last executing test programs: 2m43.817661014s ago: executing program 4 (id=1229): set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0) creat(0x0, 0x48) r2 = dup(0xffffffffffffffff) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[], 0x53) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 2m43.800742614s ago: executing program 4 (id=1230): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffbfffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000001}, 0x18) chmod(&(0x7f0000000340)='./file1\x00', 0x0) 2m43.747786755s ago: executing program 4 (id=1231): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x900) r3 = dup3(r2, r1, 0x0) read(r3, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2m43.470136439s ago: executing program 4 (id=1234): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x3) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2m43.37320575s ago: executing program 4 (id=1236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x2000000000000021, 0x2, 0x10000000000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 2m42.307419735s ago: executing program 4 (id=1249): r0 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) semop(0x0, 0x0, 0x0) 2m42.281285265s ago: executing program 32 (id=1249): r0 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) semop(0x0, 0x0, 0x0) 3.086163568s ago: executing program 5 (id=3141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2.280788139s ago: executing program 2 (id=3149): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2.040450642s ago: executing program 5 (id=3150): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x7fffffff}, 0xaaf4, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$eJzs3M9r02AYwPGn6dZ0k/04CXrxQS96CbMe1UOVDcSC0q2iHoSMZVpa25EUbUUwZ0/7O4ZHb4L4D+y/8DYE2WknI22zNOu633Wt3fcDI++b5323J3nJeNKSbD1ff1ta9axVuyZGWsUQ8WVHZFaKsisRblOtdiraL/cz4sutuXfbnxdfvHyczeXm86oL2aU7GVWdvvb9/ccv13/ULj37Om2asjn7aut35ufm5c0rW3+W3hQ9LaakUq2prcvVas1eLju6UvRKlurTsmN7jhYrnuPuia+Wq2trDbUrK1OTa67jeWpXGmpIQ2tVTYdZVdSyLJ2abLbTcoGkTjyjsJHP29lOfz7Z34wwDFw3azcXdmLf1VDYGExGAABgkA6u/41ozG79b3TX/yJH1P+fwlHT33rW/56evv5PSlT/l5xW/V9zG2q/tovx+h+H6q7/j8f4N8ngLBJ+rPNgT8h1sxO9J1H/AwAAAAAAAAAAAAAAAAAAAADwP9gJgpkgCGaaW0NEgrBvikgy1u8x9UI9Wz+q4usfxH7McIEPWX+MgNiDe2mRX369UC8kWtt2fOFRbn5OW2IP/m3X64VkFL/djuve+LhMhvFMz3hKbt5ox5uxh09y8fh6vTAhK4dm7vfrFAAAAAAAMPIsjcxGO9MS3d9blprSHW/dv7dbfufzAe28GqgZH5OrY+d5JAAAAAAA4CBe40PJLpcd93wayXP8W6duiJxu+t3A7EsaSRE5Ykx+UWTwJ2pfw5ShSGOUG/f69guDhEh7z3j4z6DrKgAAAAAwWjr3Ayefy9f7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0x5neImYcb/CgjxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFn8DAAD//8DvvIM=") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_setup(0x2, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.022965912s ago: executing program 3 (id=3151): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='i', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x200}}], 0x1, 0x4000006) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x25, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x400}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 2.019895302s ago: executing program 2 (id=3152): r0 = socket$inet(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x5, r3, 0x1, 0x0, 0x6, @remote}, 0xfffffffffffffdfd) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) fsconfig$FSCONFIG_SET_FD(r5, 0x5, 0x0, 0x0, 0xffffffffffffffff) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.883052184s ago: executing program 0 (id=3155): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) r5 = dup2(r2, r2) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x9, 0x1, 0xa, 0xe}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 1.876979994s ago: executing program 2 (id=3156): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 1.832506905s ago: executing program 0 (id=3158): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x27, 0x1}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.827279775s ago: executing program 1 (id=3159): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) msgget(0x0, 0x2c4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, &(0x7f0000000300)) close(0x3) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 1.820706685s ago: executing program 3 (id=3160): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000280), &(0x7f0000000080)=r4}, 0x20) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.746847406s ago: executing program 2 (id=3161): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) shutdown(0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 1.746392256s ago: executing program 1 (id=3162): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f000016c000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, r0, 0x8000000) syz_io_uring_setup(0x199, &(0x7f00000000c0)={0x0, 0x7e1f, 0x800, 0x1, 0x1d3, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, r0, 0x0, r0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="450a0000000000006111c8000000e7d727a35b9f7f0c7200f896e45cc0dd9dc0a894cf668fc23f62fb6a713b3c3f6336850c77b21d1e3ab9f2411cf9a3741ff23e5291f8adc291ec34d06a6a563b7ac8f19dc5a38c23"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.679200507s ago: executing program 2 (id=3163): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.526109969s ago: executing program 1 (id=3164): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) getpgid(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) io_setup(0x1, &(0x7f0000000b80)) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = io_uring_setup(0xad5, 0x0) close(r3) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x10) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x10, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80003, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x240480c0) 1.45354401s ago: executing program 5 (id=3165): getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x5501, 0x0) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1bc, 0x1bc, 0x5, [@union={0xe, 0x4, 0x0, 0x5, 0x1, 0x8000, [{0xf, 0x0, 0x2}, {0xc, 0x4, 0x200000}, {0xf, 0x3, 0x401}, {0xe, 0x1, 0x9}]}, @const={0x10, 0x0, 0x0, 0xa, 0x5}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x66}, @typedef={0xe, 0x0, 0x0, 0x8, 0x5}, @enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x2, 0x7}, {0xf, 0x80000000}, {0x8, 0x80000001}, {0x7, 0xb}, {0x6, 0xffff}, {0x2, 0x4ae3388c}, {0x10, 0x2a}, {0x6, 0x5}, {0x7}, {0xc}]}, @enum64={0xf, 0x5, 0x0, 0x13, 0x1, 0x8, [{0x5, 0x40}, {0x7, 0x4, 0xf}, {0x7, 0x7, 0x2}, {0x1, 0x8}, {0xa, 0x627e, 0x6}]}, @enum64={0x5, 0x3, 0x0, 0x13, 0x0, 0x6, [{0xe, 0x0, 0x4}, {0xa, 0x2, 0xffffffff}, {0x4, 0xff, 0x682}]}, @enum64={0x4, 0x8, 0x0, 0x13, 0x1, 0x4, [{0x7, 0x7}, {0x3, 0xe, 0x2}, {0xc, 0x4, 0x1}, {0xf, 0x80000000, 0x1}, {0x3, 0x9, 0xc0}, {0xc, 0x6, 0x6}, {0x4, 0x11772358, 0x200}, {0xe, 0x7, 0x800}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x322}}]}, {0x0, [0x2e, 0x61, 0x5f]}}, &(0x7f0000000340)=""/8, 0x1d9, 0x8, 0x0, 0x7, 0x0, @void, @value}, 0x28) 1.43216831s ago: executing program 1 (id=3166): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) ftruncate(0xffffffffffffffff, 0x0) kexec_load(0x3e00, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x20008, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x4) 1.350145411s ago: executing program 1 (id=3167): r0 = socket$inet(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x5, r3, 0x1, 0x0, 0x6, @remote}, 0xfffffffffffffdfd) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) fsconfig$FSCONFIG_SET_FD(r5, 0x5, 0x0, 0x0, 0xffffffffffffffff) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.349102041s ago: executing program 1 (id=3168): epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 890.191357ms ago: executing program 0 (id=3169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000005000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0) 889.531108ms ago: executing program 3 (id=3170): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 873.131148ms ago: executing program 0 (id=3171): pipe2(&(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xf6c447fee59251f4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48) pwrite64(r0, 0x0, 0x0, 0x100000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x20050800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) 851.587588ms ago: executing program 0 (id=3172): select(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048810}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) setreuid(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xc, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 825.574938ms ago: executing program 3 (id=3173): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x5d, &(0x7f0000000600)}, 0x10) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa60f, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) 802.376069ms ago: executing program 2 (id=3174): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x0, "d62e980dc09169cf", "20e48560999fd132b6a5426180a8c2360455591fe53251debd51940c0fcd00"}) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x5, 0xa, 0x5, 0x9, 0x200}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7f}}, 0x8}, 0x90) ioprio_set$uid(0x3, 0x0, 0x6000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) 802.015149ms ago: executing program 5 (id=3175): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa4000021) read(r5, 0x0, 0x0) close(r5) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 774.225339ms ago: executing program 3 (id=3176): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x2, 0x0, 0x0, 0x0, 0xd5e93709d453f02a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 710.24462ms ago: executing program 3 (id=3177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000900020073797a3200000000050004000000000005000100060000001400078008000600000000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 497.338133ms ago: executing program 5 (id=3178): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x80047456, 0xf0ff1f00000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000d00008500000083000000bf090000000000005509010000000000950020d000000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) unlink(0x0) 349.841675ms ago: executing program 5 (id=3179): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000002840)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) fstat(0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000f80)={0xe0, 0x1b, 0x400, 0x70bd25, 0x25dfdbfd, {0x2}, [@typed={0x8, 0xc9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @nested={0x20, 0xb7, 0x0, 0x1, [@nested={0x4, 0x146}, @typed={0x6, 0x3e, 0x0, 0x0, @str='+\x00'}, @generic="4d7379f35c672fdd491fda5b180215af"]}, @nested={0x20, 0xce, 0x0, 0x1, [@generic, @nested={0x4, 0xe0}, @typed={0x8, 0xe4, 0x0, 0x0, @uid}, @typed={0x8, 0x70, 0x0, 0x0, @uid}, @typed={0x8, 0x13e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic]}, @nested={0x83, 0xde, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @u32=0xffffffff}, @generic="f422cb68b472e7ff94bdef2dd5a832d00a0eb52e1add2f14112026ed9d4c03f9c85b76822f05e82bdef7030f0675c45c82914eedff1eb5c15e64232eb6330e3c5fecf24ae5a22d21f4bb12d3ee50c7db272127dfea5bf6ec6f1645cf885cef90be98b53986b2a2f9e88c7bef0deb38f1a0617e7b5cf460"]}, @generic]}, 0xe0}, 0x1, 0x0, 0x0, 0x4008800}, 0x2000005) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(0x0, 0x0, 0x2) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) 0s ago: executing program 0 (id=3180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) symlink(0x0, 0x0) umount2(0x0, 0xb) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.3.1937'. [ 186.792414][ T9036] tipc: Resetting bearer [ 186.841552][ T9035] tipc: Resetting bearer [ 186.917674][ T9035] tipc: Disabling bearer [ 187.177518][ T9059] loop0: detected capacity change from 0 to 512 [ 187.216504][ T9059] EXT4-fs: Ignoring removed i_version option [ 187.224009][ T9059] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.260233][ T9059] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.293854][ T9059] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 187.307656][ T9061] loop2: detected capacity change from 0 to 512 [ 187.315235][ T9061] SELinux: security_context_str_to_sid () failed with errno=-22 [ 187.349695][ T56] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.417394][ T9059] loop0: detected capacity change from 0 to 1024 [ 187.489935][ T9070] wg2: left promiscuous mode [ 187.495083][ T9070] wg2: left allmulticast mode [ 187.496243][ T9059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.523415][ T9070] wg2: entered promiscuous mode [ 187.528858][ T9070] wg2: entered allmulticast mode [ 187.564435][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.784517][ T9092] 9pnet_fd: Insufficient options for proto=fd [ 187.879415][ T9099] syzkaller0: entered promiscuous mode [ 187.885387][ T9099] syzkaller0: entered allmulticast mode [ 187.909772][ T9101] loop0: detected capacity change from 0 to 512 [ 187.928773][ T9101] EXT4-fs: Ignoring removed i_version option [ 187.940689][ T9101] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.976371][ T9101] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.995691][ T9101] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 188.087188][ T9110] x_tables: ip_tables: osf match: only valid for protocol 6 [ 188.717153][ T9127] lo speed is unknown, defaulting to 1000 [ 189.153138][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.164178][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.176156][ T9145] loop5: detected capacity change from 0 to 256 [ 189.706189][ T9150] loop3: detected capacity change from 0 to 512 [ 189.715188][ T9150] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1986: iget: bad extended attribute block 1 [ 189.729720][ T9150] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1986: couldn't read orphan inode 15 (err -117) [ 189.745173][ T9150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.842302][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.979321][ T9160] loop3: detected capacity change from 0 to 2048 [ 190.112510][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1998'. [ 190.129857][ T9174] bond0: (slave bridge0): Releasing backup interface [ 190.138965][ T9174] bridge0 (unregistering): left allmulticast mode [ 190.186336][ T9176] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.196982][ T9176] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.244608][ T9176] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.255229][ T9176] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.259412][ T9186] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2003'. [ 190.275394][ T9186] tipc: Enabled bearer , priority 10 [ 190.285823][ T9186] ªªªªªª: renamed from vlan0 (while UP) [ 190.293740][ T9186] tipc: Disabling bearer [ 190.302987][ T9187] lo speed is unknown, defaulting to 1000 [ 190.313324][ T9176] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.323363][ T9176] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.414224][ T9176] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.424353][ T9176] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.462853][ T9176] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.471863][ T9176] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.484634][ T9176] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.493838][ T9176] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.509880][ T9176] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.518237][ T9176] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.535272][ T9176] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.543904][ T9176] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.571713][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 190.571731][ T30] audit: type=1400 audit(2000000018.370:5941): avc: denied { write } for pid=9192 comm="syz.3.2005" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 190.636396][ T30] audit: type=1400 audit(2000000018.440:5942): avc: denied { ioctl } for pid=9194 comm="syz.2.2006" path="socket:[27454]" dev="sockfs" ino=27454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.688475][ T30] audit: type=1400 audit(2000000018.490:5943): avc: denied { map } for pid=9194 comm="syz.2.2006" path="socket:[28147]" dev="sockfs" ino=28147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.713232][ T30] audit: type=1400 audit(2000000018.490:5944): avc: denied { read } for pid=9194 comm="syz.2.2006" path="socket:[28147]" dev="sockfs" ino=28147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.843129][ T9200] loop2: detected capacity change from 0 to 2048 [ 190.869708][ T30] audit: type=1400 audit(2000000018.670:5945): avc: denied { ioctl } for pid=9202 comm="syz.0.2009" path="socket:[27476]" dev="sockfs" ino=27476 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 191.058332][ T30] audit: type=1400 audit(2000000018.860:5946): avc: denied { setopt } for pid=9216 comm="syz.2.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 191.198729][ T9228] netlink: 'syz.0.2015': attribute type 21 has an invalid length. [ 191.207209][ T9228] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2015'. [ 191.236871][ T9228] netlink: 'syz.0.2015': attribute type 4 has an invalid length. [ 191.244745][ T9228] netlink: 'syz.0.2015': attribute type 5 has an invalid length. [ 191.252826][ T9228] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2015'. [ 191.606070][ T30] audit: type=1326 audit(2000000019.410:5947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 191.630915][ T30] audit: type=1326 audit(2000000019.410:5948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 191.688095][ T30] audit: type=1326 audit(2000000019.410:5949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 191.713539][ T30] audit: type=1326 audit(2000000019.410:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 191.743567][ T9235] xt_hashlimit: size too large, truncated to 1048576 [ 192.166776][ T9248] loop5: detected capacity change from 0 to 2048 [ 192.332156][ T9248] loop5: p1 < > p4 [ 192.338091][ T9248] loop5: p4 size 8388608 extends beyond EOD, truncated [ 192.432694][ T9254] x_tables: ip_tables: osf match: only valid for protocol 6 [ 192.731289][ T9277] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 192.737983][ T9277] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 192.745827][ T9277] vhci_hcd vhci_hcd.0: Device attached [ 193.153345][ T9294] netlink: 'syz.3.2041': attribute type 1 has an invalid length. [ 193.161550][ T9294] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2041'. [ 193.188473][ T9288] loop5: detected capacity change from 0 to 2048 [ 193.255640][ T9280] vhci_hcd: connection closed [ 193.256665][ T3333] vhci_hcd: stop threads [ 193.265891][ T3333] vhci_hcd: release socket [ 193.270578][ T3333] vhci_hcd: disconnect device [ 193.406796][ T9302] syzkaller0: entered promiscuous mode [ 193.410506][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2045'. [ 193.413237][ T9302] syzkaller0: entered allmulticast mode [ 193.640840][ T9319] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.713076][ T9319] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.814389][ T9319] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.837212][ T9327] lo speed is unknown, defaulting to 1000 [ 193.886243][ T9319] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.959718][ T9319] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.973983][ T9319] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.987610][ T9319] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.000165][ T9319] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.518709][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2059'. [ 194.547049][ T9340] dummy0: left allmulticast mode [ 194.553817][ T9340] bridge0: port 1(dummy0) entered disabled state [ 194.614994][ T9343] veth0: entered promiscuous mode [ 194.621460][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2060'. [ 194.637577][ T9343] veth0 (unregistering): left promiscuous mode [ 194.646624][ T9343] bond0: (slave ªªªªªª): Releasing active interface [ 194.665443][ T9345] netlink: 'syz.3.2061': attribute type 4 has an invalid length. [ 194.687193][ T9345] netlink: 'syz.3.2061': attribute type 4 has an invalid length. [ 194.762908][ T9349] loop3: detected capacity change from 0 to 512 [ 194.802100][ T9349] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.823437][ T9349] EXT4-fs (loop3): 1 truncate cleaned up [ 194.830493][ T9349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.847452][ T9349] netlink: 'syz.3.2063': attribute type 13 has an invalid length. [ 194.945806][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2064'. [ 194.957319][ T9355] netlink: 'syz.0.2064': attribute type 5 has an invalid length. [ 195.039662][ T9349] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.048868][ T9349] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.058756][ T9349] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.069210][ T9349] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.106702][ T9355] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.117130][ T9355] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.126511][ T9355] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.137045][ T9355] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.151138][ T9355] vxlan0: entered promiscuous mode [ 195.194451][ T9366] 9pnet: p9_errstr2errno: server reported unknown error [ 195.213415][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.246080][ T9366] tipc: Enabling of bearer rejected, failed to enable media [ 195.284463][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2070'. [ 195.298581][ T9370] ip6gre1: entered allmulticast mode [ 195.316185][ T9368] loop3: detected capacity change from 0 to 512 [ 195.333627][ T9368] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 195.361744][ T9368] EXT4-fs (loop3): mount failed [ 195.484415][ T9382] netlink: 'syz.5.2074': attribute type 4 has an invalid length. [ 195.498811][ T9382] netlink: 'syz.5.2074': attribute type 4 has an invalid length. [ 195.582792][ T30] kauditd_printk_skb: 320 callbacks suppressed [ 195.582813][ T30] audit: type=1326 audit(2000000023.390:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9356 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f214efd58e7 code=0x7ffc0000 [ 195.615835][ T30] audit: type=1326 audit(2000000023.390:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9356 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f214ef7ab19 code=0x7ffc0000 [ 195.642165][ T30] audit: type=1326 audit(2000000023.390:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9356 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f214efde929 code=0x7ffc0000 [ 195.668593][ T30] audit: type=1326 audit(2000000023.390:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9356 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f214efd58e7 code=0x7ffc0000 [ 195.693547][ T30] audit: type=1326 audit(2000000023.390:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9356 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f214ef7ab19 code=0x7ffc0000 [ 195.721158][ T30] audit: type=1326 audit(2000000023.390:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9356 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f214efde929 code=0x7ffc0000 [ 195.748127][ T30] audit: type=1326 audit(2000000023.430:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9356 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f214efd58e7 code=0x7ffc0000 [ 195.752499][ T9391] syzkaller0: entered promiscuous mode [ 195.777219][ T30] audit: type=1326 audit(2000000023.430:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9356 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f214ef7ab19 code=0x7ffc0000 [ 195.786919][ T9391] syzkaller0: entered allmulticast mode [ 195.815637][ T30] audit: type=1326 audit(2000000023.430:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9356 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f214efde929 code=0x7ffc0000 [ 195.822339][ T9] IPVS: starting estimator thread 0... [ 195.883920][ T30] audit: type=1326 audit(2000000023.450:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9356 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f214efd58e7 code=0x7ffc0000 [ 195.931765][ T9395] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2079'. [ 195.951107][ T9392] IPVS: using max 1920 ests per chain, 96000 per kthread [ 195.993397][ T9406] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2083'. [ 196.003791][ T9406] tipc: Enabled bearer , priority 10 [ 196.013990][ T9406] ªªªªªª: renamed from vlan0 (while UP) [ 196.022214][ T9406] tipc: Disabling bearer [ 196.040120][ T9397] lo speed is unknown, defaulting to 1000 [ 196.078807][ T9411] veth0: entered promiscuous mode [ 196.094940][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'. [ 196.161880][ T9411] bond3: (slave vlan1): Releasing active interface [ 197.222212][ T9418] validate_nla: 1 callbacks suppressed [ 197.222231][ T9418] netlink: 'syz.1.2087': attribute type 4 has an invalid length. [ 197.254213][ T9418] netlink: 'syz.1.2087': attribute type 4 has an invalid length. [ 197.282937][ T9419] tipc: Enabled bearer , priority 0 [ 197.296971][ T9417] tipc: Resetting bearer [ 197.303343][ T9420] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 197.320518][ T9417] tipc: Disabling bearer [ 197.525718][ T9433] veth0_vlan: left promiscuous mode [ 197.533558][ T9433] veth0_vlan: entered allmulticast mode [ 197.546218][ T9433] veth0_vlan: entered promiscuous mode [ 197.761807][ T9439] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 197.768547][ T9439] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 197.777735][ T9439] vhci_hcd vhci_hcd.0: Device attached [ 197.981067][ T8061] vhci_hcd: vhci_device speed not set [ 198.047537][ T8061] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 198.193693][ T9446] 9pnet: p9_errstr2errno: server reported unknown error [ 198.245314][ T9440] vhci_hcd: connection reset by peer [ 198.246836][ T9449] tipc: Enabling of bearer rejected, failed to enable media [ 198.251648][ T48] vhci_hcd: stop threads [ 198.251660][ T48] vhci_hcd: release socket [ 198.251676][ T48] vhci_hcd: disconnect device [ 198.515646][ T9451] loop3: detected capacity change from 0 to 512 [ 198.556799][ T9451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 198.662621][ T9451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 198.675064][ T9451] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.2100: missing EA_INODE flag [ 198.692666][ T9451] EXT4-fs (loop3): Remounting filesystem read-only [ 198.701790][ T9451] EXT4-fs (loop3): 1 orphan inode deleted [ 198.713741][ T9451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.733917][ T9451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.029532][ T9484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.055362][ T9484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.068982][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2109'. [ 199.097458][ T9484] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.740737][ T9501] lo speed is unknown, defaulting to 1000 [ 199.753290][ T9505] 9pnet: p9_errstr2errno: server reported unknown error [ 199.809272][ T9507] tipc: Enabling of bearer rejected, failed to enable media [ 200.265245][ T9520] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.276032][ T9520] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.334620][ T9520] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.334752][ T9520] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.425793][ T9520] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.425832][ T9526] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2126'. [ 200.425845][ T9520] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.514462][ T9520] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.514497][ T9520] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.563459][ T9520] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.563512][ T9520] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.569732][ T9520] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.604797][ T9520] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.612147][ T9520] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.624941][ T9520] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.707691][ T9520] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.707792][ T9520] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.708977][ T9531] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.783039][ T9531] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.806314][ T30] kauditd_printk_skb: 186 callbacks suppressed [ 200.806333][ T30] audit: type=1326 audit(2000000028.610:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.5.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 200.839703][ T30] audit: type=1326 audit(2000000028.610:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.5.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 200.864579][ T30] audit: type=1326 audit(2000000028.610:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.5.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 200.888762][ T30] audit: type=1326 audit(2000000028.610:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.5.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 200.912734][ T30] audit: type=1326 audit(2000000028.610:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.5.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 200.938153][ T30] audit: type=1326 audit(2000000028.610:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.5.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 200.964265][ T30] audit: type=1326 audit(2000000028.610:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.5.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 200.988598][ T30] audit: type=1326 audit(2000000028.610:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.5.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 201.016195][ T30] audit: type=1326 audit(2000000028.610:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.5.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 201.019686][ T9536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.041031][ T30] audit: type=1326 audit(2000000028.610:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.5.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 201.076878][ T9536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.082168][ T9531] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.102356][ T9536] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 201.143121][ T9531] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.209797][ T9531] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.224511][ T9531] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.238207][ T9531] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.250873][ T9531] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.306273][ T9539] loop3: detected capacity change from 0 to 512 [ 201.315920][ T9539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.331045][ T9519] syz.0.2124 (9519) used greatest stack depth: 4832 bytes left [ 201.340532][ T9539] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 201.357846][ T9544] 9pnet: p9_errstr2errno: server reported unknown error [ 201.365492][ T9539] EXT4-fs (loop3): 1 truncate cleaned up [ 201.372527][ T9539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.410035][ T9539] EXT4-fs (loop3): shut down requested (0) [ 201.423769][ T9544] tipc: Enabling of bearer rejected, failed to enable media [ 201.573932][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.696989][ T9551] 9pnet_fd: Insufficient options for proto=fd [ 201.738571][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 201.767003][ T9553] lo speed is unknown, defaulting to 1000 [ 201.978068][ T9578] netlink: 'syz.1.2145': attribute type 13 has an invalid length. [ 202.169081][ T9578] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.177948][ T9578] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.187325][ T9578] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.196056][ T9578] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.113135][ T8061] usb 11-1: enqueue for inactive port 0 [ 203.123366][ T8061] usb 11-1: enqueue for inactive port 0 [ 203.152200][ T9600] loop2: detected capacity change from 0 to 512 [ 203.171031][ T9600] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 203.202387][ T9600] EXT4-fs (loop2): 1 truncate cleaned up [ 203.208658][ T9600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.398093][ T9607] lo speed is unknown, defaulting to 1000 [ 203.753582][ T9599] netlink: 'syz.2.2164': attribute type 13 has an invalid length. [ 203.810357][ T9609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.918350][ T9609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.172076][ T8061] vhci_hcd: vhci_device speed not set [ 204.515594][ T9599] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.526789][ T9599] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.536006][ T9599] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.547620][ T9599] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.629169][ T9599] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.639191][ T9599] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.650513][ T9599] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.659487][ T9599] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.718584][ T36] lo speed is unknown, defaulting to 1000 [ 204.725304][ T36] syz0: Port: 1 Link DOWN [ 204.740145][ T9612] lo speed is unknown, defaulting to 1000 [ 204.917750][ T9620] loop5: detected capacity change from 0 to 512 [ 204.987766][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.997306][ T9620] EXT4-fs (loop5): blocks per group (71) and clusters per group (20800) inconsistent [ 205.527983][ T9635] netlink: 'syz.0.2175': attribute type 13 has an invalid length. [ 205.623537][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 205.633819][ T9643] netlink: 'syz.2.2166': attribute type 5 has an invalid length. [ 205.679458][ T9635] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.689350][ T9635] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.697836][ T9635] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.708182][ T9635] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.729354][ T9635] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.738539][ T9635] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.747955][ T9635] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.757182][ T9635] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.768240][ T9634] lo speed is unknown, defaulting to 1000 [ 206.752412][ T9672] tipc: Enabled bearer , priority 0 [ 206.779112][ T9669] tipc: Resetting bearer [ 206.796605][ T9669] tipc: Disabling bearer [ 207.745461][ T30] kauditd_printk_skb: 699 callbacks suppressed [ 207.745479][ T30] audit: type=1326 audit(2000000006.430:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9691 comm="syz.5.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 207.776311][ T30] audit: type=1326 audit(2000000006.430:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9691 comm="syz.5.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 207.801129][ T9692] loop5: detected capacity change from 0 to 512 [ 207.801303][ T30] audit: type=1326 audit(2000000006.430:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9691 comm="syz.5.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 207.832366][ T30] audit: type=1326 audit(2000000006.430:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9691 comm="syz.5.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 207.835198][ T9686] tipc: Enabled bearer , priority 0 [ 207.857546][ T30] audit: type=1326 audit(2000000006.430:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9691 comm="syz.5.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 207.888069][ T30] audit: type=1326 audit(2000000006.430:7180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9691 comm="syz.5.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 207.892198][ T9692] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 207.913153][ T30] audit: type=1326 audit(2000000006.430:7181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9691 comm="syz.5.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 207.926390][ T9698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.948449][ T30] audit: type=1326 audit(2000000006.430:7182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9691 comm="syz.5.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 207.980668][ T30] audit: type=1326 audit(2000000006.430:7183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9691 comm="syz.5.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 208.005618][ T30] audit: type=1326 audit(2000000006.430:7184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9691 comm="syz.5.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 208.031461][ T9701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2185'. [ 208.044658][ T48] tipc: Resetting bearer [ 208.052123][ T9692] EXT4-fs (loop5): 1 truncate cleaned up [ 208.068871][ T9685] tipc: Resetting bearer [ 208.122112][ T9692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.135331][ T9685] tipc: Disabling bearer [ 208.142126][ T9706] loop2: detected capacity change from 0 to 512 [ 208.150639][ T9704] netlink: 'syz.1.2187': attribute type 10 has an invalid length. [ 208.159987][ T9692] netlink: 'syz.5.2182': attribute type 13 has an invalid length. [ 208.170222][ T9706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.183569][ T9706] ext4 filesystem being mounted at /459/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.223081][ T9706] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.2186: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 208.251955][ T9706] EXT4-fs (loop2): Remounting filesystem read-only [ 208.280274][ T9712] loop3: detected capacity change from 0 to 512 [ 208.287829][ T9712] EXT4-fs: Ignoring removed i_version option [ 208.294258][ T9712] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.302069][ T9712] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 208.325144][ T9712] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #17: comm syz.3.2188: iget: bad i_size value: -6917529027641081756 [ 208.340035][ T9712] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2188: couldn't read orphan inode 17 (err -117) [ 208.362236][ T9712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.376499][ T9692] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.385311][ T9692] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.394172][ T9692] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.403043][ T9692] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.415771][ T9712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.434672][ T9692] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.444201][ T9692] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.454339][ T9692] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.463246][ T9692] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.531656][ T3394] syz1: Port: 1 Link DOWN [ 208.544013][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.766164][ T9721] team0 (unregistering): Port device geneve1 removed [ 208.837360][ T9723] tipc: Enabling of bearer rejected, failed to enable media [ 208.898062][ T9727] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 208.910635][ T9727] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 209.046565][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.155627][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.814736][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'. [ 209.835759][ T9741] $Hÿ: (slave bridge0): Releasing backup interface [ 209.846090][ T9741] bridge0 (unregistering): left promiscuous mode [ 209.852535][ T9741] bridge0 (unregistering): left allmulticast mode [ 209.874373][ T9745] loop3: detected capacity change from 0 to 512 [ 209.884166][ T9745] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 209.976089][ T9745] EXT4-fs (loop3): 1 truncate cleaned up [ 209.986906][ T9745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.004972][ T9745] netlink: 'syz.3.2203': attribute type 13 has an invalid length. [ 210.084970][ T9759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.097473][ T9759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.101930][ T9756] syzkaller0: entered promiscuous mode [ 210.112867][ T9756] syzkaller0: entered allmulticast mode [ 210.138732][ T9754] lo speed is unknown, defaulting to 1000 [ 210.254509][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.335269][ T9767] loop3: detected capacity change from 0 to 512 [ 210.363381][ T9767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.386646][ T9767] ext4 filesystem being mounted at /438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 210.430223][ T9767] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.2210: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 210.455866][ T9774] netlink: 'syz.1.2212': attribute type 4 has an invalid length. [ 210.474135][ T9774] netlink: 'syz.1.2212': attribute type 4 has an invalid length. [ 210.486380][ T9776] loop2: detected capacity change from 0 to 128 [ 210.497915][ T9767] EXT4-fs (loop3): Remounting filesystem read-only [ 210.508094][ T9776] EXT4-fs: Ignoring removed nobh option [ 210.534108][ T9776] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.601466][ T9781] $Hÿ: (slave batadv0): Releasing backup interface [ 210.629076][ T9781] batadv0: left promiscuous mode [ 210.647414][ T9781] bond0: (slave veth3): Releasing active interface [ 210.681892][ T9776] ext4 filesystem being mounted at /464/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.244206][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.352327][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.425738][ T9794] loop5: detected capacity change from 0 to 512 [ 211.447432][ T9794] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 211.475308][ T9794] EXT4-fs (loop5): 1 truncate cleaned up [ 211.482858][ T9794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.499251][ T9799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.501752][ T9794] netlink: 'syz.5.2221': attribute type 13 has an invalid length. [ 211.522057][ T9799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.544762][ T9799] loop2: detected capacity change from 0 to 256 [ 211.604870][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.633456][ T9811] macsec0: entered promiscuous mode [ 211.633843][ T9813] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2226'. [ 211.682160][ T9815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.695602][ T9815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.720927][ T9815] macsec0: entered promiscuous mode [ 211.726601][ T9815] bond0: entered promiscuous mode [ 211.732901][ T9815] bond0: left promiscuous mode [ 211.822815][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2233'. [ 211.959180][ T9832] loop5: detected capacity change from 0 to 2048 [ 212.001396][ T9832] loop5: p1 < > p4 < > [ 212.389962][ T9840] netlink: 'syz.0.2240': attribute type 13 has an invalid length. [ 212.611315][ T9846] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 212.618036][ T9846] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 212.626611][ T9846] vhci_hcd vhci_hcd.0: Device attached [ 212.756339][ T30] kauditd_printk_skb: 877 callbacks suppressed [ 212.756372][ T30] audit: type=1326 audit(2000000011.440:8062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.5.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd696358e7 code=0x7ffc0000 [ 212.811775][ T9615] vhci_hcd: vhci_device speed not set [ 212.856947][ T30] audit: type=1326 audit(2000000011.470:8063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.5.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd695dab19 code=0x7ffc0000 [ 212.882201][ T30] audit: type=1326 audit(2000000011.470:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.5.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd696358e7 code=0x7ffc0000 [ 212.907990][ T30] audit: type=1326 audit(2000000011.470:8065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.5.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd695dab19 code=0x7ffc0000 [ 212.932869][ T30] audit: type=1326 audit(2000000011.470:8066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.5.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 212.958573][ T30] audit: type=1326 audit(2000000011.480:8067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.5.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd696358e7 code=0x7ffc0000 [ 212.984768][ T30] audit: type=1326 audit(2000000011.480:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.5.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd695dab19 code=0x7ffc0000 [ 213.010589][ T30] audit: type=1326 audit(2000000011.480:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.5.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 213.035290][ T30] audit: type=1326 audit(2000000011.490:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.5.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd696358e7 code=0x7ffc0000 [ 213.059854][ T30] audit: type=1326 audit(2000000011.490:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.5.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd695dab19 code=0x7ffc0000 [ 213.122213][ T9615] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 213.365443][ T9847] vhci_hcd: connection reset by peer [ 213.371955][ T12] vhci_hcd: stop threads [ 213.376395][ T12] vhci_hcd: release socket [ 213.381778][ T12] vhci_hcd: disconnect device [ 213.605096][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2245'. [ 213.779889][ T9865] syzkaller0: entered promiscuous mode [ 213.786561][ T9865] syzkaller0: entered allmulticast mode [ 214.109143][ T9869] loop3: detected capacity change from 0 to 4096 [ 214.284910][ T9869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.430838][ T9869] lo speed is unknown, defaulting to 1000 [ 215.198944][ T9886] tipc: Enabling of bearer rejected, already enabled [ 215.331419][ T9891] bond3: (slave veth5): Releasing active interface [ 215.508906][ T9900] netlink: 'syz.0.2259': attribute type 1 has an invalid length. [ 215.559626][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2259'. [ 215.591259][ T9900] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.618090][ T9902] bond4 (unregistering): Released all slaves [ 215.879745][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.923097][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2268'. [ 215.983819][ T9925] syzkaller0: entered promiscuous mode [ 215.989698][ T9925] syzkaller0: entered allmulticast mode [ 216.005921][ T9928] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.2270'. [ 216.065516][ T9934] loop3: detected capacity change from 0 to 1024 [ 216.086618][ T9934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.104730][ T9940] netlink: 'syz.5.2276': attribute type 1 has an invalid length. [ 216.123680][ T9940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.161201][ T9944] bond3: (slave veth3): Releasing active interface [ 216.168337][ T9944] bond3: (slave veth3): the permanent HWaddr of slave - aa:1b:b5:3e:87:6d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 216.185344][ T9944] vlan0: entered promiscuous mode [ 216.202170][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2276'. [ 216.226184][ T9944] bond3: (slave vlan0): Releasing active interface [ 216.233701][ T9944] vlan0: left promiscuous mode [ 216.248880][ T9940] bond1 (unregistering): Released all slaves [ 216.311387][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.359414][ T9953] tipc: New replicast peer: 0.0.255.255 [ 216.365687][ T9953] tipc: Enabled bearer , priority 10 [ 216.489130][ T9961] loop5: detected capacity change from 0 to 4096 [ 216.563854][ T9961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.606756][ T9961] lo speed is unknown, defaulting to 1000 [ 217.531745][ T9968] loop3: detected capacity change from 0 to 256 [ 217.548324][ T9970] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.2284'. [ 217.576996][ T9972] loop2: detected capacity change from 0 to 512 [ 217.606512][ T9972] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 217.640302][ T9974] netlink: 'syz.0.2286': attribute type 4 has an invalid length. [ 217.678049][ T9972] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #17: comm syz.2.2285: inline data xattr refers to an external xattr inode [ 217.696276][ T9974] netlink: 'syz.0.2286': attribute type 4 has an invalid length. [ 217.712296][ T9972] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2285: couldn't read orphan inode 17 (err -117) [ 217.746306][ T9972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.813125][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2288'. [ 217.919459][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.958470][ T9994] netlink: 'syz.2.2291': attribute type 1 has an invalid length. [ 217.997945][ T9994] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.039695][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2291'. [ 218.087346][ T9994] bond4 (unregistering): Released all slaves [ 218.151036][ T9615] usb 7-1: enqueue for inactive port 0 [ 218.157051][ T9615] usb 7-1: enqueue for inactive port 0 [ 218.219416][T10000] loop2: detected capacity change from 0 to 512 [ 218.231019][ T9615] vhci_hcd: vhci_device speed not set [ 218.253539][T10000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.274170][T10000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.332383][ T8061] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 218.389833][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.401807][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.436390][ T30] kauditd_printk_skb: 239 callbacks suppressed [ 218.436432][ T30] audit: type=1326 audit(218.377:8311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 218.467506][ T30] audit: type=1326 audit(218.377:8312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 218.490610][ T30] audit: type=1326 audit(218.377:8313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 218.513900][ T30] audit: type=1326 audit(218.377:8314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 218.537491][ T30] audit: type=1326 audit(218.377:8315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 218.551697][ T9364] Process accounting resumed [ 218.560610][ T30] audit: type=1326 audit(218.377:8316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 218.588146][ T30] audit: type=1326 audit(218.377:8317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 218.611741][ T30] audit: type=1326 audit(218.377:8318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 218.635694][ T30] audit: type=1326 audit(218.377:8319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 218.658803][ T30] audit: type=1326 audit(218.377:8320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 218.925674][T10038] lo speed is unknown, defaulting to 1000 [ 219.393343][T10068] Cannot find set identified by id 0 to match [ 219.420226][T10070] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2319'. [ 219.568871][T10081] ªªªªªª: renamed from tunl0 [ 219.665000][T10083] loop2: detected capacity change from 0 to 1024 [ 219.672262][ T1038] page_pool_release_retry() stalled pool shutdown: id 51, 1 inflight 60 sec [ 219.691581][T10083] EXT4-fs: inline encryption not supported [ 219.697480][T10083] EXT4-fs: Ignoring removed i_version option [ 219.712301][T10083] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 219.741713][T10083] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.2323: lblock 2 mapped to illegal pblock 2 (length 1) [ 219.799798][T10083] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.2323: lblock 0 mapped to illegal pblock 48 (length 1) [ 219.851011][T10083] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2323: Failed to acquire dquot type 0 [ 219.912371][T10083] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 219.936792][T10083] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2323: mark_inode_dirty error [ 219.949975][T10093] bridge3: entered allmulticast mode [ 219.957835][T10083] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 219.978150][T10083] EXT4-fs (loop2): 1 orphan inode deleted [ 219.989546][T10083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.002129][ T48] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 220.022902][ T48] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 220.055039][T10097] lo speed is unknown, defaulting to 1000 [ 220.104849][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.114683][ T3320] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 220.131174][ T3320] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 220.151416][ T3320] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 220.586065][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2340'. [ 220.595569][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2340'. [ 220.719677][T10131] loop5: detected capacity change from 0 to 2048 [ 220.744750][T10131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.762059][T10131] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 220.778434][T10131] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 220.791429][T10131] EXT4-fs (loop5): This should not happen!! Data will be lost [ 220.791429][T10131] [ 220.801692][T10131] EXT4-fs (loop5): Total free blocks count 0 [ 220.808564][T10131] EXT4-fs (loop5): Free/Dirty block details [ 220.814545][T10131] EXT4-fs (loop5): free_blocks=2415919104 [ 220.820568][T10131] EXT4-fs (loop5): dirty_blocks=16 [ 220.826899][T10131] EXT4-fs (loop5): Block reservation details [ 220.833082][T10131] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 220.862670][ T48] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 220.878689][T10140] loop3: detected capacity change from 0 to 128 [ 220.892657][T10140] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.935153][T10140] lo speed is unknown, defaulting to 1000 [ 221.134407][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.144875][T10154] loop2: detected capacity change from 0 to 256 [ 221.590402][T10171] lo speed is unknown, defaulting to 1000 [ 222.079438][T10178] lo speed is unknown, defaulting to 1000 [ 222.085476][T10178] lo speed is unknown, defaulting to 1000 [ 222.091961][T10178] lo speed is unknown, defaulting to 1000 [ 222.099156][T10178] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 222.110900][T10178] lo speed is unknown, defaulting to 1000 [ 222.118274][T10178] lo speed is unknown, defaulting to 1000 [ 222.124510][T10178] lo speed is unknown, defaulting to 1000 [ 222.130675][T10178] lo speed is unknown, defaulting to 1000 [ 222.137625][T10178] lo speed is unknown, defaulting to 1000 [ 222.143946][T10178] lo speed is unknown, defaulting to 1000 [ 222.155220][T10178] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2355'. [ 222.164308][T10178] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2355'. [ 222.394830][T10199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.505360][T10207] set match dimension is over the limit! [ 222.539481][T10211] netlink: 'syz.3.2366': attribute type 4 has an invalid length. [ 222.567824][ T9615] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 222.582786][T10211] netlink: 'syz.3.2366': attribute type 4 has an invalid length. [ 222.651300][T10217] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 222.833481][T10223] ªªªªªª: renamed from tunl0 [ 223.266898][T10252] netlink: 'syz.2.2381': attribute type 4 has an invalid length. [ 223.276112][T10251] bond4: (slave veth3): Releasing active interface [ 223.282718][T10251] bond4: (slave veth3): the permanent HWaddr of slave - 16:08:f1:bc:a2:96 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 223.299707][T10251] vlan1: entered promiscuous mode [ 223.311493][T10251] bond4: (slave vlan1): Releasing active interface [ 223.318361][T10254] netlink: 'syz.2.2381': attribute type 4 has an invalid length. [ 223.323571][T10251] vlan1: left promiscuous mode [ 223.340427][T10256] set match dimension is over the limit! [ 223.349621][T10251] team0: Mode changed to "loadbalance" [ 223.358454][ T1038] lo speed is unknown, defaulting to 1000 [ 223.364347][ T1038] syz0: Port: 1 Link ACTIVE [ 223.381366][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'. [ 223.407251][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2383'. [ 223.518673][ T30] kauditd_printk_skb: 899 callbacks suppressed [ 223.518691][ T30] audit: type=1326 audit(223.457:9217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.5.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 223.548043][ T30] audit: type=1326 audit(223.457:9218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.5.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 223.571343][ T30] audit: type=1326 audit(223.457:9219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.5.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 223.594353][ T30] audit: type=1326 audit(223.457:9220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.5.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 223.617601][ T30] audit: type=1326 audit(223.457:9221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.5.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 223.640899][ T30] audit: type=1326 audit(223.457:9222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.5.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 223.664226][ T30] audit: type=1326 audit(223.457:9223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.5.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 223.690314][ T30] audit: type=1326 audit(223.457:9224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.5.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 223.713904][ T30] audit: type=1326 audit(223.457:9225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.5.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 223.738276][ T30] audit: type=1326 audit(223.457:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.5.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 224.187052][T10276] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2390'. [ 224.449935][T10292] loop5: detected capacity change from 0 to 128 [ 224.485073][ T8061] Process accounting resumed [ 224.819313][T10306] set match dimension is over the limit! [ 224.838777][T10292] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.870922][T10308] netlink: 'syz.0.2398': attribute type 21 has an invalid length. [ 224.930567][T10292] lo speed is unknown, defaulting to 1000 [ 224.946633][T10289] loop2: detected capacity change from 0 to 8192 [ 224.983495][T10317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2402'. [ 224.992573][T10317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2402'. [ 225.021375][T10289] loop2: p2 p3 p4 [ 225.025187][T10289] loop2: p2 start 452985600 is beyond EOD, truncated [ 225.032040][T10289] loop2: p3 size 33554432 extends beyond EOD, truncated [ 225.050490][T10292] lo speed is unknown, defaulting to 1000 [ 225.084529][T10289] loop2: p4 start 8388607 is beyond EOD, truncated [ 225.233485][ T6998] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.406519][T10356] loop5: detected capacity change from 0 to 164 [ 226.415758][T10356] isofs_fill_super: root inode is not a directory. Corrupted media? [ 226.445345][T10356] lo speed is unknown, defaulting to 1000 [ 226.510128][T10356] lo speed is unknown, defaulting to 1000 [ 227.058642][T10360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.744701][T10391] tmpfs: Bad value for 'mpol' [ 227.776404][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2432'. [ 227.789939][T10395] hsr_slave_0 (unregistering): left promiscuous mode [ 227.967215][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2436'. [ 227.977162][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2436'. [ 228.153856][T10419] lo speed is unknown, defaulting to 1000 [ 228.183119][T10420] xt_hashlimit: max too large, truncated to 1048576 [ 228.226202][T10419] lo speed is unknown, defaulting to 1000 [ 229.447752][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2448'. [ 229.463528][T10445] vlan0: entered allmulticast mode [ 229.487824][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2448'. [ 229.588321][ T30] kauditd_printk_skb: 831 callbacks suppressed [ 229.588368][ T30] audit: type=1326 audit(229.507:10058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 229.618375][ T30] audit: type=1326 audit(229.527:10059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 229.641563][ T30] audit: type=1326 audit(229.527:10060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 229.664630][ T30] audit: type=1326 audit(229.527:10061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 229.687832][ T30] audit: type=1326 audit(229.527:10062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 229.710875][ T30] audit: type=1326 audit(229.527:10063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 229.734090][ T30] audit: type=1326 audit(229.527:10064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 229.757113][ T30] audit: type=1326 audit(229.527:10065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 229.803024][ T30] audit: type=1326 audit(229.667:10066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 229.826580][ T30] audit: type=1326 audit(229.667:10067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.0.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 229.911869][T10463] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 230.448716][T10466] netlink: 'syz.5.2459': attribute type 13 has an invalid length. [ 230.478091][T10471] lo speed is unknown, defaulting to 1000 [ 230.515172][T10471] lo speed is unknown, defaulting to 1000 [ 230.679974][T10481] wireguard1: entered promiscuous mode [ 230.695270][T10481] wireguard1: entered allmulticast mode [ 230.714546][T10492] netlink: 'syz.2.2464': attribute type 10 has an invalid length. [ 230.722678][T10492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2464'. [ 230.748383][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2465'. [ 230.757716][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2465'. [ 230.767017][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2465'. [ 230.778261][T10492] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.778554][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2465'. [ 230.786705][T10492] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.795606][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2465'. [ 230.812963][T10492] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.827903][T10492] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 230.837547][T10492] team0: Failed to send options change via netlink (err -105) [ 230.845133][T10492] team0: Port device geneve1 added [ 230.867051][T10487] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.878387][T10498] tipc: Bearer : already 2 bearers with priority 10 [ 230.886147][T10498] tipc: Bearer : trying with adjusted priority [ 230.893428][T10498] tipc: New replicast peer: 255.255.255.255 [ 230.900263][T10498] tipc: Enabled bearer , priority 9 [ 230.963449][T10487] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.990938][T10504] futex_wake_op: syz.1.2472 tries to shift op by -1; fix this program [ 230.993915][T10506] netlink: 'syz.0.2473': attribute type 13 has an invalid length. [ 231.042517][T10487] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.109071][T10487] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.125458][T10487] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.139610][T10487] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.157970][T10487] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.170650][T10513] lo speed is unknown, defaulting to 1000 [ 231.226445][T10513] lo speed is unknown, defaulting to 1000 [ 231.333047][T10523] lo speed is unknown, defaulting to 1000 [ 231.375426][T10523] lo speed is unknown, defaulting to 1000 [ 231.440523][T10527] tipc: Enabled bearer , priority 10 [ 231.487970][T10527] tipc: Disabling bearer [ 233.015282][T10551] lo speed is unknown, defaulting to 1000 [ 233.071690][T10551] lo speed is unknown, defaulting to 1000 [ 233.199118][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2492'. [ 233.214135][T10557] hsr_slave_0 (unregistering): left promiscuous mode [ 233.485112][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2495'. [ 234.251387][T10591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.538665][T10610] __nla_validate_parse: 5 callbacks suppressed [ 234.538687][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2513'. [ 234.690878][ T30] kauditd_printk_skb: 514 callbacks suppressed [ 234.690897][ T30] audit: type=1326 audit(234.627:10582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 234.703255][T10612] lo speed is unknown, defaulting to 1000 [ 234.737567][ T30] audit: type=1326 audit(234.627:10583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 234.797941][T10612] lo speed is unknown, defaulting to 1000 [ 234.856831][ T30] audit: type=1326 audit(234.797:10584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10622 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 234.879931][ T30] audit: type=1326 audit(234.797:10585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10622 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 234.903942][ T30] audit: type=1326 audit(234.797:10586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10622 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 234.927053][ T30] audit: type=1326 audit(234.797:10587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10622 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 234.950671][ T30] audit: type=1326 audit(234.797:10588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10622 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 234.974189][ T30] audit: type=1326 audit(234.847:10589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10622 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 234.997827][ T30] audit: type=1326 audit(234.847:10590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10622 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 235.021106][ T30] audit: type=1326 audit(234.847:10591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10622 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 235.173324][T10639] netlink: 'syz.5.2524': attribute type 10 has an invalid length. [ 235.181300][T10639] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2524'. [ 235.190931][T10639] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 235.491800][T10647] vlan0: entered allmulticast mode [ 235.497004][T10647] $Hÿ: entered allmulticast mode [ 235.530926][T10649] tipc: Enabling of bearer rejected, failed to enable media [ 235.700155][T10656] tipc: Enabled bearer , priority 10 [ 235.715409][T10656] tipc: Disabling bearer [ 235.951197][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 235.960408][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 237.090537][T10684] lo speed is unknown, defaulting to 1000 [ 237.103451][T10688] vlan0: entered allmulticast mode [ 237.332782][T10684] lo speed is unknown, defaulting to 1000 [ 237.446784][T10699] futex_wake_op: syz.3.2543 tries to shift op by -1; fix this program [ 238.024749][T10729] loop5: detected capacity change from 0 to 1024 [ 238.058945][T10729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.159969][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.221145][T10748] loop5: detected capacity change from 0 to 512 [ 238.235508][T10748] EXT4-fs (loop5): 1 orphan inode deleted [ 238.242491][T10748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.266589][ T1087] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 238.307385][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.718453][T10784] lo speed is unknown, defaulting to 1000 [ 238.720736][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'. [ 238.733713][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'. [ 238.776469][T10784] lo speed is unknown, defaulting to 1000 [ 239.233176][T10799] lo speed is unknown, defaulting to 1000 [ 239.641388][T10818] netlink: 'syz.0.2590': attribute type 10 has an invalid length. [ 239.649453][T10818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2590'. [ 239.683111][T10818] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 239.683103][T10799] lo speed is unknown, defaulting to 1000 [ 239.746993][T10820] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 239.917367][T10827] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2595'. [ 240.251351][T10837] lo speed is unknown, defaulting to 1000 [ 240.314219][T10837] lo speed is unknown, defaulting to 1000 [ 240.550012][ T56] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 241.163909][ T30] kauditd_printk_skb: 262 callbacks suppressed [ 241.163927][ T30] audit: type=1400 audit(241.106:10853): avc: denied { bind } for pid=10857 comm="syz.3.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 241.244241][ T30] audit: type=1326 audit(241.188:10854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.3.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 241.267535][ T30] audit: type=1326 audit(241.188:10855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.3.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 241.277494][T10865] netlink: 'syz.1.2608': attribute type 10 has an invalid length. [ 241.298735][T10865] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2608'. [ 241.332526][ T30] audit: type=1326 audit(241.260:10856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.3.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 241.355734][ T30] audit: type=1326 audit(241.260:10857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.3.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 241.379061][ T30] audit: type=1326 audit(241.260:10858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.3.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 241.402224][ T30] audit: type=1326 audit(241.260:10859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.3.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 241.426093][ T30] audit: type=1326 audit(241.260:10860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.3.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 241.449354][ T30] audit: type=1326 audit(241.260:10861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.3.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 241.473505][ T30] audit: type=1326 audit(241.260:10862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.3.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 241.505554][T10865] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 241.655380][T10872] pim6reg: entered allmulticast mode [ 241.662834][T10872] pim6reg: left allmulticast mode [ 242.933310][T10910] vlan0: entered promiscuous mode [ 242.938759][T10910] vlan0: left allmulticast mode [ 242.943821][T10910] veth1: left allmulticast mode [ 243.010178][T10919] netlink: 'syz.3.2625': attribute type 10 has an invalid length. [ 243.018273][T10919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2625'. [ 243.029459][T10919] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 243.296157][ T56] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 243.913307][T10950] lo speed is unknown, defaulting to 1000 [ 244.007320][T10950] lo speed is unknown, defaulting to 1000 [ 244.369031][T10966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.418783][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 244.427819][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 244.437742][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 244.448923][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 244.458457][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 244.545077][T10970] netlink: 'syz.1.2642': attribute type 10 has an invalid length. [ 244.553106][T10970] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2642'. [ 244.564918][T10970] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 244.633721][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 245.130610][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2655'. [ 245.219790][T10998] loop5: detected capacity change from 0 to 1024 [ 245.236860][T10998] EXT4-fs: Ignoring removed orlov option [ 245.257930][T10996] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2656'. [ 245.270818][T10996] hsr_slave_1: left promiscuous mode [ 245.277767][T10998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.396953][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.485938][T11020] wireguard1: entered promiscuous mode [ 245.491543][T11020] wireguard1: entered allmulticast mode [ 245.506437][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2666'. [ 246.016118][T11055] wireguard1: entered promiscuous mode [ 246.021744][T11055] wireguard1: entered allmulticast mode [ 246.396982][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2679'. [ 246.647320][T11069] ±ÿ: renamed from team_slave_1 [ 246.950460][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2696'. [ 246.966814][ T30] kauditd_printk_skb: 453 callbacks suppressed [ 246.966832][ T30] audit: type=1400 audit(247.070:11316): avc: denied { getopt } for pid=11100 comm="syz.1.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 247.007246][ T30] audit: type=1326 audit(247.100:11317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11104 comm="syz.0.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 247.030724][ T30] audit: type=1326 audit(247.100:11318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11104 comm="syz.0.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 247.053924][ T30] audit: type=1326 audit(247.100:11319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11104 comm="syz.0.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 247.077446][ T30] audit: type=1326 audit(247.100:11320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11104 comm="syz.0.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 247.100713][ T30] audit: type=1326 audit(247.100:11321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11104 comm="syz.0.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 247.124145][ T30] audit: type=1326 audit(247.100:11322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11104 comm="syz.0.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 247.147737][ T30] audit: type=1326 audit(247.100:11323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11104 comm="syz.0.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 247.170875][ T30] audit: type=1326 audit(247.100:11324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11104 comm="syz.0.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 247.194040][ T30] audit: type=1326 audit(247.100:11325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11104 comm="syz.0.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 247.347123][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.446220][T11124] netlink: 'syz.1.2706': attribute type 4 has an invalid length. [ 247.477424][T11124] netlink: 'syz.1.2706': attribute type 4 has an invalid length. [ 247.569557][T11137] lo speed is unknown, defaulting to 1000 [ 247.632648][T11137] lo speed is unknown, defaulting to 1000 [ 248.465297][T11156] lo speed is unknown, defaulting to 1000 [ 248.545731][T11159] lo speed is unknown, defaulting to 1000 [ 248.550568][T11161] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2717'. [ 248.569991][T11161] hsr_slave_1: left promiscuous mode [ 248.667796][T11169] bridge3: entered allmulticast mode [ 249.056742][T11156] lo speed is unknown, defaulting to 1000 [ 249.147599][T11159] lo speed is unknown, defaulting to 1000 [ 249.416530][T11193] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.475224][T11193] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.560330][T11193] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.640562][T11193] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.791488][T11211] loop5: detected capacity change from 0 to 512 [ 249.800136][T11208] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2734'. [ 249.814407][T11211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.829434][T11210] bridge4: entered allmulticast mode [ 249.858550][T11193] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.910658][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.920455][T11193] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.005523][T11193] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.018795][T11193] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.457974][T11239] lo speed is unknown, defaulting to 1000 [ 250.523441][T11239] lo speed is unknown, defaulting to 1000 [ 250.953364][T11245] netlink: 'syz.0.2745': attribute type 4 has an invalid length. [ 250.974971][T11237] lo speed is unknown, defaulting to 1000 [ 250.975797][T11244] netlink: 'syz.0.2745': attribute type 4 has an invalid length. [ 251.011102][T11242] lo speed is unknown, defaulting to 1000 [ 251.020389][T11247] netlink: 'syz.0.2747': attribute type 1 has an invalid length. [ 251.040127][T11247] bond4: entered promiscuous mode [ 251.046033][T11247] bond4: entered allmulticast mode [ 251.055773][T11247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.071137][T11247] ip6gretap2: entered promiscuous mode [ 251.076996][T11247] ip6gretap2: entered allmulticast mode [ 251.084118][T11247] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 251.134228][T11250] netlink: 'syz.2.2748': attribute type 4 has an invalid length. [ 251.142811][ T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 251.164844][T11250] netlink: 'syz.2.2748': attribute type 4 has an invalid length. [ 251.187424][ T1038] lo speed is unknown, defaulting to 1000 [ 251.193282][ T1038] syz0: Port: 1 Link DOWN [ 251.223814][ T1038] lo speed is unknown, defaulting to 1000 [ 251.229881][ T1038] syz0: Port: 1 Link ACTIVE [ 251.257996][ T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 251.308691][T11242] lo speed is unknown, defaulting to 1000 [ 251.347095][T11237] lo speed is unknown, defaulting to 1000 [ 251.692612][T11265] siw: device registration error -23 [ 251.840628][T11267] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2755'. [ 251.986932][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 251.986947][ T30] audit: type=1326 audit(252.203:11423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 252.062243][ T30] audit: type=1326 audit(252.244:11424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 252.085523][ T30] audit: type=1326 audit(252.244:11425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 252.108847][ T30] audit: type=1326 audit(252.244:11426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 252.132423][ T30] audit: type=1326 audit(252.244:11427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 252.155470][ T30] audit: type=1326 audit(252.264:11428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 252.181274][ T30] audit: type=1326 audit(252.396:11429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 252.204501][ T30] audit: type=1326 audit(252.396:11430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 252.410826][ T30] audit: type=1400 audit(252.631:11431): avc: denied { watch watch_reads } for pid=11283 comm="syz.1.2762" path="/564/file0" dev="tmpfs" ino=3023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 252.526774][T11287] lo speed is unknown, defaulting to 1000 [ 252.632244][T11287] lo speed is unknown, defaulting to 1000 [ 252.906730][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 253.105894][T11317] netlink: 'syz.0.2772': attribute type 4 has an invalid length. [ 253.137094][T11317] netlink: 'syz.0.2772': attribute type 4 has an invalid length. [ 253.382506][T11312] Set syz1 is full, maxelem 65536 reached [ 253.476551][ T30] audit: type=1326 audit(253.710:11432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11320 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 253.688847][T11324] syzkaller0: entered promiscuous mode [ 253.694408][T11324] syzkaller0: entered allmulticast mode [ 254.140029][T11336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2789'. [ 254.447486][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2785'. [ 254.508418][T11354] veth5: entered promiscuous mode [ 254.519186][T11356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2786'. [ 254.528750][T11356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2786'. [ 254.537994][T11356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2786'. [ 254.539507][T11354] bridge0: port 1(veth5) entered blocking state [ 254.553480][T11354] bridge0: port 1(veth5) entered disabled state [ 254.574850][T11356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2786'. [ 254.588398][T11354] veth5: entered allmulticast mode [ 254.793695][T11371] lo speed is unknown, defaulting to 1000 [ 254.878800][T11371] lo speed is unknown, defaulting to 1000 [ 255.806275][T11406] openvswitch: netlink: Message has 6 unknown bytes. [ 256.055843][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.810433][T11439] tipc: Enabling of bearer rejected, failed to enable media [ 256.957151][T11451] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2818'. [ 256.966248][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2818'. [ 256.975293][T11451] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2818'. [ 257.063296][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 257.063357][ T30] audit: type=1326 audit(257.355:11469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 257.101193][T11451] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2818'. [ 257.122251][ T30] audit: type=1326 audit(257.385:11470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 257.195905][ T30] audit: type=1326 audit(257.446:11471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 257.219158][ T30] audit: type=1326 audit(257.446:11472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 257.242657][ T30] audit: type=1326 audit(257.446:11473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 257.265711][ T30] audit: type=1326 audit(257.446:11474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 257.289522][ T30] audit: type=1326 audit(257.446:11475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 257.312793][ T30] audit: type=1326 audit(257.446:11476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 257.335858][ T30] audit: type=1326 audit(257.446:11477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 257.358868][ T30] audit: type=1326 audit(257.446:11478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.3.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea4d9ae929 code=0x7ffc0000 [ 257.644416][T11466] vlan0: entered promiscuous mode [ 257.649587][T11466] ip6gretap0: entered promiscuous mode [ 257.761650][T11476] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.793531][T11476] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.842833][T11476] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.905079][T11476] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.025688][T11476] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.099785][T11476] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.143280][T11476] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.205446][T11476] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.657941][T11503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2837'. [ 258.768890][T11512] vlan0: entered promiscuous mode [ 258.774054][T11512] ip6gretap0: entered promiscuous mode [ 259.432572][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2854'. [ 259.477891][T11546] batadv_slave_0: entered promiscuous mode [ 259.491547][T11546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2855'. [ 259.504754][T11546] batadv_slave_0 (unregistering): left promiscuous mode [ 259.522819][T11551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2856'. [ 259.531964][T11551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2856'. [ 259.540964][T11551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2856'. [ 259.781377][T11570] lo: entered promiscuous mode [ 259.813393][ T8061] lo speed is unknown, defaulting to 1000 [ 259.819351][ T8061] syz2: Port: 1 Link ACTIVE [ 260.134351][T11574] loop5: detected capacity change from 0 to 512 [ 260.209026][T11580] netlink: 'syz.3.2867': attribute type 30 has an invalid length. [ 260.217662][T11574] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.263735][T11580] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.272178][T11580] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.280371][T11580] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.288712][T11580] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.312232][T11574] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 260.327998][T11580] netlink: 'syz.3.2867': attribute type 30 has an invalid length. [ 260.368886][T11574] EXT4-fs (loop5): 1 truncate cleaned up [ 260.387966][T11574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.440951][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.585704][T11595] loop5: detected capacity change from 0 to 1024 [ 260.607755][T11595] EXT4-fs: Ignoring removed nobh option [ 260.613905][T11595] EXT4-fs: Ignoring removed bh option [ 260.637209][T11595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.692642][T11595] netlink: 'syz.5.2871': attribute type 1 has an invalid length. [ 260.787571][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.858970][T11611] loop5: detected capacity change from 0 to 512 [ 260.885762][T11611] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 260.946238][T11611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.037408][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.111836][T11622] lo speed is unknown, defaulting to 1000 [ 261.169147][T11622] lo speed is unknown, defaulting to 1000 [ 261.275903][T11638] SELinux: syz.5.2885 (11638) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 261.351205][T11635] lo speed is unknown, defaulting to 1000 [ 261.553263][T11645] $Hÿ: left promiscuous mode [ 261.558369][T11645] wg2: left promiscuous mode [ 261.563655][T11645] wireguard0: left promiscuous mode [ 261.569115][T11645] macvtap1: left promiscuous mode [ 261.574271][T11645] vxlan0: left promiscuous mode [ 261.579795][T11645] wireguard1: left promiscuous mode [ 261.857479][T11648] lo speed is unknown, defaulting to 1000 [ 262.067252][T11648] lo speed is unknown, defaulting to 1000 [ 262.079465][T11635] lo speed is unknown, defaulting to 1000 [ 262.318115][T11655] __nla_validate_parse: 8 callbacks suppressed [ 262.318133][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2889'. [ 262.685513][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 262.685527][ T30] audit: type=1326 audit(263.039:11631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 262.735795][ T30] audit: type=1326 audit(263.079:11632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 262.759392][ T30] audit: type=1326 audit(263.079:11633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 262.782516][ T30] audit: type=1326 audit(263.079:11634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 262.805921][ T30] audit: type=1326 audit(263.079:11635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 262.895773][T11664] bridge0: port 1(macsec1) entered blocking state [ 262.902327][T11664] bridge0: port 1(macsec1) entered disabled state [ 262.926664][T11664] macsec1: entered allmulticast mode [ 262.932029][T11664] bridge0: entered allmulticast mode [ 262.960181][ T30] audit: type=1326 audit(263.322:11636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 262.985405][T11664] macsec1: left allmulticast mode [ 262.994228][T11664] bridge0: left allmulticast mode [ 263.023933][ T30] audit: type=1326 audit(263.322:11637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 263.047178][ T30] audit: type=1326 audit(263.382:11638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 263.142267][ T30] audit: type=1326 audit(263.382:11639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 263.165462][ T30] audit: type=1326 audit(263.382:11640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11666 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 263.258404][T11686] sch_fq: defrate 2048 ignored. [ 263.270884][T11690] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.449556][T11690] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.648792][T11705] netlink: 'syz.0.2905': attribute type 4 has an invalid length. [ 263.681998][T11705] netlink: 'syz.0.2905': attribute type 4 has an invalid length. [ 263.978331][T11690] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.038954][T11690] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.111575][T11690] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.130911][T11690] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.155979][T11690] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.173668][T11690] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.672047][T11746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2919'. [ 265.498327][T11772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2930'. [ 265.573967][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2934'. [ 265.591356][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2934'. [ 266.047875][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2941'. [ 266.075478][T11806] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 266.317705][T11813] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2944'. [ 266.326867][T11813] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2944'. [ 266.431897][T11813] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2944'. [ 266.441081][T11813] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2944'. [ 266.739940][T11822] tipc: New replicast peer: 0.0.255.255 [ 266.745677][T11822] tipc: Enabled bearer , priority 10 [ 266.756844][T11821] netlink: 'syz.0.2946': attribute type 10 has an invalid length. [ 266.773239][T11827] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.954474][T11837] rdma_op ffff888119a65d80 conn xmit_rdma 0000000000000000 [ 267.199061][T11850] lo speed is unknown, defaulting to 1000 [ 267.250595][T11850] lo speed is unknown, defaulting to 1000 [ 268.647389][T11886] lo speed is unknown, defaulting to 1000 [ 268.717539][T11886] lo speed is unknown, defaulting to 1000 [ 268.730255][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 269.257967][T11897] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.477485][T11904] __nla_validate_parse: 2 callbacks suppressed [ 269.477505][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2974'. [ 269.673968][ T30] kauditd_printk_skb: 299 callbacks suppressed [ 269.673988][ T30] audit: type=1326 audit(270.082:11940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.1.2977" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3899d9e929 code=0x0 [ 271.327547][T11929] lo speed is unknown, defaulting to 1000 [ 271.446279][T11929] lo speed is unknown, defaulting to 1000 [ 271.720601][T11937] netlink: 'syz.3.2984': attribute type 13 has an invalid length. [ 271.743138][T11937] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.751600][T11937] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.760103][T11937] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.768639][T11937] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.144225][T11952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.161640][T11954] ipvlan0: entered promiscuous mode [ 272.168069][T11954] bridge0: port 1(ipvlan0) entered blocking state [ 272.174579][T11954] bridge0: port 1(ipvlan0) entered disabled state [ 272.181754][T11954] ipvlan0: entered allmulticast mode [ 272.187092][T11954] bridge0: entered allmulticast mode [ 272.193016][T11954] ipvlan0: left allmulticast mode [ 272.198185][T11954] bridge0: left allmulticast mode [ 272.361128][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2990'. [ 273.152680][T11979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2998'. [ 273.161901][T11979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2998'. [ 273.172598][ T30] audit: type=1400 audit(273.601:11941): avc: denied { relabelfrom } for pid=11980 comm="syz.0.2999" name="NETLINK" dev="sockfs" ino=39463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 273.197524][ T30] audit: type=1400 audit(273.631:11942): avc: denied { relabelto } for pid=11980 comm="syz.0.2999" name="NETLINK" dev="sockfs" ino=39463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 273.223396][ T30] audit: type=1400 audit(273.631:11943): avc: denied { ioctl } for pid=11980 comm="syz.0.2999" path="socket:[39463]" dev="sockfs" ino=39463 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1 [ 273.235672][T11979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2998'. [ 273.257555][T11979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2998'. [ 273.311732][ T30] audit: type=1326 audit(273.742:11944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11986 comm="syz.5.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 273.334820][ T30] audit: type=1326 audit(273.742:11945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11986 comm="syz.5.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 273.354773][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3000'. [ 273.365470][ T30] audit: type=1326 audit(273.772:11946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11986 comm="syz.5.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 273.390643][ T30] audit: type=1326 audit(273.772:11947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11986 comm="syz.5.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 273.413933][ T30] audit: type=1326 audit(273.772:11948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11986 comm="syz.5.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 273.437108][ T30] audit: type=1326 audit(273.772:11949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11986 comm="syz.5.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6963e929 code=0x7ffc0000 [ 273.478993][T11979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2998'. [ 273.488062][T11979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2998'. [ 273.521253][T11992] SET target dimension over the limit! [ 273.606897][T12013] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.706575][T12013] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.822592][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 273.824344][T12020] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.3011'. [ 274.202633][T12013] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.272402][T12013] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.340958][T12013] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.353778][T12013] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.366590][T12013] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.438639][T12013] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.465617][T12024] capability: warning: `syz.3.3013' uses 32-bit capabilities (legacy support in use) [ 274.570902][T12029] __nla_validate_parse: 1 callbacks suppressed [ 274.570916][T12029] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 274.586251][T12029] netlink: 'wÞ£ÿ': attribute type 30 has an invalid length. [ 274.629897][T12029] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 274.638517][T12029] netlink: 'wÞ£ÿ': attribute type 30 has an invalid length. [ 274.671334][T12029] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.679608][T12029] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.687883][T12029] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.696183][T12029] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.787936][T12034] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3017'. [ 274.797014][T12034] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3017'. [ 275.080362][T12034] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3017'. [ 275.089540][T12034] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3017'. [ 277.823297][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3025'. [ 277.869772][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 277.869789][ T30] audit: type=1326 audit(278.320:12034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.0.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 277.915292][ T30] audit: type=1326 audit(278.350:12035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.0.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 277.938488][ T30] audit: type=1326 audit(278.350:12036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.0.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 277.961858][ T30] audit: type=1326 audit(278.350:12037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.0.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 277.985021][ T30] audit: type=1326 audit(278.350:12038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.0.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 278.008274][ T30] audit: type=1326 audit(278.350:12039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.0.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 278.031436][ T30] audit: type=1326 audit(278.350:12040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.0.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 278.054607][ T30] audit: type=1326 audit(278.350:12041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.0.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4259d40847 code=0x7ffc0000 [ 278.077650][ T30] audit: type=1326 audit(278.350:12042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.0.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4259d407bc code=0x7ffc0000 [ 278.100924][ T30] audit: type=1326 audit(278.350:12043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.0.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4259d406f4 code=0x7ffc0000 [ 278.729845][T12111] loop5: detected capacity change from 0 to 1024 [ 278.795290][T12111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.837225][T12111] netlink: 'syz.5.3038': attribute type 10 has an invalid length. [ 278.858343][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.879794][T12115] lo speed is unknown, defaulting to 1000 [ 278.901400][T12123] loop5: detected capacity change from 0 to 512 [ 278.935002][T12123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.952619][T12115] lo speed is unknown, defaulting to 1000 [ 279.557580][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3049'. [ 279.746043][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.769114][T12147] loop5: detected capacity change from 0 to 764 [ 279.776470][T12147] rock: directory entry would overflow storage [ 279.782683][T12147] rock: sig=0x4654, size=5, remaining=4 [ 279.838339][T12151] netlink: 'syz.2.3053': attribute type 13 has an invalid length. [ 279.865098][T12151] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.873784][T12151] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.882718][T12151] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.891215][T12151] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.105208][T12161] lo speed is unknown, defaulting to 1000 [ 280.108896][ T1038] lo speed is unknown, defaulting to 1000 [ 280.116820][ T1038] syz0: Port: 1 Link DOWN [ 280.335725][T12161] lo speed is unknown, defaulting to 1000 [ 281.302501][T12176] Set syz1 is full, maxelem 65536 reached [ 281.378798][T12181] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3061'. [ 281.387955][T12181] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3061'. [ 281.399222][ T56] smc: removing ib device syz1 [ 281.445387][T12181] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3061'. [ 281.450177][T12191] SET target dimension over the limit! [ 281.454546][T12181] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3061'. [ 281.501522][T12181] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3061'. [ 281.510659][T12181] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3061'. [ 281.684623][T12204] netlink: 'syz.0.3068': attribute type 10 has an invalid length. [ 281.763336][T12208] loop5: detected capacity change from 0 to 1024 [ 281.776706][T12208] EXT4-fs: Ignoring removed bh option [ 281.782220][T12208] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.840517][T12208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.881057][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3069'. [ 281.910612][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3072'. [ 281.950934][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.460186][T12240] netlink: 'syz.3.3081': attribute type 10 has an invalid length. [ 282.548306][T12245] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3084'. [ 282.918048][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 282.927556][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 282.927573][ T30] audit: type=1326 audit(283.375:12126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 282.957029][ T30] audit: type=1326 audit(283.375:12127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 282.980324][ T30] audit: type=1326 audit(283.375:12128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 283.003479][ T30] audit: type=1326 audit(283.375:12129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 283.026485][ T30] audit: type=1326 audit(283.375:12130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 283.049567][ T30] audit: type=1326 audit(283.375:12131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 283.072576][ T30] audit: type=1326 audit(283.375:12132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 283.095663][ T30] audit: type=1326 audit(283.375:12133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 283.118802][ T30] audit: type=1326 audit(283.375:12134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 283.141819][ T30] audit: type=1326 audit(283.375:12135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4259d3e929 code=0x7ffc0000 [ 283.165439][T12254] veth5: left allmulticast mode [ 283.170529][T12254] bridge0: port 1(veth5) entered disabled state [ 283.798069][T12265] IPVS: Error connecting to the multicast addr [ 285.542537][T12325] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 285.834635][T12332] lo speed is unknown, defaulting to 1000 [ 285.841028][T12332] lo speed is unknown, defaulting to 1000 [ 286.604663][T12360] openvswitch: netlink: Message has 6 unknown bytes. [ 286.614753][T12361] __nla_validate_parse: 4 callbacks suppressed [ 286.614792][T12361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3121'. [ 286.630196][T12361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3121'. [ 286.680826][T12361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3121'. [ 286.689930][T12361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3121'. [ 286.722309][T12361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3121'. [ 286.731595][T12361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3121'. [ 286.800328][T12378] loop5: detected capacity change from 0 to 128 [ 286.889743][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3128'. [ 287.004546][T12389] 9pnet_fd: Insufficient options for proto=fd [ 287.134317][T12401] loop5: detected capacity change from 0 to 128 [ 287.151262][T12401] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.176066][T12401] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.218180][ T6998] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.652843][T12420] lo speed is unknown, defaulting to 1000 [ 287.659284][T12420] lo speed is unknown, defaulting to 1000 [ 288.013992][T12425] lo speed is unknown, defaulting to 1000 [ 288.020242][T12425] lo speed is unknown, defaulting to 1000 [ 288.119078][ T30] kauditd_printk_skb: 134 callbacks suppressed [ 288.119096][ T30] audit: type=1326 audit(288.587:12270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.1.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 288.174922][T12433] IPVS: Error connecting to the multicast addr [ 288.179542][ T30] audit: type=1326 audit(288.587:12271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.1.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 288.204192][ T30] audit: type=1326 audit(288.597:12272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.1.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 288.227181][ T30] audit: type=1326 audit(288.597:12273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.1.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 288.250195][ T30] audit: type=1326 audit(288.597:12274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.1.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 288.273855][ T30] audit: type=1326 audit(288.597:12275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.1.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 288.296880][ T30] audit: type=1326 audit(288.597:12276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.1.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 288.319901][ T30] audit: type=1326 audit(288.597:12277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.1.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 288.343187][ T30] audit: type=1326 audit(288.597:12278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.1.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 288.366488][ T30] audit: type=1326 audit(288.597:12279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.1.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3899d9e929 code=0x7ffc0000 [ 288.436968][T12431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3144'. [ 288.473811][T12431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3144'. [ 288.498734][T12447] macvlan2: entered promiscuous mode [ 288.504119][T12447] macvlan2: entered allmulticast mode [ 288.511860][T12447] bond0: (slave macvlan2): Opening slave failed [ 288.624625][T12453] block device autoloading is deprecated and will be removed. [ 288.759928][T12443] loop5: detected capacity change from 0 to 128 [ 288.967205][T12475] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 289.007069][T12473] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3158'. [ 289.623525][T12493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12493 comm=syz.3.3170 [ 290.157924][T12518] loop5: detected capacity change from 0 to 512 [ 290.217695][T12518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.533462][ C1] ================================================================== [ 290.541611][ C1] BUG: KCSAN: data-race in do_select / pollwake [ 290.547966][ C1] [ 290.550288][ C1] read to 0xffffc9000c0239e0 of 4 bytes by task 12508 on cpu 0: [ 290.558085][ C1] do_select+0xe48/0xf50 [ 290.562328][ C1] core_sys_select+0x3d7/0x6e0 [ 290.567109][ C1] __se_sys_pselect6+0x216/0x280 [ 290.572139][ C1] __x64_sys_pselect6+0x78/0x90 [ 290.576987][ C1] x64_sys_call+0x1caa/0x2fb0 [ 290.581665][ C1] do_syscall_64+0xd2/0x200 [ 290.586182][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.592079][ C1] [ 290.594397][ C1] write to 0xffffc9000c0239e0 of 4 bytes by interrupt on cpu 1: [ 290.602020][ C1] pollwake+0xb6/0x100 [ 290.606105][ C1] __wake_up+0x66/0xb0 [ 290.610330][ C1] bpf_ringbuf_notify+0x22/0x30 [ 290.615193][ C1] irq_work_run+0xe2/0x2d0 [ 290.619619][ C1] __sysvec_irq_work+0x22/0x170 [ 290.624480][ C1] sysvec_irq_work+0x66/0x80 [ 290.629069][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 290.634016][ C1] native_apic_msr_write+0x3d/0x60 [ 290.639137][ C1] x2apic_send_IPI_self+0x10/0x20 [ 290.644185][ C1] arch_irq_work_raise+0x46/0x50 [ 290.649134][ C1] __irq_work_queue_local+0x10f/0x2c0 [ 290.654527][ C1] irq_work_queue+0x70/0x100 [ 290.659126][ C1] bpf_ringbuf_discard+0xd3/0xf0 [ 290.664059][ C1] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 290.669549][ C1] bpf_trace_run3+0x10f/0x1d0 [ 290.674330][ C1] kmem_cache_free+0x257/0x300 [ 290.679095][ C1] __io_req_caches_free+0x69/0x170 [ 290.684208][ C1] io_queue_deferred+0x1e/0x220 [ 290.689059][ C1] io_drain_req+0x24c/0x350 [ 290.693561][ C1] io_queue_sqe_fallback+0xbb/0xc0 [ 290.698688][ C1] io_submit_sqes+0xbad/0xfd0 [ 290.703380][ C1] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 290.708935][ C1] __x64_sys_io_uring_enter+0x78/0x90 [ 290.714322][ C1] x64_sys_call+0x28c8/0x2fb0 [ 290.719000][ C1] do_syscall_64+0xd2/0x200 [ 290.723521][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.729421][ C1] [ 290.731737][ C1] value changed: 0x00000001 -> 0x00000000 [ 290.737484][ C1] [ 290.739822][ C1] Reported by Kernel Concurrency Sanitizer on: [ 290.746144][ C1] CPU: 1 UID: 0 PID: 12525 Comm: syz.0.3180 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 290.758303][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.768360][ C1] ================================================================== [ 290.994717][ T6998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.