last executing test programs: 7m24.594354255s ago: executing program 32 (id=368): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001400b59500000000000000000a100000", @ANYRES32=r2, @ANYBLOB="14000200000000000000000000001b000000000014000100fe8000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001400b59500000000000040000a000000", @ANYRES32=r2, @ANYBLOB="14000200000000ff"], 0x54}}, 0x0) 7m21.277396102s ago: executing program 33 (id=440): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8000000008}, 0x18) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1b, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x62de}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x6) 6m27.614301594s ago: executing program 34 (id=2052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000340)="87741d", 0x3, 0x0, &(0x7f00000000c0)={0x11, 0xe, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m6.767863866s ago: executing program 35 (id=2231): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m5.572007247s ago: executing program 36 (id=2255): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000040), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1}) 6m4.796528489s ago: executing program 37 (id=2268): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmmsg$inet(r0, &(0x7f000000c3c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) 5m54.333597958s ago: executing program 38 (id=2743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000008c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) 5m25.357395903s ago: executing program 39 (id=3411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab23bd7000fdffffff320000"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 5m19.573655149s ago: executing program 40 (id=3602): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 4m52.882402053s ago: executing program 41 (id=4420): syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4m44.189766988s ago: executing program 3 (id=4807): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x805) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)="c0e0", 0x2}], 0x1}, 0x20803) 4m44.16344113s ago: executing program 3 (id=4808): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') unlinkat(r2, &(0x7f0000000040)='./file1\x00', 0x0) 4m44.129319753s ago: executing program 3 (id=4809): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 4m44.057246s ago: executing program 3 (id=4815): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 4m44.017549304s ago: executing program 3 (id=4817): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 4m43.915671663s ago: executing program 3 (id=4824): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create(0x2) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x7) 4m43.900089115s ago: executing program 42 (id=4824): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create(0x2) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x7) 4m7.955621395s ago: executing program 0 (id=6072): r0 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0xffe0}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) 4m7.90669242s ago: executing program 0 (id=6076): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x21}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x50, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0x8, 0x0, 0x1}) 4m7.844497915s ago: executing program 0 (id=6078): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r0]) 4m7.831371256s ago: executing program 0 (id=6080): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80000, 0x0) 4m7.80185095s ago: executing program 0 (id=6082): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2c, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}}, 0x40084) 4m7.36245842s ago: executing program 0 (id=6100): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) 4m7.335347033s ago: executing program 43 (id=6100): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) 3m42.022256508s ago: executing program 8 (id=6900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x4, 0x4, 0x4c8, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x198, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x7}, {0x1, 0x1, 0x4}, {0x4, 0x5, 0x5}, 0xfffffffc, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) 3m41.982694272s ago: executing program 8 (id=6912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000007000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b706000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xf36c, 0x1000, 0x5, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x2400, 0x1}) io_uring_enter(r2, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) 3m41.754904453s ago: executing program 8 (id=6907): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x17d0, &(0x7f0000000240)={0x0, 0x0, 0x80, 0x0, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x3, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) 3m41.643505723s ago: executing program 8 (id=6910): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x183) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) 3m41.481175898s ago: executing program 8 (id=6922): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e21, 0xffffffff, @loopback, 0xbf}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000f40)=0x6c, 0x4) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/4120, 0x1018}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 3m41.449399561s ago: executing program 8 (id=6914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200381, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00', 0x1}]) 3m41.394122766s ago: executing program 44 (id=6914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200381, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00', 0x1}]) 3m12.989634798s ago: executing program 2 (id=7762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb7}, 0x94) 3m12.856162961s ago: executing program 2 (id=7766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3m12.763450749s ago: executing program 2 (id=7768): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) 3m12.721854503s ago: executing program 2 (id=7771): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 3m12.702654425s ago: executing program 2 (id=7773): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 3m12.692266886s ago: executing program 2 (id=7774): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x30a7, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x1a, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m12.672821548s ago: executing program 45 (id=7774): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x30a7, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x1a, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m38.922881225s ago: executing program 4 (id=8735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m38.636279071s ago: executing program 4 (id=8739): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000b00)={{0x80, 0x3d}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x3, 0x3, 0x4, 0x1, 0x0, 0x6}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) close(r1) 2m38.598869465s ago: executing program 4 (id=8742): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000440)='\a\x00\x00\x00\x00\x00\x00\x00', 0x8) 2m38.565135718s ago: executing program 4 (id=8746): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x4020400) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1098, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 2m38.511560923s ago: executing program 4 (id=8749): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000380)={@multicast2, @loopback, @remote}, 0xc) 2m38.446817129s ago: executing program 4 (id=8751): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) 2m38.446679179s ago: executing program 46 (id=8751): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) 1.629771159s ago: executing program 7 (id=12681): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 1.549723087s ago: executing program 7 (id=12682): r0 = semget$private(0x0, 0x4, 0x96) semop(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) close(r3) 1.540342608s ago: executing program 7 (id=12683): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[], 0x6a5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x4, 0x3}}, 0x2e) write$char_usb(r0, &(0x7f0000002600)="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", 0x92e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 1.417796559s ago: executing program 7 (id=12685): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) 1.415978859s ago: executing program 7 (id=12686): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = socket(0xa, 0x2400000001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x5, &(0x7f0000000400)={0x2, 0xffffffff, 0x1}) rt_tgsigqueueinfo(r2, r1, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1.372951723s ago: executing program 7 (id=12689): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4010d00, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.244004365s ago: executing program 6 (id=12693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYRESOCT], 0x10b8}, 0x4008000) 1.221947117s ago: executing program 6 (id=12694): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4}, 0x50) close(r3) 1.160459873s ago: executing program 6 (id=12695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x1a321033a0a7778c, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000130000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x9}, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfffff001}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x8080) 1.160017713s ago: executing program 6 (id=12696): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x40}], 0x1, 0x2, 0x0) 766.476709ms ago: executing program 1 (id=12701): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 681.723427ms ago: executing program 1 (id=12704): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) socket(0x10, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$KDGKBDIACR(r0, 0x4bfa, 0x0) 679.830737ms ago: executing program 1 (id=12714): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) close(r1) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 650.61716ms ago: executing program 5 (id=12707): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x3, 0x9100, 0x3) close_range(r0, r2, 0x0) 643.968481ms ago: executing program 1 (id=12708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) flock(r3, 0x2) dup3(r3, r2, 0x0) 591.811736ms ago: executing program 9 (id=12710): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) unshare(0x2c020400) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x351e, 0x483, 0x0, 0x0, 0x0) 513.827053ms ago: executing program 1 (id=12711): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 513.596243ms ago: executing program 9 (id=12712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffe40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xc0200, 0x100) 501.574404ms ago: executing program 1 (id=12713): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 484.361055ms ago: executing program 9 (id=12715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000540), 0x80000000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc"], 0x50) 420.223371ms ago: executing program 5 (id=12716): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) mq_open(0x0, 0x2, 0x80, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) 330.59499ms ago: executing program 6 (id=12717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0xfffffffe, 0x163}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x1000}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 330.44827ms ago: executing program 5 (id=12718): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 292.161283ms ago: executing program 5 (id=12719): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x30000008}) dup3(r2, r3, 0x0) 291.567483ms ago: executing program 9 (id=12720): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0xb, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 157.787456ms ago: executing program 5 (id=12721): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff010000000000000200130002"], 0x98}, 0x1, 0x7}, 0x0) 132.632698ms ago: executing program 9 (id=12722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf250800000018000280140003801000018004000300080001000f0000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 729.89µs ago: executing program 9 (id=12723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x8c4618b458db9105, @hyper}, 0x10) connect$vsock_stream(r2, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) 426.92µs ago: executing program 6 (id=12724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2d, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xffff, 0xc}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 0s ago: executing program 5 (id=12725): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvfrom$inet(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 5][T28960] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.10189: lblock 2 mapped to illegal pblock 2 (length 1) [ 393.124649][T28960] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.10189: lblock 0 mapped to illegal pblock 48 (length 1) [ 393.132591][T28966] loop9: detected capacity change from 0 to 512 [ 393.139289][T28960] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.10189: Failed to acquire dquot type 0 [ 393.158126][T28960] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 393.160204][T28966] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 393.175597][T28960] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.10189: mark_inode_dirty error [ 393.179734][T28966] EXT4-fs (loop9): 1 truncate cleaned up [ 393.190114][T28960] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 393.195406][T28966] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.238941][T28960] EXT4-fs (loop6): 1 orphan inode deleted [ 393.249804][T28960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.264776][ T4291] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 393.288272][ T4291] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:21: Failed to release dquot type 0 [ 393.300027][T28960] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.10189: Invalid inode table block 1 in block_group 0 [ 393.311090][T20554] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.313929][T28960] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 393.332029][T28960] EXT4-fs error (device loop6): ext4_setattr:5877: inode #2: comm syz.6.10189: mark_inode_dirty error [ 393.381510][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.392854][T28975] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.406803][ T4341] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1) [ 393.425787][ T4341] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:63: Failed to release dquot type 0 [ 393.438499][T22900] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 393.470407][T22900] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 393.483647][T22900] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 393.498616][T20554] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.516188][T28989] netlink: 'syz.5.10200': attribute type 30 has an invalid length. [ 393.564813][ T3489] page_pool_release_retry() stalled pool shutdown: id 275, 1 inflight 60 sec [ 395.134364][T29083] __nla_validate_parse: 6 callbacks suppressed [ 395.134386][T29083] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10238'. [ 395.220817][T29091] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10242'. [ 395.230965][T29091] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 395.241675][T29091] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 395.269085][T29096] netlink: 'syz.7.10244': attribute type 1 has an invalid length. [ 395.311661][T29096] 8021q: adding VLAN 0 to HW filter on device bond3 [ 395.365055][T29106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.388458][T29106] bond3: (slave batadv0): making interface the new active one [ 395.452283][T29106] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 395.496610][T29114] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10251'. [ 395.523079][T29114] netlink: 100 bytes leftover after parsing attributes in process `syz.5.10251'. [ 395.618019][T29122] set_capacity_and_notify: 1 callbacks suppressed [ 395.618036][T29122] loop7: detected capacity change from 0 to 512 [ 395.662283][T29122] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.863917][T29142] syzkaller0: entered allmulticast mode [ 395.869916][T29142] syzkaller0: entered promiscuous mode [ 395.879616][T29142] syzkaller0 (unregistering): left allmulticast mode [ 395.886583][T29142] syzkaller0 (unregistering): left promiscuous mode [ 395.916943][T25318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.280397][T29175] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10279'. [ 396.376307][T29181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10281'. [ 396.610206][T29194] SELinux: failed to load policy [ 396.663055][T29207] netlink: 7 bytes leftover after parsing attributes in process `syz.5.10293'. [ 396.704896][T29209] macsec1: entered promiscuous mode [ 396.710173][T29209] bridge0: entered promiscuous mode [ 396.732073][T29209] bridge0: port 1(macsec1) entered blocking state [ 396.738810][T29209] bridge0: port 1(macsec1) entered disabled state [ 396.750319][T29209] macsec1: entered allmulticast mode [ 396.755708][T29209] bridge0: entered allmulticast mode [ 396.762613][T29209] macsec1: left allmulticast mode [ 396.767803][T29209] bridge0: left allmulticast mode [ 396.774679][T29209] bridge0: left promiscuous mode [ 396.810191][T29222] netlink: 'syz.6.10300': attribute type 30 has an invalid length. [ 397.013773][T29243] loop6: detected capacity change from 0 to 256 [ 397.141019][T29246] loop6: detected capacity change from 0 to 512 [ 397.164405][T29246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.181782][T29246] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c018, mo2=0002] [ 397.190184][T29246] System zones: 0-2, 18-18, 34-34 [ 397.196926][T29246] EXT4-fs (loop6): orphan cleanup on readonly fs [ 397.204896][T29246] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 397.220872][T29246] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 397.227759][T29246] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz.6.10309: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 397.249178][T29246] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.10309: couldn't read orphan inode 13 (err -117) [ 397.262253][T29246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.276845][T29246] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 397.286791][T29246] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c018, mo2=0002] [ 397.304819][T29246] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 397.342529][T29249] netlink: 'syz.7.10310': attribute type 10 has an invalid length. [ 397.350525][T29249] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10310'. [ 397.359844][T29249] dummy0: entered promiscuous mode [ 397.366411][T29249] bridge0: port 1(dummy0) entered blocking state [ 397.372929][T29249] bridge0: port 1(dummy0) entered disabled state [ 397.379706][T29249] dummy0: entered allmulticast mode [ 397.379851][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.385753][T29249] bridge0: port 1(dummy0) entered blocking state [ 397.400380][T29249] bridge0: port 1(dummy0) entered forwarding state [ 397.432065][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 397.432084][ T29] audit: type=1326 audit(397.408:12204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29251 comm="syz.6.10311" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4a90cf749 code=0x0 [ 397.766060][ T29] audit: type=1326 audit(397.748:12205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29276 comm="syz.7.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 397.769305][T29278] loop7: detected capacity change from 0 to 512 [ 397.789879][ T29] audit: type=1326 audit(397.748:12206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29276 comm="syz.7.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 397.819512][ T29] audit: type=1326 audit(397.748:12207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29276 comm="syz.7.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 397.842804][ T29] audit: type=1326 audit(397.748:12208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29276 comm="syz.7.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 397.866951][ T29] audit: type=1326 audit(397.748:12209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29276 comm="syz.7.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 397.890234][ T29] audit: type=1326 audit(397.748:12210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29276 comm="syz.7.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91ef8af783 code=0x7ffc0000 [ 397.922263][ T29] audit: type=1326 audit(397.748:12211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29276 comm="syz.7.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 397.923722][T29278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.945513][ T29] audit: type=1326 audit(397.748:12212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29276 comm="syz.7.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f91ef8ae1ff code=0x7ffc0000 [ 397.945552][ T29] audit: type=1326 audit(397.748:12213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29276 comm="syz.7.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f91ef8af7d7 code=0x7ffc0000 [ 397.959085][T29277] loop9: detected capacity change from 0 to 128 [ 398.038986][T29283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10324'. [ 398.054999][T29285] loop9: detected capacity change from 0 to 164 [ 398.062349][T25318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.062746][T29283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10324'. [ 398.081160][T29285] Unable to read rock-ridge attributes [ 398.089209][T29285] Unable to read rock-ridge attributes [ 398.946654][T29338] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 399.063000][T29353] loop9: detected capacity change from 0 to 512 [ 399.087871][T29353] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 399.120250][T29353] EXT4-fs (loop9): 1 truncate cleaned up [ 399.130783][T29360] veth6: entered promiscuous mode [ 399.136168][T29360] veth6: entered allmulticast mode [ 399.146962][T29353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.184283][T29364] tipc: Bearer : already 2 bearers with priority 10 [ 399.191959][T29364] tipc: Bearer : trying with adjusted priority [ 399.244204][T29364] tipc: New replicast peer: 255.255.255.255 [ 399.250319][T29364] tipc: Enabled bearer , priority 9 [ 399.265840][T20554] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.322008][T29366] loop6: detected capacity change from 0 to 8192 [ 399.445421][T22900] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 399.453425][T22900] FAT-fs (loop6): Filesystem has been set read-only [ 399.472362][T29380] netlink: 'syz.5.10366': attribute type 5 has an invalid length. [ 399.551651][T29390] team0 (unregistering): Port device team_slave_0 removed [ 399.621215][T29400] loop7: detected capacity change from 0 to 512 [ 399.647435][T29400] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.10375: corrupted in-inode xattr: invalid ea_ino [ 399.690935][T29400] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.10375: couldn't read orphan inode 15 (err -117) [ 399.699325][T29407] pimreg: entered allmulticast mode [ 399.715150][T29407] pimreg: left allmulticast mode [ 399.757028][T29400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.836545][T25318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.257757][T29451] netlink: 'syz.6.10398': attribute type 3 has an invalid length. [ 400.265695][T29451] netlink: 'syz.6.10398': attribute type 1 has an invalid length. [ 400.273550][T29451] __nla_validate_parse: 4 callbacks suppressed [ 400.273568][T29451] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.10398'. [ 400.557970][T29486] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10408'. [ 400.567268][T29486] unsupported nlmsg_type 40 [ 400.790200][T29502] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10417'. [ 401.062302][T29523] loop9: detected capacity change from 0 to 1024 [ 401.072806][T29523] EXT4-fs: Ignoring removed bh option [ 401.078454][T29523] EXT4-fs: inline encryption not supported [ 401.085325][T29523] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 401.097054][T29523] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 401.106455][T29523] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 2: comm syz.9.10426: lblock 2 mapped to illegal pblock 2 (length 1) [ 401.122300][T29523] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 48: comm syz.9.10426: lblock 0 mapped to illegal pblock 48 (length 1) [ 401.137028][T29523] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.10426: Failed to acquire dquot type 0 [ 401.154069][T29523] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 401.163672][T29523] EXT4-fs error (device loop9): ext4_evict_inode:253: inode #11: comm syz.9.10426: mark_inode_dirty error [ 401.178558][T29523] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 401.188973][T29523] EXT4-fs (loop9): 1 orphan inode deleted [ 401.195355][T29523] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.208213][ T31] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 401.229779][ T31] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 401.242102][T29523] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.251695][T29523] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz.9.10426: Invalid inode table block 1 in block_group 0 [ 401.283368][T29523] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 401.299555][T29523] EXT4-fs error (device loop9): ext4_quota_off:7270: inode #3: comm syz.9.10426: mark_inode_dirty error [ 401.318434][T29531] loop7: detected capacity change from 0 to 1024 [ 401.347842][T29531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.385406][T29537] netlink: 'syz.9.10431': attribute type 10 has an invalid length. [ 401.396646][T29537] netlink: 'syz.9.10431': attribute type 10 has an invalid length. [ 401.405309][T25318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.423503][T29537] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 401.532590][T29551] loop7: detected capacity change from 0 to 1024 [ 401.545155][T29551] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 401.556232][T29551] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 401.569075][T29551] JBD2: no valid journal superblock found [ 401.574970][T29551] EXT4-fs (loop7): Could not load journal inode [ 401.618779][T29558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29558 comm=syz.9.10441 [ 401.722933][T29573] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10445'. [ 401.732121][T29573] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10445'. [ 401.804660][T29572] loop7: detected capacity change from 0 to 8192 [ 401.953123][T25318] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 401.961136][T25318] FAT-fs (loop7): Filesystem has been set read-only [ 402.307982][T29588] netlink: 'syz.7.10455': attribute type 83 has an invalid length. [ 402.388074][T29592] netlink: 'syz.7.10457': attribute type 1 has an invalid length. [ 402.396041][T29592] netlink: 'syz.7.10457': attribute type 4 has an invalid length. [ 402.403934][T29592] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.10457'. [ 402.447254][T29592] netlink: 'syz.7.10457': attribute type 1 has an invalid length. [ 402.455383][T29592] netlink: 'syz.7.10457': attribute type 4 has an invalid length. [ 402.463251][T29592] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.10457'. [ 402.579422][T29601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29601 comm=syz.9.10461 [ 402.789689][T29623] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10470'. [ 402.801682][T29622] loop6: detected capacity change from 0 to 1024 [ 402.816387][T29622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 402.946844][T29622] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.10469: lblock 0 mapped to illegal pblock 0 (length 1) [ 402.967047][T29622] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 402.979476][T29622] EXT4-fs (loop6): This should not happen!! Data will be lost [ 402.979476][T29622] [ 403.035528][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 403.035548][ T29] audit: type=1400 audit(403.018:12412): avc: denied { create } for pid=29631 comm="syz.9.10472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 403.046865][T29633] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.10469: lblock 0 mapped to illegal pblock 0 (length 1) [ 403.104786][ T29] audit: type=1400 audit(403.078:12413): avc: denied { write } for pid=29631 comm="syz.9.10472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 403.172248][T29633] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 403.184676][T29633] EXT4-fs (loop6): This should not happen!! Data will be lost [ 403.184676][T29633] [ 403.332527][ T31] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:1: lblock 4 mapped to illegal pblock 4 (length 2) [ 403.411282][ T31] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 403.424498][ T31] EXT4-fs (loop6): This should not happen!! Data will be lost [ 403.424498][ T31] [ 403.435653][ T31] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 403.476626][ T31] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 403.489693][ T31] EXT4-fs (loop6): This should not happen!! Data will be lost [ 403.489693][ T31] [ 403.548461][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 403.598466][ T29] audit: type=1326 audit(403.578:12414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29681 comm="syz.6.10477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 403.657758][ T29] audit: type=1326 audit(403.578:12415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29681 comm="syz.6.10477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 403.681007][ T29] audit: type=1326 audit(403.578:12416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29681 comm="syz.6.10477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 403.704691][ T29] audit: type=1326 audit(403.578:12417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29681 comm="syz.6.10477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 403.727950][ T29] audit: type=1326 audit(403.618:12418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29681 comm="syz.6.10477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 403.731387][T29692] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10482'. [ 403.751278][ T29] audit: type=1326 audit(403.618:12419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29681 comm="syz.6.10477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 403.794005][ T29] audit: type=1326 audit(403.648:12420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29681 comm="syz.6.10477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 403.818078][ T29] audit: type=1326 audit(403.648:12421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29681 comm="syz.6.10477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 403.859508][T29698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10484'. [ 404.354083][T29775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.362820][T29775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.623610][T29791] loop6: detected capacity change from 0 to 7 [ 404.624860][T29790] ip6_vti0 speed is unknown, defaulting to 1000 [ 404.801535][T29803] ip6gre4: entered allmulticast mode [ 405.143391][T29817] netlink: 'syz.6.10518': attribute type 12 has an invalid length. [ 405.343227][T29838] __nla_validate_parse: 9 callbacks suppressed [ 405.343243][T29838] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10529'. [ 405.411321][T29846] netlink: 'syz.6.10532': attribute type 30 has an invalid length. [ 405.934071][T29897] netlink: 'syz.1.10554': attribute type 1 has an invalid length. [ 405.941968][T29897] netlink: 'syz.1.10554': attribute type 2 has an invalid length. [ 405.951024][T29897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10554'. [ 406.008431][T29901] loop9: detected capacity change from 0 to 128 [ 406.011076][T29897] ip6_vti0 speed is unknown, defaulting to 1000 [ 406.481325][T29929] netlink: 'syz.6.10569': attribute type 10 has an invalid length. [ 406.489433][T29929] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10569'. [ 406.498917][T29929] dummy0: entered promiscuous mode [ 406.505271][T29929] bridge0: port 1(dummy0) entered blocking state [ 406.511759][T29929] bridge0: port 1(dummy0) entered disabled state [ 406.524313][T29929] dummy0: entered allmulticast mode [ 406.669747][T29939] ip6tnl1: entered promiscuous mode [ 406.675793][T29939] ip6tnl1: entered allmulticast mode [ 406.949315][T29953] loop7: detected capacity change from 0 to 512 [ 406.963339][T29953] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 406.983618][T29953] EXT4-fs (loop7): 1 truncate cleaned up [ 406.994343][T29953] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.069276][T25318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.105104][T29970] loop6: detected capacity change from 0 to 128 [ 407.577053][T29992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10592'. [ 407.735523][T29997] loop7: detected capacity change from 0 to 1024 [ 407.743631][T29997] EXT4-fs: Ignoring removed bh option [ 407.779276][T29997] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.835369][T25318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.173925][T29985] loop6: detected capacity change from 0 to 1024 [ 408.210209][T29985] EXT4-fs: Ignoring removed nomblk_io_submit option [ 408.248876][T30026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10606'. [ 408.248999][T30026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10606'. [ 408.277716][T29985] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 408.286977][T29985] System zones: 0-1, 3-36 [ 408.293297][T29985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.323683][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.345055][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 408.345076][ T29] audit: type=1326 audit(424.329:12549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30030 comm="syz.6.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 408.378617][ T29] audit: type=1326 audit(424.329:12550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30030 comm="syz.6.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 408.382418][T30033] netlink: 'syz.5.10609': attribute type 1 has an invalid length. [ 408.401996][ T29] audit: type=1326 audit(424.359:12551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30030 comm="syz.6.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 408.431553][T30033] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.433010][ T29] audit: type=1326 audit(424.359:12552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30030 comm="syz.6.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 408.462834][ T29] audit: type=1326 audit(424.359:12553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30030 comm="syz.6.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 408.486918][ T29] audit: type=1326 audit(424.359:12554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30030 comm="syz.6.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 408.514285][ T29] audit: type=1326 audit(424.499:12555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30030 comm="syz.6.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 408.517011][T30033] bond4: (slave geneve3): making interface the new active one [ 408.547127][T30033] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 408.555904][ T4288] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.569398][ T4288] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.596027][ T4288] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.608373][T30031] loop6: detected capacity change from 0 to 512 [ 408.613352][ T29] audit: type=1326 audit(424.529:12556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30030 comm="syz.6.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 408.638456][ T29] audit: type=1326 audit(424.589:12557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30030 comm="syz.6.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 408.662183][ T29] audit: type=1326 audit(424.589:12558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30030 comm="syz.6.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa4a90cf783 code=0x7ffc0000 [ 408.668932][T30031] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 408.699076][T30031] EXT4-fs (loop6): 1 truncate cleaned up [ 408.699199][ T4288] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.707946][T30031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.796433][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.077764][T30065] loop9: detected capacity change from 0 to 1024 [ 409.085248][T30065] EXT4-fs: Ignoring removed bh option [ 409.106685][T30065] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.196212][T20554] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.380307][T30099] loop9: detected capacity change from 0 to 2048 [ 409.434805][T30099] loop9: p2 < > p4 [ 409.439826][T30099] loop9: p4 size 262144 extends beyond EOD, truncated [ 409.643175][T30117] loop7: detected capacity change from 0 to 128 [ 410.172906][T30158] netlink: 'syz.9.10664': attribute type 3 has an invalid length. [ 410.181541][T30158] netlink: 'syz.9.10664': attribute type 1 has an invalid length. [ 410.189413][T30158] netlink: 181400 bytes leftover after parsing attributes in process `syz.9.10664'. [ 410.279445][T30172] loop9: detected capacity change from 0 to 1024 [ 410.288021][T30172] EXT4-fs: Ignoring removed bh option [ 410.295193][T30173] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.10671'. [ 410.307002][T30172] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.320348][T30173] netlink: zone id is out of range [ 410.325859][T30173] netlink: zone id is out of range [ 410.331289][T30173] netlink: zone id is out of range [ 410.343523][T30173] netlink: zone id is out of range [ 410.374615][T30173] netlink: zone id is out of range [ 410.379997][T30173] netlink: zone id is out of range [ 410.385833][T30173] netlink: zone id is out of range [ 410.391357][T30173] netlink: zone id is out of range [ 410.413353][T30173] netlink: set zone limit has 8 unknown bytes [ 410.424458][T20554] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.512966][T30181] bridge0: port 1(dummy0) entered disabled state [ 410.535126][T30181] wg1: left promiscuous mode [ 410.539779][T30181] wg1: left allmulticast mode [ 410.600779][T30184] loop9: detected capacity change from 0 to 1764 [ 410.616608][ T2760] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.626362][ T2760] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.639747][ T2760] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.673406][ T2760] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.259691][T30226] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30226 comm=syz.7.10690 [ 411.272659][T30226] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30226 comm=syz.7.10690 [ 411.340393][T30224] Alternate GPT is invalid, using primary GPT. [ 411.347562][T30224] loop9: p2 p3 p7 [ 411.354372][T30230] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.10692: bad orphan inode 134217728 [ 411.400220][T30230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.855253][T30265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10707'. [ 412.186164][T25318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.416471][T30304] wireguard0: entered promiscuous mode [ 412.422124][T30304] wireguard0: entered allmulticast mode [ 412.910550][T30330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.919942][T30330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.067914][T30340] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 413.256034][T30351] set_capacity_and_notify: 2 callbacks suppressed [ 413.256056][T30351] loop9: detected capacity change from 0 to 256 [ 413.284593][T30351] FAT-fs (loop9): bogus number of FAT sectors [ 413.290880][T30351] FAT-fs (loop9): Can't find a valid FAT filesystem [ 413.324724][T30358] netlink: 'syz.1.10749': attribute type 4 has an invalid length. [ 413.472670][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 413.472689][ T29] audit: type=1326 audit(429.449:12805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30373 comm="syz.7.10756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 413.554550][ T29] audit: type=1326 audit(429.449:12806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30373 comm="syz.7.10756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 413.578324][ T29] audit: type=1326 audit(429.449:12807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30373 comm="syz.7.10756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 413.602011][ T29] audit: type=1326 audit(429.449:12808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30373 comm="syz.7.10756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 413.626616][ T29] audit: type=1326 audit(429.449:12809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30373 comm="syz.7.10756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 413.650130][ T29] audit: type=1326 audit(429.449:12810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30373 comm="syz.7.10756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91ef8af783 code=0x7ffc0000 [ 413.674494][ T29] audit: type=1326 audit(429.449:12811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30373 comm="syz.7.10756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91ef8af783 code=0x7ffc0000 [ 413.698317][ T29] audit: type=1326 audit(429.449:12812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30373 comm="syz.7.10756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 413.721978][ T29] audit: type=1326 audit(429.449:12813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30373 comm="syz.7.10756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 413.746432][ T29] audit: type=1326 audit(429.449:12814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30373 comm="syz.7.10756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 413.977064][T30397] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10765'. [ 414.027450][T30399] IPVS: Error connecting to the multicast addr [ 414.196598][T30415] netlink: 'syz.1.10773': attribute type 10 has an invalid length. [ 414.205281][T30415] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10773'. [ 414.222064][T30415] ipvlan2: entered promiscuous mode [ 414.231041][T30415] bridge0: port 1(ipvlan2) entered blocking state [ 414.238180][T30415] bridge0: port 1(ipvlan2) entered disabled state [ 414.257071][T30415] ipvlan2: entered allmulticast mode [ 414.262423][T30415] bridge0: entered allmulticast mode [ 414.269178][T30415] ipvlan2: left allmulticast mode [ 414.274351][T30415] bridge0: left allmulticast mode [ 414.417565][T30435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10783'. [ 414.481057][T30444] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10786'. [ 414.670101][T30454] loop7: detected capacity change from 0 to 8192 [ 414.689137][T30457] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10792'. [ 414.698909][T30454] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 414.705486][T30454] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 414.713567][T30454] vhci_hcd vhci_hcd.0: Device attached [ 414.736744][T30462] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 414.745633][T30462] FAT-fs (loop7): Filesystem has been set read-only [ 414.758046][T30462] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 1046) [ 414.774012][T30458] vhci_hcd: connection closed [ 414.774193][ T4295] vhci_hcd vhci_hcd.7: stop threads [ 414.784477][ T4295] vhci_hcd vhci_hcd.7: release socket [ 414.789897][ T4295] vhci_hcd vhci_hcd.7: disconnect device [ 414.815655][T30468] loop2: detected capacity change from 0 to 7 [ 414.822227][T30468] loop2: [ 415.298606][T30490] can0: slcan on ttyS3. [ 415.365061][T30490] can0 (unregistered): slcan off ttyS3. [ 415.500075][T30505] loop7: detected capacity change from 0 to 2048 [ 415.538424][T30505] Alternate GPT is invalid, using primary GPT. [ 415.546050][T30505] loop7: p2 p3 p7 [ 416.036275][T30556] loop7: detected capacity change from 0 to 256 [ 416.169340][T30556] FAT-fs (loop7): Directory bread(block 64) failed [ 416.197333][T30556] FAT-fs (loop7): Directory bread(block 65) failed [ 416.259840][T30556] FAT-fs (loop7): Directory bread(block 66) failed [ 416.304370][T30556] FAT-fs (loop7): Directory bread(block 67) failed [ 416.333942][T30556] FAT-fs (loop7): Directory bread(block 68) failed [ 416.350985][T30556] FAT-fs (loop7): Directory bread(block 69) failed [ 416.363949][T30556] FAT-fs (loop7): Directory bread(block 70) failed [ 416.380733][T30556] FAT-fs (loop7): Directory bread(block 71) failed [ 416.387997][T30556] FAT-fs (loop7): Directory bread(block 72) failed [ 416.416349][T30556] FAT-fs (loop7): Directory bread(block 73) failed [ 416.507922][T30576] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10836'. [ 416.548933][T30556] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 416.557650][T30556] FAT-fs (loop7): Filesystem has been set read-only [ 416.565766][T30556] bio_check_eod: 10182 callbacks suppressed [ 416.565850][T30556] syz.7.10828: attempt to access beyond end of device [ 416.565850][T30556] loop7: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 416.586099][T30556] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 416.601456][T30556] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 416.611249][T30556] syz.7.10828: attempt to access beyond end of device [ 416.611249][T30556] loop7: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 417.146779][T30643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10864'. [ 417.169046][T30643] ip6gre2: entered allmulticast mode [ 417.220170][T30651] pimreg: entered allmulticast mode [ 417.258964][T30651] pimreg: left allmulticast mode [ 417.324101][T30659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10872'. [ 417.363454][T30662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10873'. [ 417.459075][T30656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.485324][T30656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.638103][T30687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10883'. [ 418.229236][T30724] loop6: detected capacity change from 0 to 256 [ 418.237147][T30724] FAT-fs (loop6): bogus number of FAT sectors [ 418.243502][T30724] FAT-fs (loop6): Can't find a valid FAT filesystem [ 418.326404][T30732] loop6: detected capacity change from 0 to 512 [ 418.348819][T30732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.378181][T30732] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.10900: corrupted inode contents [ 418.391290][T30732] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #18: comm syz.6.10900: mark_inode_dirty error [ 418.403891][T30732] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.10900: corrupted inode contents [ 418.416927][T30732] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #18: comm syz.6.10900: mark_inode_dirty error [ 418.430447][T30732] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #18: comm syz.6.10900: mark inode dirty (error -117) [ 418.443731][T30732] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 418.477137][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.576776][ T29] kauditd_printk_skb: 655 callbacks suppressed [ 418.576884][ T29] audit: type=1400 audit(434.559:13470): avc: denied { override_creds } for pid=30745 comm="syz.9.10905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 418.586153][T30744] can0: slcan on ttyS3. [ 418.679145][T30756] ip6_vti0 speed is unknown, defaulting to 1000 [ 418.702359][T30744] can0 (unregistered): slcan off ttyS3. [ 418.735818][ T29] audit: type=1326 audit(434.719:13471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30764 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa4a90c65e7 code=0x7ffc0000 [ 418.758904][ T29] audit: type=1326 audit(434.719:13472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30764 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa4a906b829 code=0x7ffc0000 [ 418.781345][ T29] audit: type=1326 audit(434.719:13473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30764 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa4a90c65e7 code=0x7ffc0000 [ 418.785648][ T4336] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 418.804184][ T29] audit: type=1326 audit(434.719:13474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30764 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa4a906b829 code=0x7ffc0000 [ 418.812803][ T4336] ref_tracker: netdev@ffff888119ec6558 has 1/1 users at [ 418.812803][ T4336] netdev_get_by_index+0x13e/0x1b0 [ 418.812803][ T4336] fib6_nh_init+0xeb/0x15a0 [ 418.812803][ T4336] rtm_new_nexthop+0x1fff/0x4640 [ 418.812803][ T4336] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 418.812803][ T4336] netlink_rcv_skb+0x123/0x220 [ 418.812803][ T4336] rtnetlink_rcv+0x1c/0x30 [ 418.812803][ T4336] netlink_unicast+0x5c0/0x690 [ 418.812803][ T4336] netlink_sendmsg+0x58b/0x6b0 [ 418.812803][ T4336] __sock_sendmsg+0x145/0x180 [ 418.812803][ T4336] ____sys_sendmsg+0x31e/0x4a0 [ 418.812803][ T4336] ___sys_sendmsg+0x17b/0x1d0 [ 418.812803][ T4336] __x64_sys_sendmsg+0xd4/0x160 [ 418.812803][ T4336] x64_sys_call+0x17ba/0x3000 [ 418.812803][ T4336] do_syscall_64+0xca/0x2b0 [ 418.812803][ T4336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.812803][ T4336] [ 418.834336][ T29] audit: type=1326 audit(434.719:13475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30764 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 418.942096][ T29] audit: type=1326 audit(434.719:13476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30764 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 418.965317][ T29] audit: type=1326 audit(434.719:13477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30764 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 418.987761][ T29] audit: type=1326 audit(434.719:13478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30764 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 419.011201][ T29] audit: type=1326 audit(434.719:13479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30764 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 419.226963][T30785] pim6reg1: entered promiscuous mode [ 419.232298][T30785] pim6reg1: entered allmulticast mode [ 419.651902][T30818] netlink: 44 bytes leftover after parsing attributes in process `syz.9.10933'. [ 420.084534][T30850] SELinux: failed to load policy [ 420.157218][T30861] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10946'. [ 420.235203][T30875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10951'. [ 420.244323][T30875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10951'. [ 420.439298][T30899] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10961'. [ 420.448673][T30899] erspan0: left allmulticast mode [ 420.454354][T30899] erspan0: left promiscuous mode [ 420.459559][T30899] bridge0: port 3(erspan0) entered disabled state [ 420.467153][T30899] bridge_slave_1: left allmulticast mode [ 420.472799][T30899] bridge_slave_1: left promiscuous mode [ 420.478490][T30899] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.487289][T30899] bridge_slave_0: left promiscuous mode [ 420.493161][T30899] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.588309][T30904] xt_hashlimit: max too large, truncated to 1048576 [ 420.667397][T30911] loop9: detected capacity change from 0 to 1024 [ 420.674479][T30911] EXT4-fs: inline encryption not supported [ 420.693879][T30911] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.737488][T30911] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 16: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 420.753434][T30911] EXT4-fs (loop9): Remounting filesystem read-only [ 420.784404][T20554] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.797778][T30922] netlink: 96 bytes leftover after parsing attributes in process `syz.6.10969'. [ 420.863335][T30932] ip6_vti0 speed is unknown, defaulting to 1000 [ 421.181764][T30964] bridge0: port 1(erspan0) entered blocking state [ 421.188349][T30964] bridge0: port 1(erspan0) entered disabled state [ 421.195725][T30964] erspan0: entered allmulticast mode [ 421.201694][T30964] erspan0: left allmulticast mode [ 421.496696][T30973] loop6: detected capacity change from 0 to 32768 [ 421.544121][T30973] loop6: p1 p2 p3 < p5 p6 > [ 421.549619][T30973] loop6: p2 size 16775168 extends beyond EOD, truncated [ 421.558550][T30973] loop6: p5 start 4294970168 is beyond EOD, truncated [ 421.720094][T30991] ip6_vti0 speed is unknown, defaulting to 1000 [ 421.920705][T30991] xt_NFQUEUE: number of total queues is 0 [ 422.438217][T31011] loop6: detected capacity change from 0 to 32768 [ 422.494166][T31011] loop6: p1 p2 p3 < p5 p6 > [ 422.499584][T31011] loop6: p2 size 16775168 extends beyond EOD, truncated [ 422.507955][T31011] loop6: p5 start 4294970168 is beyond EOD, truncated [ 423.462738][T31038] loop7: detected capacity change from 0 to 128 [ 423.531548][T31038] syz.7.11015: attempt to access beyond end of device [ 423.531548][T31038] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 423.545796][T31038] syz.7.11015: attempt to access beyond end of device [ 423.545796][T31038] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 423.586332][T31038] syz.7.11015: attempt to access beyond end of device [ 423.586332][T31038] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 423.600569][T31038] syz.7.11015: attempt to access beyond end of device [ 423.600569][T31038] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 423.615882][T31038] syz.7.11015: attempt to access beyond end of device [ 423.615882][T31038] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 423.630102][T31038] syz.7.11015: attempt to access beyond end of device [ 423.630102][T31038] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 423.644557][T31038] syz.7.11015: attempt to access beyond end of device [ 423.644557][T31038] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 423.658400][T31038] syz.7.11015: attempt to access beyond end of device [ 423.658400][T31038] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 423.688475][T31038] syz.7.11015: attempt to access beyond end of device [ 423.688475][T31038] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 423.702399][T31038] syz.7.11015: attempt to access beyond end of device [ 423.702399][T31038] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 423.753921][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 423.753969][ T29] audit: type=1326 audit(439.729:13790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31059 comm="syz.9.11025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 423.783885][ T29] audit: type=1326 audit(439.729:13791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31059 comm="syz.9.11025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 423.807310][ T29] audit: type=1326 audit(439.729:13792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31059 comm="syz.9.11025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 423.831155][ T29] audit: type=1326 audit(439.729:13793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31059 comm="syz.9.11025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 423.854999][ T29] audit: type=1326 audit(439.729:13794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31059 comm="syz.9.11025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 423.878438][ T29] audit: type=1326 audit(439.729:13795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31059 comm="syz.9.11025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 423.902287][ T29] audit: type=1326 audit(439.729:13796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31059 comm="syz.9.11025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 423.925523][ T29] audit: type=1326 audit(439.729:13797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31059 comm="syz.9.11025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 423.949295][ T29] audit: type=1326 audit(439.729:13798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31059 comm="syz.9.11025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 423.972959][ T29] audit: type=1326 audit(439.729:13799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31059 comm="syz.9.11025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 424.030774][T31068] xt_hashlimit: max too large, truncated to 1048576 [ 424.220139][T31097] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 424.334725][T31106] random: crng reseeded on system resumption [ 424.430986][T13059] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 424.438521][T13059] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 424.446206][T13059] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 424.453732][T13059] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 424.461739][T13059] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 424.469382][T13059] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 424.476923][T13059] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 424.484907][T13059] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 424.492467][T13059] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 424.500031][T13059] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 424.586323][T13059] hid-generic 0003:0004:0000.0012: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 424.838874][T31126] macsec1: entered promiscuous mode [ 424.844254][T31126] bridge0: entered promiscuous mode [ 424.850413][T31126] bridge0: port 2(macsec1) entered blocking state [ 424.857384][T31126] bridge0: port 2(macsec1) entered disabled state [ 424.864550][T31126] macsec1: entered allmulticast mode [ 424.869857][T31126] bridge0: entered allmulticast mode [ 424.875923][T31126] macsec1: left allmulticast mode [ 424.881002][T31126] bridge0: left allmulticast mode [ 424.899433][T31126] bridge0: left promiscuous mode [ 424.930374][T31131] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11055'. [ 424.960399][T31131] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11055'. [ 425.002714][T31139] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 425.009305][T31139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 425.017462][T31139] vhci_hcd vhci_hcd.0: Device attached [ 425.032145][T31139] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 425.038772][T31139] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 425.046554][T31139] vhci_hcd vhci_hcd.0: Device attached [ 425.059558][T31139] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 425.066203][T31139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 425.074107][T31139] vhci_hcd vhci_hcd.0: Device attached [ 425.086373][T31139] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(9) [ 425.092998][T31139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 425.101076][T31139] vhci_hcd vhci_hcd.0: Device attached [ 425.114589][T31139] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 425.118457][T31154] netlink: 20 bytes leftover after parsing attributes in process `'. [ 425.123485][T31139] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 425.149384][T31139] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(15) [ 425.156016][T31139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 425.164140][T31139] vhci_hcd vhci_hcd.0: Device attached [ 425.175158][T31139] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(17) [ 425.181801][T31139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 425.189452][T31139] vhci_hcd vhci_hcd.0: Device attached [ 425.197583][T31155] vhci_hcd: connection closed [ 425.197755][T22594] vhci_hcd vhci_hcd.6: stop threads [ 425.199626][T31159] vhci_hcd: connection closed [ 425.202542][T22594] vhci_hcd vhci_hcd.6: release socket [ 425.202572][T22594] vhci_hcd vhci_hcd.6: disconnect device [ 425.202933][T31147] vhci_hcd: connection closed [ 425.226397][T31163] IPv6: NLM_F_CREATE should be specified when creating new route [ 425.227058][T31143] vhci_hcd: connection closed [ 425.231257][T22594] vhci_hcd vhci_hcd.6: stop threads [ 425.241344][T31145] vhci_hcd: connection closed [ 425.243986][T22594] vhci_hcd vhci_hcd.6: release socket [ 425.252407][T31140] vhci_hcd: connection closed [ 425.253702][T22594] vhci_hcd vhci_hcd.6: disconnect device [ 425.284558][T13059] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 425.292065][T22594] vhci_hcd vhci_hcd.6: stop threads [ 425.293740][T31141] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 425.297381][T22594] vhci_hcd vhci_hcd.6: release socket [ 425.308749][T22594] vhci_hcd vhci_hcd.6: disconnect device [ 425.315822][T22594] vhci_hcd vhci_hcd.6: stop threads [ 425.321117][T22594] vhci_hcd vhci_hcd.6: release socket [ 425.326653][T22594] vhci_hcd vhci_hcd.6: disconnect device [ 425.333476][T22594] vhci_hcd vhci_hcd.6: stop threads [ 425.338775][T22594] vhci_hcd vhci_hcd.6: release socket [ 425.344897][T22594] vhci_hcd vhci_hcd.6: disconnect device [ 425.351109][T22594] vhci_hcd vhci_hcd.6: stop threads [ 425.356476][T22594] vhci_hcd vhci_hcd.6: release socket [ 425.361899][T22594] vhci_hcd vhci_hcd.6: disconnect device [ 425.405096][T31160] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11062'. [ 425.414917][T31160] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 425.639195][T31173] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11066'. [ 425.704279][T31181] loop7: detected capacity change from 0 to 1764 [ 425.807370][T31200] random: crng reseeded on system resumption [ 425.815392][T31199] ip6_vti0 speed is unknown, defaulting to 1000 [ 426.086753][T31199] xt_connbytes: Forcing CT accounting to be enabled [ 426.093775][T31199] xt_NFQUEUE: number of total queues is 0 [ 426.292118][T31223] loop6: detected capacity change from 0 to 128 [ 426.298897][T31223] vfat: Unknown parameter 's' [ 426.705617][T31240] ip6_vti0 speed is unknown, defaulting to 1000 [ 427.362373][T31278] loop9: detected capacity change from 0 to 1764 [ 427.623312][T31310] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 428.059942][T31330] ip6_vti0 speed is unknown, defaulting to 1000 [ 428.261421][T31337] netlink: 131740 bytes leftover after parsing attributes in process `syz.6.11139'. [ 428.304186][T31337] netlink: zone id is out of range [ 428.309365][T31337] netlink: zone id is out of range [ 428.345526][T31337] netlink: zone id is out of range [ 428.361739][T31337] netlink: zone id is out of range [ 428.393564][T31337] netlink: zone id is out of range [ 428.422818][T31337] netlink: del zone limit has 8 unknown bytes [ 428.643431][T31349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31349 comm=syz.5.11142 [ 428.740197][T31330] xt_NFQUEUE: number of total queues is 0 [ 428.782109][T31362] sd 0:0:1:0: device reset [ 428.846278][T31369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11150'. [ 428.904711][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 428.904730][ T29] audit: type=1326 audit(444.879:14154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31377 comm="syz.6.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 428.934749][ T29] audit: type=1326 audit(444.889:14155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31377 comm="syz.6.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 428.960022][ T29] audit: type=1326 audit(444.889:14156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31377 comm="syz.6.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 428.983923][ T29] audit: type=1326 audit(444.889:14157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31377 comm="syz.6.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 429.007745][ T29] audit: type=1326 audit(444.889:14158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31377 comm="syz.6.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 429.031138][ T29] audit: type=1326 audit(444.889:14159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31377 comm="syz.6.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 429.055120][ T29] audit: type=1326 audit(444.889:14160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31377 comm="syz.6.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 429.078459][ T29] audit: type=1326 audit(444.889:14161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31377 comm="syz.6.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 429.155737][ T29] audit: type=1326 audit(444.959:14162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31377 comm="syz.6.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 429.179018][ T29] audit: type=1326 audit(444.959:14163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31377 comm="syz.6.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a90cf749 code=0x7ffc0000 [ 429.249407][T31396] loop9: detected capacity change from 0 to 256 [ 429.447599][T31404] loop9: detected capacity change from 0 to 128 [ 429.585654][T31413] ip6_vti0 speed is unknown, defaulting to 1000 [ 430.298311][T31444] loop9: detected capacity change from 0 to 256 [ 430.305934][T31444] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 430.329418][T31444] FAT-fs (loop9): Directory bread(block 64) failed [ 430.336671][T31444] FAT-fs (loop9): Directory bread(block 65) failed [ 430.343462][T31444] FAT-fs (loop9): Directory bread(block 66) failed [ 430.350628][T31444] FAT-fs (loop9): Directory bread(block 67) failed [ 430.357699][T31444] FAT-fs (loop9): Directory bread(block 68) failed [ 430.365144][T13059] usb 13-1: enqueue for inactive port 0 [ 430.370948][T13059] usb 13-1: enqueue for inactive port 0 [ 430.376721][T31444] FAT-fs (loop9): Directory bread(block 69) failed [ 430.383356][T31444] FAT-fs (loop9): Directory bread(block 70) failed [ 430.390196][T31444] FAT-fs (loop9): Directory bread(block 71) failed [ 430.397619][T31444] FAT-fs (loop9): Directory bread(block 72) failed [ 430.404292][T31444] FAT-fs (loop9): Directory bread(block 73) failed [ 430.444231][T13059] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 430.489779][T31456] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 430.776525][T31480] hub 2-0:1.0: USB hub found [ 430.781461][T31480] hub 2-0:1.0: 8 ports detected [ 430.895123][T31497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11203'. [ 430.963174][T31507] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11208'. [ 430.980792][T31507] team0: entered promiscuous mode [ 430.985998][T31507] team0: entered allmulticast mode [ 430.994453][T31507] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.073334][T31516] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 431.106643][T31521] netlink: 43 bytes leftover after parsing attributes in process `syz.7.11214'. [ 431.158333][T31528] rdma_op ffff8881841f8580 conn xmit_rdma 0000000000000000 [ 431.342452][T31537] netlink: 14 bytes leftover after parsing attributes in process `syz.9.11221'. [ 431.353317][T31537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.363158][T31537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.372976][T31537] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 431.387506][T31537] bond0 (unregistering): Released all slaves [ 431.423665][T31543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31543 comm=syz.6.11224 [ 431.786853][T31573] tipc: Started in network mode [ 431.791753][T31573] tipc: Node identity ac14140f, cluster identity 4711 [ 431.799019][T31573] tipc: New replicast peer: 255.255.255.255 [ 431.805580][T31573] tipc: Enabled bearer , priority 10 [ 431.948510][T31592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11255'. [ 431.959324][T31592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11255'. [ 432.028738][T31596] ip6_vti0 speed is unknown, defaulting to 1000 [ 432.288606][T31613] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11253'. [ 432.664564][T31654] netlink: 'syz.7.11271': attribute type 13 has an invalid length. [ 432.799897][T31596] xt_NFQUEUE: number of total queues is 0 [ 432.805521][T31660] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11273'. [ 432.923860][ T3489] tipc: Node number set to 2886997007 [ 433.134462][T31682] loop6: detected capacity change from 0 to 512 [ 433.154855][T31682] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 433.193571][T31682] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 433.211113][T31682] System zones: 1-12 [ 433.221093][T31682] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 433.236743][T31682] EXT4-fs (loop6): 1 truncate cleaned up [ 433.242941][T31682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.330328][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.461426][T31705] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11289'. [ 433.476618][T31709] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11292'. [ 433.503325][T31709] IPVS: Error connecting to the multicast addr [ 433.772589][T31723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31723 comm=syz.6.11299 [ 434.301914][T31774] vlan2: entered allmulticast mode [ 434.328422][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 434.328439][ T29] audit: type=1326 audit(450.309:14339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31777 comm="syz.7.11324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 434.368171][T31776] SELinux: ebitmap: empty map [ 434.374429][T31776] SELinux: failed to load policy [ 434.396902][ T29] audit: type=1326 audit(450.339:14340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31777 comm="syz.7.11324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 434.420762][ T29] audit: type=1326 audit(450.339:14341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31777 comm="syz.7.11324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 434.444567][ T29] audit: type=1326 audit(450.339:14342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31777 comm="syz.7.11324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 434.467707][ T29] audit: type=1326 audit(450.339:14343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31777 comm="syz.7.11324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 434.491439][ T29] audit: type=1326 audit(450.339:14344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31777 comm="syz.7.11324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 434.515188][ T29] audit: type=1326 audit(450.339:14345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31777 comm="syz.7.11324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 434.538352][ T29] audit: type=1326 audit(450.339:14346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31777 comm="syz.7.11324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 434.562049][ T29] audit: type=1326 audit(450.339:14347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31777 comm="syz.7.11324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 434.586037][ T29] audit: type=1326 audit(450.339:14348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31777 comm="syz.7.11324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 435.881927][T31896] team0: Caught tx_queue_len zero misconfig [ 436.019337][T31908] __nla_validate_parse: 5 callbacks suppressed [ 436.019358][T31908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11377'. [ 436.120130][T31919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11382'. [ 436.136166][T31921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11383'. [ 436.145919][T31921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11383'. [ 436.155088][T31921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11383'. [ 436.164447][T31921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11383'. [ 436.173528][T31921] netlink: 'syz.1.11383': attribute type 6 has an invalid length. [ 436.252039][T31929] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11387'. [ 436.261238][T31929] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11387'. [ 436.298380][T31935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11390'. [ 436.308251][T31935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11390'. [ 437.141109][T32031] loop6: detected capacity change from 0 to 1024 [ 437.148880][T32031] EXT4-fs: Ignoring removed oldalloc option [ 437.154922][T32031] EXT4-fs: Ignoring removed bh option [ 437.165816][T32031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.092640][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.747483][T32142] netlink: 'syz.7.11478': attribute type 1 has an invalid length. [ 439.346837][T32193] lo: Caught tx_queue_len zero misconfig [ 439.352641][T32193] sch_fq: defrate 0 ignored. [ 439.497618][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 439.497639][ T29] audit: type=1326 audit(455.479:14484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32215 comm="syz.7.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 439.580695][ T29] audit: type=1326 audit(455.509:14485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32215 comm="syz.7.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 439.604678][ T29] audit: type=1326 audit(455.509:14486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32215 comm="syz.7.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 439.627904][ T29] audit: type=1326 audit(455.509:14487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32215 comm="syz.7.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 439.651958][ T29] audit: type=1326 audit(455.519:14488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32215 comm="syz.7.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 439.675801][ T29] audit: type=1326 audit(455.529:14489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32215 comm="syz.7.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 439.699374][ T29] audit: type=1326 audit(455.529:14490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32215 comm="syz.7.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 439.723111][ T29] audit: type=1326 audit(455.529:14491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32215 comm="syz.7.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 439.747432][ T29] audit: type=1326 audit(455.529:14492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32215 comm="syz.7.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 439.770601][ T29] audit: type=1326 audit(455.529:14493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32215 comm="syz.7.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 439.865365][T32230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.917461][T32230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.910641][T32275] netlink: 'syz.6.11536': attribute type 1 has an invalid length. [ 442.028717][T32334] __nla_validate_parse: 8 callbacks suppressed [ 442.028763][T32334] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11560'. [ 442.072894][T32340] netlink: 188 bytes leftover after parsing attributes in process `syz.9.11563'. [ 442.082301][T32340] netlink: 188 bytes leftover after parsing attributes in process `syz.9.11563'. [ 442.734445][T32392] wg2: entered promiscuous mode [ 442.739325][T32392] wg2: entered allmulticast mode [ 443.260035][T32436] netlink: 'syz.9.11604': attribute type 3 has an invalid length. [ 443.268502][T32436] netlink: 'syz.9.11604': attribute type 1 has an invalid length. [ 443.276904][T32436] netlink: 181400 bytes leftover after parsing attributes in process `syz.9.11604'. [ 443.356207][T32444] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11608'. [ 443.452200][T32452] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.11611'. [ 443.461710][T32452] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11611'. [ 443.513960][T32454] netlink: 'syz.9.11612': attribute type 4 has an invalid length. [ 443.522855][T32454] netlink: 'syz.9.11612': attribute type 4 has an invalid length. [ 443.854998][T32486] loop6: detected capacity change from 0 to 512 [ 443.878157][T32486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.928912][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.977474][T32507] tipc: New replicast peer: 255.255.255.255 [ 443.984108][T32507] tipc: Enabled bearer , priority 10 [ 443.995722][T32509] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11636'. [ 444.001974][T32507] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11635'. [ 444.014103][T32507] tipc: Disabling bearer [ 444.030227][T32513] netlink: 'syz.1.11638': attribute type 4 has an invalid length. [ 444.039040][T32513] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11638'. [ 444.050498][T32515] loop6: detected capacity change from 0 to 512 [ 444.069003][T32515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 444.081437][T32517] netlink: 'syz.7.11649': attribute type 5 has an invalid length. [ 444.092761][T32515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.114556][T32515] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.11639: corrupted inode contents [ 444.128006][T32515] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #18: comm syz.6.11639: mark_inode_dirty error [ 444.140230][T32515] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.11639: corrupted inode contents [ 444.172232][T32515] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #18: comm syz.6.11639: mark_inode_dirty error [ 444.187547][T32515] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #18: comm syz.6.11639: mark inode dirty (error -117) [ 444.200836][T32515] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 444.226542][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.269170][T32535] ip6_vti0 speed is unknown, defaulting to 1000 [ 444.523720][T32564] netlink: 'syz.6.11661': attribute type 3 has an invalid length. [ 444.532045][T32564] netlink: 'syz.6.11661': attribute type 1 has an invalid length. [ 444.817482][T32586] loop6: detected capacity change from 0 to 1024 [ 444.880368][T32586] EXT4-fs: Ignoring removed nobh option [ 444.886014][T32586] ext4: Unknown parameter 'smackfsdef' [ 445.334474][T13060] Process accounting resumed [ 445.407203][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 445.407223][ T29] audit: type=1326 audit(461.389:14654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.9.11684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 445.606163][ T29] audit: type=1326 audit(461.419:14655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.9.11684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 445.630094][ T29] audit: type=1326 audit(461.419:14656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.9.11684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 445.653205][ T29] audit: type=1326 audit(461.419:14657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.9.11684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 445.676944][ T29] audit: type=1326 audit(461.419:14658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.9.11684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 445.700112][ T29] audit: type=1326 audit(461.419:14659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.9.11684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 445.724017][ T29] audit: type=1326 audit(461.419:14660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.9.11684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 445.747305][ T29] audit: type=1326 audit(461.419:14661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.9.11684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 445.771078][ T29] audit: type=1326 audit(461.499:14662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.9.11684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 445.794888][ T29] audit: type=1326 audit(461.499:14663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.9.11684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 445.897774][T32717] bridge0: port 1(gretap0) entered blocking state [ 445.904354][T32717] bridge0: port 1(gretap0) entered disabled state [ 445.922534][T32717] gretap0: entered allmulticast mode [ 445.986636][T32717] gretap0: entered promiscuous mode [ 446.180706][T32745] FAT-fs (loop3): unable to read boot sector [ 447.673898][ T403] ip6_vti0 speed is unknown, defaulting to 1000 [ 448.348823][ T428] ªªªªªª: renamed from vlan0 [ 448.357640][ T431] loop6: detected capacity change from 0 to 1024 [ 448.370230][ T432] __nla_validate_parse: 8 callbacks suppressed [ 448.370320][ T432] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11740'. [ 448.398133][ T431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.474178][ T440] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11740'. [ 448.800041][ T477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11757'. [ 448.811571][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.821271][ T477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11757'. [ 448.848317][ T478] 9pnet: p9_errstr2errno: server reported unknown error [ 449.041460][ T512] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11779'. [ 449.079833][ T512] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11779'. [ 449.086985][ T517] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11770'. [ 449.099448][ T517] IPVS: Error connecting to the multicast addr [ 449.106361][ T518] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11778'. [ 449.458648][ T549] netlink: 'syz.6.11787': attribute type 12 has an invalid length. [ 449.504988][ T554] netlink: 'syz.6.11790': attribute type 1 has an invalid length. [ 449.771415][ T580] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11800'. [ 449.856812][ T580] netlink: 92 bytes leftover after parsing attributes in process `syz.7.11800'. [ 449.993116][ T591] lo: entered promiscuous mode [ 449.998679][ T591] lo: entered allmulticast mode [ 450.033661][ T591] tunl0: entered promiscuous mode [ 450.038894][ T591] tunl0: entered allmulticast mode [ 450.075044][ T591] gre0: entered promiscuous mode [ 450.080095][ T591] gre0: entered allmulticast mode [ 450.107198][ T591] bridge0: port 1(gretap0) entered blocking state [ 450.113753][ T591] bridge0: port 1(gretap0) entered forwarding state [ 450.153268][ T591] erspan0: entered promiscuous mode [ 450.158718][ T591] erspan0: entered allmulticast mode [ 450.176255][ T591] ip_vti0: entered promiscuous mode [ 450.181508][ T591] ip_vti0: entered allmulticast mode [ 450.222048][ T591] ip6_vti0: entered promiscuous mode [ 450.227475][ T591] ip6_vti0: entered allmulticast mode [ 450.255847][ T591] sit0: entered promiscuous mode [ 450.260850][ T591] sit0: entered allmulticast mode [ 450.272861][ T591] ip6tnl0: entered promiscuous mode [ 450.278422][ T591] ip6tnl0: entered allmulticast mode [ 450.285935][ T591] ip6gre0: entered promiscuous mode [ 450.291357][ T591] ip6gre0: entered allmulticast mode [ 450.299143][ T591] syz_tun: entered promiscuous mode [ 450.304508][ T591] syz_tun: entered allmulticast mode [ 450.310449][ T591] ip6gretap0: entered promiscuous mode [ 450.316211][ T591] ip6gretap0: entered allmulticast mode [ 450.323479][ T591] .`: entered promiscuous mode [ 450.328963][ T591] bond_slave_0: entered promiscuous mode [ 450.335020][ T591] bond_slave_1: entered promiscuous mode [ 450.401913][ T591] dummy0: entered promiscuous mode [ 450.407268][ T591] .`: entered allmulticast mode [ 450.412158][ T591] bond_slave_0: entered allmulticast mode [ 450.418483][ T591] bond_slave_1: entered allmulticast mode [ 450.424792][ T591] dummy0: entered allmulticast mode [ 450.431111][ T591] 8021q: adding VLAN 0 to HW filter on device .` [ 450.441244][ T591] nlmon0: entered promiscuous mode [ 450.447217][ T591] nlmon0: entered allmulticast mode [ 450.455407][ T591] caif0: entered promiscuous mode [ 450.460487][ T591] caif0: entered allmulticast mode [ 450.465732][ T591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.482899][ T3398] ip6_vti0 speed is unknown, defaulting to 1000 [ 450.489218][ T3398] syz2: Port: 1 Link ACTIVE [ 450.494874][ T3398] ip6_vti0 speed is unknown, defaulting to 1000 [ 450.527112][ T607] ip6_vti0 speed is unknown, defaulting to 1000 [ 450.679037][ T611] sch_fq: defrate 0 ignored. [ 451.797819][ T638] macsec1: entered promiscuous mode [ 451.803128][ T638] bridge0: entered promiscuous mode [ 451.834154][ T638] bridge0: port 1(macsec1) entered blocking state [ 451.840777][ T638] bridge0: port 1(macsec1) entered disabled state [ 451.878138][ T638] macsec1: entered allmulticast mode [ 451.883533][ T638] bridge0: entered allmulticast mode [ 452.008363][ T638] macsec1: left allmulticast mode [ 452.013577][ T638] bridge0: left allmulticast mode [ 452.054729][ T638] bridge0: left promiscuous mode [ 452.528540][ T676] netem: change failed [ 453.305317][ T716] Restarting kernel threads ... [ 453.312562][ T716] Done restarting kernel threads. [ 453.379224][ T726] __nla_validate_parse: 3 callbacks suppressed [ 453.379245][ T726] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11860'. [ 453.414418][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 453.414438][ T29] audit: type=1326 audit(469.379:14730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=722 comm="syz.5.11861" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7e6cef749 code=0x0 [ 453.590603][ T732] lo: entered promiscuous mode [ 453.596074][ T732] lo: entered allmulticast mode [ 453.606738][ T732] tunl0: entered promiscuous mode [ 453.611930][ T732] tunl0: entered allmulticast mode [ 453.627053][ T732] gre0: entered promiscuous mode [ 453.632161][ T732] gre0: entered allmulticast mode [ 453.641075][ T732] gretap0: entered promiscuous mode [ 453.646468][ T732] gretap0: entered allmulticast mode [ 453.654732][ T732] erspan0: entered promiscuous mode [ 453.659995][ T732] erspan0: entered allmulticast mode [ 453.666414][ T732] ip_vti0: entered promiscuous mode [ 453.671748][ T732] ip_vti0: entered allmulticast mode [ 453.678427][ T732] ip6_vti0: entered promiscuous mode [ 453.683756][ T732] ip6_vti0: entered allmulticast mode [ 453.691008][ T732] sit0: entered promiscuous mode [ 453.696035][ T732] sit0: entered allmulticast mode [ 453.707967][ T732] ip6tnl0: entered promiscuous mode [ 453.713274][ T732] ip6tnl0: entered allmulticast mode [ 453.723164][ T732] ip6gre0: entered promiscuous mode [ 453.728612][ T732] ip6gre0: entered allmulticast mode [ 453.736819][ T732] syz_tun: entered promiscuous mode [ 453.742091][ T732] syz_tun: entered allmulticast mode [ 453.750016][ T732] ip6gretap0: entered promiscuous mode [ 453.755602][ T732] ip6gretap0: entered allmulticast mode [ 453.763640][ T732] bridge0: entered promiscuous mode [ 453.768964][ T732] bridge0: entered allmulticast mode [ 453.776679][ T732] vcan0: entered promiscuous mode [ 453.781759][ T732] vcan0: entered allmulticast mode [ 453.788447][ T732] bond0: entered promiscuous mode [ 453.793626][ T732] bond0: entered allmulticast mode [ 453.818911][ T732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.832253][ T732] bridge0: port 1(dummy0) entered blocking state [ 453.838753][ T732] bridge0: port 1(dummy0) entered forwarding state [ 453.848470][ T732] nlmon0: entered promiscuous mode [ 453.853683][ T732] nlmon0: entered allmulticast mode [ 453.860888][ T732] caif0: entered promiscuous mode [ 453.865989][ T732] caif0: entered allmulticast mode [ 453.871232][ T732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.039264][ T747] ip6_vti0 speed is unknown, defaulting to 1000 [ 454.179376][ T761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11877'. [ 454.258384][ T765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11879'. [ 454.270874][ T763] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.11878'. [ 454.465189][ T29] audit: type=1326 audit(470.449:14731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=775 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 454.488969][ T29] audit: type=1326 audit(470.449:14732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=775 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 454.512030][ T29] audit: type=1326 audit(470.449:14733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=775 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 454.665740][ T786] macsec1: entered promiscuous mode [ 454.676430][ T786] bridge0: port 2(macsec1) entered blocking state [ 454.682973][ T786] bridge0: port 2(macsec1) entered disabled state [ 454.834094][ T786] macsec1: entered allmulticast mode [ 454.840327][ T786] macsec1: left allmulticast mode [ 454.882590][ T29] audit: type=1326 audit(470.519:14734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=775 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 454.906267][ T29] audit: type=1326 audit(470.519:14735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=775 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 454.929316][ T29] audit: type=1326 audit(470.519:14736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=775 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 454.952864][ T29] audit: type=1326 audit(470.519:14737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=775 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 454.976866][ T29] audit: type=1326 audit(470.519:14738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=775 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 454.999920][ T29] audit: type=1326 audit(470.519:14739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=775 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 455.307886][ T823] lo: entered promiscuous mode [ 455.312789][ T823] lo: entered allmulticast mode [ 455.319034][ T823] tunl0: entered promiscuous mode [ 455.324196][ T823] tunl0: entered allmulticast mode [ 455.330560][ T823] gre0: entered promiscuous mode [ 455.335841][ T823] gre0: entered allmulticast mode [ 455.347725][ T823] gretap0: entered promiscuous mode [ 455.353008][ T823] gretap0: entered allmulticast mode [ 455.370056][ T823] erspan0: entered promiscuous mode [ 455.375966][ T823] erspan0: entered allmulticast mode [ 455.382398][ T823] ip_vti0: entered promiscuous mode [ 455.387734][ T823] ip_vti0: entered allmulticast mode [ 455.406381][ T823] ip6_vti0: entered promiscuous mode [ 455.411700][ T823] ip6_vti0: entered allmulticast mode [ 455.418410][ T823] sit0: entered promiscuous mode [ 455.423394][ T823] sit0: entered allmulticast mode [ 455.447266][ T823] ip6tnl0: entered promiscuous mode [ 455.452498][ T823] ip6tnl0: entered allmulticast mode [ 455.474867][ T823] ip6gre0: entered promiscuous mode [ 455.480217][ T823] ip6gre0: entered allmulticast mode [ 455.505079][ T823] syz_tun: entered promiscuous mode [ 455.510343][ T823] syz_tun: entered allmulticast mode [ 455.520067][ T823] ip6gretap0: entered promiscuous mode [ 455.526313][ T823] ip6gretap0: entered allmulticast mode [ 455.533188][ T823] dummy0: entered promiscuous mode [ 455.538469][ T823] dummy0: entered allmulticast mode [ 455.545699][ T823] nlmon0: entered promiscuous mode [ 455.550929][ T823] nlmon0: entered allmulticast mode [ 455.558217][ T823] caif0: entered promiscuous mode [ 455.563347][ T823] caif0: entered allmulticast mode [ 455.568712][ T823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 456.205992][ T860] loop6: detected capacity change from 0 to 512 [ 456.260716][ T860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.332535][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.610990][ T881] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11923'. [ 456.643102][ T4294] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.651473][ T881] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11923'. [ 456.663002][ T4294] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.680422][ T4294] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.717233][ T4294] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.773620][ T888] wg2: entered promiscuous mode [ 456.778550][ T888] wg2: entered allmulticast mode [ 457.136121][ T915] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11938'. [ 457.245530][ T918] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 457.265994][ T925] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 457.273540][ T925] vhci_hcd vhci_hcd.2: invalid port number 96 [ 457.279779][ T925] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 457.431012][ T929] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 457.451292][ T929] SELinux: failed to load policy [ 457.581537][ T934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11945'. [ 457.602689][ T934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11945'. [ 457.682155][ T942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=942 comm=syz.9.11948 [ 457.933243][ T903] syz.7.11932 (903) used greatest stack depth: 6120 bytes left [ 458.480803][ T983] serio: Serial port ptm1 [ 458.511287][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 458.511305][ T29] audit: type=1326 audit(474.489:14789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=990 comm="syz.1.11960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc23d1f749 code=0x7ffc0000 [ 458.547646][ T29] audit: type=1326 audit(474.519:14790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=990 comm="syz.1.11960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fdc23d1f749 code=0x7ffc0000 [ 458.571362][ T29] audit: type=1326 audit(474.519:14791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=990 comm="syz.1.11960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc23d1f749 code=0x7ffc0000 [ 458.595114][ T29] audit: type=1326 audit(474.519:14792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=990 comm="syz.1.11960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc23d1f749 code=0x7ffc0000 [ 458.618388][ T29] audit: type=1326 audit(474.519:14793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=990 comm="syz.1.11960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc23d1f783 code=0x7ffc0000 [ 458.641845][ T29] audit: type=1326 audit(474.529:14794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=990 comm="syz.1.11960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc23d1e1ff code=0x7ffc0000 [ 458.665346][ T29] audit: type=1326 audit(474.529:14795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=990 comm="syz.1.11960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdc23d1f7d7 code=0x7ffc0000 [ 458.688838][ T29] audit: type=1326 audit(474.529:14796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=990 comm="syz.1.11960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc23d1df90 code=0x7ffc0000 [ 458.712959][ T29] audit: type=1326 audit(474.529:14797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=990 comm="syz.1.11960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc23d1e3aa code=0x7ffc0000 [ 458.736448][ T29] audit: type=1326 audit(474.529:14798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=990 comm="syz.1.11960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc23d1f749 code=0x7ffc0000 [ 459.324423][ T1019] netlink: 228 bytes leftover after parsing attributes in process `syz.1.11978'. [ 459.701110][ T1045] netlink: 19 bytes leftover after parsing attributes in process `syz.9.11990'. [ 459.743025][ T1049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11992'. [ 459.868890][ T1064] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11998'. [ 460.394982][ T1120] netlink: 'syz.5.12023': attribute type 4 has an invalid length. [ 460.426764][ T1120] netlink: 'syz.5.12023': attribute type 4 has an invalid length. [ 460.704638][ T1143] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12032'. [ 460.828419][ T1154] netlink: 'syz.6.12036': attribute type 4 has an invalid length. [ 460.841959][ T1154] netlink: 'syz.6.12036': attribute type 4 has an invalid length. [ 460.928720][ T1159] loop6: detected capacity change from 0 to 512 [ 460.936502][ T1159] EXT4-fs: Ignoring removed i_version option [ 460.942521][ T1159] EXT4-fs: Ignoring removed bh option [ 460.971662][ T1159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.051480][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.234953][ T1188] netlink: 'syz.7.12050': attribute type 4 has an invalid length. [ 461.248837][ T1188] netlink: 'syz.7.12050': attribute type 4 has an invalid length. [ 461.450679][ T1214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12064'. [ 461.471528][ T1218] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12065'. [ 461.488882][ T1222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1222 comm=syz.5.12068 [ 462.201907][ T1325] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.353222][ T1333] loop6: detected capacity change from 0 to 1024 [ 462.372514][ T1333] EXT4-fs: Ignoring removed oldalloc option [ 462.398172][ T1333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.454947][ T1333] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.12108: Freeing blocks not in datazone - block = 0, count = 16 [ 462.481617][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 462.736977][ T1348] IPVS: Error connecting to the multicast addr [ 463.084004][T13051] page_pool_release_retry() stalled pool shutdown: id 328, 1 inflight 60 sec [ 463.241861][ T1380] batadv_slave_0: Caught tx_queue_len zero misconfig [ 463.554538][ T1407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1407 comm=syz.6.12141 [ 463.709420][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 463.709457][ T29] audit: type=1326 audit(485.680:14890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1404 comm="syz.9.12140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 463.740971][ T29] audit: type=1326 audit(485.700:14891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1404 comm="syz.9.12140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 463.764649][ T29] audit: type=1326 audit(485.700:14892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1404 comm="syz.9.12140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 463.787669][ T29] audit: type=1326 audit(485.700:14893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1404 comm="syz.9.12140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 463.811251][ T29] audit: type=1326 audit(485.700:14894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1404 comm="syz.9.12140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 463.834977][ T29] audit: type=1326 audit(485.700:14895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1404 comm="syz.9.12140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff3a5a2de97 code=0x7ffc0000 [ 463.858023][ T29] audit: type=1326 audit(485.700:14896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1404 comm="syz.9.12140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 463.881423][ T29] audit: type=1326 audit(485.700:14897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1404 comm="syz.9.12140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 463.904859][ T29] audit: type=1326 audit(485.700:14898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1404 comm="syz.9.12140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 463.928012][ T29] audit: type=1326 audit(485.700:14899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1404 comm="syz.9.12140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7ff3a5a2f749 code=0x7ffc0000 [ 464.408646][ T1413] Set syz1 is full, maxelem 65536 reached [ 464.480957][ T1445] ip6_vti0 speed is unknown, defaulting to 1000 [ 464.718987][ T1471] IPVS: Error connecting to the multicast addr [ 464.915955][ T1495] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 464.945709][ T1497] veth0: entered promiscuous mode [ 464.947556][ T1500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12183'. [ 464.962423][ T1497] veth0: left promiscuous mode [ 465.024425][ T1486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.025601][ T1503] IPVS: Error connecting to the multicast addr [ 465.034136][ T1486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.195439][ T1518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12192'. [ 465.423034][ T1534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12198'. [ 466.159308][ T1589] loop6: detected capacity change from 0 to 128 [ 466.180351][ T1589] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 466.225042][T22900] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 466.858116][ T1637] netlink: 'syz.1.12233': attribute type 1 has an invalid length. [ 466.875927][ T1637] 8021q: adding VLAN 0 to HW filter on device bond6 [ 466.894521][ T1637] vlan1: entered allmulticast mode [ 466.899703][ T1637] bond6: entered allmulticast mode [ 467.659300][ T1676] netlink: 'syz.6.12250': attribute type 1 has an invalid length. [ 467.759832][ T1676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.802079][ T1682] bond3: (slave ip6gretap1): making interface the new active one [ 467.812676][ T1682] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 468.707371][ T1724] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 468.721516][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 468.721552][ T29] audit: type=1326 audit(490.700:14955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.5.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 468.803922][ T29] audit: type=1326 audit(490.720:14956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.5.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 468.827352][ T29] audit: type=1326 audit(490.720:14957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.5.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 468.850669][ T29] audit: type=1326 audit(490.720:14958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.5.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 468.873881][ T29] audit: type=1326 audit(490.730:14959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.5.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 468.897700][ T29] audit: type=1326 audit(490.740:14960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.5.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 468.920982][ T29] audit: type=1326 audit(490.740:14961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.5.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 468.944835][ T29] audit: type=1326 audit(490.740:14962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.5.12267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 469.021359][ T1741] ip6_vti0 speed is unknown, defaulting to 1000 [ 469.046220][ T1745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12278'. [ 469.415949][ T1771] SELinux: Context × is not valid (left unmapped). [ 469.536944][ T1784] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12294'. [ 469.597481][ T1790] netlink: 'syz.9.12296': attribute type 1 has an invalid length. [ 469.660239][ T29] audit: type=1326 audit(491.630:14963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.5.12293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 469.683385][ T29] audit: type=1326 audit(491.630:14964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.5.12293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 469.723562][ T1790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.842775][ T1807] netlink: 'syz.7.12300': attribute type 1 has an invalid length. [ 469.859280][ T1807] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.904685][ T1807] vlan0: entered allmulticast mode [ 469.910013][ T1807] bond4: entered allmulticast mode [ 469.962434][ T1816] bridge0: entered promiscuous mode [ 469.969005][ T1816] macsec1: entered promiscuous mode [ 469.978467][ T1816] bridge0: port 1(macsec1) entered blocking state [ 469.985085][ T1816] bridge0: port 1(macsec1) entered disabled state [ 470.040380][ T1816] macsec1: entered allmulticast mode [ 470.045925][ T1816] bridge0: entered allmulticast mode [ 470.068100][ T1816] macsec1: left allmulticast mode [ 470.073233][ T1816] bridge0: left allmulticast mode [ 470.080203][ T1816] bridge0: left promiscuous mode [ 470.240754][ T1839] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 470.275417][ T1841] netlink: 'syz.5.12317': attribute type 1 has an invalid length. [ 470.313296][ T1841] 8021q: adding VLAN 0 to HW filter on device bond5 [ 470.471576][ T1841] vlan0: entered allmulticast mode [ 470.476939][ T1841] bond5: entered allmulticast mode [ 470.702973][ T1882] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12333'. [ 471.060884][ T1899] ip6_vti0 speed is unknown, defaulting to 1000 [ 471.061507][ T1901] loop6: detected capacity change from 0 to 256 [ 471.074506][ T1901] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 471.317541][ T1922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12351'. [ 471.795216][ T1943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12360'. [ 471.862533][ T1947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12362'. [ 471.881376][ T1947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12362'. [ 472.042546][ T1953] ip6_vti0 speed is unknown, defaulting to 1000 [ 472.099925][ T1957] ip6_vti0 speed is unknown, defaulting to 1000 [ 472.162123][ T1962] macsec1: entered promiscuous mode [ 472.168597][ T1962] bridge0: port 2(macsec1) entered blocking state [ 472.175779][ T1962] bridge0: port 2(macsec1) entered disabled state [ 472.185976][ T1962] macsec1: entered allmulticast mode [ 472.192220][ T1962] macsec1: left allmulticast mode [ 472.442440][ T1976] veth14: entered promiscuous mode [ 472.448401][ T1976] veth14: entered allmulticast mode [ 472.491726][ T1980] netlink: 'syz.7.12375': attribute type 4 has an invalid length. [ 472.520342][ T1980] netlink: 'syz.7.12375': attribute type 4 has an invalid length. [ 472.533077][ T1980] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12375'. [ 472.553606][ T1980] bridge0: port 1(dummy0) entered disabled state [ 472.580350][T22594] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.592563][T22594] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.601976][ T1984] netlink: 'syz.5.12378': attribute type 4 has an invalid length. [ 472.605700][T22594] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.647758][T22594] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.819964][ T2002] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12385'. [ 472.930380][ T2009] $Hÿ: renamed from bond0 [ 472.953368][ T2009] $Hÿ: entered promiscuous mode [ 473.153310][ T2021] netlink: 'syz.6.12393': attribute type 1 has an invalid length. [ 473.192407][ T2021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.193574][ T2024] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12395'. [ 473.258039][ T2021] bond0: (slave geneve2): making interface the new active one [ 473.269768][ T2021] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 473.289247][ T4337] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.323183][ T4337] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.342220][ T2007] ip6_vti0 speed is unknown, defaulting to 1000 [ 473.357018][ T4337] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.374284][ T4337] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.430193][ T2032] loop6: detected capacity change from 0 to 256 [ 474.069911][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 474.069932][ T29] audit: type=1326 audit(496.040:15100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.7.12401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 474.112244][ T29] audit: type=1326 audit(496.040:15101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.7.12401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 474.136614][ T29] audit: type=1326 audit(496.040:15102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.7.12401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 474.159882][ T29] audit: type=1326 audit(496.040:15103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.7.12401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 474.183737][ T29] audit: type=1326 audit(496.040:15104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.7.12401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 474.207480][ T29] audit: type=1326 audit(496.040:15105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.7.12401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f91ef8ade97 code=0x7ffc0000 [ 474.230650][ T29] audit: type=1326 audit(496.040:15106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.7.12401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 474.254329][ T29] audit: type=1326 audit(496.040:15107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.7.12401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 474.277362][ T29] audit: type=1326 audit(496.040:15108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.7.12401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 474.301109][ T29] audit: type=1326 audit(496.040:15109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.7.12401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f91ef8af749 code=0x7ffc0000 [ 474.495748][ T2063] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12411'. [ 474.715567][ T2090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12424'. [ 475.116285][ T2115] rdma_op ffff8881b337a980 conn xmit_rdma 0000000000000000 [ 475.125435][ T2116] netlink: 'syz.6.12434': attribute type 1 has an invalid length. [ 475.649106][ T2150] loop6: detected capacity change from 0 to 512 [ 475.690588][ T2150] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 475.750561][ T2150] EXT4-fs (loop6): 1 truncate cleaned up [ 475.780641][ T2150] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.809184][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.289988][ T2194] __nla_validate_parse: 5 callbacks suppressed [ 476.290009][ T2194] netlink: 4236 bytes leftover after parsing attributes in process `syz.5.12469'. [ 476.460762][ T2209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12475'. [ 476.513169][ T2209] bond7: entered promiscuous mode [ 476.538307][ T2209] 8021q: adding VLAN 0 to HW filter on device bond7 [ 476.644493][ T2223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12481'. [ 476.657095][ T2223] ip6gre4: entered allmulticast mode [ 476.752965][ T2235] netlink: 'syz.1.12487': attribute type 1 has an invalid length. [ 476.816304][ T2235] bond8: entered promiscuous mode [ 476.821409][ T2235] bond8: entered allmulticast mode [ 476.827828][ T2235] 8021q: adding VLAN 0 to HW filter on device bond8 [ 477.785047][ T2265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12509'. [ 477.899419][ T2275] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12501'. [ 477.908557][ T2275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12501'. [ 477.918278][ T2275] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12501'. [ 477.960721][ T2275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12501'. [ 478.188691][ T2286] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12505'. [ 478.733760][ T2309] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12517'. [ 478.931139][ T2326] ip6_vti0 speed is unknown, defaulting to 1000 [ 479.283068][ T2323] ip6_vti0 speed is unknown, defaulting to 1000 [ 479.384868][ T29] kauditd_printk_skb: 667 callbacks suppressed [ 479.384886][ T29] audit: type=1400 audit(501.360:15777): avc: denied { map } for pid=2358 comm="syz.5.12540" path="socket:[120683]" dev="sockfs" ino=120683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 479.534086][ T29] audit: type=1400 audit(501.360:15778): avc: denied { read } for pid=2358 comm="syz.5.12540" path="socket:[120683]" dev="sockfs" ino=120683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 479.671443][ T2380] netlink: 'syz.5.12549': attribute type 1 has an invalid length. [ 479.701518][ T2380] bond6: entered promiscuous mode [ 479.708562][ T2380] 8021q: adding VLAN 0 to HW filter on device bond6 [ 479.820558][ T2388] bond6: (slave bridge12): making interface the new active one [ 479.828902][ T2388] bridge12: entered promiscuous mode [ 479.836715][ T2388] bond6: (slave bridge12): Enslaving as an active interface with an up link [ 479.932971][ T2403] $Hÿ: renamed from bond0 [ 479.944812][ T2399] SELinux: failed to load policy [ 479.955115][ T2403] $Hÿ: left allmulticast mode [ 480.060820][ T2416] ip6_vti0 speed is unknown, defaulting to 1000 [ 480.406001][ T29] audit: type=1326 audit(502.380:15779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.5.12576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 480.432172][ T29] audit: type=1326 audit(502.380:15780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.5.12576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 480.456117][ T29] audit: type=1326 audit(502.380:15781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.5.12576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 480.479123][ T29] audit: type=1326 audit(502.380:15782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.5.12576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 480.502660][ T29] audit: type=1326 audit(502.400:15783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.5.12576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 480.526410][ T29] audit: type=1326 audit(502.400:15784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.5.12576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 480.552131][ T29] audit: type=1326 audit(502.420:15785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.5.12576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 480.575895][ T29] audit: type=1326 audit(502.420:15786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.5.12576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 481.108323][ T2469] netlink: 'syz.7.12584': attribute type 1 has an invalid length. [ 481.151947][ T2469] bond0: entered promiscuous mode [ 481.157349][ T2469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.193054][ T2469] bond0: (slave bridge5): making interface the new active one [ 481.200706][ T2469] bridge5: entered promiscuous mode [ 481.209970][ T2469] bridge5: left promiscuous mode [ 481.256240][ T2472] ip6_vti0 speed is unknown, defaulting to 1000 [ 481.799478][ T2512] netlink: 'syz.1.12599': attribute type 1 has an invalid length. [ 481.846282][ T2512] bond9: entered promiscuous mode [ 481.854134][ T2512] 8021q: adding VLAN 0 to HW filter on device bond9 [ 481.893739][ T2512] bond9: (slave bridge6): making interface the new active one [ 481.901901][ T2512] bridge6: entered promiscuous mode [ 481.909122][ T2512] bridge6: left promiscuous mode [ 482.220435][ T2547] __nla_validate_parse: 5 callbacks suppressed [ 482.220456][ T2547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12613'. [ 482.241686][ T2547] netlink: 568 bytes leftover after parsing attributes in process `syz.6.12613'. [ 482.326915][ T2552] loop6: detected capacity change from 0 to 8192 [ 482.395570][ T2568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12631'. [ 483.008888][ T2574] loop6: detected capacity change from 0 to 256 [ 483.130273][ T2589] netlink: 'syz.5.12633': attribute type 10 has an invalid length. [ 483.138526][ T2589] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12633'. [ 483.179186][ T2589] .`: (slave dummy0): Releasing backup interface [ 483.198843][ T2589] dummy0: left allmulticast mode [ 483.211763][ T2589] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 483.467115][ T2615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.475771][ T2615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.666020][ T2631] pimreg: entered allmulticast mode [ 483.684362][ T2631] pimreg: left allmulticast mode [ 483.701760][ T2606] Set syz1 is full, maxelem 65536 reached [ 484.394026][ T29] kauditd_printk_skb: 513 callbacks suppressed [ 484.394039][ T29] audit: type=1326 audit(506.370:16300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2642 comm="syz.5.12656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7e6ce65e7 code=0x7ffc0000 [ 484.424541][ T29] audit: type=1326 audit(506.370:16301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2642 comm="syz.5.12656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb7e6c8b829 code=0x7ffc0000 [ 484.448148][ T29] audit: type=1326 audit(506.370:16302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2642 comm="syz.5.12656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 484.472361][ T29] audit: type=1326 audit(506.390:16303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2642 comm="syz.5.12656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7e6ce65e7 code=0x7ffc0000 [ 484.496000][ T29] audit: type=1326 audit(506.400:16304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2642 comm="syz.5.12656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb7e6c8b829 code=0x7ffc0000 [ 484.519115][ T29] audit: type=1326 audit(506.400:16305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2642 comm="syz.5.12656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7e6ce65e7 code=0x7ffc0000 [ 484.542509][ T29] audit: type=1326 audit(506.400:16306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2642 comm="syz.5.12656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb7e6c8b829 code=0x7ffc0000 [ 484.565702][ T29] audit: type=1326 audit(506.400:16307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2642 comm="syz.5.12656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb7e6cef749 code=0x7ffc0000 [ 484.589291][ T29] audit: type=1326 audit(506.410:16308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2642 comm="syz.5.12656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7e6ce65e7 code=0x7ffc0000 [ 484.612375][ T29] audit: type=1326 audit(506.410:16309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2642 comm="syz.5.12656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb7e6c8b829 code=0x7ffc0000 [ 484.716842][ T2675] dvmrp0: entered allmulticast mode [ 485.109107][ T2661] Set syz1 is full, maxelem 65536 reached [ 485.150971][ T2692] loop6: detected capacity change from 0 to 1024 [ 485.185127][ T2692] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 485.238956][ T2697] loop6: detected capacity change from 0 to 1024 [ 485.248379][ T2697] EXT4-fs: Ignoring removed orlov option [ 485.284960][ T2697] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.378659][T22900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.414862][ T2713] ip6_vti0 speed is unknown, defaulting to 1000 [ 485.461700][ T2716] sch_fq: defrate 0 ignored. [ 486.142425][ T2758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12703'. [ 486.337193][ T2780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12711'. [ 486.346228][ T2780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12711'. [ 486.881696][ T2785] ================================================================== [ 486.889826][ T2785] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 486.896822][ T2785] [ 486.899171][ T2785] read-write to 0xffff8881c42e3f6c of 4 bytes by task 2790 on cpu 0: [ 486.907257][ T2785] fifo_open+0x17f/0x5d0 [ 486.911554][ T2785] do_dentry_open+0x54b/0xa60 [ 486.916265][ T2785] vfs_open+0x37/0x1e0 [ 486.920367][ T2785] path_openat+0x1ddd/0x23b0 [ 486.924986][ T2785] do_filp_open+0x109/0x230 [ 486.929636][ T2785] do_sys_openat2+0xa6/0x150 [ 486.934250][ T2785] __x64_sys_open+0xe6/0x110 [ 486.938862][ T2785] x64_sys_call+0x166f/0x3000 [ 486.943562][ T2785] do_syscall_64+0xca/0x2b0 [ 486.948096][ T2785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.954011][ T2785] [ 486.956521][ T2785] read to 0xffff8881c42e3f6c of 4 bytes by task 2785 on cpu 1: [ 486.964072][ T2785] wait_for_partner+0xf7/0x1c0 [ 486.968854][ T2785] fifo_open+0x462/0x5d0 [ 486.973110][ T2785] do_dentry_open+0x54b/0xa60 [ 486.977803][ T2785] vfs_open+0x37/0x1e0 [ 486.981891][ T2785] path_openat+0x1ddd/0x23b0 [ 486.986510][ T2785] do_filp_open+0x109/0x230 [ 486.991035][ T2785] do_sys_openat2+0xa6/0x150 [ 486.995682][ T2785] __x64_sys_open+0xe6/0x110 [ 487.000298][ T2785] x64_sys_call+0x166f/0x3000 [ 487.004996][ T2785] do_syscall_64+0xca/0x2b0 [ 487.009528][ T2785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.015434][ T2785] [ 487.017767][ T2785] value changed: 0x00000002 -> 0x00000001 [ 487.023487][ T2785] [ 487.025863][ T2785] Reported by Kernel Concurrency Sanitizer on: [ 487.032022][ T2785] CPU: 1 UID: 0 PID: 2785 Comm: syz.1.12713 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 487.043511][ T2785] Tainted: [W]=WARN [ 487.047326][ T2785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.057488][ T2785] ==================================================================