last executing test programs: 4m8.587170317s ago: executing program 4 (id=443): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000000000}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, &(0x7f0000e5f000)) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 4m8.503995246s ago: executing program 4 (id=444): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x25dfdbfc, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 4m8.359273955s ago: executing program 4 (id=446): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_coalesce={0xe, 0x1, 0xf, 0x0, 0x1, 0x6, 0x6, 0xfffffffc, 0x6f400000, 0x4, 0x7, 0x10, 0x5, 0x9, 0x4, 0x3, 0x8, 0x4, 0x914a666, 0x3, 0x2, 0x5, 0x10}}) 4m8.191124024s ago: executing program 4 (id=451): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'nicvf0\x00', {0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x3, 0x7bfd, 0x18}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) 4m7.087294699s ago: executing program 4 (id=469): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) semget(0x2, 0x3, 0x583) 4m6.965028439s ago: executing program 4 (id=470): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1d9) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 3m51.818554971s ago: executing program 32 (id=470): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000ff0000000000000000d17d000000000000000000000000000000000000000000ffffffff0000000000000000000000000000001200000000000000000000000000080000000000000800000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006e72300000000000000000000000000079616d3000000001000000000000b40079616d30000000000000000000000000766574b7708ad56f5f7465616d0000000180c2000000000000000000aaaaaaaaaa000000000000000000b0000000b0000000e000000071756f746100000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000a0000000000000000000000415544495400000000000000000100000000000000000000000000000000000008"]}, 0x1d9) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 3m8.502753485s ago: executing program 3 (id=1239): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}], 0x38}, 0x40010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m8.502506415s ago: executing program 3 (id=1240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0xa, 0x0, 0x0, 0x3, &(0x7f0000000100), 0x1, 0x0, 0x1}) unshare(0x20000400) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) 3m8.463164595s ago: executing program 3 (id=1242): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) 3m8.373807774s ago: executing program 3 (id=1245): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x1a, r0, 0xfffffffffffffffe, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xffffffc1, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 3m8.176919433s ago: executing program 3 (id=1250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) 3m8.099942823s ago: executing program 3 (id=1254): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c2, &(0x7f0000000c40)="$eJzs3dFLU28cx/GPzp+bE91+EEFB9VA3dTN0/QE1QiEaFOakugiOeVZjp03OGcYicjfRbX9EV1J33QXVZTfeRDfddydB0I0X0Yl2Nt102nQ6l75fIOe7830+nEc9yneC28qtFw/zWS+RtUrqjxj1SxWtSvE/VU1f7dhfrQfVqKILwz++nLp5+861VDo9MWXMZGr6YtIYM3rm3aMnr85+KA3PvBl9G9Zy/O7K9+TX5ePLJ1Z+TT/IeSbnmUKxZCwzWyyWrFnHNnM5L58w5oZjW55tcgXPdpv6Wac4P182VmFuJDrv2p5nrELZ5O2yKRVNyS0b676VK5hYImFGojraBtpYk1mamrJSW7b9UKuzLU+iJwy1Oum6qUrrZmapC3sCAAA9Zvv5P5j1t57/0zPBcdv5P1Sb/1+/lNqb/6XO5v9E0/zf19UvaI+rND36y/yPQ8F1U1a09vPbjPkfAAAAAAAAAAAAAAAAAAAAAIB/warvx3zfj9WP9Y+wpIik+uOD3if2xy6//5cOaLvYYw3/uBeRnOcLmYVMcAz6qaxycmRrTDH9rN4PNUE9eTU9MWaq4nrvLNbyiwuZkML1fF28Vf70/+NB3jTn/1O08fpJxXSs9fWTLfODOn+uIZ9QTJ/uqShHc9X7ej3/dNyYK9fTG/JD1XUAAAAAABwGCbNm0/P3ar+6IKLN/SC/g78PbHh+PaCT7bxEJQAAAAAA6JhXfpy3HMd2d1GEJXUQ30Hh9+37JfauCKkntrGhuCypB7bRrSIiKThjdhP/thZvK+W3sWZAUqefV6SLt9ZB/2YCAAAAsNfWh/4dhD4/28cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABw9LT7emD19Zta9cY28YbLhfRx7e0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCPndwAAAP//6bYmHA==") syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0xa6cc, 0x10100}, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff090000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x8000000, 0x3) sendmsg$key(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x2, 0x15, 0x7, 0x9, 0x1b, 0x0, 0x70bd25, 0x2, [@sadb_x_nat_t_type={0x1}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @remote}}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0xf, 0x10, 0x10}, @sadb_address={0x5, 0x7, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback, 0x2ca}}, @sadb_x_sec_ctx={0x9, 0x18, 0x8, 0xf0, 0x3a, "a5f9fc6b61eb9ac6271754ef7bfff679baa4b4771e83c2e3ba706acd067ecb24c72001a7813665aa1bec767afafb07e01f748a2ea88d7b70ed90"}]}, 0xd8}}, 0x80) r7 = fsopen(&(0x7f0000000040)='sysv\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='tbf\x00', &(0x7f0000000180)='[.\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0xfffffffd, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}}}]}}]}, 0x45c}}, 0x0) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x40100, 0x5a, 0x6}, 0x18) statx(r9, &(0x7f0000000280)='./file0\x00', 0x0, 0x100, &(0x7f0000000300)) 2m53.034434195s ago: executing program 33 (id=1254): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c2, &(0x7f0000000c40)="$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") syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0xa6cc, 0x10100}, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff090000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x8000000, 0x3) sendmsg$key(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x2, 0x15, 0x7, 0x9, 0x1b, 0x0, 0x70bd25, 0x2, [@sadb_x_nat_t_type={0x1}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @remote}}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0xf, 0x10, 0x10}, @sadb_address={0x5, 0x7, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback, 0x2ca}}, @sadb_x_sec_ctx={0x9, 0x18, 0x8, 0xf0, 0x3a, "a5f9fc6b61eb9ac6271754ef7bfff679baa4b4771e83c2e3ba706acd067ecb24c72001a7813665aa1bec767afafb07e01f748a2ea88d7b70ed90"}]}, 0xd8}}, 0x80) r7 = fsopen(&(0x7f0000000040)='sysv\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='tbf\x00', &(0x7f0000000180)='[.\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0xfffffffd, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}}}]}}]}, 0x45c}}, 0x0) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x40100, 0x5a, 0x6}, 0x18) statx(r9, &(0x7f0000000280)='./file0\x00', 0x0, 0x100, &(0x7f0000000300)) 3.063973352s ago: executing program 5 (id=3703): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 2.786953371s ago: executing program 5 (id=3707): setrlimit(0x7, &(0x7f0000000400)) socket$pppl2tp(0x18, 0x1, 0x1) 2.66444466s ago: executing program 5 (id=3709): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0xfff, 0x4, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 1.971126908s ago: executing program 2 (id=3713): gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 1.961214587s ago: executing program 1 (id=3714): bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a0000000500000002"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300000a0000000000000000000000030006000000000002000000e0000009004000000000000002000100000000000000050700000000030005000000000002"], 0x50}}, 0x0) 1.807550207s ago: executing program 2 (id=3715): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b679a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x7c4}}, 0x1006) 1.776475137s ago: executing program 1 (id=3716): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000180), 0xdde, 0x80) 1.698630317s ago: executing program 5 (id=3717): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, 0x0}) 1.636350176s ago: executing program 0 (id=3719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x2000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) 1.628096476s ago: executing program 2 (id=3720): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x95, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.549591986s ago: executing program 5 (id=3721): r0 = socket(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x9}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) 1.498879436s ago: executing program 0 (id=3722): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x85d}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x1f) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r5, 0x1}}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x7800, 0x7, 0x14000000, 0x7ff, {{0x18, 0x4, 0x1, 0x32, 0x60, 0x68, 0x0, 0x0, 0x4, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x24, 0xb7, 0x1, 0xb, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@loopback, 0x10000}, {@multicast1, 0x9}]}, @end, @lsrr={0x83, 0x23, 0x69, [@dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, @private=0xa010101, @empty, @private=0xa010100, @local, @loopback, @loopback]}, @ra={0x94, 0x4}]}}}}}) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x5, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000140)) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000002c0)="2ffb", 0x2}], 0x1) 1.498448076s ago: executing program 2 (id=3723): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000bc1d306c86d02363148854023d6f04f61dfccf24ed0fc2df1dcb031e57abed97fb6d4311e429efbb9e03433602809e5d44fb8535bed2bed92a61b6d373f1ebfb5b386e321068dc42a1cc5c87d36f31428214b35474162a8ae401f7bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x62040200) 1.459729486s ago: executing program 5 (id=3724): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) unshare(0x20000600) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf", @ANYRES16=r0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000110001010000502638598db7da070008", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 867.575573ms ago: executing program 1 (id=3737): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680", 0x9}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 756.877913ms ago: executing program 1 (id=3729): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) 666.967712ms ago: executing program 6 (id=3730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "f3da62162895237d", "5e1cdd4abab400", "a98ae4df", "cd5019dfdf2f702b"}, 0x38) sendto$inet6(r0, &(0x7f0000000480)='&', 0x1, 0x0, 0x0, 0x0) 546.419512ms ago: executing program 2 (id=3731): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b679a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x7c4}}, 0x1006) 483.782701ms ago: executing program 0 (id=3732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f00000003c0)='TRACE\x00', 0x0) 444.713091ms ago: executing program 6 (id=3733): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) 342.849391ms ago: executing program 2 (id=3734): openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xffffffee, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x81, 0x0, 0x0, 0x8}) syz_io_uring_setup(0x1081, &(0x7f0000000380)={0x0, 0x4386, 0x100, 0x0, 0xd0}, &(0x7f0000000040), &(0x7f00000000c0)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x2d1, 0x0, 0x0, 0xfffffff9, 0x2, "9ed98f159c25c80c45535d77ab0000e5e5e541"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) 342.533731ms ago: executing program 6 (id=3735): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x800, 0x2, 0x0, 0x8}, 0x20) 311.582341ms ago: executing program 0 (id=3736): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 297.354631ms ago: executing program 6 (id=3738): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000003c0)='cifs.idmap\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 179.22365ms ago: executing program 1 (id=3739): r0 = socket(0x1, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 178.81022ms ago: executing program 0 (id=3740): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000100)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000580)="df8bd5c911", 0x5, 0x4010040, 0x0, 0x0) 169.96054ms ago: executing program 0 (id=3741): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680", 0x9}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 165.517771ms ago: executing program 6 (id=3742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='mm_page_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000010005b0000000000000000000a00000a78000000060a010400000000000000000200080038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 62.96372ms ago: executing program 1 (id=3743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000bc1d306c86d02363148854023d6f04f61dfccf24ed0fc2df1dcb031e57abed97fb6d4311e429efbb9e03433602809e5d44fb8535bed2bed92a61b6d373f1ebfb5b386e321068dc42a1cc5c87d36f31428214b35474162a8ae401f7bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x62040200) 0s ago: executing program 6 (id=3744): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x85d}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x1f) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r5, 0x1}}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x7800, 0x7, 0x14000000, 0x7ff, {{0x18, 0x4, 0x1, 0x32, 0x60, 0x68, 0x0, 0x0, 0x4, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x24, 0xb7, 0x1, 0xb, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@loopback, 0x10000}, {@multicast1, 0x9}]}, @end, @lsrr={0x83, 0x23, 0x69, [@dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, @private=0xa010101, @empty, @private=0xa010100, @local, @loopback, @loopback]}, @ra={0x94, 0x4}]}}}}}) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x5, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000140)) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000002c0)="2ffb", 0x2}], 0x1) kernel console output (not intermixed with test programs): ing attributes in process `syz.2.2503'. [ 238.920881][ T26] audit: type=1326 audit(2000000044.890:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10910 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 238.962440][ T26] audit: type=1326 audit(2000000044.900:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10910 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 239.020734][T10911] syzkaller0 speed is unknown, defaulting to 1000 [ 239.207287][T10921] loop2: detected capacity change from 0 to 512 [ 239.249827][T10921] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 239.263711][T10921] EXT4-fs (loop2): 1 orphan inode deleted [ 239.277257][T10921] EXT4-fs (loop2): 1 truncate cleaned up [ 239.288834][T10921] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 239.609476][T10939] loop5: detected capacity change from 0 to 256 [ 239.666986][T10939] device bridge0 entered promiscuous mode [ 239.717209][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2522'. [ 239.719787][T10939] device bridge_slave_1 left promiscuous mode [ 239.722622][T10939] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.782116][T10939] device bridge_slave_0 left promiscuous mode [ 239.784223][T10939] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.822819][T10946] loop6: detected capacity change from 0 to 256 [ 239.875419][T10939] device bridge0 left promiscuous mode [ 239.932827][T10946] FAT-fs (loop6): Directory bread(block 64) failed [ 239.937069][T10946] FAT-fs (loop6): Directory bread(block 65) failed [ 239.941270][T10946] FAT-fs (loop6): Directory bread(block 66) failed [ 239.945448][T10946] FAT-fs (loop6): Directory bread(block 67) failed [ 239.951554][T10946] FAT-fs (loop6): Directory bread(block 68) failed [ 239.955769][T10946] FAT-fs (loop6): Directory bread(block 69) failed [ 239.959326][T10942] syzkaller0 speed is unknown, defaulting to 1000 [ 239.969551][T10946] FAT-fs (loop6): Directory bread(block 70) failed [ 239.975972][T10946] FAT-fs (loop6): Directory bread(block 71) failed [ 239.982568][T10946] FAT-fs (loop6): Directory bread(block 72) failed [ 239.991743][T10946] FAT-fs (loop6): Directory bread(block 73) failed [ 240.115037][T10953] loop2: detected capacity change from 0 to 2048 [ 240.140822][ T9575] bond0: (slave syz_tun): Releasing backup interface [ 240.191757][T10950] syzkaller0 speed is unknown, defaulting to 1000 [ 240.205640][T10946] No such timeout policy "syz1" [ 240.211070][T10946] attempt to access beyond end of device [ 240.211070][T10946] loop6: rw=0, want=1772, limit=256 [ 240.259119][T10953] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.404957][T10950] chnl_net:caif_netlink_parms(): no params data found [ 240.454589][T10973] rdma_rxe: rxe_register_device failed with error -23 [ 240.465435][T10973] rdma_rxe: failed to add lo [ 240.504722][T10975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2535'. [ 240.517311][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2537'. [ 240.612288][T10950] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.616581][T10950] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.621424][T10950] device bridge_slave_0 entered promiscuous mode [ 240.631973][T10950] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.636007][T10950] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.640809][T10950] device bridge_slave_1 entered promiscuous mode [ 240.737854][T10950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.749400][T10950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.801743][T10950] team0: Port device team_slave_0 added [ 240.809612][T10950] team0: Port device team_slave_1 added [ 240.829203][T10950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.834364][T10950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.848835][T10950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.857769][T10950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.859674][T10950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.867611][T10950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.874263][T10987] syzkaller0 speed is unknown, defaulting to 1000 [ 240.948806][T10950] device hsr_slave_0 entered promiscuous mode [ 240.986575][T10950] device hsr_slave_1 entered promiscuous mode [ 241.036017][T10950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.038063][T10950] Cannot create hsr debugfs directory [ 241.183249][T10995] loop6: detected capacity change from 0 to 256 [ 241.208788][T10950] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.239571][T10995] device bridge0 entered promiscuous mode [ 241.267796][T10950] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.277145][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2539'. [ 241.279487][T10995] device bridge_slave_1 left promiscuous mode [ 241.282330][T10995] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.318949][T10995] device bridge_slave_0 left promiscuous mode [ 241.320573][T10995] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.378129][T10995] device bridge0 left promiscuous mode [ 241.479467][T10950] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.085163][T10950] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.309346][T11033] rdma_rxe: rxe_register_device failed with error -23 [ 242.327951][T11033] rdma_rxe: failed to add lo [ 242.362011][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 242.526718][T10950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.559332][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2562'. [ 242.567706][T10950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.590959][T11046] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2561'. [ 242.593855][T11048] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 242.597287][T10950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.599558][T11048] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 242.648377][T10950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.700283][T11053] loop5: detected capacity change from 0 to 2048 [ 242.763376][T10950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.770074][T11053] EXT4-fs (loop5): failed to initialize system zone (-117) [ 242.771952][T11053] EXT4-fs (loop5): mount failed [ 242.786183][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.795818][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.862759][T10950] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.868114][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.871142][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.873752][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.875696][ T6117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.907221][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.909818][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.912420][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.919376][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.921169][ T6117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.933667][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.937413][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.949638][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.954089][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.958269][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.960889][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.967876][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.974528][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.985808][T10950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.990054][T10950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.992695][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.995149][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.003341][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.036214][T11062] MPTCP: kernel_bind error, err=-99 [ 243.128676][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.132153][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.141770][T10950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.185331][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.188584][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.204994][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.208083][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.217806][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.223524][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.230543][T10950] device veth0_vlan entered promiscuous mode [ 243.241425][T10950] device veth1_vlan entered promiscuous mode [ 243.277602][T10950] device veth0_macvtap entered promiscuous mode [ 243.281053][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.285583][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.289656][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.294140][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.302546][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.066470][T10950] device veth1_macvtap entered promiscuous mode [ 244.081430][ T26] kauditd_printk_skb: 87 callbacks suppressed [ 244.081442][ T26] audit: type=1326 audit(2000000050.090:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.2.2572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 244.091771][ T26] audit: type=1326 audit(2000000050.100:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.2.2572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 244.123620][ T26] audit: type=1326 audit(2000000050.100:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.2.2572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=231 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 244.132612][T10950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.141239][T11077] syzkaller0 speed is unknown, defaulting to 1000 [ 244.150756][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.153353][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.168664][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.183707][ T26] audit: type=1326 audit(2000000050.100:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.2.2572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 244.203168][ T26] audit: type=1326 audit(2000000050.100:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.2.2572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 244.252123][T10950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.287469][T10950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.289962][T10950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.296299][T10950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.298765][T10950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.304441][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.308560][ T26] audit: type=1326 audit(2000000050.320:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11088 comm="syz.5.2577" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x0 [ 244.316473][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.426134][ T4176] Bluetooth: hci4: command 0x041b tx timeout [ 244.444154][T11094] loop6: detected capacity change from 0 to 512 [ 244.471973][ T1742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.474331][ T1742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.492592][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 244.548135][T11094] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 244.556148][T11094] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 244.562054][T11094] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.2579: Failed to acquire dquot type 1 [ 244.573099][T11094] EXT4-fs (loop6): 1 truncate cleaned up [ 244.574557][T11094] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 244.580678][T11094] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.602019][ T6129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.604415][ T6129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.611571][ T6120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 244.722615][ T26] audit: type=1326 audit(2000000050.730:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.1.2527" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x0 [ 244.755372][T11120] loop2: detected capacity change from 0 to 512 [ 244.781402][ T26] audit: type=1326 audit(2000000050.790:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11117 comm="syz.5.2584" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x0 [ 244.931704][T11120] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,dioread_lock,,errors=continue. Quota mode: writeback. [ 244.947116][T11120] ext4 filesystem being mounted at /567/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.954366][T11130] device veth0_to_team entered promiscuous mode [ 245.705342][T11131] syzkaller0 speed is unknown, defaulting to 1000 [ 246.471682][T11172] loop5: detected capacity change from 0 to 512 [ 246.506513][ T4176] Bluetooth: hci4: command 0x040f tx timeout [ 246.597017][T11170] syzkaller0 speed is unknown, defaulting to 1000 [ 246.669889][T11172] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,grpid,grpjquota=,,errors=continue. Quota mode: writeback. [ 246.673875][T11172] ext4 filesystem being mounted at /378/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.703778][T11176] loop6: detected capacity change from 0 to 512 [ 246.731447][T11172] Process accounting resumed [ 246.807811][T11176] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,dioread_lock,,errors=continue. Quota mode: writeback. [ 246.812515][T11176] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.878484][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2602'. [ 247.124041][T11194] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2608'. [ 247.954794][T11214] syzkaller0 speed is unknown, defaulting to 1000 [ 248.036358][T11219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2617'. [ 248.841305][T11250] netlink: 'syz.6.2625': attribute type 1 has an invalid length. [ 249.067034][ T4069] Bluetooth: hci4: command 0x0419 tx timeout [ 249.310842][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 249.310855][ T26] audit: type=1326 audit(2000000055.320:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.6.2630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 249.345328][ T26] audit: type=1326 audit(2000000055.340:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11253 comm="syz.5.2629" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x0 [ 249.380676][ T26] audit: type=1326 audit(2000000055.360:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.6.2630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 249.404021][ T26] audit: type=1326 audit(2000000055.360:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.6.2630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 249.433911][ T26] audit: type=1326 audit(2000000055.360:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.6.2630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 249.502882][ T26] audit: type=1326 audit(2000000055.360:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.6.2630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 249.533855][ T26] audit: type=1326 audit(2000000055.360:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.6.2630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=66 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 249.560237][ T26] audit: type=1326 audit(2000000055.360:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.6.2630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 249.720602][ T26] audit: type=1326 audit(2000000055.730:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11272 comm="syz.1.2636" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x0 [ 249.925571][ T26] audit: type=1326 audit(2000000055.930:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.6.2637" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 249.938687][T11280] rdma_rxe: rxe_register_device failed with error -23 [ 249.940597][T11280] rdma_rxe: failed to add lo [ 252.693957][T11315] syzkaller0 speed is unknown, defaulting to 1000 [ 253.330432][T11320] loop5: detected capacity change from 0 to 2048 [ 253.366883][T11326] netlink: 'syz.0.2653': attribute type 1 has an invalid length. [ 253.429453][T11320] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 253.619494][T11344] rdma_rxe: rxe_register_device failed with error -23 [ 253.621504][T11344] rdma_rxe: failed to add lo [ 253.890444][T11359] netlink: 332 bytes leftover after parsing attributes in process `syz.5.2664'. [ 253.906365][T11359] netlink: 'syz.5.2664': attribute type 9 has an invalid length. [ 253.908591][T11359] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2664'. [ 253.918018][T11359] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2664'. [ 254.913556][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.915264][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.004106][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 255.004119][ T26] audit: type=1326 audit(2000000061.010:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 255.013300][ T26] audit: type=1326 audit(2000000061.020:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=47 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 255.079175][ T26] audit: type=1326 audit(2000000061.020:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 255.087077][ T26] audit: type=1326 audit(2000000061.020:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 255.093498][ T26] audit: type=1326 audit(2000000061.020:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 255.103180][ T26] audit: type=1326 audit(2000000061.050:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 255.103690][T11365] loop2: detected capacity change from 0 to 512 [ 255.110293][ T26] audit: type=1326 audit(2000000061.050:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 255.119941][ T26] audit: type=1326 audit(2000000061.050:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 255.135049][T11363] syzkaller0 speed is unknown, defaulting to 1000 [ 255.148446][ T26] audit: type=1326 audit(2000000061.050:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff81bc1adc code=0x7ffc0000 [ 255.170836][T11369] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 255.172554][T11369] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 255.174411][T11365] EXT4-fs (loop2): Ignoring removed oldalloc option [ 255.216063][ T26] audit: type=1326 audit(2000000061.050:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff81bc0170 code=0x7ffc0000 [ 255.224423][T11372] device hsr_slave_0 left promiscuous mode [ 255.254631][T11365] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.2668: Parent and EA inode have the same ino 15 [ 255.268780][T11365] EXT4-fs (loop2): Remounting filesystem read-only [ 255.270673][T11365] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.2668: Parent and EA inode have the same ino 15 [ 255.278658][T11365] EXT4-fs (loop2): Remounting filesystem read-only [ 255.280604][T11365] EXT4-fs (loop2): 1 orphan inode deleted [ 255.282075][T11365] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000002000,. Quota mode: none. [ 255.295692][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2672'. [ 255.323100][T11372] device hsr_slave_1 left promiscuous mode [ 255.421740][T11356] syzkaller0 speed is unknown, defaulting to 1000 [ 255.424629][ T9] device hsr_slave_0 left promiscuous mode [ 255.466334][ T9] device hsr_slave_1 left promiscuous mode [ 255.930455][ T9] bond1 (unregistering): Released all slaves [ 255.996892][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.998111][ T4178] smc: removing ib device syz! [ 256.056804][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.183578][ T9] bond0 (unregistering): Released all slaves [ 256.225249][T11382] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2675'. [ 256.228371][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2675'. [ 256.230715][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2675'. [ 257.399135][T11414] syzkaller0 speed is unknown, defaulting to 1000 [ 257.534370][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2687'. [ 257.556265][T11425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2687'. [ 257.590432][T11423] loop2: detected capacity change from 0 to 2048 [ 257.607742][T11422] loop5: detected capacity change from 0 to 2048 [ 257.652891][T11422] loop5: p1 p2 p3 [ 257.680680][T11423] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.747641][ T3644] loop5: p1 p2 p3 [ 257.849335][T11437] syzkaller0 speed is unknown, defaulting to 1000 [ 258.044072][T10083] udevd[10083]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 258.081023][T10070] udevd[10070]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 258.083401][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 258.130282][T11447] sctp: [Deprecated]: syz.1.2696 (pid 11447) Use of int in max_burst socket option. [ 258.130282][T11447] Use struct sctp_assoc_value instead [ 258.199285][T11457] 9p: Unknown Cache mode f [ 258.332235][T11451] syzkaller0 speed is unknown, defaulting to 1000 [ 258.408463][T11464] loop2: detected capacity change from 0 to 8192 [ 258.441459][T11464] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.801420][T10083] udevd[10083]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 258.861569][T11480] loop6: detected capacity change from 0 to 2048 [ 258.873463][T10070] udevd[10070]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 258.901060][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 258.993101][T11478] syzkaller0 speed is unknown, defaulting to 1000 [ 259.046509][T11480] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.256642][T11498] rdma_rxe: rxe_register_device failed with error -23 [ 259.258699][T11498] rdma_rxe: failed to add lo [ 260.190770][T11529] syzkaller0 speed is unknown, defaulting to 1000 [ 260.260684][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 260.260698][ T26] audit: type=1326 audit(2000000066.270:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.6.2729" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x0 [ 260.290192][T11538] device syzkaller0 entered promiscuous mode [ 260.373286][ T26] audit: type=1326 audit(2000000066.380:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.2.2730" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81bc1aa8 code=0x0 [ 260.697113][T11555] team0 (unregistering): Port device team_slave_0 removed [ 260.784947][T11555] team0 (unregistering): Port device team_slave_1 removed [ 260.817996][ T26] audit: type=1326 audit(2000000066.830:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb577aaa8 code=0x7ffc0000 [ 260.826561][ T26] audit: type=1326 audit(2000000066.830:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb577aaa8 code=0x7ffc0000 [ 260.840328][ T26] audit: type=1326 audit(2000000066.840:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb577aaa8 code=0x7ffc0000 [ 260.855461][ T26] audit: type=1326 audit(2000000066.840:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=78 compat=0 ip=0xffffb577aaa8 code=0x7ffc0000 [ 260.870330][ T26] audit: type=1326 audit(2000000066.840:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb577aaa8 code=0x7ffc0000 [ 260.954061][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2736'. [ 260.985501][T11562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.035268][T11568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.042646][T11568] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 261.071555][T11568] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 261.324643][ T26] audit: type=1326 audit(2000000067.330:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.2.2742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 261.343358][ T26] audit: type=1326 audit(2000000067.350:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.2.2742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 261.388018][ T26] audit: type=1326 audit(2000000067.350:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.2.2742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=17 compat=0 ip=0xffff81bc1aa8 code=0x7ffc0000 [ 261.403115][T11584] syzkaller0 speed is unknown, defaulting to 1000 [ 261.525230][T11593] loop6: detected capacity change from 0 to 512 [ 261.669015][T11593] Process accounting resumed [ 261.672526][T11593] kernel write not supported for file /asound/timers (pid: 11593 comm: syz.6.2747) [ 261.686100][ T4070] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 261.723973][T11601] rdma_rxe: rxe_register_device failed with error -23 [ 261.726610][T11601] rdma_rxe: failed to add lo [ 261.735512][T11596] syzkaller0 speed is unknown, defaulting to 1000 [ 261.876034][ T4070] usb 1-1: device descriptor read/64, error -71 [ 261.986452][T11596] chnl_net:caif_netlink_parms(): no params data found [ 262.145962][ T4070] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 262.228499][T11596] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.231539][T11596] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.244274][T11596] device bridge_slave_0 entered promiscuous mode [ 262.261834][T11596] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.264908][T11596] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.318279][T11596] device bridge_slave_1 entered promiscuous mode [ 262.377698][T11596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.398820][T11596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.473655][T11596] team0: Port device team_slave_0 added [ 262.482183][ T4070] usb 1-1: device descriptor read/64, error -71 [ 262.498322][T11596] team0: Port device team_slave_1 added [ 262.513806][T11596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.515630][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.532888][T11596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.537262][T11596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.546027][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.567532][T11596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.582665][T11625] syzkaller0 speed is unknown, defaulting to 1000 [ 262.604745][ T4070] usb usb1-port1: attempt power cycle [ 262.657823][T11596] device hsr_slave_0 entered promiscuous mode [ 262.697616][T11596] device hsr_slave_1 entered promiscuous mode [ 262.736396][T11596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.739203][T11596] Cannot create hsr debugfs directory [ 262.865743][T11596] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.935563][T11596] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.986422][T11596] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.016373][ T4070] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 263.044313][T11596] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.106052][ T4070] usb 1-1: device descriptor read/8, error -71 [ 263.375992][ T4070] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 263.496988][ T4070] usb 1-1: device descriptor read/8, error -71 [ 263.535126][T11596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 263.572433][T11596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 263.616180][ T4070] usb usb1-port1: unable to enumerate USB device [ 263.626499][T11596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 263.633208][T11643] netlink: 'syz.1.2761': attribute type 1 has an invalid length. [ 263.660626][T11596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 263.712037][ T4098] Bluetooth: hci3: command 0x0409 tx timeout [ 263.722717][ T9] tipc: Disabling bearer [ 263.724718][ T9] tipc: Left network mode [ 263.821181][T11596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.857713][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.860041][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.874560][T11596] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.904921][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.910737][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.913443][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.915358][ T6109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.943583][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.994738][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2769'. [ 264.000397][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2769'. [ 264.016148][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.018875][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.021262][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.023300][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.074889][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.091343][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.095072][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.098709][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.102146][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.105551][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.119606][T11596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.122451][T11596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.127011][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.129525][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.132878][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.217474][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.230478][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.245242][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.349329][T11665] syzkaller0 speed is unknown, defaulting to 1000 [ 264.419500][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.421890][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.442269][T11596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.457227][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.459993][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.480401][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.482997][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.485795][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.489690][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.495330][T11596] device veth0_vlan entered promiscuous mode [ 264.514099][T11596] device veth1_vlan entered promiscuous mode [ 264.541931][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.544817][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.552647][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.558441][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.566063][T11596] device veth0_macvtap entered promiscuous mode [ 264.570274][T11596] device veth1_macvtap entered promiscuous mode [ 264.581453][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.584285][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.589246][T11596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.591356][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.594181][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.599559][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.602493][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.625704][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.629305][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.633020][T11596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.639327][T11596] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.641682][T11596] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.643999][T11596] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.646688][T11596] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.650508][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.655366][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.782402][T11684] netlink: 'syz.6.2777': attribute type 10 has an invalid length. [ 264.784773][T11684] netlink: 'syz.6.2777': attribute type 19 has an invalid length. [ 264.787457][T11684] netlink: 14536 bytes leftover after parsing attributes in process `syz.6.2777'. [ 264.880909][ T607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.883458][ T607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.889032][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 264.903371][ T6117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.910053][ T6117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.914772][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 264.985228][T11696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2746'. [ 264.995978][T11697] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 265.095211][T11705] rdma_rxe: rxe_register_device failed with error -23 [ 265.130048][T11705] rdma_rxe: failed to add lo [ 265.318148][ T26] kauditd_printk_skb: 95 callbacks suppressed [ 265.318161][ T26] audit: type=1326 audit(2000000071.330:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.1.2790" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 265.338101][ T26] audit: type=1326 audit(2000000071.330:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.1.2790" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 265.361147][ T26] audit: type=1326 audit(2000000071.330:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.1.2790" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=4 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 265.382128][ T26] audit: type=1326 audit(2000000071.330:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.1.2790" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 265.413624][ T26] audit: type=1326 audit(2000000071.330:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.1.2790" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 265.487108][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2795'. [ 265.732982][T11732] syzkaller0 speed is unknown, defaulting to 1000 [ 265.821614][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 265.886657][ T26] audit: type=1326 audit(2000000071.900:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 265.894671][ T26] audit: type=1326 audit(2000000071.900:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 265.933644][ T26] audit: type=1326 audit(2000000071.900:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=60 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 265.966103][ T26] audit: type=1326 audit(2000000071.900:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 265.988914][ T26] audit: type=1326 audit(2000000071.900:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 266.185158][T11770] rdma_rxe: rxe_register_device failed with error -23 [ 266.209956][T11770] rdma_rxe: failed to add lo [ 266.322990][T11761] syzkaller0 speed is unknown, defaulting to 1000 [ 266.578794][T11791] loop5: detected capacity change from 0 to 128 [ 266.630802][T11791] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 266.633882][T11791] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.982424][T11823] rdma_rxe: rxe_register_device failed with error -23 [ 266.985245][T11823] rdma_rxe: failed to add lo [ 267.002454][T11812] syzkaller0 speed is unknown, defaulting to 1000 [ 267.679470][T11858] syzkaller0 speed is unknown, defaulting to 1000 [ 267.866248][ T4037] Bluetooth: hci3: command 0x040f tx timeout [ 268.092123][T11893] device veth0_to_team entered promiscuous mode [ 268.162566][T11893] rdma_rxe: rxe_register_device failed with error -23 [ 268.164533][T11893] rdma_rxe: failed to add lo [ 268.287482][T11890] xt_CT: No such helper "netbios-ns" [ 268.570173][T11918] syzkaller0 speed is unknown, defaulting to 1000 [ 269.232836][T11953] syzkaller0 speed is unknown, defaulting to 1000 [ 269.311036][T11960] syzkaller0 speed is unknown, defaulting to 1000 [ 269.335964][T11946] Falling back ldisc for ttyS3. [ 269.423311][T11973] rdma_rxe: rxe_register_device failed with error -23 [ 269.425240][T11973] rdma_rxe: failed to add lo [ 269.570528][ T4176] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 269.572479][ T4176] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 269.581972][ T4176] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 269.583000][T11960] chnl_net:caif_netlink_parms(): no params data found [ 269.642637][T11985] loop6: detected capacity change from 0 to 256 [ 269.733168][T11960] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.735228][T11960] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.738757][T11960] device bridge_slave_0 entered promiscuous mode [ 269.745109][T11960] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.748451][T11960] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.751526][T11960] device bridge_slave_1 entered promiscuous mode [ 269.772201][T11960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.780999][T11960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.894523][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'. [ 269.946757][ T4176] Bluetooth: hci3: command 0x0419 tx timeout [ 269.980517][T11960] team0: Port device team_slave_0 added [ 269.994089][T11960] team0: Port device team_slave_1 added [ 270.013585][T11960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.015664][T11960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.023478][T11960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.053997][T11960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.059931][T11960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.071164][T11960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.148343][T11960] device hsr_slave_0 entered promiscuous mode [ 270.186307][T11960] device hsr_slave_1 entered promiscuous mode [ 270.226214][T11960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.228337][T11960] Cannot create hsr debugfs directory [ 270.246763][T12005] syzkaller0 speed is unknown, defaulting to 1000 [ 270.354243][T11960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.414412][T11960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.444995][T12015] rdma_rxe: rxe_register_device failed with error -23 [ 270.447005][T12015] rdma_rxe: failed to add lo [ 270.492895][T11960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.554508][T11960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.581909][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2899'. [ 270.790175][ T26] kauditd_printk_skb: 179 callbacks suppressed [ 270.790189][ T26] audit: type=1326 audit(2000000076.800:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12033 comm="syz.2.2905" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x0 [ 270.836406][T11960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.963919][T11960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 271.017642][T11960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 271.058358][T11960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.196459][ T26] audit: type=1326 audit(2000000077.210:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.6.2910" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x0 [ 271.225692][T11960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.228801][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 271.242086][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.244518][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.260374][T11960] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.282726][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.286478][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.289198][ T4210] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.291172][ T4210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.310464][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.331426][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.334214][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.340995][ T4210] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.342983][ T4210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.357519][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.365179][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.382266][T12056] rdma_rxe: rxe_register_device failed with error -23 [ 271.384224][T12056] rdma_rxe: failed to add lo [ 271.394861][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.405640][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.414178][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.424368][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.427613][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.438647][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.458936][T11960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.462294][T11960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.484836][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.487654][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.490939][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.739187][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.741448][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.753139][T11960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.829111][T12075] syzkaller0 speed is unknown, defaulting to 1000 [ 271.845653][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.849175][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.902912][ T26] audit: type=1326 audit(2000000077.910:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.1.2927" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x0 [ 271.938287][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.941194][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.944205][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.947689][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.960075][T11960] device veth0_vlan entered promiscuous mode [ 272.051520][T11960] device veth1_vlan entered promiscuous mode [ 272.085132][ T26] audit: type=1326 audit(2000000078.090:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.5.2930" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 272.101335][ T26] audit: type=1326 audit(2000000078.090:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.5.2930" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 272.139376][ T26] audit: type=1326 audit(2000000078.090:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.5.2930" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 272.155205][T11960] device veth0_macvtap entered promiscuous mode [ 272.163964][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.168148][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.171573][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.175085][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.184566][T11960] device veth1_macvtap entered promiscuous mode [ 272.188148][ T26] audit: type=1326 audit(2000000078.090:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.5.2930" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=62 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 272.200421][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.209584][ T26] audit: type=1326 audit(2000000078.090:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.5.2930" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 272.212025][ T9] device hsr_slave_0 left promiscuous mode [ 272.220579][ T26] audit: type=1326 audit(2000000078.150:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12104 comm="syz.5.2931" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x0 [ 272.276111][ T9] device hsr_slave_1 left promiscuous mode [ 272.307554][T12109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2932'. [ 272.456198][ T9] device veth1_macvtap left promiscuous mode [ 272.658091][ T9] bond1 (unregistering): Released all slaves [ 272.830500][ T26] audit: type=1326 audit(2000000078.840:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 272.927655][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.974000][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.023131][T12136] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2942'. [ 273.050949][T12136] loop5: detected capacity change from 0 to 512 [ 273.132374][T12136] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2942: invalid indirect mapped block 256 (level 2) [ 273.141721][T12136] EXT4-fs (loop5): 2 truncates cleaned up [ 273.143243][T12136] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.189434][ T9] bond0 (unregistering): Released all slaves [ 273.260020][T12143] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 273.306064][T11028] Bluetooth: hci2: command 0x041b tx timeout [ 273.345133][ T4069] syzkaller0 speed is unknown, defaulting to 1000 [ 273.347993][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.350683][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.353328][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.386665][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.417450][T11960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.426566][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.429210][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.443341][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.448499][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.451008][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.479964][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.491927][T11960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.500869][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.504520][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.521271][T11960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.523619][T11960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.535690][T11960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.547235][T11960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.697199][ T4210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.700127][ T4210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.704605][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.756763][ T4178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.759218][ T4178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.763921][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.896017][T12182] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2960'. [ 273.980711][T12187] lo speed is unknown, defaulting to 1000 [ 273.992206][T12187] lo speed is unknown, defaulting to 1000 [ 274.000687][T12187] lo speed is unknown, defaulting to 1000 [ 274.044973][T12193] loop5: detected capacity change from 0 to 128 [ 274.260622][T12187] infiniband syz2: set active [ 274.261985][ T4176] lo speed is unknown, defaulting to 1000 [ 274.265370][T12187] infiniband syz2: added lo [ 274.303293][T12187] infiniband syz2: Couldn't open port 1 [ 274.333579][T12187] RDS/IB: syz2: added [ 274.338164][T12187] smc: adding ib device syz2 with port count 1 [ 274.384148][T12187] smc: ib device syz2 port 1 has pnetid [ 274.401493][T12187] lo speed is unknown, defaulting to 1000 [ 274.403301][ T1534] lo speed is unknown, defaulting to 1000 [ 274.607900][T12187] lo speed is unknown, defaulting to 1000 [ 274.788090][T12224] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2976'. [ 274.791818][T12200] lo speed is unknown, defaulting to 1000 [ 274.902339][T12187] lo speed is unknown, defaulting to 1000 [ 274.988790][T12187] lo speed is unknown, defaulting to 1000 [ 275.159218][T12187] lo speed is unknown, defaulting to 1000 [ 275.287991][T12187] lo speed is unknown, defaulting to 1000 [ 275.387016][ T1534] Bluetooth: hci2: command 0x040f tx timeout [ 275.437604][T12187] lo speed is unknown, defaulting to 1000 [ 275.470347][T12249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2987'. [ 275.576764][T12187] lo speed is unknown, defaulting to 1000 [ 275.716855][T12249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2987'. [ 275.828075][T12256] lo speed is unknown, defaulting to 1000 [ 275.847929][T12249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2987'. [ 275.872673][T12187] lo speed is unknown, defaulting to 1000 [ 275.981317][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 275.981330][ T26] audit: type=1326 audit(2000000081.990:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12265 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 275.995693][ T26] audit: type=1326 audit(2000000082.000:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12265 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 276.013098][T12187] lo speed is unknown, defaulting to 1000 [ 276.017210][ T26] audit: type=1326 audit(2000000082.000:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12265 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=93 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 276.094928][T12187] lo speed is unknown, defaulting to 1000 [ 276.160380][T12187] lo speed is unknown, defaulting to 1000 [ 276.230022][T12187] lo speed is unknown, defaulting to 1000 [ 276.355488][T12187] lo speed is unknown, defaulting to 1000 [ 276.414900][T12187] lo speed is unknown, defaulting to 1000 [ 276.484884][T12187] lo speed is unknown, defaulting to 1000 [ 276.744276][ T26] audit: type=1326 audit(2000000082.750:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 276.751549][ T26] audit: type=1326 audit(2000000082.760:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 276.775560][ T26] audit: type=1326 audit(2000000082.770:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 276.775598][ T26] audit: type=1326 audit(2000000082.770:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 276.775627][ T26] audit: type=1326 audit(2000000082.770:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 276.775657][ T26] audit: type=1326 audit(2000000082.770:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 276.775686][ T26] audit: type=1326 audit(2000000082.780:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 277.275647][T12309] lo speed is unknown, defaulting to 1000 [ 277.317590][T12310] rdma_rxe: rxe_register_device failed with error -23 [ 277.319675][T12310] rdma_rxe: failed to add lo [ 277.466270][ T1534] Bluetooth: hci2: command 0x0419 tx timeout [ 277.500252][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3011'. [ 277.505101][T12318] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.508231][T12318] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.510673][T12318] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.512866][T12318] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.549809][T12318] device vxlan0 entered promiscuous mode [ 277.780096][T12330] loop5: detected capacity change from 0 to 512 [ 277.885992][T12330] EXT4-fs (loop5): Ignoring removed orlov option [ 277.901549][T12330] EXT4-fs (loop5): orphan cleanup on readonly fs [ 277.904657][T12330] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3017: bg 0: block 248: padding at end of block bitmap is not set [ 277.919876][T12330] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.3017: Failed to acquire dquot type 1 [ 277.927131][T12330] EXT4-fs (loop5): 1 truncate cleaned up [ 277.932210][T12330] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 278.083552][ T1534] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 278.085572][ T1534] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 278.089144][ T1534] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3 [ 278.091997][ T1534] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 278.194421][T12358] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 278.248423][ T5293] hid-generic 0810:0008:FFFFFFF6.0006: item fetching failed at offset 0/4 [ 278.250823][ T5293] hid-generic: probe of 0810:0008:FFFFFFF6.0006 failed with error -22 [ 278.425651][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 278.428934][T12379] device bridge_slave_1 left promiscuous mode [ 278.430823][T12379] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.500166][T12379] device bridge_slave_0 left promiscuous mode [ 278.501995][T12379] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.692151][T12381] lo speed is unknown, defaulting to 1000 [ 279.487219][T12429] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3057'. [ 279.692193][T12439] rdma_rxe: rxe_register_device failed with error -23 [ 279.692307][T12439] rdma_rxe: failed to add lo [ 280.054142][T12461] loop5: detected capacity change from 0 to 512 [ 280.055050][T12452] lo speed is unknown, defaulting to 1000 [ 280.058645][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3068'. [ 280.062406][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3068'. [ 280.084312][T12419] hid-generic 0000:0D16:0000.0007: unknown main item tag 0x0 [ 280.090816][T12419] hid-generic 0000:0D16:0000.0007: unknown main item tag 0x0 [ 280.093965][T12419] hid-generic 0000:0D16:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 280.131030][T12461] EXT4-fs (loop5): orphan cleanup on readonly fs [ 280.134046][T12461] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3069: bg 0: block 248: padding at end of block bitmap is not set [ 280.144569][T12461] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.3069: Failed to acquire dquot type 1 [ 280.151170][T12461] EXT4-fs (loop5): 1 truncate cleaned up [ 280.153087][T12461] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.359556][T12480] loop5: detected capacity change from 0 to 128 [ 280.362016][T12480] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.371693][T12480] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 280.447689][T12490] rdma_rxe: rxe_register_device failed with error -23 [ 280.449588][T12490] rdma_rxe: failed to add lo [ 280.739626][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3088'. [ 281.142510][ T26] kauditd_printk_skb: 258 callbacks suppressed [ 281.142525][ T26] audit: type=1326 audit(2000000087.140:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12535 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a54aa8 code=0x7ffc0000 [ 281.167685][T12537] netlink: 'syz.2.3099': attribute type 7 has an invalid length. [ 281.170909][ T26] audit: type=1326 audit(2000000087.140:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12535 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=194 compat=0 ip=0xffff89a54aa8 code=0x7ffc0000 [ 281.173794][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 281.190453][ T26] audit: type=1326 audit(2000000087.140:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12535 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a54aa8 code=0x7ffc0000 [ 281.202625][ T26] audit: type=1326 audit(2000000087.140:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12535 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a54aa8 code=0x7ffc0000 [ 282.116567][ T26] audit: type=1326 audit(2000000088.130:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.5.3103" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x0 [ 282.155006][T12544] lo speed is unknown, defaulting to 1000 [ 282.296673][T12561] rdma_rxe: rxe_register_device failed with error -23 [ 282.306090][T12561] rdma_rxe: failed to add lo [ 282.369293][ T26] audit: type=1326 audit(2000000088.380:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.1.3110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 282.383712][ T26] audit: type=1326 audit(2000000088.380:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.1.3110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 282.451425][T12566] ebt_among: src integrity fail: 100 [ 282.454706][ T26] audit: type=1326 audit(2000000088.380:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.1.3110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 282.482068][ T26] audit: type=1326 audit(2000000088.380:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.1.3110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 282.508569][ T26] audit: type=1326 audit(2000000088.380:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.1.3110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 282.580393][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3113'. [ 282.583050][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3113'. [ 282.585568][T12572] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3113'. [ 282.618321][T12578] IPv6: Can't replace route, no match found [ 282.703247][T12589] loop6: detected capacity change from 0 to 128 [ 282.741870][T12589] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 282.744881][T12589] ext4 filesystem being mounted at /287/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 283.084138][T12613] rdma_rxe: already configured on lo [ 283.084539][T12609] lo speed is unknown, defaulting to 1000 [ 283.206395][T12622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3133'. [ 284.327094][T12633] SET target dimension over the limit! [ 284.431265][T12646] netlink: 'syz.1.3144': attribute type 8 has an invalid length. [ 284.465618][T12648] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.468363][T12648] IPv6: Can't replace route, no match found [ 284.630487][T12660] device veth0_virt_wifi entered promiscuous mode [ 284.677767][T12660] device veth0_virt_wifi left promiscuous mode [ 284.763804][T12668] rdma_rxe: already configured on lo [ 285.747305][T12676] netlink: 'syz.6.3155': attribute type 10 has an invalid length. [ 285.774553][T12676] team0: Port device netdevsim0 added [ 286.188976][T12704] loop5: detected capacity change from 0 to 256 [ 286.206872][T12709] loop6: detected capacity change from 0 to 512 [ 286.220089][T12710] rdma_rxe: rxe_register_device failed with error -23 [ 286.222228][T12710] rdma_rxe: failed to add lo [ 287.054079][T12709] EXT4-fs (loop6): Ignoring removed bh option [ 287.056847][T12704] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 287.090321][T12709] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 287.126919][T12709] EXT4-fs (loop6): 1 truncate cleaned up [ 287.128331][T12709] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: writeback. [ 287.155357][ T26] kauditd_printk_skb: 108 callbacks suppressed [ 287.155370][ T26] audit: type=1326 audit(2000000093.160:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12718 comm="syz.5.3173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 287.215249][ T26] audit: type=1326 audit(2000000093.220:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12718 comm="syz.5.3173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=227 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 287.242225][ T26] audit: type=1326 audit(2000000093.240:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12718 comm="syz.5.3173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 287.265288][ T26] audit: type=1326 audit(2000000093.240:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12718 comm="syz.5.3173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 287.328348][T12731] udc-core: couldn't find an available UDC or it's busy [ 287.330208][T12731] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 287.423745][ T26] audit: type=1326 audit(2000000093.430:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a54aa8 code=0x7ffc0000 [ 287.437117][ T26] audit: type=1326 audit(2000000093.450:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a54aa8 code=0x7ffc0000 [ 287.456303][ T26] audit: type=1326 audit(2000000093.460:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a54aa8 code=0x7ffc0000 [ 287.463255][ T26] audit: type=1326 audit(2000000093.460:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a54aa8 code=0x7ffc0000 [ 287.465767][T12697] lo speed is unknown, defaulting to 1000 [ 287.474668][ T26] audit: type=1326 audit(2000000093.460:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a54aa8 code=0x7ffc0000 [ 287.526202][ T26] audit: type=1326 audit(2000000093.460:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a54aa8 code=0x7ffc0000 [ 288.534161][T12757] rdma_rxe: rxe_register_device failed with error -23 [ 288.536149][T12757] rdma_rxe: failed to add lo [ 288.664964][T12765] loop6: detected capacity change from 0 to 1024 [ 288.710082][T12765] EXT4-fs (loop6): Ignoring removed orlov option [ 288.712012][T12765] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 288.713930][T12765] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 288.763061][T12765] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 288.769192][T12765] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 289.004553][T12785] loop2: detected capacity change from 0 to 256 [ 289.059306][T12785] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 290.335315][T12819] device veth0_to_team entered promiscuous mode [ 290.401548][T12820] lo speed is unknown, defaulting to 1000 [ 290.574840][T12828] device syzkaller1 entered promiscuous mode [ 290.645963][T12835] tmpfs: Bad value for 'mpol' [ 290.989540][T12869] netlink: 'syz.5.3238': attribute type 10 has an invalid length. [ 291.004638][T12869] device syz_tun entered promiscuous mode [ 291.037251][T12869] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 291.331538][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3245'. [ 291.335817][T12888] device veth0_macvtap left promiscuous mode [ 291.556881][T12902] netlink: 'syz.0.3251': attribute type 10 has an invalid length. [ 291.570856][T12902] device syz_tun entered promiscuous mode [ 291.598811][T12902] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 291.684262][T12906] lo speed is unknown, defaulting to 1000 [ 292.132681][ T4073] Bluetooth: hci1: command 0x0406 tx timeout [ 292.954397][ T21] kernel write not supported for file /209/net/ip_vs_stats (pid: 21 comm: kworker/1:0) [ 293.847880][T12953] udc-core: couldn't find an available UDC or it's busy [ 293.848532][ T26] kauditd_printk_skb: 73 callbacks suppressed [ 293.848543][ T26] audit: type=1326 audit(2000000099.860:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12950 comm="syz.5.3269" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x0 [ 293.849733][T12953] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 293.867824][T12954] netlink: 'syz.2.3270': attribute type 10 has an invalid length. [ 293.870315][T12954] device syz_tun entered promiscuous mode [ 293.892881][T12954] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 294.020680][ T26] audit: type=1326 audit(2000000100.030:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12964 comm="syz.2.3275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 294.039324][ T26] audit: type=1326 audit(2000000100.050:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12964 comm="syz.2.3275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 294.058099][ T26] audit: type=1326 audit(2000000100.070:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12964 comm="syz.2.3275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 294.063966][ T26] audit: type=1326 audit(2000000100.070:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12964 comm="syz.2.3275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 294.104951][ T26] audit: type=1326 audit(2000000100.070:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12964 comm="syz.2.3275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 294.127524][ T26] audit: type=1326 audit(2000000100.070:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12964 comm="syz.2.3275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 294.185514][ T26] audit: type=1326 audit(2000000100.070:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12964 comm="syz.2.3275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 294.221985][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3278'. [ 294.223981][T12976] loop2: detected capacity change from 0 to 1024 [ 294.279876][T12976] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 294.633662][T12991] netlink: 'syz.6.3286': attribute type 10 has an invalid length. [ 294.652619][T12991] device syz_tun entered promiscuous mode [ 295.486867][T12991] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 295.510680][T12972] lo speed is unknown, defaulting to 1000 [ 295.713326][ T26] audit: type=1326 audit(2000000101.720:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13007 comm="syz.5.3294" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x0 [ 295.724671][T13012] loop6: detected capacity change from 0 to 256 [ 295.814912][T13012] FAT-fs (loop6): Directory bread(block 64) failed [ 295.816966][T13012] FAT-fs (loop6): Directory bread(block 65) failed [ 295.818751][T13012] FAT-fs (loop6): Directory bread(block 66) failed [ 295.820400][T13012] FAT-fs (loop6): Directory bread(block 67) failed [ 295.822121][T13012] FAT-fs (loop6): Directory bread(block 68) failed [ 295.823902][T13012] FAT-fs (loop6): Directory bread(block 69) failed [ 295.825600][T13012] FAT-fs (loop6): Directory bread(block 70) failed [ 295.867820][T13012] FAT-fs (loop6): Directory bread(block 71) failed [ 295.872600][T13012] FAT-fs (loop6): Directory bread(block 72) failed [ 295.874333][T13012] FAT-fs (loop6): Directory bread(block 73) failed [ 295.911104][T13009] loop5: detected capacity change from 0 to 512 [ 295.932498][ T26] audit: type=1326 audit(2000000101.940:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13023 comm="syz.2.3298" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x0 [ 295.971866][T13012] attempt to access beyond end of device [ 295.971866][T13012] loop6: rw=524288, want=1768, limit=256 [ 295.991180][T13012] attempt to access beyond end of device [ 295.991180][T13012] loop6: rw=0, want=1744, limit=256 [ 295.999742][T13009] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 296.004950][T13009] EXT4-fs (loop5): mount failed [ 296.067262][T13004] dccp_close: ABORT with 262 bytes unread [ 296.100676][T13029] rdma_rxe: rxe_register_device failed with error -23 [ 296.108310][T13029] rdma_rxe: failed to add lo [ 296.120347][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'. [ 296.272888][T13031] device hsr_slave_1 left promiscuous mode [ 296.399699][T13034] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3300'. [ 297.330272][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3303'. [ 297.460739][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3303'. [ 297.511585][T13047] netlink: 'syz.1.3304': attribute type 10 has an invalid length. [ 297.520427][T13047] device syz_tun entered promiscuous mode [ 298.371086][T13047] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 298.603245][T13076] lo speed is unknown, defaulting to 1000 [ 298.771246][T13087] rdma_rxe: rxe_register_device failed with error -23 [ 298.777359][T13087] rdma_rxe: failed to add lo [ 298.999663][T13088] lo speed is unknown, defaulting to 1000 [ 300.244845][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 300.244857][ T26] audit: type=1326 audit(2000000106.250:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.5.3326" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 300.255932][ T26] audit: type=1326 audit(2000000106.260:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.5.3326" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 300.267546][ T26] audit: type=1326 audit(2000000106.260:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.5.3326" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 300.299079][ T26] audit: type=1326 audit(2000000106.260:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.5.3326" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 300.328823][ T26] audit: type=1326 audit(2000000106.260:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.5.3326" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 300.540227][ T26] audit: type=1326 audit(2000000106.550:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.3333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 300.555013][ T26] audit: type=1326 audit(2000000106.560:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.3333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 300.768661][ T9] device veth1_macvtap left promiscuous mode [ 300.771825][ T9] device veth1_vlan left promiscuous mode [ 300.773809][ T9] device veth0_vlan left promiscuous mode [ 301.314996][ T26] audit: type=1326 audit(2000000107.320:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.3333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 301.326903][ T26] audit: type=1326 audit(2000000107.330:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.3333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 301.549839][ T26] audit: type=1326 audit(2000000107.350:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.3333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=192 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 302.542613][T13162] loop5: detected capacity change from 0 to 8192 [ 302.650428][ T9] bond0 (unregistering): Released all slaves [ 303.982572][T13191] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3355'. [ 304.097524][T13199] loop5: detected capacity change from 0 to 512 [ 304.205568][T13199] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 304.209664][T13199] ext4 filesystem being mounted at /530/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.450394][T13219] lo speed is unknown, defaulting to 1000 [ 304.543678][T13221] rdma_rxe: already configured on lo [ 304.603299][T13222] lo speed is unknown, defaulting to 1000 [ 305.604019][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 305.604032][ T26] audit: type=1326 audit(2000000111.610:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.1.3369" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 305.619481][ T26] audit: type=1326 audit(2000000111.630:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.1.3369" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 305.657680][ T26] audit: type=1326 audit(2000000111.670:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.1.3369" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 305.663891][ T26] audit: type=1326 audit(2000000111.670:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.1.3369" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 305.699742][ T26] audit: type=1326 audit(2000000111.670:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.1.3369" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 305.708108][ T26] audit: type=1326 audit(2000000111.680:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.1.3369" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 305.714317][ T26] audit: type=1326 audit(2000000111.680:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.1.3369" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 305.724457][ T26] audit: type=1326 audit(2000000111.680:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.1.3369" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 305.730979][ T26] audit: type=1326 audit(2000000111.680:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.1.3369" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 305.779518][ T26] audit: type=1326 audit(2000000111.680:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.1.3369" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90674aa8 code=0x7ffc0000 [ 305.798621][T13233] lo speed is unknown, defaulting to 1000 [ 305.835353][T13248] 9p: Unknown Cache mode f [ 306.066103][T13242] lo speed is unknown, defaulting to 1000 [ 306.071085][T13256] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 306.326075][T13257] lo speed is unknown, defaulting to 1000 [ 306.397723][T13264] rdma_rxe: rxe_register_device failed with error -23 [ 306.408367][T13264] rdma_rxe: failed to add lo [ 307.745053][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3394'. [ 307.907395][T13308] rdma_rxe: rxe_register_device failed with error -23 [ 307.909332][T13308] rdma_rxe: failed to add lo [ 308.060032][T13310] lo speed is unknown, defaulting to 1000 [ 309.077102][T13323] netlink: 'syz.6.3403': attribute type 1 has an invalid length. [ 310.505382][T13359] rdma_rxe: rxe_register_device failed with error -23 [ 310.514022][T13359] rdma_rxe: failed to add lo [ 310.558688][T13358] lo speed is unknown, defaulting to 1000 [ 310.988583][T13378] loop5: detected capacity change from 0 to 512 [ 311.914354][T13378] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,barrier,max_dir_size_kb=0x0000000000000022,noinit_itable,errors=remount-ro,auto_da_alloc,. Quota mode: writeback. [ 311.919587][T13378] ext4 filesystem being mounted at /541/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.982021][T13398] netlink: 'syz.6.3426': attribute type 1 has an invalid length. [ 312.242593][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3432'. [ 312.305718][T13414] lo speed is unknown, defaulting to 1000 [ 312.311639][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 312.311650][ T26] audit: type=1326 audit(2000000118.320:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13412 comm="syz.2.3433" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x0 [ 312.342822][ T26] audit: type=1326 audit(2000000118.350:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 312.367251][ T26] audit: type=1326 audit(2000000118.360:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 312.436020][ T26] audit: type=1326 audit(2000000118.360:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 312.563565][ T26] audit: type=1326 audit(2000000118.360:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 312.569884][ T26] audit: type=1326 audit(2000000118.360:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 312.577979][T13424] netlink: 'syz.6.3434': attribute type 1 has an invalid length. [ 312.580068][T13424] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3434'. [ 312.582486][T13424] block nbd0: not configured, cannot reconfigure [ 312.594646][ T26] audit: type=1326 audit(2000000118.360:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 312.604209][ T26] audit: type=1326 audit(2000000118.360:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 312.642702][ T26] audit: type=1326 audit(2000000118.360:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 312.656649][ T26] audit: type=1326 audit(2000000118.360:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 313.755080][T13450] lo speed is unknown, defaulting to 1000 [ 313.980641][T13464] loop2: detected capacity change from 0 to 512 [ 314.968488][T13464] Process accounting resumed [ 314.969688][T13464] kernel write not supported for file /asound/timers (pid: 13464 comm: syz.2.3453) [ 315.034227][T13485] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3461'. [ 315.036835][T13485] netlink: 'syz.5.3461': attribute type 3 has an invalid length. [ 315.050147][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3458'. [ 315.082891][T13488] rdma_rxe: rxe_register_device failed with error -23 [ 315.084804][T13488] rdma_rxe: failed to add lo [ 315.388177][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.575228][T13521] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3472'. [ 316.600884][T13521] netlink: 'syz.2.3472': attribute type 3 has an invalid length. [ 316.616187][T13513] lo speed is unknown, defaulting to 1000 [ 316.742408][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3474'. [ 316.968903][T13549] sctp: [Deprecated]: syz.5.3482 (pid 13549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.968903][T13549] Use struct sctp_sack_info instead [ 317.232260][T13568] rdma_rxe: rxe_register_device failed with error -23 [ 317.234417][T13568] rdma_rxe: failed to add lo [ 318.109670][T13582] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3487'. [ 318.115966][T13582] netlink: 'syz.0.3487': attribute type 3 has an invalid length. [ 318.330605][T13598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3492'. [ 318.521740][T13605] lo speed is unknown, defaulting to 1000 [ 318.598524][T13607] tipc: Started in network mode [ 318.600099][T13607] tipc: Node identity f2e408649768, cluster identity 4711 [ 318.602195][T13607] tipc: Enabled bearer , priority 0 [ 318.619692][T13607] syzkaller0: MTU too low for tipc bearer [ 318.621421][T13607] tipc: Disabling bearer [ 319.527820][T13615] loop5: detected capacity change from 0 to 1024 [ 319.571063][T13621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.611343][T13615] EXT4-fs (loop5): Ignoring removed oldalloc option [ 319.613177][T13615] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 319.649015][T13621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.662836][T13615] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.3499: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 319.668675][ T26] kauditd_printk_skb: 99 callbacks suppressed [ 319.668686][ T26] audit: type=1326 audit(2000000125.680:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13628 comm="syz.0.3505" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a54aa8 code=0x0 [ 319.672253][T13615] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3499: couldn't read orphan inode 11 (err -117) [ 319.680577][T13615] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000009,oldalloc,nolazytime,jqfmt=vfsv0,journal_dev=0x0000000000000017,norecovery,nogrpid,data_err=ignore,,errors=continue. Quota mode: writeback. [ 319.703046][T13621] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 319.709015][T13615] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.3499: Invalid block bitmap block 0 in block_group 0 [ 319.717126][T13615] Quota error (device loop5): write_blk: dquota write failed [ 319.719351][T13615] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 319.721900][T13615] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.3499: Failed to acquire dquot type 0 [ 319.757338][T13621] bond0 (unregistering): Released all slaves [ 319.832145][T13636] rdma_rxe: rxe_register_device failed with error -23 [ 319.834112][T13636] rdma_rxe: failed to add lo [ 319.837455][ T26] audit: type=1326 audit(2000000125.850:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13633 comm="syz.5.3506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 319.854275][ T26] audit: type=1326 audit(2000000125.860:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13634 comm="syz.6.3507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 319.887464][ T26] audit: type=1326 audit(2000000125.860:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13634 comm="syz.6.3507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 319.907688][ T26] audit: type=1326 audit(2000000125.860:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13634 comm="syz.6.3507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=99 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 319.923767][ T26] audit: type=1326 audit(2000000125.860:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13634 comm="syz.6.3507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 319.959901][ T26] audit: type=1326 audit(2000000125.860:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13634 comm="syz.6.3507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 319.980725][T13643] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3509'. [ 319.987482][ T26] audit: type=1326 audit(2000000125.870:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13633 comm="syz.5.3506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 320.001120][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3510'. [ 320.599556][T13652] lo speed is unknown, defaulting to 1000 [ 321.315222][T13673] rdma_rxe: rxe_register_device failed with error -23 [ 321.338386][T13673] rdma_rxe: failed to add lo [ 321.574761][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3525'. [ 322.757913][T13691] lo speed is unknown, defaulting to 1000 [ 322.909464][T13706] lo speed is unknown, defaulting to 1000 [ 323.225773][T13724] loop5: detected capacity change from 0 to 164 [ 323.393510][T13718] device syz_tun left promiscuous mode [ 323.417232][T13718] bond0: (slave syz_tun): Releasing backup interface [ 323.504176][T13718] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.506539][T13718] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.590613][T13732] loop5: detected capacity change from 0 to 512 [ 324.644666][T13732] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3542: invalid indirect mapped block 256 (level 2) [ 324.651883][T13732] EXT4-fs (loop5): 2 truncates cleaned up [ 324.653435][T13732] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 324.740201][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 324.740215][ T26] audit: type=1326 audit(2000000130.750:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.5.3544" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x0 [ 324.764328][T13718] device bridge_slave_0 left promiscuous mode [ 324.766518][T13718] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.818319][T13718] device bridge_slave_1 left promiscuous mode [ 324.820088][T13718] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.880288][T13718] bond0: (slave bond_slave_0): Releasing backup interface [ 324.939974][T13718] bond0: (slave bond_slave_1): Releasing backup interface [ 324.977349][T13718] device veth0_to_team left promiscuous mode [ 324.995734][T13718] team0: Port device team_slave_0 removed [ 325.028505][T13718] team0: Port device team_slave_1 removed [ 325.033819][T13718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.052117][T13718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.084961][T13718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.105480][T13718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.569870][T13718] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.572358][T13718] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.574862][T13718] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.577837][T13718] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.102959][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3555'. [ 326.199773][T13774] smc: net device bond0 applied user defined pnetid SYZ0 [ 326.230750][ T26] audit: type=1326 audit(2000000132.240:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13775 comm="syz.6.3558" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x0 [ 326.398532][T13778] rdma_rxe: rxe_register_device failed with error -23 [ 326.400718][T13778] rdma_rxe: failed to add lo [ 327.300554][T13797] netlink: 'syz.6.3566': attribute type 298 has an invalid length. [ 327.525493][T13802] IPv4: Oversized IP packet from 127.202.26.0 [ 327.879013][ T26] audit: type=1326 audit(2000000133.890:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13810 comm="syz.2.3573" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 327.921570][ T26] audit: type=1326 audit(2000000133.890:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13810 comm="syz.2.3573" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 327.965109][ T26] audit: type=1326 audit(2000000133.940:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13810 comm="syz.2.3573" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=239 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 327.965150][ T26] audit: type=1326 audit(2000000133.940:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13810 comm="syz.2.3573" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 327.965180][ T26] audit: type=1326 audit(2000000133.940:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13810 comm="syz.2.3573" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 328.058729][ T26] audit: type=1326 audit(2000000134.070:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13817 comm="syz.5.3575" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x0 [ 328.439923][ T26] audit: type=1326 audit(2000000134.450:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.5.3577" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 328.455562][ T26] audit: type=1326 audit(2000000134.450:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.5.3577" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 328.940698][T13847] lo speed is unknown, defaulting to 1000 [ 329.144429][T13857] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 329.146442][T13857] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 329.159645][T13857] vhci_hcd vhci_hcd.0: Device attached [ 329.182549][T13859] vhci_hcd: connection closed [ 329.186699][ T1872] vhci_hcd: stop threads [ 329.189320][ T1872] vhci_hcd: release socket [ 329.190567][ T1872] vhci_hcd: disconnect device [ 329.359868][T13870] rdma_rxe: rxe_register_device failed with error -23 [ 329.361872][T13870] rdma_rxe: failed to add lo [ 329.703609][T13877] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3595'. [ 329.813036][T13885] netlink: 'syz.1.3599': attribute type 1 has an invalid length. [ 329.815165][T13885] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3599'. [ 330.064442][T13899] usb usb4: usbfs: process 13899 (syz.5.3607) did not claim interface 0 before use [ 330.133374][T13900] loop2: detected capacity change from 0 to 2048 [ 330.167925][T13902] lo speed is unknown, defaulting to 1000 [ 330.270662][T13900] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 330.345115][T13900] EXT4-fs (loop2): Ignoring removed bh option [ 330.365272][T13900] EXT4-fs (loop2): re-mounted. Opts: usrjquota=t,nodelalloc,jqfmt=vfsold,bh,block_validity,quota,. Quota mode: writeback. [ 330.370142][ T26] kauditd_printk_skb: 73 callbacks suppressed [ 330.370154][ T26] audit: type=1326 audit(2000000136.380:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13896 comm="syz.2.3604" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 330.383218][ T26] audit: type=1326 audit(2000000136.390:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13896 comm="syz.2.3604" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 330.383257][ T26] audit: type=1326 audit(2000000136.390:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13896 comm="syz.2.3604" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 330.383697][ T26] audit: type=1326 audit(2000000136.390:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13896 comm="syz.2.3604" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 330.383772][ T26] audit: type=1326 audit(2000000136.390:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13896 comm="syz.2.3604" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 330.384009][ T26] audit: type=1326 audit(2000000136.390:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13896 comm="syz.2.3604" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffae639aa8 code=0x7ffc0000 [ 330.463760][ T26] audit: type=1326 audit(2000000136.470:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13924 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 330.465227][ T26] audit: type=1326 audit(2000000136.470:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13924 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 330.465395][ T26] audit: type=1326 audit(2000000136.470:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13924 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 330.465794][ T26] audit: type=1326 audit(2000000136.470:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13924 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa30adaa8 code=0x7ffc0000 [ 330.757133][T13933] rdma_rxe: rxe_register_device failed with error -23 [ 330.770185][T13933] rdma_rxe: failed to add lo [ 330.946732][T11596] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 331.220364][T13954] tipc: Started in network mode [ 331.221870][T13954] tipc: Node identity ac14140f, cluster identity 4711 [ 331.231044][T13954] tipc: New replicast peer: 255.255.255.255 [ 331.234445][T13954] tipc: Enabled bearer , priority 10 [ 331.242400][T13948] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.478250][T13963] device veth0_virt_wifi entered promiscuous mode [ 331.651852][T13963] device veth0_virt_wifi left promiscuous mode [ 331.778117][T13969] lo speed is unknown, defaulting to 1000 [ 332.076097][T13978] rdma_rxe: rxe_register_device failed with error -23 [ 332.078112][T13978] rdma_rxe: failed to add lo [ 332.303825][T13983] netlink: 'syz.5.3635': attribute type 1 has an invalid length. [ 332.346141][ T13] tipc: Node number set to 2886997007 [ 332.809019][T13992] lo speed is unknown, defaulting to 1000 [ 332.930114][T11399] bond0: (slave syz_tun): Releasing backup interface [ 333.068352][T13992] chnl_net:caif_netlink_parms(): no params data found [ 333.165384][T13992] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.170983][T13992] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.174892][T13992] device bridge_slave_0 entered promiscuous mode [ 333.179725][T13992] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.181709][T13992] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.184622][T13992] device bridge_slave_1 entered promiscuous mode [ 333.213899][T13992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.221635][T13992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.246601][T13992] team0: Port device team_slave_0 added [ 333.270250][T13992] team0: Port device team_slave_1 added [ 333.293418][T13992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.293436][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.293457][T13992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.294779][T13992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.308957][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.308981][T13992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.358055][T13992] device hsr_slave_0 entered promiscuous mode [ 333.409143][T13992] device hsr_slave_1 entered promiscuous mode [ 333.602897][T13992] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.605596][T13992] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.680344][T13992] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.683048][T13992] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.780358][T13992] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.783112][T13992] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.944384][T13992] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.955818][T13992] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.985746][T14033] lo speed is unknown, defaulting to 1000 [ 334.044809][T14030] rdma_rxe: rxe_register_device failed with error -23 [ 334.052307][T14030] rdma_rxe: failed to add lo [ 334.256898][T13992] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 334.298088][T13992] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 334.368915][T13992] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 334.442759][T13992] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.603304][T13992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.619100][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.621840][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.635739][T13992] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.641594][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.644424][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.653673][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.655640][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.691324][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.694524][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.703720][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.706436][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.708402][ T4567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.710778][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.713874][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.718587][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.724959][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.731138][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.734118][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.746679][T13507] Bluetooth: hci0: command 0x0409 tx timeout [ 334.752490][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.761565][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.770980][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.791531][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.794502][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.808854][T13992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.045828][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.046101][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.083147][T13992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.372791][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.376013][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.411792][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.414877][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.422328][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.425752][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.438261][T13992] device veth0_vlan entered promiscuous mode [ 335.484775][T13992] device veth1_vlan entered promiscuous mode [ 335.510882][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 335.513503][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 335.516770][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 335.540595][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 335.553831][T13992] device veth0_macvtap entered promiscuous mode [ 335.557956][ T26] kauditd_printk_skb: 79 callbacks suppressed [ 335.557967][ T26] audit: type=1326 audit(2000000141.570:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14088 comm="syz.6.3668" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x0 [ 335.585437][T13992] device veth1_macvtap entered promiscuous mode [ 335.662631][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.680592][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.692938][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.702988][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.717958][T13992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.725150][T14094] rdma_rxe: rxe_register_device failed with error -23 [ 335.727482][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.730119][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.739977][T14094] rdma_rxe: failed to add lo [ 335.743151][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.759624][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.775062][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.780693][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.783729][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.798572][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.802907][T13992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.810594][T13992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.813080][T13992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.816836][T13992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.819100][T13992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.881036][T14096] lo speed is unknown, defaulting to 1000 [ 335.886313][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.890125][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.206259][ T4567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.209845][ T4567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.252567][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.502050][T14105] loop6: detected capacity change from 0 to 2048 [ 336.607658][T14105] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 336.713983][T14105] EXT4-fs (loop6): Ignoring removed bh option [ 336.724826][T14105] EXT4-fs (loop6): re-mounted. Opts: usrjquota=t,nodelalloc,jqfmt=vfsold,bh,block_validity,quota,. Quota mode: writeback. [ 336.756153][ T26] audit: type=1326 audit(2000000142.750:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 336.763347][ T26] audit: type=1326 audit(2000000142.750:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 336.775674][ T26] audit: type=1326 audit(2000000142.750:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 336.782114][ T26] audit: type=1326 audit(2000000142.750:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 336.794608][ T26] audit: type=1326 audit(2000000142.750:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 336.802317][ T26] audit: type=1326 audit(2000000142.750:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 336.817554][ T26] audit: type=1326 audit(2000000142.750:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 336.824030][ T26] audit: type=1326 audit(2000000142.750:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 336.838972][ T26] audit: type=1326 audit(2000000142.760:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff84996aa8 code=0x7ffc0000 [ 337.067794][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 337.083030][ T1742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.088323][ T1742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.101478][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 337.370893][T14129] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 337.371173][T14129] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 337.378174][ T7969] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 337.426082][T14129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.661837][T14141] rdma_rxe: rxe_register_device failed with error -23 [ 337.669512][T14141] rdma_rxe: failed to add lo [ 337.739243][T14144] lo speed is unknown, defaulting to 1000 [ 338.688138][T14178] loop5: detected capacity change from 0 to 256 [ 339.146112][ T4176] Bluetooth: hci0: command 0x040f tx timeout [ 339.256721][T14201] rdma_rxe: rxe_register_device failed with error -23 [ 339.259100][T14201] rdma_rxe: failed to add lo [ 339.285582][T14199] lo speed is unknown, defaulting to 1000 [ 339.442650][T14208] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 339.444779][T14208] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 339.448402][T14208] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 340.540546][T14245] ebt_among: dst integrity fail: 101 [ 340.579110][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 340.579122][ T26] audit: type=1326 audit(2000000146.590:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.0.3722" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a54aa8 code=0x0 [ 340.750330][T14251] team0 (unregistering): Port device team_slave_0 removed [ 340.779563][T14251] team0 (unregistering): Port device team_slave_1 removed [ 340.795613][T14257] netlink: 'syz.6.3725': attribute type 1 has an invalid length. [ 340.896022][T14253] lo speed is unknown, defaulting to 1000 [ 340.902264][T14255] device veth0_to_team entered promiscuous mode [ 340.955367][T14255] rdma_rxe: rxe_register_device failed with error -23 [ 340.957473][T14255] rdma_rxe: failed to add lo [ 341.236300][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 341.848237][T14310] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3738'. [ 341.851107][T14309] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3738'. [ 341.911242][T14316] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 341.914810][T14316] x_tables: ip_tables: udp match: only valid for protocol 17 [ 342.065261][ T26] audit: type=1326 audit(2000000148.070:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.6.3744" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84996aa8 code=0x0 [ 342.165632][T14325] lo speed is unknown, defaulting to 1000 [ 342.209687][T14326] rdma_rxe: rxe_register_device failed with error -23 [ 342.211942][T14326] rdma_rxe: failed to add lo [ 342.295988][ T9] tipc: Disabling bearer [ 342.297604][ T9] tipc: Left network mode [ 342.386228][ T1534] ================================================================== [ 342.388728][ T1534] BUG: KASAN: use-after-free in cleanup_bearer+0x1b0/0x2a8 [ 342.390735][ T1534] Read of size 8 at addr ffff0000ddfc4e18 by task kworker/1:2/1534 [ 342.392892][ T1534] [ 342.393510][ T1534] CPU: 1 PID: 1534 Comm: kworker/1:2 Not tainted 5.15.174-syzkaller #0 [ 342.395717][ T1534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 342.398363][ T1534] Workqueue: events cleanup_bearer [ 342.399687][ T1534] Call trace: [ 342.400570][ T1534] dump_backtrace+0x0/0x530 [ 342.401677][ T1534] show_stack+0x2c/0x3c [ 342.402838][ T1534] dump_stack_lvl+0x108/0x170 [ 342.404168][ T1534] print_address_description+0x7c/0x3f0 [ 342.405685][ T1534] kasan_report+0x174/0x1e4 [ 342.406845][ T1534] __asan_report_load8_noabort+0x44/0x50 [ 342.408388][ T1534] cleanup_bearer+0x1b0/0x2a8 [ 342.409635][ T1534] process_one_work+0x790/0x11b8 [ 342.410995][ T1534] worker_thread+0x910/0x1034 [ 342.412173][ T1534] kthread+0x37c/0x45c [ 342.413245][ T1534] ret_from_fork+0x10/0x20 [ 342.414349][ T1534] [ 342.414917][ T1534] Allocated by task 13954: [ 342.416073][ T1534] __kasan_slab_alloc+0x8c/0xcc [ 342.417515][ T1534] slab_post_alloc_hook+0x74/0x3f4 [ 342.418963][ T1534] kmem_cache_alloc+0x1dc/0x45c [ 342.420202][ T1534] sock_alloc_inode+0x24/0xc4 [ 342.421431][ T1534] new_inode_pseudo+0x68/0x200 [ 342.422652][ T1534] __sock_create+0x134/0x8a0 [ 342.423902][ T1534] sock_create_kern+0x4c/0x64 [ 342.425155][ T1534] udp_sock_create4+0xd4/0x5a4 [ 342.426473][ T1534] udp_sock_create+0x94/0xc0 [ 342.427746][ T1534] tipc_udp_enable+0xb88/0x12d8 [ 342.429023][ T1534] __tipc_nl_bearer_enable+0x97c/0xfe8 [ 342.430454][ T1534] tipc_nl_bearer_enable+0x2c/0x48 [ 342.431792][ T1534] genl_rcv_msg+0xc18/0x1018 [ 342.433021][ T1534] netlink_rcv_skb+0x20c/0x3b8 [ 342.434375][ T1534] genl_rcv+0x38/0x50 [ 342.435494][ T1534] netlink_unicast+0x664/0x938 [ 342.436774][ T1534] netlink_sendmsg+0x844/0xb38 [ 342.438104][ T1534] ____sys_sendmsg+0x584/0x870 [ 342.439434][ T1534] ___sys_sendmsg+0x214/0x294 [ 342.440670][ T1534] __arm64_sys_sendmsg+0x1ac/0x25c [ 342.442044][ T1534] invoke_syscall+0x98/0x2b8 [ 342.443268][ T1534] el0_svc_common+0x138/0x258 [ 342.444497][ T1534] do_el0_svc+0x58/0x14c [ 342.445644][ T1534] el0_svc+0x7c/0x1f0 [ 342.446692][ T1534] el0t_64_sync_handler+0x84/0xe4 [ 342.447993][ T1534] el0t_64_sync+0x1a0/0x1a4 [ 342.449199][ T1534] [ 342.449769][ T1534] Freed by task 0: [ 342.450755][ T1534] kasan_set_track+0x4c/0x84 [ 342.452017][ T1534] kasan_set_free_info+0x28/0x4c [ 342.453401][ T1534] ____kasan_slab_free+0x118/0x164 [ 342.454796][ T1534] __kasan_slab_free+0x18/0x28 [ 342.456125][ T1534] slab_free_freelist_hook+0x128/0x1ec [ 342.457557][ T1534] kmem_cache_free+0xdc/0x3c4 [ 342.458807][ T1534] sock_free_inode+0x28/0x38 [ 342.460038][ T1534] i_callback+0x50/0x78 [ 342.461100][ T1534] rcu_core+0x830/0x1b34 [ 342.462234][ T1534] rcu_core_si+0x10/0x1c [ 342.463421][ T1534] handle_softirqs+0x384/0xdbc [ 342.464692][ T1534] __irq_exit_rcu+0x268/0x4d8 [ 342.466013][ T1534] irq_exit+0x14/0x88 [ 342.467104][ T1534] handle_domain_irq+0xf4/0x178 [ 342.468495][ T1534] gic_handle_irq+0x78/0x1c8 [ 342.469809][ T1534] [ 342.470416][ T1534] Last potentially related work creation: [ 342.471906][ T1534] kasan_save_stack+0x38/0x68 [ 342.473143][ T1534] kasan_record_aux_stack+0xd4/0x11c [ 342.474554][ T1534] call_rcu+0x118/0xb40 [ 342.475722][ T1534] evict+0x7ac/0x894 [ 342.476758][ T1534] iput+0x744/0x824 [ 342.477750][ T1534] sock_release+0x110/0x140 [ 342.479131][ T1534] udp_tunnel_sock_release+0x74/0x88 [ 342.480605][ T1534] cleanup_bearer+0x180/0x2a8 [ 342.481845][ T1534] process_one_work+0x790/0x11b8 [ 342.483161][ T1534] worker_thread+0x910/0x1034 [ 342.484461][ T1534] kthread+0x37c/0x45c [ 342.485509][ T1534] ret_from_fork+0x10/0x20 [ 342.486661][ T1534] [ 342.487256][ T1534] Second to last potentially related work creation: [ 342.489097][ T1534] kasan_save_stack+0x38/0x68 [ 342.490411][ T1534] kasan_record_aux_stack+0xd4/0x11c [ 342.491834][ T1534] call_rcu+0x118/0xb40 [ 342.492964][ T1534] evict+0x7ac/0x894 [ 342.494032][ T1534] iput+0x744/0x824 [ 342.495064][ T1534] dentry_unlink_inode+0x37c/0x4bc [ 342.496364][ T1534] __dentry_kill+0x324/0x5e4 [ 342.497588][ T1534] dentry_kill+0xc8/0x250 [ 342.498724][ T1534] dput+0x21c/0x458 [ 342.499752][ T1534] __fput+0x494/0x800 [ 342.500860][ T1534] ____fput+0x20/0x30 [ 342.501950][ T1534] task_work_run+0x130/0x1e4 [ 342.503194][ T1534] do_notify_resume+0x262c/0x32b8 [ 342.504512][ T1534] el0_svc+0xfc/0x1f0 [ 342.505565][ T1534] el0t_64_sync_handler+0x84/0xe4 [ 342.506884][ T1534] el0t_64_sync+0x1a0/0x1a4 [ 342.508059][ T1534] [ 342.508638][ T1534] The buggy address belongs to the object at ffff0000ddfc4e00 [ 342.508638][ T1534] which belongs to the cache sock_inode_cache of size 1408 [ 342.512607][ T1534] The buggy address is located 24 bytes inside of [ 342.512607][ T1534] 1408-byte region [ffff0000ddfc4e00, ffff0000ddfc5380) [ 342.516274][ T1534] The buggy address belongs to the page: [ 342.517793][ T1534] page:00000000becacefb refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11dfc0 [ 342.520541][ T1534] head:00000000becacefb order:3 compound_mapcount:0 compound_pincount:0 [ 342.522719][ T1534] memcg:ffff0000d1f63e01 [ 342.523849][ T1534] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 342.526016][ T1534] raw: 05ffc00000010200 fffffc00033c5600 0000000900000002 ffff0000c0862480 [ 342.528366][ T1534] raw: 0000000000000000 0000000000150015 00000001ffffffff ffff0000d1f63e01 [ 342.530602][ T1534] page dumped because: kasan: bad access detected [ 342.532275][ T1534] [ 342.532911][ T1534] Memory state around the buggy address: [ 342.534324][ T1534] ffff0000ddfc4d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 342.536346][ T1534] ffff0000ddfc4d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 342.538543][ T1534] >ffff0000ddfc4e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.540701][ T1534] ^ [ 342.542003][ T1534] ffff0000ddfc4e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.544177][ T1534] ffff0000ddfc4f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.546400][ T1534] ================================================================== [ 342.548543][ T1534] Disabling lock debugging due to kernel taint [ 342.565610][ T1534] Unable to handle kernel paging request at virtual address dfff800000000006 [ 342.568740][ T1534] Mem abort info: [ 342.569603][ T1534] ESR = 0x0000000096000006 [ 342.570765][ T1534] EC = 0x25: DABT (current EL), IL = 32 bits [ 342.572318][ T1534] SET = 0, FnV = 0 [ 342.573507][ T1534] EA = 0, S1PTW = 0 [ 342.574560][ T1534] FSC = 0x06: level 2 translation fault [ 342.578217][ T1534] Data abort info: [ 342.579207][ T1534] ISV = 0, ISS = 0x00000006 [ 342.580455][ T1534] CM = 0, WnR = 0 [ 342.581401][ T1534] [dfff800000000006] address between user and kernel address ranges [ 342.583663][ T1534] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 342.585537][ T1534] Modules linked in: [ 342.586623][ T1534] CPU: 1 PID: 1534 Comm: kworker/1:2 Tainted: G B 5.15.174-syzkaller #0 [ 342.589159][ T1534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 342.591811][ T1534] Workqueue: events cleanup_bearer [ 342.593119][ T1534] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 342.595184][ T1534] pc : cleanup_bearer+0x1bc/0x2a8 [ 342.596553][ T1534] lr : cleanup_bearer+0x1b0/0x2a8 [ 342.597868][ T1534] sp : ffff8000241f7b00 [ 342.598980][ T1534] x29: ffff8000241f7b00 x28: ffff0001b41a9100 x27: ffff0000ea587698 [ 342.601100][ T1534] x26: ffff0000ea587698 x25: dead000000000122 x24: dfff800000000000 [ 342.603353][ T1534] x23: ffff0000cf882a00 x22: ffff0000cf882a40 x21: 1fffe0001d4b0ec1 [ 342.605503][ T1534] x20: 0000000000000030 x19: ffff0000ea587618 x18: 1fffe00036832d8e [ 342.607570][ T1534] x17: 1fffe00036832d8e x16: ffff800011b4d2d0 x15: ffff800014c0fac0 [ 342.609683][ T1534] x14: ffff0001b4196c80 x13: ffff0001b4196c7c x12: ffff700002e3a364 [ 342.611803][ T1534] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [ 342.613967][ T1534] x8 : 0000000000000006 x7 : 0000000000000000 x6 : ffff80000826abdc [ 342.616002][ T1534] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80000819c3ec [ 342.618119][ T1534] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000001 [ 342.620231][ T1534] Call trace: [ 342.621050][ T1534] cleanup_bearer+0x1bc/0x2a8 [ 342.622305][ T1534] process_one_work+0x790/0x11b8 [ 342.623659][ T1534] worker_thread+0x910/0x1034 [ 342.624892][ T1534] kthread+0x37c/0x45c [ 342.626042][ T1534] ret_from_fork+0x10/0x20 [ 342.627249][ T1534] Code: 979f9f3e f9400288 9100c114 d343fe88 (38786908) [ 342.629073][ T1534] ---[ end trace 3a8781776824d89d ]--- [ 343.115971][ T1534] Kernel panic - not syncing: Oops: Fatal exception [ 343.117836][ T1534] SMP: stopping secondary CPUs [ 343.119214][ T1534] Kernel Offset: disabled [ 343.120416][ T1534] CPU features: 0x8,000081c1,21302e40 [ 343.121820][ T1534] Memory Limit: none [ 343.725860][ T1534] Rebooting in 86400 seconds..