last executing test programs: 7m28.263221012s ago: executing program 0 (id=2097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 7m28.217472714s ago: executing program 0 (id=2098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 7m28.169066896s ago: executing program 0 (id=2099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x1487ee83a120476b, 0x9, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x3d46, &(0x7f0000000480)={0x0, 0x5121, 0x400, 0x3, 0x257}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 7m27.803298322s ago: executing program 0 (id=2106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 7m27.769842154s ago: executing program 0 (id=2109): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x1}}]}}]}, 0x3c}}, 0x40) 7m27.417064399s ago: executing program 0 (id=2121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) 7m27.41691666s ago: executing program 32 (id=2121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) 6m14.483348609s ago: executing program 1 (id=4271): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="7400000000080101000000000000000000000004440004800800024000000002080001400000010808000240fffff658080002400000010008000240000000000800024000000eb208000140000000040800024000bcbe0706000240600600000900010073797a31000000000500030084"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x40) 6m14.423545181s ago: executing program 1 (id=4272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 6m14.422856111s ago: executing program 1 (id=4273): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffffea) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffffff, 0x7}]}}}}}}}, 0x0) 6m14.364516604s ago: executing program 1 (id=4274): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 6m14.363957874s ago: executing program 1 (id=4275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 6m14.085061617s ago: executing program 1 (id=4285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7814, 0x3, 0x2, 0x81, 0x1fd, 0x0, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xc00}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 6m14.084911296s ago: executing program 33 (id=4285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7814, 0x3, 0x2, 0x81, 0x1fd, 0x0, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xc00}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 6m12.459433658s ago: executing program 4 (id=4318): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = socket$igmp6(0xa, 0x3, 0x3a) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @loopback, 0x1}, {0xa, 0xfffe, 0xffdffffd, @dev={0xfe, 0x80, '\x00', 0x2}, 0x4}, 0x1000, {[0x9, 0x2, 0xfffffffe, 0x10b, 0x0, 0x40001, 0x8, 0x5]}}, 0x5c) 6m12.341619194s ago: executing program 4 (id=4320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a41c", 0x2c}], 0x2) 6m12.209263109s ago: executing program 4 (id=4327): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) dup2(r0, r1) 6m11.999485939s ago: executing program 4 (id=4334): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 6m11.962903951s ago: executing program 4 (id=4336): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 6m11.73659341s ago: executing program 4 (id=4343): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) memfd_secret(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x6c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20050880}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m11.722336731s ago: executing program 34 (id=4343): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) memfd_secret(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x6c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20050880}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m7.711790792s ago: executing program 6 (id=7089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) 4m7.220043224s ago: executing program 6 (id=7107): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 4m7.158852726s ago: executing program 6 (id=7111): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) getuid() mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x86, 0x80000000}) 4m7.107535079s ago: executing program 6 (id=7115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x81) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400019b4abd70010000000007000000", @ANYRES32=r2], 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m7.053468651s ago: executing program 6 (id=7118): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = syz_open_dev$vcsn(0x0, 0x1, 0x400000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, 0x0, 0x4040084) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 4m6.990278954s ago: executing program 6 (id=7120): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000a000000558f5ee455ff", @ANYBLOB='\n'], 0x44}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) 3m51.881461803s ago: executing program 35 (id=7120): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000a000000558f5ee455ff", @ANYBLOB='\n'], 0x44}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) 30.692712001s ago: executing program 7 (id=12191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x2e0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xfba, 0x10000000, 0x0, 0x8}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 30.616312345s ago: executing program 7 (id=12195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x1, 0x7fe2, 0x1, 0x12}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000640), &(0x7f0000000740)=r1}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 30.556028127s ago: executing program 7 (id=12198): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x352, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 28.45715635s ago: executing program 7 (id=12258): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 28.179461492s ago: executing program 7 (id=12266): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 28.122813825s ago: executing program 7 (id=12269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 13.068827391s ago: executing program 36 (id=12269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 3.238774507s ago: executing program 9 (id=12779): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x101000, 0x26) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {}, [], {0x4, 0x6}}, 0x24, 0x2) 3.118967492s ago: executing program 9 (id=12783): pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) close_range(r0, 0xffffffffffffffff, 0x0) 2.999809508s ago: executing program 9 (id=12788): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 2.894547032s ago: executing program 2 (id=12792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = memfd_secret(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 2.781332837s ago: executing program 2 (id=12793): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f00000012c0)=[{r3, 0x480}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESHEX=r1, @ANYRES8=r2, @ANYRESHEX=r2, @ANYBLOB="32d6", @ANYRES32=r0, @ANYRES8=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r5 = syz_open_pts(r3, 0x103100) dup3(r5, r3, 0x0) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x0) 2.624753534s ago: executing program 9 (id=12796): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 2.384669515s ago: executing program 9 (id=12800): close(0x3) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb7, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 1.920907725s ago: executing program 2 (id=12808): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.546861102s ago: executing program 5 (id=12810): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040844) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250301f2800c0018000bac0f000000000014000100000000000000000000009d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.469907065s ago: executing program 5 (id=12812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000002980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001700)=""/59, 0x3b}], 0x6}, 0x3}], 0x1, 0x10002, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) 1.425420167s ago: executing program 2 (id=12814): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 1.35275044s ago: executing program 8 (id=12817): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x8000000000000000}, 0x18) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/243, 0xfffffed7}], 0x1}, 0x0) 1.313758922s ago: executing program 8 (id=12818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0, 0x66}, &(0x7f0000000240)=[{&(0x7f0000000380)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 1.312219982s ago: executing program 5 (id=12828): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r0, 0x407, 0x176) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) memfd_secret(0x0) pselect6(0x40, &(0x7f0000000a80)={0x1, 0x40025b7edb3, 0x20000, 0x4, 0x6, 0x280000001, 0x2d20, 0xd}, &(0x7f0000000ac0)={0xc, 0x9, 0xfffffffffffffffd, 0x800, 0x800000c, 0x10000, 0x1, 0x40000006}, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) vmsplice(r1, &(0x7f0000000480), 0x0, 0xd) 1.260779155s ago: executing program 3 (id=12819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000060000000009"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r3}, 0x38) 924.618009ms ago: executing program 5 (id=12820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 800.795104ms ago: executing program 5 (id=12821): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) fchdir(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0, 0x12a) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 532.556526ms ago: executing program 5 (id=12822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 530.464567ms ago: executing program 8 (id=12823): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000040000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 445.91281ms ago: executing program 8 (id=12824): socket$nl_route(0x10, 0x3, 0x0) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x60, 0x0, 0x0) 444.92441ms ago: executing program 2 (id=12825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 363.434184ms ago: executing program 3 (id=12826): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 360.558554ms ago: executing program 8 (id=12827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r1, 0xffffffffffffffff, 0xfffffffdfffffffc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 359.334704ms ago: executing program 9 (id=12829): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) 326.100856ms ago: executing program 8 (id=12830): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 180.547012ms ago: executing program 3 (id=12831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) 152.460894ms ago: executing program 3 (id=12832): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x89) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 122.479195ms ago: executing program 3 (id=12833): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000004c0), 0xca, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000003c0)={0x3, "f7aec7ec68aca2488461799af05ea8cd93aa99a8b1beeb3c5faede327daa2f4f0eb2a8299aae4577e406c9cec477cd61834baa2c0c37bf1a6f1f647411dad46409da5cffcc7af9744806d7a9a48bec0844a3770b126cee0a310f915e96ca36f07236ffb739c993d74144f806f3573aa0414599bc1b27e5230e3ed1b86ebedcd2c559db1afdd99d2a4eda6ad847d5142cf2472f59b305dbccd2d65429ac904f8cb6b9c15024c17711606c9e12431fcb2f9048303b871d21d7a77fb6dbf8902f5c7099d181f544a393f7f67585638b405bd64f3e19ec892498cb5c0d919f4772394aa9214f76bf473e30cea00040d46da43ebe28bfbf01e11ad96d93b5e368d11a3a133edbbaee86bf0cbdd29fe29e56a7ce26415b84a904248563bdd6121b921c89329551bb9b4ff099a6b820a13da735c54746e7d374ea39f22ff0872fbcba1d04901864e703ffcf84b8f9c97c7dd4b4c36c3759a2592f0f63e92b4ed9b3c7f14c6322926a97690b637de224fbe91fe33dd9c2d4dade8c1047da9343c2fcdf03a033c7583b519c7602aee4956fa96e79f109221752c5c0f63e12a52ece820c456d785c570ffeaa87175561737afa441fca42ff84ccbbc7419c1c51c9fd77aba4a924136dc5cf8ece1a9dfb7d0d15f2c841570f6b68845771c22a3a52b8f6cb1a2082bd5f42bc43088fb351b37b23674a88692fe2923f66d8a10ad8c22d7a3b27"}) 31.770359ms ago: executing program 3 (id=12834): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4028010}, 0x0) r3 = dup3(r0, r2, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x2400c0c1) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 0s ago: executing program 2 (id=12835): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) kernel console output (not intermixed with test programs): 452.957200][T30348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.981592][T30348] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.002695][T30356] bond0: (slave dummy0): Releasing backup interface [ 453.021137][T30356] bond0: (slave 30): Releasing backup interface [ 453.029238][T30356] bond0: (slave bond_slave_1): Releasing backup interface [ 453.047560][T30356] netlink: 'syz.8.10677': attribute type 10 has an invalid length. [ 453.055690][T30356] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10677'. [ 453.081250][T30356] veth1_vlan: left promiscuous mode [ 453.271763][T30382] lo speed is unknown, defaulting to 1000 [ 453.490750][T30394] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10694'. [ 453.535775][T30394] 8021q: adding VLAN 0 to HW filter on device bond5 [ 453.546855][T30404] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10694'. [ 453.567482][T30404] bond5 (unregistering): Released all slaves [ 453.655620][T30421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30421 comm=syz.8.10706 [ 453.764896][T30438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10714'. [ 453.767665][ T4630] kernel write not supported for file /input/event0 (pid: 4630 comm: kworker/0:13) [ 453.774643][T30438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10714'. [ 454.085352][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 454.085370][ T29] audit: type=1400 audit(454.082:16235): avc: denied { getopt } for pid=30461 comm="syz.2.10724" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 454.144845][T30468] netlink: 'syz.2.10727': attribute type 30 has an invalid length. [ 454.156639][T30464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10735'. [ 454.205259][T30470] tipc: Enabled bearer , priority 0 [ 454.212764][T30469] tipc: Resetting bearer [ 454.240924][T30469] tipc: Disabling bearer [ 454.456014][ T29] audit: type=1326 audit(454.452:16236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30502 comm="syz.2.10740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x0 [ 454.688540][T30512] loop7: detected capacity change from 0 to 8192 [ 454.789220][ T29] audit: type=1400 audit(454.782:16237): avc: denied { read } for pid=30527 comm="syz.7.10749" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 454.813612][ T29] audit: type=1400 audit(454.782:16238): avc: denied { open } for pid=30527 comm="syz.7.10749" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 454.862533][T30528] ip6tnl0: entered promiscuous mode [ 454.867824][T30528] ip6tnl0: entered allmulticast mode [ 455.217664][T30558] ip6tnl0: entered promiscuous mode [ 455.223019][T30558] ip6tnl0: entered allmulticast mode [ 455.266436][T30563] loop8: detected capacity change from 0 to 2048 [ 455.295503][ T29] audit: type=1326 audit(455.293:16239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.3.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 455.318984][ T29] audit: type=1326 audit(455.293:16240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.3.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 455.342138][ T29] audit: type=1326 audit(455.293:16241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.3.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 455.365557][ T29] audit: type=1326 audit(455.293:16242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.3.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 455.388870][ T29] audit: type=1326 audit(455.293:16243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.3.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 455.411992][ T29] audit: type=1326 audit(455.293:16244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.3.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 455.504652][T30586] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10776'. [ 455.647089][T30606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10784'. [ 455.654036][T30608] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10786'. [ 455.740173][T30608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10786'. [ 455.841446][T30624] batadv_slave_1: entered promiscuous mode [ 455.845691][T30622] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 455.849277][T30623] batadv_slave_1: left promiscuous mode [ 455.946979][T30637] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 456.101448][T30649] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10803'. [ 456.148642][T30653] syz_tun: entered allmulticast mode [ 456.155251][T30652] syz_tun: left allmulticast mode [ 456.402616][T30680] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 456.472512][T30685] loop7: detected capacity change from 0 to 2048 [ 456.501424][T30685] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.533059][T30685] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 456.548463][T30685] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 456.560976][T30685] EXT4-fs (loop7): This should not happen!! Data will be lost [ 456.560976][T30685] [ 456.570726][T30685] EXT4-fs (loop7): Total free blocks count 0 [ 456.576871][T30685] EXT4-fs (loop7): Free/Dirty block details [ 456.582874][T30685] EXT4-fs (loop7): free_blocks=66060288 [ 456.588524][T30685] EXT4-fs (loop7): dirty_blocks=48 [ 456.593689][T30685] EXT4-fs (loop7): Block reservation details [ 456.599737][T30685] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 456.632396][ T8673] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 456.701713][T30710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10825'. [ 456.738552][T30713] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 456.778931][ T8673] net_ratelimit: 34 callbacks suppressed [ 456.778957][ T8673] bond0: (slave bridge14): failed to get link speed/duplex [ 456.899164][ T8683] bond0: (slave bridge14): failed to get link speed/duplex [ 457.008802][ T8683] bond0: (slave bridge14): failed to get link speed/duplex [ 457.118804][ T8683] bond0: (slave bridge14): failed to get link speed/duplex [ 457.228820][ T8683] bond0: (slave bridge14): failed to get link speed/duplex [ 457.338661][ T8683] bond0: (slave bridge14): failed to get link speed/duplex [ 457.401473][T30752] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 457.448768][ T7272] bond0: (slave bridge14): failed to get link speed/duplex [ 457.558820][ T7272] bond0: (slave bridge14): failed to get link speed/duplex [ 457.668475][ T8683] bond0: (slave bridge14): failed to get link speed/duplex [ 457.788478][ T7270] bond0: (slave bridge14): failed to get link speed/duplex [ 457.952463][T30802] loop8: detected capacity change from 0 to 128 [ 458.082215][T30813] loop8: detected capacity change from 0 to 2048 [ 458.109803][T30813] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.125591][T30813] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 458.140818][T30813] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 458.153232][T30813] EXT4-fs (loop8): This should not happen!! Data will be lost [ 458.153232][T30813] [ 458.162908][T30813] EXT4-fs (loop8): Total free blocks count 0 [ 458.168965][T30813] EXT4-fs (loop8): Free/Dirty block details [ 458.174881][T30813] EXT4-fs (loop8): free_blocks=66060288 [ 458.180628][T30813] EXT4-fs (loop8): dirty_blocks=48 [ 458.186012][T30813] EXT4-fs (loop8): Block reservation details [ 458.192083][T30813] EXT4-fs (loop8): i_reserved_data_blocks=3 [ 458.222317][ T8685] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 458.236166][T30819] loop7: detected capacity change from 0 to 2048 [ 458.251745][T30819] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.334810][T30834] netlink: 'syz.8.10873': attribute type 13 has an invalid length. [ 458.367478][T30834] gretap0: refused to change device tx_queue_len [ 458.447509][T30839] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10875'. [ 458.545189][ T4644] hid_parser_main: 8 callbacks suppressed [ 458.545211][ T4644] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 458.558562][ T4644] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 458.566143][ T4644] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 458.573809][ T4644] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 458.581435][ T4644] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 458.588913][ T4644] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 458.596372][ T4644] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 458.603891][ T4644] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 458.611405][ T4644] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 458.619125][ T4644] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 458.661327][ T7270] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:26: bg 0: block 345: padding at end of block bitmap is not set [ 458.676591][ T4644] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 458.676974][ T7270] EXT4-fs (loop7): Remounting filesystem read-only [ 458.803191][T14270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.733540][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 459.733559][ T29] audit: type=1326 audit(459.735:16321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30947 comm="syz.2.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 459.764487][ T29] audit: type=1326 audit(459.735:16322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30947 comm="syz.2.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 459.787639][ T29] audit: type=1326 audit(459.735:16323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30947 comm="syz.2.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 459.810955][ T29] audit: type=1326 audit(459.735:16324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30947 comm="syz.2.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 459.834183][ T29] audit: type=1326 audit(459.735:16325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30947 comm="syz.2.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 459.857415][ T29] audit: type=1326 audit(459.735:16326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30947 comm="syz.2.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 459.880852][ T29] audit: type=1326 audit(459.815:16327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30947 comm="syz.2.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 459.904096][ T29] audit: type=1326 audit(459.815:16328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30947 comm="syz.2.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 459.956425][T30958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10924'. [ 460.082409][ T29] audit: type=1326 audit(460.085:16329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30969 comm="syz.2.10931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x0 [ 461.016795][ T29] audit: type=1400 audit(461.015:16330): avc: denied { mounton } for pid=30992 comm="syz.7.10939" path="/1221/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 461.058770][ T8685] Bluetooth: hci0: Frame reassembly failed (-84) [ 461.193423][T31002] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10942'. [ 461.896363][ T7270] net_ratelimit: 36 callbacks suppressed [ 461.896386][ T7270] bond0: (slave bridge14): failed to get link speed/duplex [ 462.016297][ T7270] bond0: (slave bridge14): failed to get link speed/duplex [ 462.126217][ T7270] bond0: (slave bridge14): failed to get link speed/duplex [ 462.236186][ T8683] bond0: (slave bridge14): failed to get link speed/duplex [ 462.282258][T31017] bridge: RTM_NEWNEIGH with invalid ether address [ 462.366355][ T8683] bond0: (slave bridge14): failed to get link speed/duplex [ 462.476317][ T8683] bond0: (slave bridge14): failed to get link speed/duplex [ 462.586289][ T8683] bond0: (slave bridge14): failed to get link speed/duplex [ 462.696073][ T7270] bond0: (slave bridge14): failed to get link speed/duplex [ 462.810068][T31036] loop8: detected capacity change from 0 to 128 [ 462.819781][ T7270] bond0: (slave bridge14): failed to get link speed/duplex [ 462.874586][T31038] ip6tnl0: left promiscuous mode [ 462.879673][T31038] ip6tnl0: left allmulticast mode [ 462.886687][T31038] wg2: left promiscuous mode [ 462.891347][T31038] wg2: left allmulticast mode [ 462.904937][T31038] bond0: left promiscuous mode [ 462.909948][T31038] bridge14: left promiscuous mode [ 462.915139][T31038] bond0: left allmulticast mode [ 462.920099][T31038] bridge14: left allmulticast mode [ 462.927004][T31038] ip6gre3: left allmulticast mode [ 462.934143][T31038] ip6gre4: left allmulticast mode [ 463.000374][T31050] lo speed is unknown, defaulting to 1000 [ 463.072267][T31054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10964'. [ 463.083433][T31054] ip6gre2: entered allmulticast mode [ 463.135856][T26700] Bluetooth: hci0: command 0x1003 tx timeout [ 463.141935][ T4953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 463.210091][T31060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=31060 comm=syz.2.10968 [ 463.679455][T31062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10969'. [ 463.695839][T31062] ip6gre4: entered allmulticast mode [ 463.858785][T31073] lo: entered allmulticast mode [ 463.879478][T31073] lo: entered promiscuous mode [ 463.884417][T31073] lo: left allmulticast mode [ 464.292225][T31089] lo speed is unknown, defaulting to 1000 [ 465.054808][ T4644] page_pool_release_retry() stalled pool shutdown: id 165, 50 inflight 241 sec [ 465.227931][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 465.227948][ T29] audit: type=1326 audit(465.238:16356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31121 comm="syz.5.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 465.263170][ T29] audit: type=1326 audit(465.268:16357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31121 comm="syz.5.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 465.286375][ T29] audit: type=1326 audit(465.268:16358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31121 comm="syz.5.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 465.309619][ T29] audit: type=1326 audit(465.268:16359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31121 comm="syz.5.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 465.332747][ T29] audit: type=1326 audit(465.268:16360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31121 comm="syz.5.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 465.355800][ T29] audit: type=1326 audit(465.268:16361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31121 comm="syz.5.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 465.378991][ T29] audit: type=1326 audit(465.268:16362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31121 comm="syz.5.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 465.402351][ T29] audit: type=1326 audit(465.268:16363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31121 comm="syz.5.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 465.425444][ T29] audit: type=1326 audit(465.268:16364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31121 comm="syz.5.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 465.448676][ T29] audit: type=1326 audit(465.268:16365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31121 comm="syz.5.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 465.953780][T31131] lo speed is unknown, defaulting to 1000 [ 466.801921][T31147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11017'. [ 466.817430][T31147] 8021q: adding VLAN 0 to HW filter on device bond6 [ 466.826405][T31148] netlink: 'syz.2.11018': attribute type 4 has an invalid length. [ 466.838069][T31147] vlan0: entered allmulticast mode [ 466.843313][T31147] bond6: entered allmulticast mode [ 466.922338][T31153] lo speed is unknown, defaulting to 1000 [ 466.954022][T31158] wg2: left promiscuous mode [ 466.958731][T31158] wg2: left allmulticast mode [ 466.974254][T31158] macsec0: left promiscuous mode [ 466.980772][T31158] team1: left promiscuous mode [ 466.985597][T31158] team1: left allmulticast mode [ 466.991610][T31158] ip6gre1: left allmulticast mode [ 466.996772][T31158] veth20: left promiscuous mode [ 467.001634][T31158] veth20: left allmulticast mode [ 467.006894][T31158] ip6gre3: left allmulticast mode [ 467.012160][T31158] ip6gre4: left allmulticast mode [ 467.017443][T31158] veth24: left promiscuous mode [ 467.022478][T31158] veth24: left allmulticast mode [ 467.027667][T31158] veth26: left promiscuous mode [ 467.032540][T31158] veth26: left allmulticast mode [ 467.037688][T31158] bond3: left allmulticast mode [ 467.044226][T31158] ip6gre5: left allmulticast mode [ 467.063801][T31158] team2: left promiscuous mode [ 467.068639][T31158] team2: left allmulticast mode [ 467.473929][T31193] lo speed is unknown, defaulting to 1000 [ 467.719085][T31203] netlink: 'syz.5.11031': attribute type 13 has an invalid length. [ 467.810458][T31214] netlink: 84 bytes leftover after parsing attributes in process `syz.7.11035'. [ 467.878292][T31215] loop8: detected capacity change from 0 to 1024 [ 467.890115][T31215] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 467.902115][T31215] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 467.925380][T31215] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 467.935187][T31215] EXT4-fs (loop8): orphan cleanup on readonly fs [ 467.941990][T31215] EXT4-fs error (device loop8): ext4_read_inode_bitmap:167: comm syz.8.11032: Inode bitmap for bg 0 marked uninitialized [ 467.955902][T31215] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 467.989434][T31215] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 468.576585][T31215] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.740082][T31252] netlink: 'syz.7.11045': attribute type 1 has an invalid length. [ 468.769394][T31255] loop8: detected capacity change from 0 to 128 [ 468.779341][T31252] 8021q: adding VLAN 0 to HW filter on device bond5 [ 468.794315][T31255] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 468.820861][T31258] bond5: entered allmulticast mode [ 468.879132][T31268] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11053'. [ 468.979623][T21704] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 469.493180][T31310] loop7: detected capacity change from 0 to 512 [ 469.503326][T31310] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 469.511582][T31310] EXT4-fs (loop7): orphan cleanup on readonly fs [ 469.518639][T31310] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.11068: Failed to acquire dquot type 1 [ 469.530343][T31310] EXT4-fs (loop7): Remounting filesystem read-only [ 469.537516][T31310] EXT4-fs (loop7): 1 truncate cleaned up [ 469.543786][T31310] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 469.568465][T14270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.587068][T31314] loop7: detected capacity change from 0 to 128 [ 469.649737][T31315] bio_check_eod: 96 callbacks suppressed [ 469.649757][T31315] syz.7.11070: attempt to access beyond end of device [ 469.649757][T31315] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 469.669241][T31315] syz.7.11070: attempt to access beyond end of device [ 469.669241][T31315] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 469.683071][T31315] syz.7.11070: attempt to access beyond end of device [ 469.683071][T31315] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 469.696910][T31315] syz.7.11070: attempt to access beyond end of device [ 469.696910][T31315] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 469.712438][T31315] syz.7.11070: attempt to access beyond end of device [ 469.712438][T31315] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 469.726259][T31315] syz.7.11070: attempt to access beyond end of device [ 469.726259][T31315] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 469.740169][T31315] syz.7.11070: attempt to access beyond end of device [ 469.740169][T31315] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 469.758881][T31315] syz.7.11070: attempt to access beyond end of device [ 469.758881][T31315] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 469.773047][T31315] syz.7.11070: attempt to access beyond end of device [ 469.773047][T31315] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 469.789960][T31315] syz.7.11070: attempt to access beyond end of device [ 469.789960][T31315] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 469.840225][T31317] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11071'. [ 470.068495][T31331] loop8: detected capacity change from 0 to 1024 [ 470.109591][T31331] EXT4-fs: Ignoring removed oldalloc option [ 470.115623][T31331] EXT4-fs: Ignoring removed bh option [ 470.143784][T31331] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.296759][T21704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.320935][T31339] netlink: 332 bytes leftover after parsing attributes in process `syz.3.11080'. [ 470.372601][T31343] loop8: detected capacity change from 0 to 128 [ 471.306301][ T29] kauditd_printk_skb: 1916 callbacks suppressed [ 471.306319][ T29] audit: type=1326 audit(471.311:18280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.2.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 471.339542][ T29] audit: type=1326 audit(471.311:18281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.2.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 471.362860][ T29] audit: type=1326 audit(471.311:18282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.2.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 471.386037][ T29] audit: type=1326 audit(471.311:18283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.2.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 471.409455][ T29] audit: type=1326 audit(471.311:18284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.2.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 471.432530][ T29] audit: type=1326 audit(471.311:18285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.2.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 471.455897][ T29] audit: type=1326 audit(471.341:18286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.2.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 471.479228][ T29] audit: type=1326 audit(471.341:18287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.2.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 471.536928][ T29] audit: type=1326 audit(471.391:18288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.2.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 471.560113][ T29] audit: type=1326 audit(471.391:18289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.2.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 471.585211][T31385] syzkaller0: entered promiscuous mode [ 471.590717][T31385] syzkaller0: entered allmulticast mode [ 471.701625][T31393] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11100'. [ 472.183921][T31428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11116'. [ 472.188824][T31426] lo speed is unknown, defaulting to 1000 [ 472.255205][T31437] 8021q: adding VLAN 0 to HW filter on device bond6 [ 472.305858][T31437] loop7: detected capacity change from 0 to 512 [ 472.336933][T31437] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.441308][T14270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.693886][T31462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11128'. [ 473.280551][T31486] ip6gre5: entered allmulticast mode [ 473.406954][T31488] loop7: detected capacity change from 0 to 2048 [ 473.466898][T31488] Alternate GPT is invalid, using primary GPT. [ 473.473425][T31488] loop7: p2 p3 p7 [ 473.560100][T31504] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 473.582529][T31504] lo speed is unknown, defaulting to 1000 [ 473.694343][T31507] loop7: detected capacity change from 0 to 128 [ 473.829917][T31514] lo speed is unknown, defaulting to 1000 [ 474.063197][T31529] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11155'. [ 474.178957][T31533] loop8: detected capacity change from 0 to 2048 [ 474.241543][T31533] Alternate GPT is invalid, using primary GPT. [ 474.248082][T31533] loop8: p2 p3 p7 [ 474.551648][T31541] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 474.557451][T31538] netlink: 'syz.8.11171': attribute type 17 has an invalid length. [ 474.568228][T31538] netlink: 148 bytes leftover after parsing attributes in process `syz.8.11171'. [ 474.578658][T31541] lo speed is unknown, defaulting to 1000 [ 474.876094][T31563] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11169'. [ 474.955930][T31576] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.11188'. [ 474.971776][T31580] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 474.997152][T31580] lo speed is unknown, defaulting to 1000 [ 475.095594][T31589] netlink: 'syz.5.11183': attribute type 17 has an invalid length. [ 475.103808][T31589] netlink: 148 bytes leftover after parsing attributes in process `syz.5.11183'. [ 475.991574][T31634] lo speed is unknown, defaulting to 1000 [ 476.317622][ T29] kauditd_printk_skb: 578 callbacks suppressed [ 476.317639][ T29] audit: type=1326 audit(476.323:18868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31619 comm="syz.5.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fadfe1365e7 code=0x7ffc0000 [ 476.346986][ T29] audit: type=1326 audit(476.323:18869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31619 comm="syz.5.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadfe0db829 code=0x7ffc0000 [ 476.370064][ T29] audit: type=1326 audit(476.323:18870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31619 comm="syz.5.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 476.419516][ T29] audit: type=1326 audit(476.363:18871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31619 comm="syz.5.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fadfe1365e7 code=0x7ffc0000 [ 476.442676][ T29] audit: type=1326 audit(476.363:18872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31619 comm="syz.5.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadfe0db829 code=0x7ffc0000 [ 476.465708][ T29] audit: type=1326 audit(476.363:18873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31619 comm="syz.5.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 476.488794][ T29] audit: type=1326 audit(476.363:18874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31619 comm="syz.5.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fadfe1365e7 code=0x7ffc0000 [ 476.511813][ T29] audit: type=1326 audit(476.363:18875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31619 comm="syz.5.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadfe0db829 code=0x7ffc0000 [ 476.534927][ T29] audit: type=1326 audit(476.363:18876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31619 comm="syz.5.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 476.558147][ T29] audit: type=1326 audit(476.383:18877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31619 comm="syz.5.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fadfe1365e7 code=0x7ffc0000 [ 476.672245][T31653] gretap0: left allmulticast mode [ 476.677383][T31653] gretap0: left promiscuous mode [ 476.682650][T31653] bridge0: port 1(gretap0) entered disabled state [ 477.315342][T31694] loop8: detected capacity change from 0 to 2048 [ 477.369418][T31694] loop8: p2 < > p4 [ 477.374370][T31694] loop8: p4 size 262144 extends beyond EOD, truncated [ 477.637813][T31872] __nla_validate_parse: 5 callbacks suppressed [ 477.637853][T31872] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11222'. [ 477.703119][T31877] loop8: detected capacity change from 0 to 256 [ 477.794812][T31889] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.11229'. [ 477.852275][T31894] loop7: detected capacity change from 0 to 2048 [ 477.892352][T31894] loop7: p2 < > p4 [ 477.968749][T31894] loop7: p4 size 262144 extends beyond EOD, truncated [ 478.733867][T31932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11239'. [ 479.127834][ T4633] page_pool_release_retry() stalled pool shutdown: id 177, 50 inflight 242 sec [ 480.431517][T32028] netlink: 'syz.8.11283': attribute type 30 has an invalid length. [ 480.441108][T32029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11284'. [ 480.528282][T32036] bridge0: entered promiscuous mode [ 480.533565][T32036] macsec1: entered promiscuous mode [ 480.542201][T32036] bridge0: port 1(macsec1) entered blocking state [ 480.548755][T32036] bridge0: port 1(macsec1) entered disabled state [ 480.555782][T32036] macsec1: entered allmulticast mode [ 480.561295][T32036] bridge0: entered allmulticast mode [ 480.570157][T32036] macsec1: left allmulticast mode [ 480.575223][T32036] bridge0: left allmulticast mode [ 480.581720][T32036] bridge0: left promiscuous mode [ 480.739660][T32058] loop8: detected capacity change from 0 to 512 [ 480.773555][T32058] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.11279: bg 0: block 248: padding at end of block bitmap is not set [ 480.841332][T32030] cgroup: fork rejected by pids controller in /syz2 [ 480.861408][T32058] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.11279: Failed to acquire dquot type 1 [ 480.948870][T32058] EXT4-fs (loop8): 1 truncate cleaned up [ 480.985528][T32058] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.098870][T32058] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.212146][T32220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11299'. [ 482.254556][T32228] netlink: 'syz.3.11302': attribute type 30 has an invalid length. [ 482.383671][T32231] tipc: Enabling of bearer rejected, failed to enable media [ 482.605384][T32245] lo speed is unknown, defaulting to 1000 [ 483.080097][T32260] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11312'. [ 483.096185][T32259] netlink: 'syz.7.11314': attribute type 30 has an invalid length. [ 483.105262][T32263] 9pnet_fd: Insufficient options for proto=fd [ 483.138817][T32265] tipc: Enabling of bearer rejected, failed to enable media [ 484.440544][T32298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11329'. [ 484.460725][T32294] netlink: 'syz.5.11330': attribute type 30 has an invalid length. [ 484.496834][T32300] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 484.702313][T32307] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 485.371947][T32347] batadv_slave_1: entered promiscuous mode [ 485.382840][T32344] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 485.413979][T32343] batadv_slave_1: left promiscuous mode [ 485.636096][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 485.636113][ T29] audit: type=1326 audit(485.648:18918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32362 comm="syz.3.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 485.665510][ T29] audit: type=1326 audit(485.648:18919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32362 comm="syz.3.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 485.688716][ T29] audit: type=1326 audit(485.658:18920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32362 comm="syz.3.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 485.711867][ T29] audit: type=1326 audit(485.658:18921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32362 comm="syz.3.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 485.735098][ T29] audit: type=1326 audit(485.658:18922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32362 comm="syz.3.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 485.758016][ T29] audit: type=1326 audit(485.658:18923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32362 comm="syz.3.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 485.781494][ T29] audit: type=1326 audit(485.658:18924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32362 comm="syz.3.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 485.804887][ T29] audit: type=1326 audit(485.658:18925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32362 comm="syz.3.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc6df1f783 code=0x7ffc0000 [ 485.876743][ T29] audit: type=1326 audit(485.728:18926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32362 comm="syz.3.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbc6df1e1ff code=0x7ffc0000 [ 485.899853][ T29] audit: type=1326 audit(485.728:18927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32362 comm="syz.3.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbc6df1f7d7 code=0x7ffc0000 [ 486.767248][T32380] loop8: detected capacity change from 0 to 1024 [ 486.784734][T32380] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 486.795685][T32380] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 486.817545][T32380] JBD2: no valid journal superblock found [ 486.823344][T32380] EXT4-fs (loop8): Could not load journal inode [ 486.839919][T32380] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 486.891977][T32395] batadv_slave_1: entered promiscuous mode [ 486.918584][T32394] batadv_slave_1: left promiscuous mode [ 488.109102][T32431] loop7: detected capacity change from 0 to 1024 [ 488.117843][T32431] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 488.128829][T32431] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 488.139257][T32431] JBD2: no valid journal superblock found [ 488.145053][T32431] EXT4-fs (loop7): Could not load journal inode [ 488.170735][T32431] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 488.515261][T32467] sctp: [Deprecated]: syz.8.11396 (pid 32467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.515261][T32467] Use struct sctp_sack_info instead [ 489.459316][T32511] sctp: [Deprecated]: syz.7.11416 (pid 32511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.459316][T32511] Use struct sctp_sack_info instead [ 489.758688][T32544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11427'. [ 489.805403][T32546] netlink: 4696 bytes leftover after parsing attributes in process `syz.7.11429'. [ 489.825960][T32546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.842031][T32546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.487953][T32569] sctp: [Deprecated]: syz.2.11439 (pid 32569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 490.487953][T32569] Use struct sctp_sack_info instead [ 491.471920][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 491.471938][ T29] audit: type=1326 audit(491.491:18974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.3.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 491.525956][ T29] audit: type=1326 audit(491.491:18975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.3.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 491.549239][ T29] audit: type=1326 audit(491.491:18976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.3.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 491.572429][ T29] audit: type=1326 audit(491.491:18977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.3.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 491.595641][ T29] audit: type=1326 audit(491.491:18978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.3.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 491.597563][T32644] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11466'. [ 491.618901][ T29] audit: type=1326 audit(491.491:18979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.3.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 491.619031][ T29] audit: type=1326 audit(491.491:18980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.3.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 491.619064][ T29] audit: type=1326 audit(491.491:18981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.3.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 491.700397][ T29] audit: type=1326 audit(491.671:18982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.3.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 491.723550][ T29] audit: type=1326 audit(491.671:18983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.3.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 491.948387][T32656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.957012][T32656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.696564][T32664] tipc: Enabled bearer , priority 0 [ 492.710966][T32662] tipc: Resetting bearer [ 492.733825][T32662] tipc: Disabling bearer [ 492.865385][T32688] loop8: detected capacity change from 0 to 512 [ 492.910854][T32688] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 492.942135][T32688] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 159 vs 220 free clusters [ 492.976900][T32688] EXT4-fs (loop8): Remounting filesystem read-only [ 492.990912][T32688] EXT4-fs (loop8): 1 truncate cleaned up [ 493.007267][T32688] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.034301][T21704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.061425][T32699] netlink: 104 bytes leftover after parsing attributes in process `syz.8.11480'. [ 493.116241][T32706] netlink: 68 bytes leftover after parsing attributes in process `syz.8.11483'. [ 493.140132][T32710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=32710 comm=syz.3.11482 [ 493.267500][T32721] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.11491'. [ 493.936008][T32730] loop7: detected capacity change from 0 to 512 [ 493.943494][T32730] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 493.967709][T32735] lo speed is unknown, defaulting to 1000 [ 493.997892][T32730] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 159 vs 220 free clusters [ 494.012553][T32730] EXT4-fs (loop7): Remounting filesystem read-only [ 494.019203][T32730] EXT4-fs (loop7): 1 truncate cleaned up [ 494.025444][T32730] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.051701][T14270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.147340][T32753] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11499'. [ 494.222228][T32757] loop8: detected capacity change from 0 to 128 [ 494.238657][T32757] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 494.288403][T32766] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11515'. [ 494.319920][T21704] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 494.332474][T32767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=32767 comm=syz.7.11504 [ 494.548233][ T317] tipc: Bearer : already 2 bearers with priority 10 [ 494.555810][ T317] tipc: Bearer : trying with adjusted priority [ 494.562908][ T317] tipc: Enabling of bearer rejected, failed to enable media [ 494.727454][ T321] lo speed is unknown, defaulting to 1000 [ 494.922946][ T332] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11507'. [ 495.532015][ T347] vlan1: entered allmulticast mode [ 495.537202][ T347] bridge_slave_0: entered allmulticast mode [ 495.596672][ T350] lo speed is unknown, defaulting to 1000 [ 495.633699][ T356] lo speed is unknown, defaulting to 1000 [ 495.637275][ T358] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 495.764197][ T370] lo: entered allmulticast mode [ 495.791002][ T370] lo: entered promiscuous mode [ 495.795835][ T370] lo: left allmulticast mode [ 496.000791][ T395] netlink: 'syz.5.11544': attribute type 4 has an invalid length. [ 496.360948][ T420] can0: slcan on ptm0. [ 496.429131][ T420] can0 (unregistered): slcan off ptm0. [ 496.439300][ T420] Falling back ldisc for ptm0. [ 496.492971][ T441] vlan1: entered allmulticast mode [ 496.498195][ T441] bridge_slave_0: entered allmulticast mode [ 496.700477][ T455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11581'. [ 496.728011][ T455] 8021q: adding VLAN 0 to HW filter on device bond5 [ 496.753043][ T455] vlan1: entered allmulticast mode [ 496.758213][ T455] bond5: entered allmulticast mode [ 496.926588][ T474] can0: slcan on ptm0. [ 496.935655][ T478] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11588'. [ 496.965182][ T478] 8021q: adding VLAN 0 to HW filter on device bond7 [ 496.988837][ T474] can0 (unregistered): slcan off ptm0. [ 497.000698][ T474] Falling back ldisc for ptm0. [ 497.007247][ T478] vlan1: entered allmulticast mode [ 497.012519][ T478] bond7: entered allmulticast mode [ 497.042381][ T485] lo speed is unknown, defaulting to 1000 [ 497.196181][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 497.196205][ T29] audit: type=1107 audit(497.214:18985): pid=497 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 497.339449][ T508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11585'. [ 497.587541][ T513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=513 comm=syz.5.11600 [ 498.254301][ T536] lo speed is unknown, defaulting to 1000 [ 498.359320][ T548] xt_hashlimit: max too large, truncated to 1048576 [ 498.417718][ T561] loop7: detected capacity change from 0 to 128 [ 498.438995][ T561] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 498.445810][ T564] lo speed is unknown, defaulting to 1000 [ 498.577258][T14270] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 498.593300][ T29] audit: type=1326 audit(498.594:18986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=574 comm="syz.8.11613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 498.616265][ T29] audit: type=1326 audit(498.594:18987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=574 comm="syz.8.11613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 498.639208][ T29] audit: type=1326 audit(498.614:18988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=574 comm="syz.8.11613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 498.662262][ T29] audit: type=1326 audit(498.614:18989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=574 comm="syz.8.11613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 498.685250][ T29] audit: type=1326 audit(498.614:18990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=574 comm="syz.8.11613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 498.708376][ T29] audit: type=1326 audit(498.614:18991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=574 comm="syz.8.11613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 498.731313][ T29] audit: type=1326 audit(498.614:18992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=574 comm="syz.8.11613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 498.754279][ T29] audit: type=1326 audit(498.614:18993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=574 comm="syz.8.11613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 498.777236][ T29] audit: type=1326 audit(498.614:18994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=574 comm="syz.8.11613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 498.842182][ T582] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11615'. [ 498.882266][ T587] netlink: 'syz.8.11619': attribute type 1 has an invalid length. [ 498.944828][ T587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.966416][ T592] bond2: entered allmulticast mode [ 499.079265][ T601] netlink: 332 bytes leftover after parsing attributes in process `syz.8.11623'. [ 499.119468][ T604] loop7: detected capacity change from 0 to 128 [ 499.230776][ T609] loop7: detected capacity change from 0 to 128 [ 499.240663][ T609] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 499.258031][ T612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11622'. [ 499.471349][T14270] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 499.539880][ T620] loop7: detected capacity change from 0 to 128 [ 499.552247][ T620] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 499.565036][ T624] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11638'. [ 499.612870][ T629] lo speed is unknown, defaulting to 1000 [ 499.656592][ T634] xt_hashlimit: max too large, truncated to 1048576 [ 499.657848][T14270] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 499.742818][ T639] lo speed is unknown, defaulting to 1000 [ 499.804676][ T649] netlink: 332 bytes leftover after parsing attributes in process `syz.7.11637'. [ 499.948759][ T662] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11644'. [ 499.963408][ T663] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11639'. [ 500.822074][ T676] lo speed is unknown, defaulting to 1000 [ 500.861327][ T681] netlink: 'syz.2.11662': attribute type 4 has an invalid length. [ 500.979098][ T685] netlink: 'syz.2.11653': attribute type 1 has an invalid length. [ 501.006889][ T685] 8021q: adding VLAN 0 to HW filter on device bond6 [ 501.055070][ T685] bond6: entered allmulticast mode [ 501.097102][ T695] lo speed is unknown, defaulting to 1000 [ 501.901997][ T719] lo speed is unknown, defaulting to 1000 [ 501.925159][ T720] syzkaller0: entered promiscuous mode [ 501.930750][ T720] syzkaller0: entered allmulticast mode [ 501.980625][ T725] pimreg: entered allmulticast mode [ 502.026491][ T729] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11664'. [ 502.053583][ T725] pimreg: left allmulticast mode [ 502.089621][ T735] netlink: 'syz.8.11670': attribute type 4 has an invalid length. [ 502.197744][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 502.197763][ T29] audit: type=1326 audit(502.226:19066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.2.11671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 502.259578][ T29] audit: type=1326 audit(502.226:19067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.2.11671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 502.282778][ T29] audit: type=1326 audit(502.226:19068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.2.11671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 502.305701][ T29] audit: type=1326 audit(502.226:19069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.2.11671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 502.328761][ T29] audit: type=1326 audit(502.226:19070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.2.11671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 502.351790][ T29] audit: type=1326 audit(502.226:19071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.2.11671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 502.374906][ T29] audit: type=1326 audit(502.226:19072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.2.11671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 502.397901][ T29] audit: type=1326 audit(502.226:19073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.2.11671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 502.420869][ T29] audit: type=1326 audit(502.226:19074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.2.11671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 502.444066][ T29] audit: type=1326 audit(502.226:19075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.2.11671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 502.447620][ T740] netlink: 'syz.7.11672': attribute type 1 has an invalid length. [ 502.576470][ T740] 8021q: adding VLAN 0 to HW filter on device bond8 [ 502.628651][ T745] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 502.687710][ T752] loop8: detected capacity change from 0 to 128 [ 502.691725][ T745] bond8: (slave batadv1): making interface the new active one [ 502.739397][ T745] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 502.832937][ T752] bio_check_eod: 204 callbacks suppressed [ 502.833018][ T752] syz.8.11679: attempt to access beyond end of device [ 502.833018][ T752] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 502.893263][ T752] syz.8.11679: attempt to access beyond end of device [ 502.893263][ T752] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 502.936210][ T752] syz.8.11679: attempt to access beyond end of device [ 502.936210][ T752] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 503.119139][ T776] netlink: 'syz.3.11687': attribute type 4 has an invalid length. [ 503.349613][ T805] loop7: detected capacity change from 0 to 128 [ 503.430710][ T811] pimreg: entered allmulticast mode [ 503.450474][ T811] pimreg: left allmulticast mode [ 503.470051][ T812] loop8: detected capacity change from 0 to 1024 [ 503.486322][ T812] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 503.510726][ T805] syz.7.11699: attempt to access beyond end of device [ 503.510726][ T805] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 503.520863][ T812] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.11701: lblock 2 mapped to illegal pblock 2 (length 1) [ 503.524973][ T805] syz.7.11699: attempt to access beyond end of device [ 503.524973][ T805] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 503.552221][ T805] syz.7.11699: attempt to access beyond end of device [ 503.552221][ T805] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 503.566090][ T805] syz.7.11699: attempt to access beyond end of device [ 503.566090][ T805] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 503.568340][ T812] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.11701: lblock 0 mapped to illegal pblock 48 (length 1) [ 503.579704][ T805] syz.7.11699: attempt to access beyond end of device [ 503.579704][ T805] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 503.607841][ T805] syz.7.11699: attempt to access beyond end of device [ 503.607841][ T805] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 503.621429][ T805] syz.7.11699: attempt to access beyond end of device [ 503.621429][ T805] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 503.637799][ T812] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.11701: Failed to acquire dquot type 0 [ 503.664356][ T812] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 503.674167][ T812] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.11701: mark_inode_dirty error [ 503.677251][ T822] netlink: 'syz.5.11703': attribute type 4 has an invalid length. [ 503.700683][ T812] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 503.711273][ T812] EXT4-fs (loop8): 1 orphan inode deleted [ 503.717929][ T812] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.730368][ T8685] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:56: lblock 1 mapped to illegal pblock 1 (length 1) [ 503.765030][ T8685] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:56: Failed to release dquot type 0 [ 503.804326][T21704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.825624][ T8683] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:54: lblock 1 mapped to illegal pblock 1 (length 1) [ 503.858630][ T8683] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:54: Failed to release dquot type 0 [ 503.882119][T21704] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 503.890454][ T845] pimreg: entered allmulticast mode [ 503.906325][T21704] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 503.916306][T21704] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 503.960186][ T845] pimreg: left allmulticast mode [ 504.248689][ T879] netlink: 'syz.5.11727': attribute type 1 has an invalid length. [ 504.291140][ T879] 8021q: adding VLAN 0 to HW filter on device bond7 [ 504.338012][ T889] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 504.355173][ T889] bond7: (slave batadv1): making interface the new active one [ 504.380388][ T889] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 504.465805][ T902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11735'. [ 504.474917][ T902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11735'. [ 504.712501][ T928] bridge0: entered promiscuous mode [ 504.718603][ T928] bridge0: left promiscuous mode [ 505.038184][ T958] loop7: detected capacity change from 0 to 512 [ 505.298469][ T975] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 505.298469][ T975] program syz.7.11769 not setting count and/or reply_len properly [ 505.394172][ T983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11767'. [ 505.443331][ T982] loop7: detected capacity change from 0 to 1024 [ 505.458722][ T982] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 505.561373][ T982] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.11771: lblock 2 mapped to illegal pblock 2 (length 1) [ 505.577062][ T988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11772'. [ 505.606915][ T982] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.11771: lblock 0 mapped to illegal pblock 48 (length 1) [ 505.639562][ T988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11772'. [ 505.642834][ T982] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.11771: Failed to acquire dquot type 0 [ 505.664469][ T982] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 505.689736][ T982] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.11771: mark_inode_dirty error [ 505.719014][ T982] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 505.736269][ T982] EXT4-fs (loop7): 1 orphan inode deleted [ 505.749654][ T982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.762823][ T7272] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 505.779621][ T997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11775'. [ 505.788750][ T997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11775'. [ 505.789468][ T7272] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:28: Failed to release dquot type 0 [ 505.837466][T14270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.849694][ T7272] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 505.864164][ T7272] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:28: Failed to release dquot type 0 [ 505.876146][T14270] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 505.894857][T14270] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 505.915945][T14270] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 505.936808][ T1014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11780'. [ 506.048285][ T1028] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11787'. [ 506.070091][ T1026] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11786'. [ 506.096208][ T1028] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11787'. [ 506.118361][ T1026] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11786'. [ 506.330799][ T1054] bridge0: entered promiscuous mode [ 506.342737][ T1054] bridge0: left promiscuous mode [ 507.224782][ T1132] bridge0: entered promiscuous mode [ 507.230714][ T1132] bridge0: left promiscuous mode [ 507.236385][ T1130] netlink: 'syz.3.11833': attribute type 10 has an invalid length. [ 507.244842][ T1130] netlink: 'syz.3.11833': attribute type 10 has an invalid length. [ 508.102896][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 508.102912][ T29] audit: type=1400 audit(508.129:19220): avc: denied { create } for pid=1167 comm="syz.7.11834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 508.131345][ T29] audit: type=1400 audit(508.139:19221): avc: denied { bind } for pid=1167 comm="syz.7.11834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 508.417162][ T29] audit: type=1326 audit(508.449:19222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1190 comm="syz.2.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 508.440301][ T29] audit: type=1326 audit(508.449:19223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1190 comm="syz.2.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 508.463564][ T29] audit: type=1326 audit(508.449:19224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1190 comm="syz.2.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 508.503602][ T29] audit: type=1326 audit(508.519:19225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1190 comm="syz.2.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 508.541231][ T29] audit: type=1326 audit(508.559:19226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1190 comm="syz.2.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 508.564442][ T29] audit: type=1326 audit(508.559:19227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1190 comm="syz.2.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 508.587457][ T29] audit: type=1326 audit(508.559:19228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1190 comm="syz.2.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 508.610524][ T29] audit: type=1326 audit(508.559:19229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1190 comm="syz.2.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38e6b3f749 code=0x7ffc0000 [ 509.408971][ T1259] bridge0: entered promiscuous mode [ 509.440278][ T1259] bridge0: left promiscuous mode [ 509.510191][ T1261] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 509.571255][ T1264] netlink: 'syz.3.11871': attribute type 10 has an invalid length. [ 509.800293][ T1291] loop7: detected capacity change from 0 to 512 [ 509.807513][ T1291] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 509.826469][ T1291] EXT4-fs (loop7): 1 truncate cleaned up [ 509.833557][ T1291] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.936454][T14270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.197367][ T1340] vcan0: entered allmulticast mode [ 510.209862][ T1340] vcan0: left allmulticast mode [ 510.284772][ T1346] loop8: detected capacity change from 0 to 2048 [ 510.316872][ T1346] Alternate GPT is invalid, using primary GPT. [ 510.323643][ T1346] loop8: p2 p3 p7 [ 510.371542][ T1356] netlink: '+}[@': attribute type 10 has an invalid length. [ 510.695856][ T1383] __nla_validate_parse: 30 callbacks suppressed [ 510.695871][ T1383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11920'. [ 510.802353][ T1390] tipc: Enabling of bearer rejected, failed to enable media [ 510.979316][ T1410] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.11926'. [ 510.988772][ T1410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11926'. [ 511.065097][ T1414] syzkaller0: entered allmulticast mode [ 511.074620][ T1414] syzkaller0 (unregistering): left allmulticast mode [ 511.136833][ T1420] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11935'. [ 511.180212][ T1424] wg2: entered promiscuous mode [ 511.185152][ T1424] wg2: entered allmulticast mode [ 511.223583][ T1431] loop7: detected capacity change from 0 to 1024 [ 511.243912][ T1431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 511.320678][ T1439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11942'. [ 511.388561][ T1443] netlink: 148 bytes leftover after parsing attributes in process `syz.8.11944'. [ 511.468058][ T7281] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm kworker/u8:36: lblock 0 mapped to illegal pblock 0 (length 6) [ 511.491750][ T7281] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 511.504086][ T7281] EXT4-fs (loop7): This should not happen!! Data will be lost [ 511.504086][ T7281] [ 511.521009][ T7281] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:36: lblock 8 mapped to illegal pblock 8 (length 8) [ 511.537883][ T7281] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 511.543576][ T1452] veth0_vlan: entered allmulticast mode [ 511.550490][ T7281] EXT4-fs (loop7): This should not happen!! Data will be lost [ 511.550490][ T7281] [ 511.588217][T14270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 511.719323][ T1474] bridge: RTM_NEWNEIGH with invalid ether address [ 511.794987][ T1483] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11961'. [ 511.903914][ T1498] netlink: 131740 bytes leftover after parsing attributes in process `syz.8.11969'. [ 511.932134][ T1498] netlink: zone id is out of range [ 511.937322][ T1498] netlink: zone id is out of range [ 511.954905][ T1498] netlink: zone id is out of range [ 511.962198][ T1498] netlink: zone id is out of range [ 511.967922][ T1503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11971'. [ 511.972450][ T1498] netlink: zone id is out of range [ 511.982278][ T1498] netlink: zone id is out of range [ 512.012470][ T1498] netlink: zone id is out of range [ 512.021255][ T1498] netlink: del zone limit has 8 unknown bytes [ 512.149006][ T1510] netlink: 45 bytes leftover after parsing attributes in process `syz.5.11974'. [ 512.359081][ T1569] tipc: Bearer : already 2 bearers with priority 10 [ 512.366576][ T1569] tipc: Bearer : trying with adjusted priority [ 512.383050][ T1569] tipc: New replicast peer: 255.255.255.255 [ 512.389400][ T1569] tipc: Enabled bearer , priority 9 [ 513.188622][ T1615] bond2: (slave macvlan1): Releasing active interface [ 513.260382][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 513.260401][ T29] audit: type=1326 audit(513.282:19444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.12012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 513.290284][ T29] audit: type=1326 audit(513.282:19445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.12012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 513.313506][ T29] audit: type=1326 audit(513.282:19446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.12012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 513.336603][ T29] audit: type=1326 audit(513.282:19447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.12012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 513.359997][ T29] audit: type=1326 audit(513.282:19448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.12012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 513.383132][ T29] audit: type=1326 audit(513.282:19449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.12012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc6df1f783 code=0x7ffc0000 [ 513.406048][ T29] audit: type=1326 audit(513.302:19450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.12012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbc6df1e1ff code=0x7ffc0000 [ 513.429456][ T29] audit: type=1326 audit(513.302:19451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.12012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbc6df1f7d7 code=0x7ffc0000 [ 513.452403][ T29] audit: type=1326 audit(513.322:19452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.12012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc6df1df90 code=0x7ffc0000 [ 513.475628][ T29] audit: type=1326 audit(513.322:19453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.12012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbc6df1e3aa code=0x7ffc0000 [ 513.563872][ T1635] netlink: 'syz.8.12017': attribute type 12 has an invalid length. [ 514.480054][T26700] Bluetooth: hci0: command 0x1003 tx timeout [ 514.480300][ T4953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 514.557349][ T1705] tipc: New replicast peer: 255.255.255.255 [ 514.563490][ T1705] tipc: Enabled bearer , priority 10 [ 514.653693][ T1715] netlink: 'syz.2.12054': attribute type 12 has an invalid length. [ 514.894229][ T1750] netlink: zone id is out of range [ 514.899419][ T1750] netlink: zone id is out of range [ 514.932362][ T1750] netlink: zone id is out of range [ 514.949904][ T1750] netlink: zone id is out of range [ 514.959827][ T1750] netlink: zone id is out of range [ 514.965090][ T1750] netlink: zone id is out of range [ 515.110067][ T1750] netlink: zone id is out of range [ 515.139955][ T1750] netlink: del zone limit has 8 unknown bytes [ 515.230821][ T1760] lo speed is unknown, defaulting to 1000 [ 515.268652][ T1770] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 515.784736][ T4633] tipc: Node number set to 643083791 [ 516.005063][ T1801] pim6reg1: entered promiscuous mode [ 516.010467][ T1801] pim6reg1: entered allmulticast mode [ 516.150494][ T1808] __nla_validate_parse: 40 callbacks suppressed [ 516.150517][ T1808] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12092'. [ 516.199872][ T1805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12091'. [ 516.340855][ T1818] wg2: entered promiscuous mode [ 516.345798][ T1818] wg2: entered allmulticast mode [ 516.586939][ T1837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12103'. [ 516.703161][ T1845] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12106'. [ 516.743014][ T1847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12108'. [ 516.770829][ T1852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12109'. [ 516.924194][ T1862] syzkaller0: entered allmulticast mode [ 516.932825][ T1862] syzkaller0 (unregistering): left allmulticast mode [ 516.968558][ T1865] netlink: 'syz.5.12115': attribute type 1 has an invalid length. [ 516.990812][ T1865] bond8: (slave bridge0): making interface the new active one [ 516.998657][ T1865] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 517.033465][ T1871] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 517.059007][ T1873] netlink: 'syz.8.12118': attribute type 10 has an invalid length. [ 517.068709][ T1873] netlink: 'syz.8.12118': attribute type 10 has an invalid length. [ 517.078358][ T1873] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 517.330039][ T1884] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.12122'. [ 517.339514][ T1884] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12122'. [ 517.941644][ T1893] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12124'. [ 518.099227][ T1916] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 518.523484][ T1940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12145'. [ 519.027312][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 519.027329][ T29] audit: type=1326 audit(519.054:19669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.3.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 519.069704][ T1952] tipc: Enabled bearer , priority 0 [ 519.070289][ T29] audit: type=1326 audit(519.094:19670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.3.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 519.099523][ T29] audit: type=1326 audit(519.094:19671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.3.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc6df1f783 code=0x7ffc0000 [ 519.122404][ T29] audit: type=1326 audit(519.094:19672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.3.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc6df1f783 code=0x7ffc0000 [ 519.145311][ T29] audit: type=1326 audit(519.094:19673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.3.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 519.168318][ T29] audit: type=1326 audit(519.094:19674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.3.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 519.191406][ T29] audit: type=1326 audit(519.094:19675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.3.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 519.214446][ T29] audit: type=1326 audit(519.094:19676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.3.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 519.237858][ T29] audit: type=1326 audit(519.094:19677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.3.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 519.260850][ T29] audit: type=1326 audit(519.094:19678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.3.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 519.285803][ T1952] tipc: Disabling bearer [ 519.317623][ T1957] netlink: 'syz.2.12151': attribute type 1 has an invalid length. [ 519.353363][ T1957] bond7: (slave bridge18): making interface the new active one [ 519.361365][ T1957] bond7: (slave bridge18): Enslaving as an active interface with an up link [ 520.010800][ T1990] bridge0: entered promiscuous mode [ 520.016555][ T1990] bridge0: left promiscuous mode [ 520.143209][ T2001] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 520.719994][ T2020] lo speed is unknown, defaulting to 1000 [ 520.867476][ T2029] bridge0: entered promiscuous mode [ 520.884352][ T2029] bridge0: left promiscuous mode [ 521.159102][ T2034] loop7: detected capacity change from 0 to 1024 [ 521.188991][ T2034] EXT4-fs: Ignoring removed bh option [ 521.196452][ T2034] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 521.216511][ T2034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.257979][T14270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.597939][ T2066] lo: Caught tx_queue_len zero misconfig [ 521.679227][ T7287] Bluetooth: hci0: Frame reassembly failed (-84) [ 521.848143][ T2092] bridge: RTM_NEWNEIGH with invalid ether address [ 522.020672][ T2111] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12214'. [ 522.060919][ T2111] team2: entered promiscuous mode [ 522.066151][ T2111] team2: entered allmulticast mode [ 522.082727][ T2111] 8021q: adding VLAN 0 to HW filter on device team2 [ 522.139474][ T2118] syzkaller0: entered allmulticast mode [ 522.156841][ T2118] syzkaller0: entered promiscuous mode [ 522.169265][ T2118] syzkaller0 (unregistering): left allmulticast mode [ 522.176012][ T2118] syzkaller0 (unregistering): left promiscuous mode [ 522.224147][ T2120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=2120 comm=syz.8.12218 [ 522.238027][ T2120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=2120 comm=syz.8.12218 [ 522.266978][ T2120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=2120 comm=syz.8.12218 [ 522.296152][ T2120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=2120 comm=syz.8.12218 [ 522.326151][ T2120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=2120 comm=syz.8.12218 [ 522.342771][ T2120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=2120 comm=syz.8.12218 [ 522.369802][ T2120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=2120 comm=syz.8.12218 [ 522.404803][ T2120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=2120 comm=syz.8.12218 [ 522.436084][ T2120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=2120 comm=syz.8.12218 [ 522.449314][ T2120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=2120 comm=syz.8.12218 [ 523.248896][ T2179] netlink: 'syz.3.12243': attribute type 1 has an invalid length. [ 523.264008][ T2179] 8021q: adding VLAN 0 to HW filter on device bond6 [ 523.285055][ T2179] 8021q: adding VLAN 0 to HW filter on device bond6 [ 523.292751][ T2179] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 523.304338][ T2179] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 523.745773][T26700] Bluetooth: hci0: command 0x1003 tx timeout [ 523.752128][ T4953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 523.824883][ T2222] smc: net device hsr0 applied user defined pnetid SYZ2 [ 523.832786][ T2222] smc: net device hsr0 erased user defined pnetid SYZ2 [ 524.142361][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 524.142445][ T29] audit: type=1326 audit(524.177:19809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 524.235146][ T29] audit: type=1326 audit(524.177:19810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 524.258482][ T29] audit: type=1326 audit(524.207:19811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 524.281605][ T29] audit: type=1326 audit(524.207:19812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 524.304782][ T29] audit: type=1326 audit(524.207:19813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 524.327969][ T29] audit: type=1326 audit(524.217:19814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 524.351150][ T29] audit: type=1326 audit(524.217:19815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 524.374322][ T29] audit: type=1326 audit(524.217:19816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 524.397418][ T29] audit: type=1326 audit(524.227:19817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 524.420472][ T29] audit: type=1326 audit(524.227:19818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 524.637707][ T2255] netlink: 96 bytes leftover after parsing attributes in process `syz.8.12274'. [ 524.689972][ T2260] lo: left promiscuous mode [ 524.695419][ T2260] ip6tnl0: left promiscuous mode [ 524.700442][ T2260] ip6tnl0: left allmulticast mode [ 524.747498][ T2260] veth0_vlan: left allmulticast mode [ 524.765336][ T2260] bond2: left allmulticast mode [ 524.797624][ T2260] team2: left promiscuous mode [ 524.802453][ T2260] team2: left allmulticast mode [ 524.834133][ T2266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12279'. [ 525.561664][ T2297] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12291'. [ 525.584545][ T4647] page_pool_release_retry() stalled pool shutdown: id 165, 50 inflight 302 sec [ 525.800246][ T2301] veth40: entered promiscuous mode [ 525.805449][ T2301] veth40: entered allmulticast mode [ 526.120462][ T2317] netlink: 'syz.5.12301': attribute type 12 has an invalid length. [ 526.741636][ T2351] lo speed is unknown, defaulting to 1000 [ 527.166556][ T2385] tipc: Enabling of bearer rejected, already enabled [ 527.198009][ T2385] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 527.515105][ T2417] loop8: detected capacity change from 0 to 128 [ 527.536470][ T2417] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 527.544374][ T2417] FAT-fs (loop8): Filesystem has been set read-only [ 527.563083][ T2417] bio_check_eod: 93 callbacks suppressed [ 527.563103][ T2417] syz.8.12344: attempt to access beyond end of device [ 527.563103][ T2417] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 527.599222][ T2419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12345'. [ 527.616401][ T2417] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 527.624440][ T2417] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 527.632804][ T2422] syz.8.12344: attempt to access beyond end of device [ 527.632804][ T2422] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 527.646239][ T2422] buffer_io_error: 19 callbacks suppressed [ 527.646253][ T2422] Buffer I/O error on dev loop8, logical block 2065, async page read [ 527.701940][ T2422] syz.8.12344: attempt to access beyond end of device [ 527.701940][ T2422] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 527.715452][ T2422] Buffer I/O error on dev loop8, logical block 2066, async page read [ 527.757228][ T2422] syz.8.12344: attempt to access beyond end of device [ 527.757228][ T2422] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 527.770656][ T2422] Buffer I/O error on dev loop8, logical block 2067, async page read [ 527.779319][ T2429] lo speed is unknown, defaulting to 1000 [ 527.789934][ T2427] lo: Caught tx_queue_len zero misconfig [ 527.816024][ T2422] syz.8.12344: attempt to access beyond end of device [ 527.816024][ T2422] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 527.829423][ T2422] Buffer I/O error on dev loop8, logical block 2068, async page read [ 527.865347][ T2422] syz.8.12344: attempt to access beyond end of device [ 527.865347][ T2422] loop8: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 527.878742][ T2422] Buffer I/O error on dev loop8, logical block 2069, async page read [ 527.909182][ T2422] syz.8.12344: attempt to access beyond end of device [ 527.909182][ T2422] loop8: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 527.922814][ T2422] Buffer I/O error on dev loop8, logical block 2070, async page read [ 527.953105][ T2422] syz.8.12344: attempt to access beyond end of device [ 527.953105][ T2422] loop8: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 527.966538][ T2422] Buffer I/O error on dev loop8, logical block 2071, async page read [ 528.027616][ T2422] syz.8.12344: attempt to access beyond end of device [ 528.027616][ T2422] loop8: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 528.041101][ T2422] Buffer I/O error on dev loop8, logical block 2072, async page read [ 528.050454][ T2417] syz.8.12344: attempt to access beyond end of device [ 528.050454][ T2417] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 528.063988][ T2417] Buffer I/O error on dev loop8, logical block 2065, async page read [ 528.093271][ T2417] Buffer I/O error on dev loop8, logical block 2066, async page read [ 528.120544][ T2437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12352'. [ 528.330088][ T2445] xt_TPROXY: Can be used only with -p tcp or -p udp [ 528.375442][ T2447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12355'. [ 528.450766][ T2451] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12357'. [ 528.637377][ T2464] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12363'. [ 528.676845][ T2465] veth24: entered promiscuous mode [ 528.682093][ T2465] veth24: entered allmulticast mode [ 528.735483][ T2464] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12363'. [ 528.779721][ T2464] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12363'. [ 528.814243][ T2464] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12363'. [ 529.279035][ T2486] loop8: detected capacity change from 0 to 8192 [ 529.310997][ T2496] bridge: RTM_NEWNEIGH with invalid ether address [ 529.333366][ T2486] loop8: p1 p2 p3 p4 [ 529.342707][ T2486] loop8: p3 start 331777 is beyond EOD, truncated [ 529.349175][ T2486] loop8: p4 size 262144 extends beyond EOD, truncated [ 529.437608][ T2504] syzkaller0: entered allmulticast mode [ 529.444254][ T2504] syzkaller0: entered promiscuous mode [ 529.452601][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 529.452616][ T29] audit: type=1326 audit(529.480:20148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2505 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 529.452673][ T2504] syzkaller0 (unregistering): left allmulticast mode [ 529.452695][ T2504] syzkaller0 (unregistering): left promiscuous mode [ 529.503350][ T29] audit: type=1326 audit(529.540:20149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2505 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 529.526430][ T29] audit: type=1326 audit(529.540:20150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2505 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 529.549931][ T29] audit: type=1326 audit(529.590:20151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2505 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 529.573013][ T29] audit: type=1326 audit(529.590:20152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2505 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 529.606064][ T2508] veth10: entered promiscuous mode [ 529.611274][ T2508] veth10: entered allmulticast mode [ 529.648957][ T29] audit: type=1400 audit(529.680:20153): avc: denied { ioctl } for pid=2510 comm="syz.2.12380" path="socket:[114048]" dev="sockfs" ino=114048 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 529.747725][ T2524] netlink: 176 bytes leftover after parsing attributes in process `syz.8.12384'. [ 530.123187][ T29] audit: type=1326 audit(530.090:20154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.8.12394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 530.146358][ T29] audit: type=1326 audit(530.100:20155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.8.12394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 530.169388][ T29] audit: type=1326 audit(530.150:20156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.8.12394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 530.192555][ T29] audit: type=1326 audit(530.150:20157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.8.12394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 530.286938][ T2558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12399'. [ 530.357061][ T2563] netlink: 'syz.3.12401': attribute type 3 has an invalid length. [ 530.558335][ T2572] netlink: 'syz.5.12406': attribute type 1 has an invalid length. [ 530.589663][ T2572] bond9: entered promiscuous mode [ 530.595064][ T2572] bond9: entered allmulticast mode [ 530.695346][ T2572] 8021q: adding VLAN 0 to HW filter on device bond9 [ 530.722133][ T2574] veth43: entered promiscuous mode [ 530.727554][ T2574] veth43: entered allmulticast mode [ 530.748917][ T2574] bond9: (slave veth43): Enslaving as a backup interface with a down link [ 530.958560][ T2580] lo speed is unknown, defaulting to 1000 [ 531.294561][ T2595] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 531.301421][ T2595] sch_fq: defrate 8 ignored. [ 531.306633][ T2598] netlink: 'syz.8.12415': attribute type 1 has an invalid length. [ 531.349395][ T2598] 8021q: adding VLAN 0 to HW filter on device bond3 [ 531.368618][ T2597] team0: entered promiscuous mode [ 531.373872][ T2597] team0: entered allmulticast mode [ 531.379556][ T2597] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.398862][ T2598] 8021q: adding VLAN 0 to HW filter on device bond3 [ 531.417016][ T2598] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 531.440344][ T2598] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 531.615599][ T2615] netlink: 'syz.8.12422': attribute type 1 has an invalid length. [ 531.716504][ T2615] 8021q: adding VLAN 0 to HW filter on device bond4 [ 531.734973][ T2619] bond4 (unregistering): Released all slaves [ 532.056358][ T2633] team2: entered promiscuous mode [ 532.061831][ T2633] team2: entered allmulticast mode [ 532.067458][ T2633] 8021q: adding VLAN 0 to HW filter on device team2 [ 532.679956][ T2691] __nla_validate_parse: 14 callbacks suppressed [ 532.679975][ T2691] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12450'. [ 532.710417][ T2691] hsr_slave_1 (unregistering): left promiscuous mode [ 532.788282][ T2697] loop8: detected capacity change from 0 to 512 [ 532.805126][ T2697] EXT4-fs error (device loop8): __ext4_iget:5443: inode #2: block 67108864: comm syz.8.12453: invalid block [ 532.829504][ T2697] EXT4-fs (loop8): get root inode failed [ 532.835362][ T2697] EXT4-fs (loop8): mount failed [ 533.175512][ T2711] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12458'. [ 533.198495][ T2711] hsr_slave_0: left promiscuous mode [ 533.215603][ T2711] hsr_slave_1: left promiscuous mode [ 533.802572][ T2725] veth24: entered promiscuous mode [ 533.807766][ T2725] veth24: entered allmulticast mode [ 533.814915][ T2727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12464'. [ 533.963188][ T2742] selinux_netlink_send: 53 callbacks suppressed [ 533.969585][ T2742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2742 comm=syz.8.12466 [ 534.200631][ T2762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12469'. [ 534.238995][ T2762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12469'. [ 535.444311][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 535.444330][ T29] audit: type=1326 audit(535.483:20438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2903 comm="syz.3.12484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 535.509521][ T29] audit: type=1326 audit(535.483:20439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2903 comm="syz.3.12484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 535.532816][ T29] audit: type=1326 audit(535.483:20440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2903 comm="syz.3.12484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 535.555942][ T29] audit: type=1326 audit(535.523:20441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2903 comm="syz.3.12484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 535.579024][ T29] audit: type=1326 audit(535.523:20442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2903 comm="syz.3.12484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 535.602126][ T29] audit: type=1326 audit(535.543:20443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2903 comm="syz.3.12484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 535.625255][ T29] audit: type=1326 audit(535.543:20444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2903 comm="syz.3.12484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 535.783565][ T29] audit: type=1326 audit(535.553:20445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2903 comm="syz.3.12484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 535.806644][ T29] audit: type=1326 audit(535.553:20446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2903 comm="syz.3.12484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 535.829660][ T29] audit: type=1326 audit(535.723:20447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2903 comm="syz.3.12484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6df1f749 code=0x7ffc0000 [ 535.960402][ T2921] wireguard0: entered promiscuous mode [ 535.966056][ T2921] wireguard0: entered allmulticast mode [ 536.063611][ T2933] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12495'. [ 537.011091][ T2958] loop8: detected capacity change from 0 to 128 [ 537.594151][ T2996] veth26: entered promiscuous mode [ 537.599506][ T2996] veth26: entered allmulticast mode [ 538.225789][ T3014] wg2: left promiscuous mode [ 538.230487][ T3014] wg2: left allmulticast mode [ 538.245500][ T3014] wg2: entered promiscuous mode [ 538.250497][ T3014] wg2: entered allmulticast mode [ 538.294839][ T3016] loop8: detected capacity change from 0 to 4096 [ 538.308201][ T3018] netlink: 'syz.5.12529': attribute type 7 has an invalid length. [ 538.316083][ T3018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12529'. [ 538.336243][ T3016] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.405028][ T3023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12530'. [ 538.446421][ T3023] ip6gre6: entered allmulticast mode [ 538.967533][T21704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.113921][ T3063] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 539.122726][ T3063] ref_ctr increment failed for inode: 0x2f17 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810a136780 [ 539.168178][ T3067] netlink: 'syz.8.12545': attribute type 7 has an invalid length. [ 539.176066][ T3067] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12545'. [ 539.198890][ T3065] lo speed is unknown, defaulting to 1000 [ 539.532846][ T3075] lo speed is unknown, defaulting to 1000 [ 539.577961][ T4630] page_pool_release_retry() stalled pool shutdown: id 177, 50 inflight 302 sec [ 539.641528][ T3094] rdma_op ffff888133fe3180 conn xmit_rdma 0000000000000000 [ 539.659440][ T3097] netlink: 'syz.8.12554': attribute type 4 has an invalid length. [ 539.713240][ T3102] netlink: 'syz.3.12556': attribute type 1 has an invalid length. [ 539.754213][ T3102] 8021q: adding VLAN 0 to HW filter on device bond7 [ 539.771267][ T3075] chnl_net:caif_netlink_parms(): no params data found [ 539.787464][ T3102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12556'. [ 539.791679][ T3108] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12557'. [ 539.814862][ T3102] bond7 (unregistering): Released all slaves [ 539.835006][ T3108] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12557'. [ 539.884115][ T3075] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.891580][ T3075] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.901036][ T3075] bridge_slave_0: entered allmulticast mode [ 539.908032][ T3075] bridge_slave_0: entered promiscuous mode [ 539.923086][ T3075] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.930404][ T3075] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.937886][ T3075] bridge_slave_1: entered allmulticast mode [ 539.944598][ T3075] bridge_slave_1: entered promiscuous mode [ 539.960767][ T3124] netlink: 'syz.3.12559': attribute type 12 has an invalid length. [ 539.989295][ T3075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.003223][ T3075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.033724][ T3075] team0: Port device team_slave_0 added [ 540.040703][ T3075] team0: Port device team_slave_1 added [ 540.078235][ T3075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.085221][ T3075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.111404][ T3075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.124472][ T3075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.131477][ T3075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.157468][ T3075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.189356][ T3075] hsr_slave_0: entered promiscuous mode [ 540.195475][ T3075] hsr_slave_1: entered promiscuous mode [ 540.305325][ T3145] lo speed is unknown, defaulting to 1000 [ 540.349116][ T3075] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 540.363820][ T3075] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 540.379268][ T3075] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 540.396557][ T3075] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 540.429441][ T3075] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.436561][ T3075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.444081][ T3075] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.451241][ T3075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.524679][ T3075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.562403][ T3075] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.582630][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.629484][ T7265] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.636625][ T7265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.819690][ T3183] hugetlbfs: syz.5.12577 (3183): Using mlock ulimits for SHM_HUGETLB is obsolete [ 540.889767][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 540.889785][ T29] audit: type=1326 audit(540.935:20763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3189 comm="syz.5.12578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 540.919145][ T29] audit: type=1326 audit(540.935:20764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3189 comm="syz.5.12578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 540.954205][ T3075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.964773][ T29] audit: type=1326 audit(540.935:20765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3189 comm="syz.5.12578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 540.987931][ T29] audit: type=1326 audit(540.935:20766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3189 comm="syz.5.12578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 541.011143][ T29] audit: type=1326 audit(540.935:20767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3189 comm="syz.5.12578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 541.034491][ T29] audit: type=1326 audit(540.935:20768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3189 comm="syz.5.12578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 541.057554][ T29] audit: type=1326 audit(540.935:20769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3189 comm="syz.5.12578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 541.080574][ T29] audit: type=1326 audit(540.935:20770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3189 comm="syz.5.12578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe13f749 code=0x7ffc0000 [ 541.226939][ T29] audit: type=1326 audit(541.266:20771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.8.12585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 541.250121][ T29] audit: type=1326 audit(541.266:20772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.8.12585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6553aef749 code=0x7ffc0000 [ 541.305008][ T3222] netlink: 'syz.2.12589': attribute type 4 has an invalid length. [ 541.317216][ T3224] syzkaller0: entered allmulticast mode [ 541.326839][ T3224] syzkaller0: entered promiscuous mode [ 541.342706][ T3228] loop8: detected capacity change from 0 to 2048 [ 541.349568][ T3224] syzkaller0 (unregistering): left allmulticast mode [ 541.356308][ T3224] syzkaller0 (unregistering): left promiscuous mode [ 541.356963][ T3230] netlink: 'syz.2.12589': attribute type 4 has an invalid length. [ 541.378202][ T3228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.394730][ T3228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.403467][ T3228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.490100][ T3075] veth0_vlan: entered promiscuous mode [ 541.512210][ T3075] veth1_vlan: entered promiscuous mode [ 541.531987][ T3075] veth0_macvtap: entered promiscuous mode [ 541.541875][ T3075] veth1_macvtap: entered promiscuous mode [ 541.553691][ T3075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.578284][ T3075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.594977][ T7276] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.625035][ T7276] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.646986][ T7276] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.673863][ T7276] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.787161][ T3265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12602'. [ 541.828677][ T3265] sch_tbf: burst 88 is lower than device veth29 mtu (1514) ! [ 541.847184][ T3270] bridge0: entered promiscuous mode [ 541.857850][ T3270] bridge0: left promiscuous mode [ 542.010046][T21704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.071052][ T3287] rdma_op ffff88811956dd80 conn xmit_rdma 0000000000000000 [ 542.151371][ T3297] netlink: 'syz.8.12615': attribute type 1 has an invalid length. [ 542.159361][ T3297] netlink: 224 bytes leftover after parsing attributes in process `syz.8.12615'. [ 542.235774][ T3312] loop8: detected capacity change from 0 to 512 [ 542.261170][ T3312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.286633][ T3317] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 542.330615][T21704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.336200][ T3322] loop9: detected capacity change from 0 to 2048 [ 542.360602][ T3322] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.378784][ T3322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.387768][ T3322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.963232][ T3075] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.978608][ T3365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12637'. [ 543.022819][ T3365] netlink: 236 bytes leftover after parsing attributes in process `syz.3.12637'. [ 543.083614][ T3376] ip6gretap0: entered promiscuous mode [ 543.096778][ T3376] ip6gretap0 (unregistering): left promiscuous mode [ 543.179309][ T3381] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3381 comm=syz.2.12639 [ 543.197602][ T3384] netlink: 'syz.3.12641': attribute type 12 has an invalid length. [ 543.404184][ T3410] netlink: 'syz.3.12659': attribute type 1 has an invalid length. [ 543.478590][ T3410] bond7: (slave bridge16): making interface the new active one [ 543.525136][ T3410] bond7: (slave bridge16): Enslaving as an active interface with an up link [ 543.646716][ T3431] __nla_validate_parse: 1 callbacks suppressed [ 543.646734][ T3431] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12654'. [ 543.802068][ T3451] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12660'. [ 543.950405][ T3461] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12674'. [ 543.959612][ T3461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12674'. [ 544.002658][ T3461] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12674'. [ 544.011799][ T3461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12674'. [ 544.111476][ T3468] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 544.120410][ T3468] ref_ctr increment failed for inode: 0x148b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810a1361c0 [ 544.312241][ T3489] loop9: detected capacity change from 0 to 512 [ 544.319696][ T3489] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 544.404412][ T3507] netlink: 'syz.9.12682': attribute type 12 has an invalid length. [ 544.501034][ T3518] netlink: 256 bytes leftover after parsing attributes in process `syz.9.12686'. [ 544.510457][ T3518] netlink: 64 bytes leftover after parsing attributes in process `syz.9.12686'. [ 544.988917][ T3565] netlink: 'syz.8.12696': attribute type 7 has an invalid length. [ 544.996882][ T3565] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12696'. [ 545.164670][ T3578] $Hÿ: renamed from bond0 [ 545.172313][ T3578] $Hÿ: entered promiscuous mode [ 545.182234][ T3578] dummy0: entered promiscuous mode [ 545.279757][ T3594] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12702'. [ 545.298133][ T3594] vlan2: entered allmulticast mode [ 545.303478][ T3594] vlan1: entered allmulticast mode [ 545.308744][ T3594] veth0_vlan: entered allmulticast mode [ 545.952998][ T3680] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 546.077098][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 546.077117][ T29] audit: type=1400 audit(546.128:20946): avc: denied { mounton } for pid=3691 comm="syz.9.12716" path="/32/file0" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 546.257722][ T29] audit: type=1400 audit(546.308:20947): avc: denied { ioctl } for pid=3713 comm="syz.9.12720" path="socket:[117446]" dev="sockfs" ino=117446 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 546.292117][ T3715] syzkaller0: entered allmulticast mode [ 546.311274][ T3715] syzkaller0: entered promiscuous mode [ 546.336359][ T3715] syzkaller0 (unregistering): left allmulticast mode [ 546.343149][ T3715] syzkaller0 (unregistering): left promiscuous mode [ 546.353636][ T29] audit: type=1400 audit(546.368:20948): avc: denied { create } for pid=3719 comm="syz.2.12723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.372857][ T29] audit: type=1400 audit(546.378:20949): avc: denied { setopt } for pid=3719 comm="syz.2.12723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.392049][ T29] audit: type=1400 audit(546.378:20950): avc: denied { write } for pid=3719 comm="syz.2.12723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.461778][ T29] audit: type=1400 audit(546.468:20951): avc: denied { read } for pid=3719 comm="syz.2.12723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.524365][ T29] audit: type=1400 audit(546.548:20952): avc: denied { create } for pid=3729 comm="syz.2.12727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 546.543589][ T29] audit: type=1400 audit(546.548:20953): avc: denied { bind } for pid=3729 comm="syz.2.12727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 546.562932][ T29] audit: type=1400 audit(546.548:20954): avc: denied { listen } for pid=3729 comm="syz.2.12727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 546.582581][ T29] audit: type=1400 audit(546.558:20955): avc: denied { connect } for pid=3729 comm="syz.2.12727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 546.728872][ T3746] netlink: 'syz.9.12734': attribute type 4 has an invalid length. [ 546.759467][ T3746] netlink: 'syz.9.12734': attribute type 4 has an invalid length. [ 546.883474][ T3746] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.890885][ T3746] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.978979][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.011688][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.078199][ T12] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.112006][ T12] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.146897][ T12] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.175372][ T12] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.249252][ T3783] IPv6: NLM_F_CREATE should be specified when creating new route [ 547.317027][ T3789] loop9: detected capacity change from 0 to 128 [ 547.593674][ T8677] bio_check_eod: 8223 callbacks suppressed [ 547.593691][ T8677] kworker/u8:48: attempt to access beyond end of device [ 547.593691][ T8677] loop9: rw=1, sector=145, nr_sectors = 16 limit=128 [ 547.725584][ T8677] kworker/u8:48: attempt to access beyond end of device [ 547.725584][ T8677] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 547.739434][ T8677] kworker/u8:48: attempt to access beyond end of device [ 547.739434][ T8677] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 547.753744][ T8677] kworker/u8:48: attempt to access beyond end of device [ 547.753744][ T8677] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 547.780349][ T8677] kworker/u8:48: attempt to access beyond end of device [ 547.780349][ T8677] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 547.795151][ T8677] kworker/u8:48: attempt to access beyond end of device [ 547.795151][ T8677] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 547.808987][ T8677] kworker/u8:48: attempt to access beyond end of device [ 547.808987][ T8677] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 547.823067][ T8677] kworker/u8:48: attempt to access beyond end of device [ 547.823067][ T8677] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 547.836769][ T8677] kworker/u8:48: attempt to access beyond end of device [ 547.836769][ T8677] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 547.850267][ T8677] kworker/u8:48: attempt to access beyond end of device [ 547.850267][ T8677] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 547.914424][ T3820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3820 comm=syz.9.12763 [ 547.976638][ T3822] lo speed is unknown, defaulting to 1000 [ 548.164456][ T3833] syzkaller0: entered promiscuous mode [ 548.170165][ T3833] syzkaller0: entered allmulticast mode [ 548.352358][ T3840] loop9: detected capacity change from 0 to 512 [ 548.359892][ T3840] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 548.385583][ T3840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.414838][ T3075] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.745557][ T3855] syz_tun: entered allmulticast mode [ 548.765490][ T3855] __nla_validate_parse: 11 callbacks suppressed [ 548.765512][ T3855] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12775'. [ 548.842191][ T3855] syz_tun (unregistering): left allmulticast mode [ 548.956106][ T3860] vhci_hcd: default hub control req: 5f00 v0000 i0000 l0 [ 549.018880][ T3864] loop9: detected capacity change from 0 to 512 [ 549.044500][ T3864] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.076269][ T3864] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.12779: corrupted inode contents [ 549.088835][ T3864] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.12779: mark_inode_dirty error [ 549.101706][ T3864] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.12779: corrupted inode contents [ 549.127444][ T3075] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.198822][ T3878] syzkaller0: entered promiscuous mode [ 549.204445][ T3878] syzkaller0: entered allmulticast mode [ 549.310292][ T3888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12789'. [ 549.343077][ T3891] loop9: detected capacity change from 0 to 128 [ 549.390686][ T3891] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 549.415156][ T3888] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3888 comm=syz.3.12789 [ 549.457203][ T3894] loop8: detected capacity change from 0 to 1024 [ 549.480923][ T3894] EXT4-fs: Ignoring removed orlov option [ 549.502538][ T3894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 549.534121][ T3894] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.621406][ T3075] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 549.825541][ T3915] bridge: RTM_NEWNEIGH with invalid ether address [ 549.995156][T21704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.105756][ T3929] netlink: 64 bytes leftover after parsing attributes in process `syz.8.12803'. [ 550.120611][ T3932] netlink: 5 bytes leftover after parsing attributes in process `syz.3.12804'. [ 550.129985][ T3932] 0ªî{X¹¦: renamed from gretap0 [ 550.138287][ T3932] 0ªî{X¹¦: entered allmulticast mode [ 550.145455][ T3932] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 550.205386][ T3938] loop8: detected capacity change from 0 to 512 [ 550.234921][ T3938] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 550.275499][ T3938] EXT4-fs (loop8): mount failed [ 551.056925][ T3974] loop8: detected capacity change from 0 to 128 [ 551.849937][ T3992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12826'. [ 551.895193][ T3992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12826'. [ 551.925444][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 551.925459][ T29] audit: type=1400 audit(551.971:21105): avc: denied { name_bind } for pid=3997 comm="syz.2.12825" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 552.085273][ T29] audit: type=1400 audit(552.131:21106): avc: denied { mount } for pid=4004 comm="syz.3.12832" name="/" dev="configfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 552.140732][ T29] audit: type=1400 audit(552.161:21107): avc: denied { search } for pid=4004 comm="syz.3.12832" name="/" dev="configfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 552.162638][ T29] audit: type=1400 audit(552.161:21108): avc: denied { search } for pid=4004 comm="syz.3.12832" name="/" dev="configfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 552.184712][ T29] audit: type=1400 audit(552.161:21109): avc: denied { read open } for pid=4004 comm="syz.3.12832" path="/" dev="configfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 552.290721][ T4001] ================================================================== [ 552.298872][ T4001] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 552.305874][ T4001] [ 552.308304][ T4001] read-write to 0xffff88814bf7f4ec of 4 bytes by task 4000 on cpu 0: [ 552.316374][ T4001] fifo_open+0x86/0x5d0 [ 552.320561][ T4001] do_dentry_open+0x649/0xa20 [ 552.325245][ T4001] vfs_open+0x37/0x1e0 [ 552.329373][ T4001] path_openat+0x1c5e/0x2170 [ 552.333972][ T4001] do_file_open_root+0x1d0/0x3f0 [ 552.338918][ T4001] file_open_root+0xfd/0x130 [ 552.343518][ T4001] do_handle_open+0x659/0x6e0 [ 552.348220][ T4001] __x64_sys_open_by_handle_at+0x44/0x50 [ 552.353873][ T4001] x64_sys_call+0x279f/0x3000 [ 552.358564][ T4001] do_syscall_64+0xd2/0x200 [ 552.363079][ T4001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.368985][ T4001] [ 552.371315][ T4001] read to 0xffff88814bf7f4ec of 4 bytes by task 4001 on cpu 1: [ 552.378861][ T4001] wait_for_partner+0xb5/0x1c0 [ 552.383682][ T4001] fifo_open+0x462/0x5d0 [ 552.387950][ T4001] do_dentry_open+0x649/0xa20 [ 552.392634][ T4001] vfs_open+0x37/0x1e0 [ 552.396713][ T4001] path_openat+0x1c5e/0x2170 [ 552.401310][ T4001] do_filp_open+0x109/0x230 [ 552.405821][ T4001] do_sys_openat2+0xa6/0x110 [ 552.410417][ T4001] __x64_sys_openat+0xf2/0x120 [ 552.415188][ T4001] x64_sys_call+0x2eab/0x3000 [ 552.419875][ T4001] do_syscall_64+0xd2/0x200 [ 552.424472][ T4001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.430376][ T4001] [ 552.432702][ T4001] value changed: 0x00000001 -> 0x00000002 [ 552.438450][ T4001] [ 552.440774][ T4001] Reported by Kernel Concurrency Sanitizer on: [ 552.447036][ T4001] CPU: 1 UID: 0 PID: 4001 Comm: syz.8.12830 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 552.458418][ T4001] Tainted: [W]=WARN [ 552.462223][ T4001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 552.472373][ T4001] ================================================================== SYZFAIL: failed to send rpc fd=3 want=34688 sent=0 n=-1 (errno 32: Broken pipe) [ 552.531106][ T29] audit: type=1400 audit(552.541:21110): avc: denied { write } for pid=3303 comm="syz-executor" path="pipe:[1586]" dev="pipefs" ino=1586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 552.972972][ T12] bridge_slave_1: left allmulticast mode [ 552.978670][ T12] bridge_slave_1: left promiscuous mode [ 552.984445][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.012066][ T12] bridge_slave_0: left allmulticast mode [ 553.017790][ T12] bridge_slave_0: left promiscuous mode [ 553.023532][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.105563][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.115315][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.124620][ T12] bond0 (unregistering): Released all slaves [ 553.175760][ T12] hsr_slave_0: left promiscuous mode [ 553.182231][ T12] hsr_slave_1: left promiscuous mode [ 553.187871][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.195537][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.238049][ T12] team0 (unregistering): Port device team_slave_1 removed [ 553.247785][ T12] team0 (unregistering): Port device team_slave_0 removed [ 554.002800][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 554.581086][ T12] bond0 (unregistering): (slave bridge14): Removing an active aggregator [ 554.589965][ T12] bond0 (unregistering): (slave bridge14): Releasing backup interface [ 554.731291][ T12] bond7 (unregistering): (slave bridge16): Releasing active interface [ 554.780963][ T12] .` (unregistering): Released all slaves [ 554.788982][ T12] bond1 (unregistering): Released all slaves [ 554.797868][ T12] bond2 (unregistering): (slave veth7): Releasing active interface [ 554.806296][ T12] bond2 (unregistering): Released all slaves [ 554.814916][ T12] bond3 (unregistering): Released all slaves [ 554.823291][ T12] bond4 (unregistering): Released all slaves [ 554.831731][ T12] bond0 (unregistering): Released all slaves [ 554.840110][ T12] bond5 (unregistering): Released all slaves [ 554.848983][ T12] bond6 (unregistering): Released all slaves [ 554.857413][ T12] bond7 (unregistering): Released all slaves [ 554.990635][ T12] bond1 (unregistering): (slave bridge3): Removing an active aggregator [ 554.999229][ T12] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 555.311326][ T12] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 555.319828][ T12] dummy0: left promiscuous mode [ 555.324992][ T12] $Hÿ (unregistering): Released all slaves [ 555.333235][ T12] bond1 (unregistering): Released all slaves [ 555.341597][ T12] bond2 (unregistering): Released all slaves [ 555.350098][ T12] bond3 (unregistering): Released all slaves [ 555.396408][ T12] tipc: Disabling bearer [ 555.401677][ T12] tipc: Disabling bearer [ 555.406622][ T12] tipc: Left network mode [ 555.419642][ T12] tipc: Disabling bearer [ 555.424626][ T12] tipc: Left network mode [ 555.434677][ T12] hsr_slave_0: left promiscuous mode [ 555.874221][ T12] IPVS: stop unused estimator thread 0...