577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.141312][ T8997] loop5: detected capacity change from 0 to 512 [ 551.158542][ T9000] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9388'. [ 551.209070][ T8513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.584635][ T8513] veth0_vlan: entered promiscuous mode [ 551.593516][ T8513] veth1_vlan: entered promiscuous mode [ 551.614063][ T8513] veth0_macvtap: entered promiscuous mode [ 551.621710][ T8513] veth1_macvtap: entered promiscuous mode [ 551.640380][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.656226][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.668030][T16577] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.686040][T16577] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.719579][T16577] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.739228][ T9056] loop3: detected capacity change from 0 to 512 [ 551.742299][T16577] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.769822][ T9056] ext4 filesystem being mounted at /192/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.452472][ T9104] program syz.0.9415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.596430][ T9137] loop3: detected capacity change from 0 to 256 [ 552.702622][ T9143] program syz.6.9429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.718188][ T9145] loop7: detected capacity change from 0 to 512 [ 552.765620][ T9145] ext4 filesystem being mounted at /1/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.926222][ T9187] loop5: detected capacity change from 0 to 256 [ 553.284782][ T9213] lo speed is unknown, defaulting to 1000 [ 553.423991][ T9213] chnl_net:caif_netlink_parms(): no params data found [ 553.495541][ T9213] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.502767][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.510824][ T9213] bridge_slave_0: entered allmulticast mode [ 553.517583][ T9213] bridge_slave_0: entered promiscuous mode [ 553.526089][ T9213] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.533253][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.540628][ T9213] bridge_slave_1: entered allmulticast mode [ 553.547653][ T9213] bridge_slave_1: entered promiscuous mode [ 553.578142][ T9213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.590297][ T9213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.620461][ T9213] team0: Port device team_slave_0 added [ 553.627592][ T9213] team0: Port device team_slave_1 added [ 553.652957][ T9213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.660132][ T9213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.686091][ T9213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.697336][ T8513] EXT4-fs unmount: 9 callbacks suppressed [ 553.697352][ T8513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.698525][ T9213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.719221][ T9213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.745232][ T9213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.782658][ T9213] hsr_slave_0: entered promiscuous mode [ 553.788932][ T9213] hsr_slave_1: entered promiscuous mode [ 553.798197][ T9213] debugfs: 'hsr0' already exists in 'hsr' [ 553.804041][ T9213] Cannot create hsr debugfs directory [ 553.807097][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 553.807182][ T29] audit: type=1326 audit(2000000254.332:18987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 553.839439][ T29] audit: type=1326 audit(2000000254.351:18988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 553.863093][ T29] audit: type=1326 audit(2000000254.351:18989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 553.886838][ T29] audit: type=1326 audit(2000000254.351:18990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 553.910523][ T29] audit: type=1326 audit(2000000254.351:18991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 553.934164][ T29] audit: type=1326 audit(2000000254.351:18992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 553.957829][ T29] audit: type=1326 audit(2000000254.351:18993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 553.981445][ T29] audit: type=1326 audit(2000000254.351:18994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 554.005035][ T29] audit: type=1326 audit(2000000254.351:18995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 554.029089][ T29] audit: type=1326 audit(2000000254.351:18996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5904f749 code=0x7ffc0000 [ 554.168218][ T9575] loop3: detected capacity change from 0 to 512 [ 554.191542][ T9575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.223057][ T9575] ext4 filesystem being mounted at /204/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.382998][ T9213] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 554.392370][ T9213] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 554.401761][ T9213] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 554.426226][ T9213] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 554.524471][ T9213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.556233][ T9213] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.574025][T16599] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.581119][T16599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.632673][T16599] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.639806][T16599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.831964][ T9213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.872587][ T9621] lo speed is unknown, defaulting to 1000 [ 555.080102][ T9621] chnl_net:caif_netlink_parms(): no params data found [ 555.218686][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.226077][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.234421][ T9621] bridge_slave_0: entered allmulticast mode [ 555.241139][ T9621] bridge_slave_0: entered promiscuous mode [ 555.255543][ T9213] veth0_vlan: entered promiscuous mode [ 555.261764][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.268958][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.276302][ T9621] bridge_slave_1: entered allmulticast mode [ 555.283476][ T9621] bridge_slave_1: entered promiscuous mode [ 555.292557][ T9213] veth1_vlan: entered promiscuous mode [ 555.333745][ T9621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.349684][ T9213] veth0_macvtap: entered promiscuous mode [ 555.372292][ T9621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.382298][ T9213] veth1_macvtap: entered promiscuous mode [ 555.415593][ T9213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.443295][ T9621] team0: Port device team_slave_0 added [ 555.460920][ T9621] team0: Port device team_slave_1 added [ 555.468789][ T9213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.519685][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.526710][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.552716][ T9621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.564842][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.575711][ T2847] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.585193][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.592209][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.618134][ T9621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.635426][ T2847] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.657261][ T2847] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.710130][ T9621] hsr_slave_0: entered promiscuous mode [ 555.735643][ T9621] hsr_slave_1: entered promiscuous mode [ 555.749470][ T9621] debugfs: 'hsr0' already exists in 'hsr' [ 555.755277][ T9621] Cannot create hsr debugfs directory [ 555.761204][ T2847] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.980263][T10010] loop3: detected capacity change from 0 to 2048 [ 556.027220][T10010] loop3: p2 < > p3 < p5 > p4 [ 556.031962][T10010] loop3: partition table partially beyond EOD, truncated [ 556.039365][T10010] loop3: p2 start 4278190080 is beyond EOD, truncated [ 556.046827][T10010] loop3: p4 size 8192 extends beyond EOD, truncated [ 556.054801][T10010] loop3: p5 size 8192 extends beyond EOD, truncated [ 556.116139][T10037] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9486'. [ 556.150817][ T9621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 556.172637][ T9621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 556.186497][ T9621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 556.197433][ T9621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 556.308829][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.333380][ T9621] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.354509][T16599] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.361638][T16599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.413914][ T2847] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.421043][ T2847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.525215][ T9621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.667787][ T9621] veth0_vlan: entered promiscuous mode [ 556.695162][ T9621] veth1_vlan: entered promiscuous mode [ 556.695793][T10117] program syz.7.9502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.741853][ T9621] veth0_macvtap: entered promiscuous mode [ 556.759356][ T9621] veth1_macvtap: entered promiscuous mode [ 556.780605][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.799075][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.812478][T16599] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.836656][T16587] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.849818][T16587] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.872087][T16587] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.925275][T10139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.982484][T10139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.992331][T10153] program syz.0.9514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.067215][T10139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.131835][T10139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.200352][T10182] program syz.0.9525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.416799][T10212] program syz.0.9537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.452213][T16588] batadv4: left allmulticast mode [ 557.457328][T16588] batadv4: left promiscuous mode [ 557.462771][T16588] bridge0: port 6(batadv4) entered disabled state [ 557.473532][T16588] batadv3: left allmulticast mode [ 557.478628][T16588] batadv3: left promiscuous mode [ 557.483849][T16588] bridge0: port 5(batadv3) entered disabled state [ 557.490916][T16588] batadv2: left allmulticast mode [ 557.496078][T16588] batadv2: left promiscuous mode [ 557.501157][T16588] bridge0: port 4(batadv2) entered disabled state [ 557.508358][T16588] batadv1: left allmulticast mode [ 557.513418][T16588] batadv1: left promiscuous mode [ 557.518500][T16588] bridge0: port 3(batadv1) entered disabled state [ 557.525717][T16588] bridge_slave_1: left allmulticast mode [ 557.531411][T16588] bridge_slave_1: left promiscuous mode [ 557.537137][T16588] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.545326][T16588] bridge_slave_0: left allmulticast mode [ 557.550975][T16588] bridge_slave_0: left promiscuous mode [ 557.556760][T16588] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.867663][T10222] loop7: detected capacity change from 0 to 512 [ 557.877753][T10222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.905011][ T8513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.192154][T16588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.201749][T16588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.211573][T16588] bond0 (unregistering): Released all slaves [ 558.241459][T10217] lo speed is unknown, defaulting to 1000 [ 558.306342][T16588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.320028][T16588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.404893][T16588] team0 (unregistering): Port device team_slave_1 removed [ 558.548328][T16588] team0 (unregistering): Port device team_slave_0 removed [ 558.595770][ T3415] lo speed is unknown, defaulting to 1000 [ 558.601546][ T3415] syz2: Port: 1 Link DOWN [ 559.985887][T10404] loop7: detected capacity change from 0 to 256 [ 560.063617][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 560.063637][ T29] audit: type=1326 audit(2000000260.188:19177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.7.9597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f014848f749 code=0x0 [ 560.379336][T10458] 9pnet_fd: Insufficient options for proto=fd [ 561.113528][ T29] audit: type=1326 audit(2000000261.161:19178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.6.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67692f749 code=0x7ffc0000 [ 561.137600][ T29] audit: type=1326 audit(2000000261.161:19179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.6.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67692f749 code=0x7ffc0000 [ 561.161439][ T29] audit: type=1326 audit(2000000261.161:19180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.6.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd67692f749 code=0x7ffc0000 [ 561.185075][ T29] audit: type=1326 audit(2000000261.161:19181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.6.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67692f749 code=0x7ffc0000 [ 561.208679][ T29] audit: type=1326 audit(2000000261.161:19182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.6.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67692f749 code=0x7ffc0000 [ 561.216914][T10490] 9pnet_fd: Insufficient options for proto=fd [ 561.342279][T10502] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9620'. [ 561.384757][T10504] netlink: 592 bytes leftover after parsing attributes in process `syz.7.9621'. [ 561.629902][T10523] loop7: detected capacity change from 0 to 512 [ 561.651705][T10523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.694159][T10528] 9pnet_fd: Insufficient options for proto=fd [ 561.711402][ T8513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.730563][T10537] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9631'. [ 561.782877][T10541] loop7: detected capacity change from 0 to 1024 [ 561.789691][T10541] EXT4-fs: inline encryption not supported [ 561.804475][T10541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.908383][ T29] audit: type=1326 audit(2000000261.909:19183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10546 comm="syz.0.9636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71d9faf749 code=0x0 [ 561.977710][ T8513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.012125][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9641'. [ 562.101364][T10572] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9643'. [ 562.237828][T10580] 9pnet_fd: Insufficient options for proto=fd [ 562.371313][ T29] audit: type=1326 audit(2000000262.339:19184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.6.9656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67692f749 code=0x7ffc0000 [ 562.422844][ T29] audit: type=1326 audit(2000000262.339:19185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.6.9656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd67692f749 code=0x7ffc0000 [ 562.446557][ T29] audit: type=1326 audit(2000000262.339:19186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.6.9656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67692f749 code=0x7ffc0000 [ 562.597037][T10617] netlink: 'syz.7.9662': attribute type 13 has an invalid length. [ 562.651593][T10617] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.658886][T10617] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.764783][T10617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.776259][T10617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.844963][ T4216] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.857978][T10621] 9pnet_fd: Insufficient options for proto=fd [ 562.868344][ T4216] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.892653][ T4216] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.917594][ T4216] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.929167][ T4216] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.937498][ T4216] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.945808][ T4216] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.960499][ T4216] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.978506][T10643] loop7: detected capacity change from 0 to 512 [ 562.994372][T10643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.036439][ T8513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.165068][T10671] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.246701][T10671] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.301075][T10671] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.327322][T10690] 9pnet_fd: Insufficient options for proto=fd [ 563.364858][T10671] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.442429][T10698] xt_TCPMSS: Only works on TCP SYN packets [ 563.476069][T16597] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.488509][ T58] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.500106][ T58] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.512643][ T58] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.682863][T10722] loop3: detected capacity change from 0 to 512 [ 563.692310][T10722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.722690][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.300802][T10758] loop3: detected capacity change from 0 to 1024 [ 564.308015][T10758] EXT4-fs: inline encryption not supported [ 564.325363][T10758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.509023][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.188004][T10810] xt_TCPMSS: Only works on TCP SYN packets [ 565.342099][T10828] loop7: detected capacity change from 0 to 512 [ 565.353832][T10828] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.419240][ T8513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.638521][T10853] loop3: detected capacity change from 0 to 512 [ 565.683099][T10853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.695986][T10853] ext4 filesystem being mounted at /249/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.900084][T10869] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.939358][T10869] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.992646][T10869] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.056799][T10869] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.444606][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 566.444646][ T29] audit: type=1326 audit(2000000266.156:19206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.7.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014848f749 code=0x7ffc0000 [ 566.489580][ T29] audit: type=1326 audit(2000000266.156:19207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.7.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014848f749 code=0x7ffc0000 [ 566.513257][ T29] audit: type=1326 audit(2000000266.156:19208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.7.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014848f749 code=0x7ffc0000 [ 566.537032][ T29] audit: type=1326 audit(2000000266.156:19209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.7.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014848f749 code=0x7ffc0000 [ 566.560649][ T29] audit: type=1326 audit(2000000266.156:19210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.7.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014848f749 code=0x7ffc0000 [ 566.584231][ T29] audit: type=1326 audit(2000000266.184:19211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.7.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014848f749 code=0x7ffc0000 [ 566.607989][ T29] audit: type=1326 audit(2000000266.184:19212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.7.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014848f749 code=0x7ffc0000 [ 566.631665][ T29] audit: type=1326 audit(2000000266.184:19213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.7.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014848f749 code=0x7ffc0000 [ 566.655259][ T29] audit: type=1326 audit(2000000266.184:19214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.7.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014848f749 code=0x7ffc0000 [ 566.679025][ T29] audit: type=1326 audit(2000000266.184:19215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.7.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014848f749 code=0x7ffc0000 [ 566.703117][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.795957][T10910] xt_TCPMSS: Only works on TCP SYN packets [ 566.809104][T10914] loop3: detected capacity change from 0 to 512 [ 566.847283][T10914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.126034][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.888707][ T4216] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.913129][T16597] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.935848][T16597] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.965346][T16597] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.066628][T11015] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9763'. [ 568.401657][T16597] bridge_slave_1: left allmulticast mode [ 568.407454][T16597] bridge_slave_1: left promiscuous mode [ 568.413212][T16597] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.426678][T11027] loop7: detected capacity change from 0 to 1024 [ 568.444518][T11027] EXT4-fs: inline encryption not supported [ 568.454352][T16597] bridge_slave_0: left allmulticast mode [ 568.460053][T16597] bridge_slave_0: left promiscuous mode [ 568.465932][T16597] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.584397][T11027] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.617244][T11039] loop3: detected capacity change from 0 to 1024 [ 568.631529][T11039] EXT4-fs: inline encryption not supported [ 568.665779][T11039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.688561][ T8513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.766169][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.775686][T16597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.806157][T16597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.835994][T16597] bond0 (unregistering): Released all slaves [ 568.936834][T16597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.976338][T16597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.017700][T16597] bond0 (unregistering): Released all slaves [ 569.085708][T11068] loop3: detected capacity change from 0 to 512 [ 569.132023][T11068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.170379][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.202607][T16597] hsr_slave_0: left promiscuous mode [ 569.224882][T16597] hsr_slave_1: left promiscuous mode [ 569.251537][T16597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.258974][T16597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.309844][T16597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.317306][T16597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.351953][T16597] hsr_slave_0: left promiscuous mode [ 569.359565][T16597] hsr_slave_1: left promiscuous mode [ 569.367239][T16597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.374674][T16597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.419241][T16597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.426850][T16597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.470495][T16597] veth1_macvtap: left promiscuous mode [ 569.486364][T16597] veth0_macvtap: left promiscuous mode [ 569.491960][T16597] veth1_vlan: left promiscuous mode [ 569.509004][T16597] veth0_vlan: left promiscuous mode [ 569.518737][T16597] veth1_macvtap: left promiscuous mode [ 569.524245][T16597] veth0_macvtap: left promiscuous mode [ 569.539944][T16597] veth1_vlan: left promiscuous mode [ 569.554293][T16597] veth0_vlan: left promiscuous mode [ 569.757218][T16597] team0 (unregistering): Port device team_slave_1 removed [ 569.769265][T16597] team0 (unregistering): Port device team_slave_0 removed [ 569.781943][T11118] loop7: detected capacity change from 0 to 1024 [ 569.789282][T11118] EXT4-fs: inline encryption not supported [ 569.809444][T11118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.850938][T16597] team0 (unregistering): Port device team_slave_1 removed [ 569.859306][ T8513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.868969][T16597] team0 (unregistering): Port device team_slave_0 removed [ 570.441260][T11185] loop7: detected capacity change from 0 to 512 [ 570.473531][T11185] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.637022][ T8513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.764580][T11219] loop3: detected capacity change from 0 to 1024 [ 570.780511][T11219] EXT4-fs: inline encryption not supported [ 570.823957][T11219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.903045][T11243] loop7: detected capacity change from 0 to 512 [ 570.984984][T11243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.007718][ T5258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.022587][T11243] ext4 filesystem being mounted at /92/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.284950][T11211] chnl_net:caif_netlink_parms(): no params data found [ 571.379335][ T2] ================================================================== [ 571.387472][ T2] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 571.394553][ T2] [ 571.396884][ T2] write to 0xffff8881001d9638 of 8 bytes by task 11385 on cpu 1: [ 571.404621][ T2] release_task+0x779/0xb70 [ 571.409144][ T2] do_exit+0xd91/0x15d0 [ 571.413326][ T2] call_usermodehelper_exec_async+0x247/0x250 [ 571.419408][ T2] ret_from_fork+0x149/0x290 [ 571.424006][ T2] ret_from_fork_asm+0x1a/0x30 [ 571.428799][ T2] [ 571.431123][ T2] read to 0xffff8881001d9080 of 3264 bytes by task 2 on cpu 0: [ 571.438684][ T2] memcpy_and_pad+0x48/0x80 [ 571.443204][ T2] arch_dup_task_struct+0x2c/0x40 [ 571.448247][ T2] dup_task_struct+0x83/0x690 [ 571.452961][ T2] copy_process+0x37d/0x1ef0 [ 571.457582][ T2] kernel_clone+0x16c/0x5c0 [ 571.462117][ T2] kernel_thread+0xad/0xe0 [ 571.466556][ T2] kthreadd+0x28d/0x360 [ 571.470723][ T2] ret_from_fork+0x149/0x290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 571.475324][ T2] ret_from_fork_asm+0x1a/0x30 [ 571.480099][ T2] [ 571.482421][ T2] Reported by Kernel Concurrency Sanitizer on: [ 571.488566][ T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Not tainted syzkaller #0 PREEMPT(voluntary) [ 571.497935][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.507999][ T2] ================================================================== [ 571.614811][T11211] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 571.871500][T11243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.891155][ T2847] bond0 (unregistering): Released all slaves [ 572.487133][ T2847] bridge_slave_1: left allmulticast mode [ 572.492924][ T2847] bridge_slave_1: left promiscuous mode [ 572.498624][ T2847] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.507722][ T2847] bridge_slave_0: left allmulticast mode [ 572.513452][ T2847] bridge_slave_0: left promiscuous mode [ 572.519127][ T2847] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.578668][ T2847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.588088][ T2847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.597198][ T2847] bond0 (unregistering): Released all slaves [ 572.698992][ T2847] hsr_slave_0: left promiscuous mode [ 572.704780][ T2847] hsr_slave_1: left promiscuous mode [ 572.710535][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.718110][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.751844][ T2847] team0 (unregistering): Port device team_slave_1 removed [ 572.761714][ T2847] team0 (unregistering): Port device team_slave_0 removed [ 573.145081][ T2847] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.198066][ T2847] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.283353][ T2847] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.346739][ T2847] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.628577][ T2847] bridge_slave_1: left allmulticast mode [ 573.634384][ T2847] bridge_slave_1: left promiscuous mode [ 573.640125][ T2847] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.648051][ T2847] bridge_slave_0: left allmulticast mode [ 573.653692][ T2847] bridge_slave_0: left promiscuous mode [ 573.659528][ T2847] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.668473][ T2847] bridge_slave_1: left allmulticast mode [ 573.674133][ T2847] bridge_slave_1: left promiscuous mode [ 573.679984][ T2847] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.688047][ T2847] bridge_slave_0: left allmulticast mode [ 573.693757][ T2847] bridge_slave_0: left promiscuous mode [ 573.699438][ T2847] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.797168][ T2847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.807685][ T2847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.817458][ T2847] bond0 (unregistering): Released all slaves [ 573.872212][ T2847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.881706][ T2847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.890794][ T2847] bond0 (unregistering): Released all slaves [ 573.972062][ T2847] hsr_slave_0: left promiscuous mode [ 573.977893][ T2847] hsr_slave_1: left promiscuous mode [ 573.983544][ T2847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.991048][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.998607][ T2847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.005981][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.015897][ T2847] hsr_slave_0: left promiscuous mode [ 574.021857][ T2847] hsr_slave_1: left promiscuous mode [ 574.027495][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.035303][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.048395][ T2847] veth1_macvtap: left promiscuous mode [ 574.054067][ T2847] veth0_macvtap: left promiscuous mode [ 574.059662][ T2847] veth1_vlan: left promiscuous mode [ 574.065080][ T2847] veth0_vlan: left promiscuous mode [ 574.148852][ T2847] team0 (unregistering): Port device team_slave_1 removed [ 574.159413][ T2847] team0 (unregistering): Port device team_slave_0 removed [ 574.219359][ T2847] team0 (unregistering): Port device team_slave_1 removed [ 574.230128][ T2847] team0 (unregistering): Port device team_slave_0 removed [ 574.845506][ T2847] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.918766][ T2847] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.972129][ T2847] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.047205][ T2847] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.124147][ T2847] team0: left allmulticast mode [ 575.129032][ T2847] team_slave_0: left allmulticast mode [ 575.134528][ T2847] team_slave_1: left allmulticast mode [ 575.139987][ T2847] team0: left promiscuous mode [ 575.144787][ T2847] team_slave_0: left promiscuous mode [ 575.150372][ T2847] team_slave_1: left promiscuous mode [ 575.156096][ T2847] bridge0: port 3(team0) entered disabled state [ 575.165780][ T2847] bridge_slave_1: left allmulticast mode [ 575.171439][ T2847] bridge_slave_1: left promiscuous mode [ 575.177100][ T2847] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.185112][ T2847] bridge_slave_0: left allmulticast mode [ 575.190801][ T2847] bridge_slave_0: left promiscuous mode [ 575.196468][ T2847] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.205287][ T2847] bridge_slave_1: left allmulticast mode [ 575.210969][ T2847] bridge_slave_1: left promiscuous mode [ 575.216757][ T2847] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.224565][ T2847] bridge_slave_0: left allmulticast mode [ 575.230238][ T2847] bridge_slave_0: left promiscuous mode [ 575.236276][ T2847] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.410385][ T2847] team0: Port device bridge2 removed [ 575.453878][ T2847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.464550][ T2847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.474388][ T2847] bond0 (unregistering): Released all slaves [ 575.483003][ T2847] bond1 (unregistering): Released all slaves [ 575.491529][ T2847] bond2 (unregistering): Released all slaves [ 575.499695][ T2847] bond3 (unregistering): Released all slaves [ 575.593549][ T2847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.604068][ T2847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.613936][ T2847] bond0 (unregistering): Released all slaves [ 575.661203][ T2847] hsr_slave_0: left promiscuous mode [ 575.666880][ T2847] hsr_slave_1: left promiscuous mode [ 575.672452][ T2847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.679861][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.687313][ T2847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.694748][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.704552][ T2847] hsr_slave_0: left promiscuous mode [ 575.710380][ T2847] hsr_slave_1: left promiscuous mode [ 575.716084][ T2847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.723483][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.731333][ T2847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.738815][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.752927][ T2847] veth1_macvtap: left promiscuous mode [ 575.758398][ T2847] veth0_macvtap: left promiscuous mode [ 575.763985][ T2847] veth1_vlan: left promiscuous mode [ 575.769218][ T2847] veth0_vlan: left promiscuous mode [ 575.775003][ T2847] veth1_macvtap: left promiscuous mode [ 575.780513][ T2847] veth0_macvtap: left promiscuous mode [ 575.786280][ T2847] veth1_vlan: left promiscuous mode [ 575.791525][ T2847] veth0_vlan: left promiscuous mode [ 575.909411][ T2847] team0 (unregistering): Port device team_slave_1 removed [ 575.919345][ T2847] team0 (unregistering): Port device team_slave_0 removed [ 575.978757][ T2847] team0 (unregistering): Port device team_slave_1 removed [ 575.988564][ T2847] team0 (unregistering): Port device team_slave_0 removed [ 579.349428][ T1849] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.410346][ T1849] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.464325][ T1849] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.538236][ T1849] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.697755][ T1849] bond0 (unregistering): Released all slaves [ 579.706014][ T1849] bond1 (unregistering): Released all slaves [ 579.714238][ T1849] bond2 (unregistering): Released all slaves [ 579.723029][ T1849] bond3 (unregistering): Released all slaves [ 579.764422][ T1849] hsr_slave_0: left promiscuous mode [ 579.770145][ T1849] hsr_slave_1: left promiscuous mode [ 579.778473][ T1849] veth1_macvtap: left promiscuous mode [ 579.783972][ T1849] veth0_macvtap: left promiscuous mode [ 579.789527][ T1849] veth1_vlan: left promiscuous mode [ 579.794805][ T1849] veth0_vlan: left promiscuous mode