last executing test programs: 8m32.288540346s ago: executing program 3 (id=881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) 8m32.153987816s ago: executing program 3 (id=882): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040100"/20, @ANYRES32=r2, @ANYBLOB="00e3e1001c001280090001"], 0x3c}}, 0x0) 8m31.924628205s ago: executing program 3 (id=884): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) 8m31.252568873s ago: executing program 3 (id=891): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) 8m30.996538363s ago: executing program 3 (id=896): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'], 0x48) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 8m30.616449152s ago: executing program 3 (id=903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 8m30.25686425s ago: executing program 32 (id=903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 7m39.838002009s ago: executing program 0 (id=1284): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a3000000000090003"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7m39.632732348s ago: executing program 0 (id=1286): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000008c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r1, @ANYBLOB="250827bd7000fedbdf250800000084000180080003008000000038000400200001000a004e2100000009fe8000000000000000000000000000aa040000001400020002004e23000000000000000000000000080003000f000000380004001400010002004e22ac1414bb0000000000000000200002000a004e2000000003fc00000000000000000000000000000001800000600007800c00040003000000000000000c00030053000000000000000c000300de0a00000000000008000100060000000c00040002000000000000000c00040009000000000000000c00040009000000000000000c000300010100000000000088000480"], 0x264}, 0x1, 0x0, 0x0, 0x20008880}, 0x20000840) 7m39.280358898s ago: executing program 0 (id=1289): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000"], 0x33fe0) 7m39.141826427s ago: executing program 0 (id=1291): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$eJzs3c9vG1kdAPDvOHGTZt1NF/YACNiyLBRU6vzobrRaDnQvILRaCbFCQuLQDYk3imLXUZwsTcghPXJHohIn+BO4cUDqiQM3bnDjUg5IBSJQg8Rh0IyniZvEdWiTeGt/PtJ45r1x/H3PznvP8xznBTC0rkTETkRciIgPI2KyyE+KLW62t+x+j3a3F/Z2txeSSNMP/pHk57O86PiZzEvFY45HxPe/E/Hj5Gjc1ubWyny9Xlsr0lPrjdWp1ubW9eVSkTM7NzM3/faNt2ZPra6vNX7z8NvL7/3gd7/9woM/7nz9p1mxKj+7lJ/rrMdpale9HJWOvNGIeO8sgvXJaPH7w4sna22fiojX8/Y/GSP5qwkADLI0nYx0sjMNAAy67Pq/EkmpWswFVKJUqlbbc3ivxkSp3mytX5tsbtxejHwO63KUSx8t12vTxVzh5SgnWXomPz5Izx5K34iIVyLi52MX83R1oVlf7OcbHwAYYi8dGv//PdYe/wGAATfe7wIAAOfO+A8Aw8f4DwDD5/8Y/307EAAGhOt/ABg+xn8AGD49x/+751MOAOBcfO/997Mt3Sv+//Xix5sb36x8fH2x1lqpNjYWqgvNtdXqUrO5VK9VF9K01+PVm83VmTf3k63NrVuN5sbt9VvLjfml2q1a+YzrAwD09spr9/+cRMTOOxfzLTrWcjBWw2ArPZE6ZqEeYGCN9LsAQN/4Pg8MrxNc45sGgAHX68q/658I3bP4K7yorn7W/D8Mq1K/CwD0zbPN/3/r1MsBnD/z/zC80jSx5j8ADBlz/MCzfP7/wyg+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVcm3pFTN1wLfyW5L1WrEpYi4HOXko+V6bToiXo6IP42Vx7L0TL8LDQA8p9LfkmL9r6uTb1QOn72Q/Gcs30fET375wS/uzK+vr81k+f/cz1+/V+TPXuhHBQCATjePZrXH6WLfcSH/aHd74fF2nkV8+G57cdEs7l6xtc+Mxmi+H49yREz8KynSbdn7lZFTiL9zNyI+c1D/Ox0RKvkcSHvl08Pxs9iXziD+wfOfRJqm6UH80hPxS3nZsn05fy4+fQplgWFz/912P5m1u4u721kTK9pfKa7k++Pb/3jeQz2/x/3f3pH+r7Tf/40ciZ/kbf7KfvrpJXn45u+/eyQznWyfuxvxudHj4if78ZMu/e8bJ6zjXz7/xde7nUt/FXE1jo/f1si72an1xupUa3Pr+nJjfqm2VLs9Ozs3Mzf99o23ZqfyOer27R+Oi/H3d6693C1+Vv+JLvHHe9T/Kyes/6//++GPvvSU+F/78vGv/6tPiZ+NiV89Yfz5iZvHLd+9H3+xS/17vf7XThj/wV+3Fk94VwDgHLQ2t1bm6/XaWo+D7L1mr/s4eDEPYifinIN+YzziE1F3B90O+t0zAWftoNH3uyQAAAAAAAAAAAAAAEA3rc2tlbE4268T9buOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADK7/BQAA//+TAtDE") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x7, 0x8, 0x8, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000008b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x0, 0x2}, {0xfff1, 0x9}}}, 0x24}}, 0x0) mount$bind(0x0, &(0x7f0000000480)='./file2\x00', 0x0, 0x12081, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r10}, &(0x7f0000000380), &(0x7f00000003c0)=r11}, 0x20) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@fadd={0x58, 0x114, 0x6, {{0x5499, 0x827}, &(0x7f0000000280)=0x6, 0x0, 0x9, 0x7, 0x9, 0x3, 0x8, 0x8000000000000001}}], 0x58, 0x4010}, 0x0) write$binfmt_register(r1, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r12}, 0x18) 7m38.180649154s ago: executing program 0 (id=1300): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'], 0x48) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) 7m35.796573228s ago: executing program 0 (id=1310): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = memfd_secret(0x80000) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="050d338c0c831bd7bab4b4005f62a84b000000040000b5d3408abc00ff0f0000070000000000000700000071d4acfbf0b89de7d17bfb2d412d419459e2c73ee4763924"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) eventfd(0x5) close(r2) sendmsg$nl_route(r2, 0x0, 0x1) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$kcm(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) 7m35.317707216s ago: executing program 33 (id=1310): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = memfd_secret(0x80000) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="050d338c0c831bd7bab4b4005f62a84b000000040000b5d3408abc00ff0f0000070000000000000700000071d4acfbf0b89de7d17bfb2d412d419459e2c73ee4763924"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) eventfd(0x5) close(r2) sendmsg$nl_route(r2, 0x0, 0x1) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$kcm(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) 37.407985719s ago: executing program 6 (id=4637): write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$namespace(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) 37.360515909s ago: executing program 1 (id=4639): r0 = memfd_secret(0x80000) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x4}, 0x18) socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300), 0x4) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x4, @multicast}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x2, 0x2000000, {0x0, 0x0, 0x0, r3, {0x7}, {0xd}, {0xfff1}}}, 0x24}}, 0x40044) 36.239261046s ago: executing program 6 (id=4644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f0000000300)="10", 0x1}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20001) 36.208666446s ago: executing program 1 (id=4645): socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 35.889602485s ago: executing program 1 (id=4649): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r2], 0x40}}, 0x0) 35.785457144s ago: executing program 5 (id=4650): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 35.666206974s ago: executing program 5 (id=4651): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 35.656132424s ago: executing program 2 (id=4652): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) prctl$PR_SET_NAME(0xf, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 35.589969264s ago: executing program 1 (id=4653): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x1, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffff], [0x0, 0x8, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7ffffffe}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xdea}]}]}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 35.524682484s ago: executing program 5 (id=4655): write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$namespace(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) 34.775122282s ago: executing program 2 (id=4657): socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) 31.086194172s ago: executing program 6 (id=4658): r0 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100"], 0x40}}, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 31.001813152s ago: executing program 2 (id=4659): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0ec2ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c821345a322a771d15a930400000000000000e29cbdf892bb8117526047ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f4729", 0xa9}, {&(0x7f0000000bc0)="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", 0x156}, {&(0x7f00000004c0)="a632d1428982a252326f258392e316f18cf86b2e26ac0af8c71b95c35316793d3cdef3e611dc5fa965da09000000e03b979273bf80dbc4659935a61e2b9a7fe3a4a89854f95f15cd0fe0cbc18f6a6d873a310a108932d8c25429bd3b6c6c80d9011aad98d0e0dddb70480bd18486191b33112719854b86cb73be4fcff420a4caa64c932b46bafdd51706e21e88845975cc1711be7098139fe5000000000000000000", 0xa2}, {&(0x7f0000000ac0)="e35f7e5e5ac5e9f0cd5260605ba7cda81ba1559f17393edeb50e129a51c8b2f59dee73a4747e05d4b034d0ce1f6e0b82645e1ea3a8b64fb19483ed222b9d51007de194d43163a76413010039c65b382cbf2c46ced59f283332621e64913a530016bc320cb091f6fc2c8b8af6884caccb5a8cef9382455f4b1540ad90b9308269b06fe596f2f4935802420035d8efc47278940beabec4d40f", 0x98}], 0x4}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000d40)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686cee856ff661c9399efe5bfe82d20be58ac1339835874e9dcb22e5e572b0c0b18b3e22cbf3c7ea1647e70850bd24a2c2d1799f7c441bc6a347dbf3e3", 0x9f}, {&(0x7f0000000e00)="166dd105954670f2bc6924ec9c86a36264c6a25ce099134ad41bba0cfe62a0703d880c53e3be74003df9e5a0dd9b7cc933331488f13c5f6cef0365d0553643348dafe58f84c1176b8d70d7317a7a34df9d654baf988eb68b4b059d55a0c65482df519e8b07a883fd6a570350296f374a00f9429079a23e2396a4cf6d0ba254f44a1c95cc5886d7ec078d535dc0ae052ca0e94d577182f576240979f59c988ae1d890e7b219fb22736891f5239bf9af3666b74ff1eb768deff4e04ddc0a848891", 0xc0}, {&(0x7f0000000080)="2f7f535ea145f415a32ece4acc38026f7ab6995be700000000000000a33e996e5712fa5273fcf71d677d3c3b5247030988c68a44177a8cc557e451f91dcd670b5ef24c51240980ca2fcadacbff12f0f6fe50979707f9d38f5507bf1eb503b80a3b7d7d45ae4ca9162f77ac15824e0000000000", 0x73}, {&(0x7f0000000f80)="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", 0x13b}], 0x4}}], 0x3, 0xc044) write$binfmt_misc(r1, &(0x7f0000000300), 0x5b0) 29.813492079s ago: executing program 2 (id=4660): socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 28.563985125s ago: executing program 5 (id=4661): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 28.550317765s ago: executing program 1 (id=4662): r0 = syz_io_uring_setup(0x1219, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0xffffffff, 0x34e}, &(0x7f0000000980)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 28.519139336s ago: executing program 6 (id=4663): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 28.493839346s ago: executing program 4 (id=4664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYRES32=r3], 0x20}}, 0x0) 26.998294412s ago: executing program 2 (id=4665): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x899022, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000000)='./bus\x00', 0x8) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000046f0a00e27f000001"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xc0}, 0x33fe0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x8e) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0xffffffffa003e459, 0x700000000000000) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000040, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r1, 0x0, 0x0, 0x2}, 0xffffffffffffff96) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r11, 0x4b3a, 0x1) 25.458763007s ago: executing program 6 (id=4666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 25.391469657s ago: executing program 6 (id=4667): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) prctl$PR_SET_NAME(0xf, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 23.897855633s ago: executing program 4 (id=4668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00000000000000", @ANYRES32=r1], 0x30}}, 0x0) 19.982435532s ago: executing program 5 (id=4669): socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e", 0x23}], 0x1}, 0x0) 19.908204832s ago: executing program 1 (id=4670): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x19d1, 0x0, &(0x7f0000000280), &(0x7f0000000240)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) ptrace(0x8, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setregid(0x0, r0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) setgroups(0x1, &(0x7f0000000140)=[0x0]) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$tcp_congestion(r3, 0x0, 0xffffff93) r4 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mount$nfs4(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x800000, &(0x7f00000007c0)={[{',]'}], [{@seclabel}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000009e, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) readv(r8, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 19.907931603s ago: executing program 2 (id=4671): write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) 16.190891593s ago: executing program 4 (id=4672): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x10142}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}]}}}]}, 0x48}}, 0x0) 16.156593283s ago: executing program 5 (id=4673): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x1, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffff], [0x0, 0x8, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7ffffffe}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xdea}]}]}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 15.845017812s ago: executing program 4 (id=4674): r0 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100"], 0x40}}, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 14.006335337s ago: executing program 4 (id=4675): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x9, 0x12) 14.006049727s ago: executing program 4 (id=4676): socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 0s ago: executing program 34 (id=4667): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) prctl$PR_SET_NAME(0xf, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) kernel console output (not intermixed with test programs): 4][ T27] audit: type=1326 audit(1737324454.978:7897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.2.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 526.252069][ T27] audit: type=1326 audit(1737324454.978:7898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.2.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 526.415617][T14765] 9pnet_virtio: no channels available for device 127.0.0.1 [ 527.359666][T14770] loop2: detected capacity change from 0 to 1024 [ 527.367951][T14770] EXT4-fs: Ignoring removed nobh option [ 527.405128][T14770] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 527.439790][T14770] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 527.491580][T14770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 527.522628][T14775] delete_channel: no stack [ 527.528216][T14775] delete_channel: no stack [ 527.561052][T14770] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 527.707526][T12335] EXT4-fs (loop2): unmounting filesystem. [ 527.985705][T13414] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 528.015497][T13414] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 528.189129][T14798] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3565'. [ 528.263350][T14799] lo speed is unknown, defaulting to 1000 [ 528.413033][T14805] loop5: detected capacity change from 0 to 1024 [ 528.441488][T14805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 528.469077][T14805] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 528.511060][T14805] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 528.637029][T14805] x_tables: duplicate underflow at hook 2 [ 528.953541][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3575'. [ 528.993838][T14820] netlink: 'syz.6.3575': attribute type 10 has an invalid length. [ 529.028536][T14820] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3575'. [ 529.450809][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3579'. [ 529.473515][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3579'. [ 529.500468][T14834] loop4: detected capacity change from 0 to 1024 [ 529.544086][T14834] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 529.561523][ T27] audit: type=1326 audit(1737324458.408:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 529.609394][ T6673] EXT4-fs (loop5): unmounting filesystem. [ 529.653238][ T27] audit: type=1326 audit(1737324458.408:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 529.677823][ T27] audit: type=1326 audit(1737324458.408:7901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 529.702420][ T27] audit: type=1326 audit(1737324458.408:7902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 529.725762][ T27] audit: type=1326 audit(1737324458.408:7903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 529.750566][T14834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 529.783021][ T27] audit: type=1800 audit(1737324458.628:7904): pid=14834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3582" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 529.821484][T14834] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.3582: missing EA_INODE flag [ 529.890897][T14834] EXT4-fs (loop4): Remounting filesystem read-only [ 529.914360][T14834] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.3582: error while reading EA inode 11 err=-117 [ 529.956869][T14834] EXT4-fs (loop4): Remounting filesystem read-only [ 530.102643][T13153] EXT4-fs (loop4): unmounting filesystem. [ 530.353405][T14857] 9pnet_virtio: no channels available for device 127.0.0.1 [ 531.181061][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3595'. [ 531.192823][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3595'. [ 531.194310][T14863] syz.6.3593[14863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.235461][T14863] syz.6.3593[14863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.291807][T14868] 9pnet_fd: Insufficient options for proto=fd [ 531.410794][ T27] audit: type=1326 audit(1737324460.258:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 531.469380][ T27] audit: type=1326 audit(1737324460.258:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 531.548695][ T27] audit: type=1326 audit(1737324460.278:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 531.620494][ T27] audit: type=1326 audit(1737324460.278:7908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 531.868065][T14867] Set syz1 is full, maxelem 65536 reached [ 531.997664][T14885] loop2: detected capacity change from 0 to 512 [ 532.194587][T14885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 532.243997][T14885] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.450101][T14902] 9pnet_fd: Insufficient options for proto=fd [ 532.568031][T12335] EXT4-fs (loop2): unmounting filesystem. [ 532.937897][T14911] loop2: detected capacity change from 0 to 512 [ 533.134671][T14911] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 534.323123][ T6266] bond0: (slave bond_slave_0): interface is now down [ 534.351379][ T6266] bond0: (slave bond_slave_1): interface is now down [ 534.361659][T14927] netlink: 'syz.1.3619': attribute type 10 has an invalid length. [ 534.439186][ T6266] bond0: (slave bond_slave_0): interface is now down [ 534.494980][ T6266] bond0: (slave bond_slave_1): interface is now down [ 534.522343][T14911] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 534.537106][T14927] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.590168][ T4312] bond0: (slave bond_slave_0): interface is now down [ 534.605284][ T4312] bond0: (slave bond_slave_1): interface is now down [ 534.616424][T14927] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.623653][T14927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.676604][ T4312] bond0: (slave bond_slave_0): interface is now down [ 534.703858][ T4312] bond0: (slave bond_slave_1): interface is now down [ 534.736509][T14927] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 534.745541][ T4312] bond0: (slave bridge0): interface is now down [ 534.767598][ T53] bond0: (slave bond_slave_0): interface is now down [ 534.774346][ T53] bond0: (slave bond_slave_1): interface is now down [ 534.787998][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3620'. [ 534.805105][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3620'. [ 534.824367][ T53] bond0: (slave bridge0): interface is now down [ 534.859462][ T53] bond0: now running without any active interface! [ 535.404220][T14934] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3624'. [ 535.461209][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 535.461224][ T27] audit: type=1326 audit(1737324464.308:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 535.535917][T14938] 9pnet_fd: Insufficient options for proto=fd [ 535.599797][ T27] audit: type=1326 audit(1737324464.348:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 535.694985][ T27] audit: type=1326 audit(1737324464.348:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 535.760487][ T27] audit: type=1326 audit(1737324464.348:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 535.892764][ T27] audit: type=1326 audit(1737324464.348:7932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 536.058938][T14949] 9pnet_virtio: no channels available for device 127.0.0.1 [ 536.119441][ T27] audit: type=1326 audit(1737324464.348:7933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 536.774059][ T27] audit: type=1326 audit(1737324464.348:7934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 536.840632][T14945] loop2: detected capacity change from 0 to 2048 [ 536.882728][ T27] audit: type=1326 audit(1737324464.348:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 536.936894][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3631'. [ 536.959982][T14957] syz.6.3629[14957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 536.960318][T14957] syz.6.3629[14957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 536.983440][ T3622] Alternate GPT is invalid, using primary GPT. [ 537.014363][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3631'. [ 537.026980][ T3622] loop2: p2 p3 p7 [ 537.157874][T12509] udevd[12509]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 537.208788][T12509] udevd[12509]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 537.247630][T12508] udevd[12508]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 537.416959][T14968] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3635'. [ 537.444191][ T27] audit: type=1326 audit(1737324466.288:7936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 537.483497][ T8064] bond0: (slave bond_slave_0): interface is now down [ 537.500630][ T8064] bond0: (slave bond_slave_1): interface is now down [ 537.505097][ T27] audit: type=1326 audit(1737324466.288:7937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 537.537050][T14972] netlink: 'syz.4.3637': attribute type 10 has an invalid length. [ 537.575354][ T46] bond0: (slave bond_slave_0): interface is now down [ 537.583813][T14972] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.591348][T14972] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.610250][ T46] bond0: (slave bond_slave_1): interface is now down [ 537.653807][T14974] 9pnet_fd: Insufficient options for proto=fd [ 537.655079][ T46] bond0: (slave bond_slave_0): interface is now down [ 537.676488][T14972] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.683723][T14972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.691219][T14972] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.698426][T14972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.723759][ T46] bond0: (slave bond_slave_1): interface is now down [ 537.744336][T14972] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 537.766580][ T33] bond0: (slave bond_slave_0): interface is now down [ 537.786790][ T33] bond0: (slave bond_slave_1): interface is now down [ 537.809420][ T33] bond0: (slave bridge0): interface is now down [ 537.913829][ T33] bond0: now running without any active interface! [ 537.923863][T14957] Set syz1 is full, maxelem 65536 reached [ 538.195701][T14982] loop5: detected capacity change from 0 to 128 [ 538.708287][T14993] lo speed is unknown, defaulting to 1000 [ 538.796216][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3644'. [ 538.807036][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3644'. [ 539.589733][T15006] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3649'. [ 539.981008][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3656'. [ 540.002388][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3656'. [ 540.078462][T15023] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:0 [ 540.136180][T15023] loop2: detected capacity change from 0 to 512 [ 540.143261][T15023] EXT4-fs: Ignoring removed oldalloc option [ 540.224615][T15023] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.3658: Parent and EA inode have the same ino 15 [ 540.308968][T15031] loop5: detected capacity change from 0 to 256 [ 540.316264][T15023] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.3658: Parent and EA inode have the same ino 15 [ 540.360275][T15023] EXT4-fs (loop2): 1 orphan inode deleted [ 540.389825][T15023] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 540.975221][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 540.975238][ T27] audit: type=1326 audit(1737324469.818:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15021 comm="syz.2.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7fc00000 [ 540.985646][T15046] 9pnet_fd: Insufficient options for proto=fd [ 541.138226][T12335] EXT4-fs (loop2): unmounting filesystem. [ 541.322824][ T27] audit: type=1326 audit(1737324470.168:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15058 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bbf85d29 code=0x7ffc0000 [ 541.361961][T15061] loop2: detected capacity change from 0 to 1024 [ 541.406308][ T27] audit: type=1326 audit(1737324470.168:7963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15058 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bbf85d29 code=0x7ffc0000 [ 541.473385][ T27] audit: type=1326 audit(1737324470.168:7964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15058 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63bbf85d29 code=0x7ffc0000 [ 541.517712][T15061] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 541.546768][T15061] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.656670][ T27] audit: type=1326 audit(1737324470.168:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15058 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bbf85d29 code=0x7ffc0000 [ 541.712723][ T27] audit: type=1326 audit(1737324470.168:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15058 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bbf85d29 code=0x7ffc0000 [ 541.736230][ T27] audit: type=1326 audit(1737324470.168:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15058 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f63bbf85d29 code=0x7ffc0000 [ 541.760542][ T27] audit: type=1326 audit(1737324470.168:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15058 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bbf85d29 code=0x7ffc0000 [ 541.783173][ T27] audit: type=1326 audit(1737324470.168:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15058 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bbf85d29 code=0x7ffc0000 [ 542.026434][T15081] 9pnet_fd: Insufficient options for proto=fd [ 542.066192][T12335] EXT4-fs (loop2): unmounting filesystem. [ 542.336462][ T27] audit: type=1326 audit(1737324471.188:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 542.560472][T15104] syz.5.3694[15104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.560582][T15104] syz.5.3694[15104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.604706][T15104] netlink: 'syz.5.3694': attribute type 3 has an invalid length. [ 542.890985][T15098] infiniband syz!: set active [ 542.903535][T15098] infiniband syz!: added team_slave_0 [ 543.001934][T15098] RDS/IB: syz!: added [ 543.018423][T15098] smc: adding ib device syz! with port count 1 [ 543.027166][T15098] smc: ib device syz! port 1 has pnetid [ 543.139270][T15122] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3701'. [ 543.890713][T15143] loop2: detected capacity change from 0 to 512 [ 543.988595][T15143] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 544.039618][T15143] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.191247][T12335] EXT4-fs (loop2): unmounting filesystem. [ 544.826170][T15170] netlink: 'syz.1.3722': attribute type 32 has an invalid length. [ 544.845022][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3722'. [ 544.932883][T15175] 9pnet_fd: Insufficient options for proto=fd [ 545.789866][T15203] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3737'. [ 546.146407][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 546.146424][ T27] audit: type=1326 audit(1737324474.998:7993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.4.3739" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x0 [ 546.190449][ T27] audit: type=1326 audit(1737324475.038:7994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 546.213849][ T27] audit: type=1326 audit(1737324475.038:7995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 546.244372][ T27] audit: type=1326 audit(1737324475.038:7996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 546.281180][ T27] audit: type=1326 audit(1737324475.038:7997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 546.320096][ T27] audit: type=1326 audit(1737324475.038:7998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 546.378881][ T27] audit: type=1326 audit(1737324475.038:7999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 546.463063][ T27] audit: type=1326 audit(1737324475.038:8000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 546.518356][ T27] audit: type=1326 audit(1737324475.038:8001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 547.043708][T15240] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3751'. [ 547.090135][ T27] audit: type=1326 audit(1737324475.938:8002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15241 comm="syz.6.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 548.397674][T15272] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3764'. [ 549.139239][T15294] loop6: detected capacity change from 0 to 512 [ 549.256058][T15294] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 549.283010][T15294] ext4 filesystem being mounted at /444/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 549.362406][T15303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3777'. [ 549.482209][T15308] 9pnet_fd: Insufficient options for proto=fd [ 549.585621][ T4256] Bluetooth: hci5: command 0x0406 tx timeout [ 550.249041][ T8116] EXT4-fs (loop6): unmounting filesystem. [ 550.348577][T15311] Set syz1 is full, maxelem 65536 reached [ 550.433209][T15329] syz.6.3787[15329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 550.433355][T15329] syz.6.3787[15329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 550.582290][T15338] loop2: detected capacity change from 0 to 512 [ 550.643384][T15338] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 550.682985][T15338] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 550.698196][T15338] System zones: 0-2, 18-18, 34-35 [ 550.704538][T15338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 550.805558][T15345] 9pnet_fd: Insufficient options for proto=fd [ 550.910392][T12335] EXT4-fs (loop2): unmounting filesystem. [ 550.970924][T15351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3797'. [ 551.419527][T15364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3803'. [ 551.574233][T15367] loop5: detected capacity change from 0 to 1024 [ 551.618718][T15367] EXT4-fs: Ignoring removed orlov option [ 551.679544][T15367] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 551.723697][T15367] EXT4-fs error (device loop5): ext4_check_all_de:663: inode #12: block 7: comm syz.5.3805: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 551.759748][T15360] Set syz1 is full, maxelem 65536 reached [ 551.760110][T15374] lo speed is unknown, defaulting to 1000 [ 551.904829][T15367] EXT4-fs (loop5): Remounting filesystem read-only [ 551.923379][T15377] 9pnet_fd: Insufficient options for proto=fd [ 552.163627][ T6673] EXT4-fs (loop5): unmounting filesystem. [ 552.279589][T15385] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3813'. [ 552.343306][T15389] loop5: detected capacity change from 0 to 512 [ 552.382648][T15389] EXT4-fs: Ignoring removed bh option [ 552.413474][T15389] EXT4-fs error (device loop5): __ext4_iget:5055: inode #15: block 1803188595: comm syz.5.3811: invalid block [ 552.432694][T15389] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3811: couldn't read orphan inode 15 (err -117) [ 552.452011][T15389] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 552.551975][ T6673] EXT4-fs (loop5): unmounting filesystem. [ 553.821345][T15417] No such timeout policy "syz0" [ 553.981093][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 553.992216][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 554.002687][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 554.012530][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 554.046835][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 554.054352][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 554.138069][T15402] Set syz1 is full, maxelem 65536 reached [ 554.159448][T15418] lo speed is unknown, defaulting to 1000 [ 554.463840][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 554.463856][ T27] audit: type=1107 audit(2000000000.900:8070): pid=15427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 554.727836][T15418] chnl_net:caif_netlink_parms(): no params data found [ 554.880393][T15418] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.887761][T15418] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.897140][T15418] device bridge_slave_0 entered promiscuous mode [ 554.906717][T15418] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.914034][T15418] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.922875][T15418] device bridge_slave_1 entered promiscuous mode [ 554.956825][T15418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.967174][T15443] 9pnet_fd: Insufficient options for proto=fd [ 554.986606][T15418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.100021][T15418] team0: Port device team_slave_0 added [ 555.121043][T15418] team0: Port device team_slave_1 added [ 555.191026][T15418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.215659][T15418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.297046][T15418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.335124][T15418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.357110][T15418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.458214][T15418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.532432][T15455] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3838'. [ 555.622592][T15418] device hsr_slave_0 entered promiscuous mode [ 555.636026][T15418] device hsr_slave_1 entered promiscuous mode [ 555.658232][T15418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.692466][T15418] Cannot create hsr debugfs directory [ 556.145303][ T4256] Bluetooth: hci1: command 0x0409 tx timeout [ 556.260466][T15418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.340528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 556.385793][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 556.409071][T15418] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.439702][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 556.458061][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 556.498681][T15452] Set syz1 is full, maxelem 65536 reached [ 556.503047][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.511629][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.569714][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 556.592047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 556.617038][ T27] audit: type=1326 audit(2000000003.060:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 556.625800][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 556.701581][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.704986][ T27] audit: type=1326 audit(2000000003.060:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 556.708795][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.799603][T15477] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3850'. [ 556.810660][ T27] audit: type=1326 audit(2000000003.060:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 556.835394][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 556.863299][ T27] audit: type=1326 audit(2000000003.060:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 556.890015][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 556.924663][ T27] audit: type=1326 audit(2000000003.060:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 556.948329][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 556.971058][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 556.997355][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 557.006423][ T27] audit: type=1326 audit(2000000003.060:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 557.038436][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 557.054227][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 557.062961][ T27] audit: type=1326 audit(2000000003.060:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 557.097134][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 557.112143][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 557.124962][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 557.133483][ T27] audit: type=1326 audit(2000000003.060:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 557.165576][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.186875][T15418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 557.212344][ T27] audit: type=1326 audit(2000000003.060:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 557.736071][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 557.775446][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 557.834483][T15418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.018310][T15506] 9pnet_fd: Insufficient options for proto=fd [ 558.227329][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 558.539628][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 558.573450][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 558.742101][ T4397] tipc: Disabling bearer [ 558.750737][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 558.765703][ T4397] tipc: Left network mode [ 558.785525][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 558.835893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 558.873831][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 558.901990][T15418] device veth0_vlan entered promiscuous mode [ 558.940108][T15531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3870'. [ 558.946149][T15418] device veth1_vlan entered promiscuous mode [ 559.153198][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 559.189886][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 559.212138][T15538] 9pnet_fd: Insufficient options for proto=fd [ 559.222913][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 559.241026][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 559.307083][T15418] device veth0_macvtap entered promiscuous mode [ 559.348240][T15418] device veth1_macvtap entered promiscuous mode [ 559.460624][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.505305][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.530424][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.552690][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.567493][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.584845][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.602145][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.616524][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.636439][T15418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.678359][T15546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3874'. [ 559.694172][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 559.718762][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 559.738438][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 559.780150][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 559.812132][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.843435][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.881801][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.912889][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.943650][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.974313][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.013853][T15563] 9pnet_fd: Insufficient options for proto=fd [ 560.021371][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.038870][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.067915][T15418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.124807][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 560.142934][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 560.193976][T15563] loop4: detected capacity change from 0 to 512 [ 560.252408][T15568] IPv6: Can't replace route, no match found [ 560.305961][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 560.427582][T15563] __quota_error: 35 callbacks suppressed [ 560.427603][T15563] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 560.525138][T15563] EXT4-fs warning (device loop4): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 560.640220][T15563] EXT4-fs (loop4): mount failed [ 560.726766][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.758783][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.888654][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 560.936826][ T5342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.936921][ T5342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.940443][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 561.419109][T15591] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 562.193805][ T4397] device hsr_slave_0 left promiscuous mode [ 562.217204][ T4397] device hsr_slave_1 left promiscuous mode [ 562.233910][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.259630][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.289644][ T27] audit: type=1326 audit(2000000008.730:8115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15614 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 562.316308][ T4397] device bridge_slave_1 left promiscuous mode [ 562.322608][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.350330][ T27] audit: type=1326 audit(2000000008.750:8116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15614 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 562.385117][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 562.440157][ T27] audit: type=1326 audit(2000000008.760:8117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15614 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 562.567890][ T27] audit: type=1326 audit(2000000008.760:8118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15614 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 562.640316][ T4397] device bridge_slave_0 left promiscuous mode [ 562.664757][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.675086][ T27] audit: type=1326 audit(2000000008.760:8119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15614 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 562.771239][ T27] audit: type=1326 audit(2000000008.760:8120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15614 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 562.871662][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.878058][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.901235][ T27] audit: type=1326 audit(2000000008.760:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15614 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 562.969456][ T27] audit: type=1326 audit(2000000008.760:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15614 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 563.078249][T15629] loop5: detected capacity change from 0 to 512 [ 563.122727][ T27] audit: type=1326 audit(2000000008.760:8123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15614 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 563.155182][T15629] EXT4-fs: Mount option(s) incompatible with ext2 [ 564.310552][T15647] loop5: detected capacity change from 0 to 1024 [ 564.329960][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3902'. [ 564.342713][ T4397] bond3 (unregistering): Released all slaves [ 564.387073][T15647] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 564.471520][T15418] EXT4-fs (loop5): unmounting filesystem. [ 564.745981][T15662] 9pnet_fd: Insufficient options for proto=fd [ 564.763086][T15662] loop5: detected capacity change from 0 to 512 [ 564.818457][ T4397] bond2 (unregistering): Released all slaves [ 564.838785][T15662] EXT4-fs warning (device loop5): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 564.904711][T15662] EXT4-fs (loop5): mount failed [ 565.236893][ T4397] bond1 (unregistering): Released all slaves [ 565.550220][T15673] 9pnet_fd: Insufficient options for proto=fd [ 566.703307][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3915'. [ 566.824821][ T4397] team0 (unregistering): Port device team_slave_1 removed [ 566.929383][ T4397] team0 (unregistering): Port device team_slave_0 removed [ 567.048776][ T4397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.156066][ T4397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.247549][T15684] Set syz1 is full, maxelem 65536 reached [ 568.159968][ T4397] bond0 (unregistering): Released all slaves [ 570.896843][T15751] 9pnet_fd: Insufficient options for proto=fd [ 571.026757][T15721] Set syz1 is full, maxelem 65536 reached [ 571.132680][T15756] netlink: 'syz.1.3939': attribute type 1 has an invalid length. [ 571.175142][T15756] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3939'. [ 571.475658][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3943'. [ 571.586125][T15771] program syz.6.3945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.631939][T15775] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3944'. [ 571.760919][T15777] xt_hashlimit: size too large, truncated to 1048576 [ 572.586207][ T4299] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 572.803058][T15791] 9pnet_fd: Insufficient options for proto=fd [ 572.826009][ T4299] usb 5-1: device descriptor read/64, error -71 [ 573.117316][ T4299] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 573.334998][ T4299] usb 5-1: device descriptor read/64, error -71 [ 573.466347][ T4299] usb usb5-port1: attempt power cycle [ 573.895009][ T4299] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 573.946568][ T4299] usb 5-1: device descriptor read/8, error -71 [ 574.235180][ T4299] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 574.275549][ T4299] usb 5-1: device descriptor read/8, error -71 [ 574.372432][T15800] Set syz1 is full, maxelem 65536 reached [ 574.395177][ T4299] usb usb5-port1: unable to enumerate USB device [ 574.552939][T15832] loop5: detected capacity change from 0 to 1024 [ 574.588110][T15832] EXT4-fs: Ignoring removed orlov option [ 574.639655][T15832] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 574.706455][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 574.706473][ T27] audit: type=1804 audit(2000000021.150:8146): pid=15832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3963" name="/newroot/18/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 574.864336][ T27] audit: type=1804 audit(2000000021.300:8147): pid=15848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3963" name="/newroot/18/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 575.098558][T15418] EXT4-fs (loop5): unmounting filesystem. [ 575.185812][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 575.406826][T15866] random: crng reseeded on system resumption [ 575.486222][ T27] audit: type=1326 audit(2000000021.930:8148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15865 comm="syz.2.3976" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x0 [ 576.170393][T15886] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3980'. [ 576.432969][T15868] Set syz1 is full, maxelem 65536 reached [ 576.693936][T15899] 9pnet_fd: Insufficient options for proto=fd [ 577.334649][T15924] loop6: detected capacity change from 0 to 512 [ 577.407997][T15924] EXT4-fs: Ignoring removed i_version option [ 577.507597][T15924] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 577.537780][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 577.592287][T15924] ext4 filesystem being mounted at /506/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.673598][T15924] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #4: comm syz.6.3991: corrupted inode contents [ 577.736544][T15924] EXT4-fs error (device loop6): ext4_dirty_inode:6089: inode #4: comm syz.6.3991: mark_inode_dirty error [ 577.783299][T15924] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #4: comm syz.6.3991: corrupted inode contents [ 577.829342][T15924] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #4: comm syz.6.3991: mark_inode_dirty error [ 577.958654][T15924] Quota error (device loop6): write_blk: dquota write failed [ 578.030092][T15924] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 578.085021][T15924] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 578.573291][T15924] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.3991: Failed to acquire dquot type 1 [ 579.034094][ T8116] EXT4-fs (loop6): unmounting filesystem. [ 579.070758][T15955] 9pnet_fd: Insufficient options for proto=fd [ 579.330928][T15941] Set syz1 is full, maxelem 65536 reached [ 579.393288][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'. [ 579.601486][T15975] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4007'. [ 579.960693][T15992] program syz.4.4011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 580.877439][T16000] loop5: detected capacity change from 0 to 764 [ 581.003964][T16000] syz.5.4013[16000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.004072][T16000] syz.5.4013[16000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.052035][T16004] tipc: Started in network mode [ 581.104725][T16004] tipc: Node identity 2adae37764cc, cluster identity 4711 [ 581.145678][T16004] tipc: Enabled bearer , priority 0 [ 581.225451][T16020] xt_hashlimit: size too large, truncated to 1048576 [ 581.369323][T16014] device syzkaller0 entered promiscuous mode [ 581.404216][T16014] tipc: Resetting bearer [ 581.468475][T16027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4019'. [ 583.236016][ T4304] tipc: Node number set to 1310122871 [ 583.251798][T16002] tipc: Resetting bearer [ 583.479936][T16042] loop2: detected capacity change from 0 to 512 [ 583.519654][T16042] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 583.587080][T16042] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.4025: bad orphan inode 131083 [ 583.614310][T16042] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 583.753029][T12335] EXT4-fs (loop2): unmounting filesystem. [ 584.130188][T16053] loop2: detected capacity change from 0 to 1024 [ 584.152695][T16053] EXT4-fs: Ignoring removed orlov option [ 584.228001][T16053] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 584.301596][ T27] audit: type=1804 audit(2000000030.740:8149): pid=16053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4029" name="/newroot/249/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 584.462360][ T27] audit: type=1804 audit(2000000030.900:8150): pid=16057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4029" name="/newroot/249/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 585.182592][T12335] EXT4-fs (loop2): unmounting filesystem. [ 585.434143][ T4256] Bluetooth: hci3: command 0x0406 tx timeout [ 586.665066][ T27] audit: type=1107 audit(2000000033.090:8151): pid=16069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 586.665066][ T27] ' [ 587.626863][T16002] tipc: Disabling bearer [ 587.900272][T16086] loop5: detected capacity change from 0 to 128 [ 587.917468][T16086] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 587.955999][T16086] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 588.147102][ T8062] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 588.893404][T16116] device macvlan1 entered promiscuous mode [ 588.961878][T16116] device macvlan1 left promiscuous mode [ 589.076279][T16128] syz.4.4055[16128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 589.076393][T16128] syz.4.4055[16128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 589.498624][T16150] loop2: detected capacity change from 0 to 512 [ 589.558657][T16150] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 589.630470][T16155] netlink: 'syz.5.4064': attribute type 13 has an invalid length. [ 589.651160][T16150] EXT4-fs (loop2): 1 truncate cleaned up [ 589.657128][T16150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 589.726991][T16144] loop6: detected capacity change from 0 to 8192 [ 589.768883][ T27] audit: type=1326 audit(2000000036.210:8152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16143 comm="syz.6.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 589.838848][ T27] audit: type=1326 audit(2000000036.240:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16143 comm="syz.6.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 589.896801][ T27] audit: type=1326 audit(2000000036.240:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16143 comm="syz.6.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 589.910944][T12335] EXT4-fs (loop2): unmounting filesystem. [ 590.002008][ T27] audit: type=1326 audit(2000000036.240:8155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16143 comm="syz.6.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 590.087760][ T27] audit: type=1326 audit(2000000036.240:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16143 comm="syz.6.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 590.153324][ T27] audit: type=1326 audit(2000000036.240:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16143 comm="syz.6.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 590.280340][ T27] audit: type=1326 audit(2000000036.240:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16143 comm="syz.6.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 590.368230][ T27] audit: type=1326 audit(2000000036.240:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16143 comm="syz.6.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 590.433832][ T27] audit: type=1326 audit(2000000036.240:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16143 comm="syz.6.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 590.462773][ T27] audit: type=1326 audit(2000000036.240:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16143 comm="syz.6.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 590.862472][T16155] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.871546][T16155] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.626427][T16155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.692323][T16155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.301534][T16176] syz.4.4073[16176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.301643][T16176] syz.4.4073[16176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.118546][T16200] loop5: detected capacity change from 0 to 512 [ 594.200534][T16200] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 594.286145][T16200] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 594.364589][T16210] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4083'. [ 594.377748][T16200] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #2: comm syz.5.4081: corrupted inode contents [ 594.407236][T16200] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #2: comm syz.5.4081: mark_inode_dirty error [ 594.435324][T16200] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #2: comm syz.5.4081: corrupted inode contents [ 594.608671][T15418] EXT4-fs (loop5): unmounting filesystem. [ 594.984481][T16236] syz.5.4092[16236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.984644][T16236] syz.5.4092[16236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.364828][T16249] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4098'. [ 596.709294][T16283] loop6: detected capacity change from 0 to 1024 [ 596.770746][T16283] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 596.790430][T16283] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.201203][ T8116] EXT4-fs (loop6): unmounting filesystem. [ 597.339483][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4115'. [ 598.212297][T16314] loop5: detected capacity change from 0 to 1024 [ 598.225682][T16314] EXT4-fs: Ignoring removed orlov option [ 598.294087][T16314] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 598.329980][T16321] loop4: detected capacity change from 0 to 128 [ 598.337583][T16321] FAT-fs (loop4): Unrecognized mount option "18446744073709551615" or missing value [ 598.382945][ T27] kauditd_printk_skb: 78 callbacks suppressed [ 598.382963][ T27] audit: type=1804 audit(2000000044.820:8240): pid=16314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4117" name="/newroot/47/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 598.496917][T16327] RDS: rds_bind could not find a transport for 800::, load rds_tcp or rds_rdma? [ 598.531880][ T27] audit: type=1804 audit(2000000044.970:8241): pid=16329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4117" name="/newroot/47/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 598.813057][T16341] loop2: detected capacity change from 0 to 128 [ 598.836579][T16339] tipc: Started in network mode [ 598.850960][T16339] tipc: Node identity c6e5fcb99f07, cluster identity 4711 [ 598.862602][T16339] tipc: Enabled bearer , priority 0 [ 598.897915][T16341] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 598.931725][T16341] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 599.111779][T16345] device syzkaller0 entered promiscuous mode [ 599.184240][T16345] tipc: Resetting bearer [ 599.193075][T15418] EXT4-fs (loop5): unmounting filesystem. [ 599.193452][T16341] EXT4-fs (loop2): unmounting filesystem. [ 599.346366][T16337] tipc: Resetting bearer [ 599.708761][ T27] audit: type=1326 audit(2000000046.150:8242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.6.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 599.765738][ T27] audit: type=1326 audit(2000000046.150:8243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.6.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 599.833932][ T27] audit: type=1326 audit(2000000046.180:8244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.6.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 599.886465][ T27] audit: type=1326 audit(2000000046.180:8245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.6.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 599.937732][ T27] audit: type=1326 audit(2000000046.180:8246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.6.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 599.947478][ T4305] tipc: Node number set to 1508048057 [ 599.975236][ T27] audit: type=1326 audit(2000000046.190:8247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.6.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 600.000852][ T27] audit: type=1326 audit(2000000046.190:8248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.6.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 600.027256][ T27] audit: type=1326 audit(2000000046.190:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.6.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 602.564601][T16337] tipc: Disabling bearer [ 602.577985][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4130'. [ 602.594253][T16374] !ØÒ1ö¡$ûž: renamed from bond0 [ 602.610539][T16374] device !ØÒ1ö¡$ûž entered promiscuous mode [ 602.634797][T16374] device bond_slave_0 entered promiscuous mode [ 602.683058][T16374] device bond_slave_1 entered promiscuous mode [ 602.914460][T16392] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4137'. [ 603.295781][T16402] loop2: detected capacity change from 0 to 256 [ 603.330074][T16405] syz.5.4143[16405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.330184][T16405] syz.5.4143[16405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.339666][T16402] FAT-fs (loop2): Directory bread(block 64) failed [ 603.381644][T16402] FAT-fs (loop2): Directory bread(block 65) failed [ 603.389149][T16402] FAT-fs (loop2): Directory bread(block 66) failed [ 603.401232][T16402] FAT-fs (loop2): Directory bread(block 67) failed [ 603.409096][T16402] FAT-fs (loop2): Directory bread(block 68) failed [ 603.422062][T16402] FAT-fs (loop2): Directory bread(block 69) failed [ 603.430432][T16402] FAT-fs (loop2): Directory bread(block 70) failed [ 603.475665][T16402] FAT-fs (loop2): Directory bread(block 71) failed [ 603.482414][T16402] FAT-fs (loop2): Directory bread(block 72) failed [ 603.513374][T16402] FAT-fs (loop2): Directory bread(block 73) failed [ 603.583331][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 603.583350][ T27] audit: type=1326 audit(2000000050.020:8263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.6.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 603.644439][ T27] audit: type=1326 audit(2000000050.020:8264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.6.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 603.917825][T16410] lo speed is unknown, defaulting to 1000 [ 604.660425][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4146'. [ 604.712059][T16411] tipc: Started in network mode [ 604.722875][T16411] tipc: Node identity b2584dd6406e, cluster identity 4711 [ 604.731289][T16411] tipc: Enabled bearer , priority 0 [ 604.872241][T16414] device syzkaller0 entered promiscuous mode [ 604.890538][T16414] tipc: Resetting bearer [ 605.004419][T16409] tipc: Resetting bearer [ 605.289081][T16434] syz.4.4156[16434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 605.289189][T16434] syz.4.4156[16434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 605.594838][T16440] loop4: detected capacity change from 0 to 1024 [ 605.635802][T16440] EXT4-fs: Ignoring removed orlov option [ 605.717367][T16440] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 605.726836][ T4299] tipc: Node number set to 4063645142 [ 606.258505][ T27] audit: type=1804 audit(2000000052.700:8265): pid=16445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4159" name="/newroot/198/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 606.579205][T13153] EXT4-fs (loop4): unmounting filesystem. [ 606.664640][T16447] loop4: detected capacity change from 0 to 128 [ 606.686719][T16447] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 606.727085][T16447] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 606.742615][T16447] ext2 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 606.878450][T13153] EXT4-fs (loop4): unmounting filesystem. [ 607.378068][T16454] xt_CT: No such helper "netbios-ns" [ 609.569302][T16409] tipc: Disabling bearer [ 609.588672][T16444] lo speed is unknown, defaulting to 1000 [ 609.640279][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4165'. [ 609.934572][T16467] futex_wake_op: syz.1.4166 tries to shift op by -1; fix this program [ 610.009543][T16470] loop6: detected capacity change from 0 to 512 [ 610.048173][T16474] loop5: detected capacity change from 0 to 1024 [ 610.084447][T16474] EXT4-fs: Ignoring removed orlov option [ 610.085860][T16479] syz.4.4169[16479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.103713][T16470] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 610.144151][T16479] syz.4.4169[16479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.164427][T16474] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 610.226375][T16470] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.308764][T16470] xt_connbytes: Forcing CT accounting to be enabled [ 610.315891][T16470] --map-set only usable from mangle table [ 610.403289][ T8116] EXT4-fs (loop6): unmounting filesystem. [ 610.509187][T15418] EXT4-fs (loop5): unmounting filesystem. [ 610.689714][ T27] audit: type=1326 audit(2000000313.132:8266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 610.890108][ T27] audit: type=1326 audit(2000000313.162:8267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 611.746360][ T27] audit: type=1326 audit(2000000313.162:8268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 611.864776][ T27] audit: type=1326 audit(2000000313.162:8269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 611.941063][ T27] audit: type=1326 audit(2000000313.162:8270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 612.000551][T16521] loop6: detected capacity change from 0 to 512 [ 612.034390][ T27] audit: type=1326 audit(2000000313.162:8271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 612.062510][T16521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 612.136880][T16521] EXT4-fs (loop6): orphan cleanup on readonly fs [ 612.170725][T16521] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.4179: bg 0: block 248: padding at end of block bitmap is not set [ 612.245547][ T27] audit: type=1326 audit(2000000313.162:8272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 612.276868][T16521] Quota error (device loop6): write_blk: dquota write failed [ 612.312320][T16521] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 612.359980][ T27] audit: type=1326 audit(2000000313.162:8273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665af85d29 code=0x7ffc0000 [ 612.377791][T16521] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.4179: Failed to acquire dquot type 1 [ 612.396553][T16529] syz.5.4184[16529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.396662][T16529] syz.5.4184[16529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.459250][T16507] Set syz1 is full, maxelem 65536 reached [ 612.487658][T16521] EXT4-fs (loop6): 1 truncate cleaned up [ 612.511405][T16521] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 612.741720][T16541] loop5: detected capacity change from 0 to 1024 [ 612.757640][T16542] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4188'. [ 612.773713][T16541] EXT4-fs: Ignoring removed orlov option [ 612.794251][ T8116] EXT4-fs (loop6): unmounting filesystem. [ 612.873639][T16541] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 613.081882][T16555] xt_hashlimit: max too large, truncated to 1048576 [ 613.558490][T16571] syz.2.4197[16571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.558610][T16571] syz.2.4197[16571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.664787][T16576] program syz.4.4199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.721058][T15418] EXT4-fs (loop5): unmounting filesystem. [ 614.214777][T16596] loop4: detected capacity change from 0 to 512 [ 614.261282][T16596] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 614.296141][T16596] EXT4-fs (loop4): orphan cleanup on readonly fs [ 614.303589][T16600] device batadv_slave_1 entered promiscuous mode [ 614.322302][T16596] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.4206: Failed to acquire dquot type 1 [ 614.330869][T16600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4207'. [ 614.347531][T16596] EXT4-fs (loop4): 1 truncate cleaned up [ 614.386193][T16596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 614.418790][T16600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.649007][T13153] EXT4-fs (loop4): unmounting filesystem. [ 614.751013][T16600] device batadv_slave_1 left promiscuous mode [ 614.781586][T16600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.975262][T16582] bridge0: port 3(syz_tun) entered blocking state [ 614.999311][T16582] bridge0: port 3(syz_tun) entered disabled state [ 615.060422][T16582] device syz_tun entered promiscuous mode [ 615.136594][T16582] bridge0: port 3(syz_tun) entered blocking state [ 615.143814][T16582] bridge0: port 3(syz_tun) entered forwarding state [ 615.153192][T16622] loop4: detected capacity change from 0 to 1024 [ 615.164196][T16622] EXT4-fs: Ignoring removed orlov option [ 615.355615][T16607] netlink: 'syz.6.4201': attribute type 10 has an invalid length. [ 615.440844][T16607] bridge0: port 3(syz_tun) entered disabled state [ 615.447555][T16607] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.454897][T16607] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.575427][T16622] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 615.876056][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 615.876074][ T27] audit: type=1804 audit(2000000318.322:8293): pid=16622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4211" name="/newroot/216/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 615.924190][T16607] bridge0: port 3(syz_tun) entered blocking state [ 615.930796][T16607] bridge0: port 3(syz_tun) entered forwarding state [ 615.937731][T16607] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.944910][T16607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.952350][T16607] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.959528][T16607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.047764][T16607] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 616.058857][ T27] audit: type=1804 audit(2000000318.502:8294): pid=16631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4211" name="/newroot/216/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 616.182622][T16634] program syz.5.4214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.212621][T16630] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 616.226316][T13153] EXT4-fs (loop4): unmounting filesystem. [ 616.532984][T16644] syz.5.4217[16644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.533094][T16644] syz.5.4217[16644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.799009][ T27] audit: type=1326 audit(2000000319.242:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df3585d29 code=0x7ffc0000 [ 617.488480][T16663] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 617.606563][ T27] audit: type=1326 audit(2000000319.242:8296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df3585d29 code=0x7ffc0000 [ 617.804681][ T27] audit: type=1326 audit(2000000319.372:8297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7df3585d29 code=0x7ffc0000 [ 617.854239][T16676] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4224'. [ 617.875882][ T27] audit: type=1326 audit(2000000319.372:8298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df3585d29 code=0x7ffc0000 [ 617.945185][ T27] audit: type=1326 audit(2000000319.372:8299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df3585d29 code=0x7ffc0000 [ 617.996652][T16681] program syz.2.4227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.053277][ T27] audit: type=1326 audit(2000000319.502:8300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7df3585d29 code=0x7ffc0000 [ 618.102414][T16683] syz.6.4228[16683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 618.102535][T16683] syz.6.4228[16683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 618.118587][ T27] audit: type=1326 audit(2000000319.502:8301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df3585d29 code=0x7ffc0000 [ 618.225792][ T27] audit: type=1326 audit(2000000319.512:8302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f7df3585d29 code=0x7ffc0000 [ 618.545073][T16702] loop4: detected capacity change from 0 to 128 [ 619.707425][T16715] loop4: detected capacity change from 0 to 512 [ 619.810572][T16719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4241'. [ 619.828885][T16723] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4240'. [ 619.838184][T16715] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4238: bg 0: block 248: padding at end of block bitmap is not set [ 619.854518][T16715] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.4238: Failed to acquire dquot type 1 [ 619.872712][T16715] EXT4-fs (loop4): 1 truncate cleaned up [ 619.879829][T16715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 619.889339][T16715] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.914159][T16715] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.4238: Failed to acquire dquot type 1 [ 620.077926][T13153] EXT4-fs (loop4): unmounting filesystem. [ 620.110344][ T4895] EXT4-fs error (device loop4): ext4_release_dquot:6817: comm kworker/u4:16: Failed to release dquot type 1 [ 620.133931][T16731] program syz.2.4242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.157699][T16719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4241'. [ 620.512900][T16719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4241'. [ 620.732381][T16752] rdma_rxe: already configured on team_slave_0 [ 620.964658][T16761] binfmt_misc: register: failed to install interpreter file ./file0 [ 622.089597][T16773] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4253'. [ 622.268938][T16780] lo speed is unknown, defaulting to 1000 [ 622.714043][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 622.714062][ T27] audit: type=1326 audit(2000000325.142:8331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.4.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 622.823284][ T27] audit: type=1326 audit(2000000325.152:8332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.4.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 622.875962][ T27] audit: type=1326 audit(2000000325.152:8333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.4.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 622.949407][ T27] audit: type=1326 audit(2000000325.152:8334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.4.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 623.070917][ T27] audit: type=1326 audit(2000000325.152:8335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.4.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 623.151015][ T27] audit: type=1326 audit(2000000325.152:8336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.4.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 623.192095][T16814] program syz.5.4266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 623.211924][ T27] audit: type=1326 audit(2000000325.222:8337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.4.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 623.290556][ T27] audit: type=1326 audit(2000000325.222:8338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.4.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 623.389394][T16788] Set syz1 is full, maxelem 65536 reached [ 623.417581][ T27] audit: type=1326 audit(2000000325.242:8339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.4.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 623.520488][ T27] audit: type=1326 audit(2000000325.242:8340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.4.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 624.067378][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4275'. [ 624.195257][T16851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'. [ 624.199237][T16848] program syz.4.4278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 624.310718][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.317114][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.722616][T16864] Set syz1 is full, maxelem 65536 reached [ 626.243821][T16862] Set syz1 is full, maxelem 65536 reached [ 626.361894][T16898] syz.2.4292[16898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 626.362002][T16898] syz.2.4292[16898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 626.413634][T16898] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 626.430846][T16901] program syz.1.4293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 626.696875][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4299'. [ 626.843261][T16920] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 626.863188][T16923] loop6: detected capacity change from 0 to 1024 [ 626.887629][T16923] EXT4-fs: Ignoring removed orlov option [ 626.933001][T16923] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 627.280512][ T8116] EXT4-fs (loop6): unmounting filesystem. [ 628.665924][T16941] device veth0_to_batadv entered promiscuous mode [ 628.707100][T16941] device veth0_to_batadv left promiscuous mode [ 628.719108][T16946] program syz.6.4308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 628.817770][T16944] lo speed is unknown, defaulting to 1000 [ 628.957705][T16932] Set syz1 is full, maxelem 65536 reached [ 629.160253][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4310'. [ 629.419961][T16959] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4315'. [ 629.900666][T16972] program syz.5.4321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 629.932265][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4322'. [ 630.172840][T16978] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 630.657883][T16970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 630.664419][T16970] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 630.676099][T16970] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 630.705256][T16970] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 630.729003][T16970] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 630.729615][T16999] syz.5.4333[16999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 630.742467][T16999] syz.5.4333[16999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 630.743590][T16970] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 630.777823][T16970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 630.788449][T16970] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 630.803453][T16970] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 630.813366][T16970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 630.822658][T16970] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 630.832457][T16970] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 630.841933][T16970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 630.863268][T16970] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 630.894447][T16970] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 630.906886][T17004] program syz.4.4334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.022643][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4336'. [ 631.038854][T17008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.185940][T17008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.597196][T17021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4342'. [ 631.823968][T17031] program syz.1.4346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.865164][T17032] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 631.866140][T17033] IPVS: stopping master sync thread 17032 ... [ 631.918603][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4345'. [ 631.989729][ T4256] Bluetooth: hci2: command 0x0c1a tx timeout [ 632.072188][T17040] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 632.368287][T17050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4352'. [ 632.389773][T17049] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4353'. [ 632.608881][T17056] syz.4.4355[17056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 632.609090][T17056] syz.4.4355[17056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 632.670414][T17059] random: crng reseeded on system resumption [ 632.708384][T17063] program syz.1.4358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.785707][ T4256] Bluetooth: hci5: command 0x0c1a tx timeout [ 632.786271][ T4273] Bluetooth: hci0: command 0x0c1a tx timeout [ 632.870651][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 632.870661][ T4273] Bluetooth: hci3: command 0x0c1a tx timeout [ 633.295739][T17075] lo speed is unknown, defaulting to 1000 [ 634.067171][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 634.131319][T17094] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4367'. [ 634.443253][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 634.443270][ T27] audit: type=1326 audit(2000000336.882:8374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 634.524507][T17102] program syz.5.4370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.525712][ T27] audit: type=1326 audit(2000000336.912:8375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 634.707752][ T27] audit: type=1326 audit(2000000336.912:8376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 634.795785][ T27] audit: type=1326 audit(2000000336.912:8377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 634.838355][T17106] loop4: detected capacity change from 0 to 256 [ 634.865067][ T4273] Bluetooth: hci5: command 0x0406 tx timeout [ 634.871193][ T27] audit: type=1326 audit(2000000336.922:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 634.894811][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 634.945575][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 634.951864][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 635.049723][T17106] FAT-fs (loop4): Directory bread(block 64) failed [ 635.085811][T17106] FAT-fs (loop4): Directory bread(block 65) failed [ 635.092567][ T27] audit: type=1326 audit(2000000336.922:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 635.093553][T17111] syz.5.4374[17111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 635.130657][T17106] FAT-fs (loop4): Directory bread(block 66) failed [ 635.185242][T17106] FAT-fs (loop4): Directory bread(block 67) failed [ 635.202247][T17106] FAT-fs (loop4): Directory bread(block 68) failed [ 635.212117][T17111] syz.5.4374[17111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 635.242784][ T27] audit: type=1326 audit(2000000336.922:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 635.282065][T17106] FAT-fs (loop4): Directory bread(block 69) failed [ 635.310417][T17106] FAT-fs (loop4): Directory bread(block 70) failed [ 635.340228][T17106] FAT-fs (loop4): Directory bread(block 71) failed [ 635.370599][T17106] FAT-fs (loop4): Directory bread(block 72) failed [ 635.402231][T17106] FAT-fs (loop4): Directory bread(block 73) failed [ 635.541376][T17106] syz.4.4372: attempt to access beyond end of device [ 635.541376][T17106] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 635.613237][T17106] syz.4.4372: attempt to access beyond end of device [ 635.613237][T17106] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 635.648859][ T27] audit: type=1800 audit(2000000338.092:8381): pid=17106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4372" name="file0" dev="loop4" ino=1048656 res=0 errno=0 [ 636.197053][T17125] device syzkaller0 entered promiscuous mode [ 636.256766][T17132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4381'. [ 636.923232][T17146] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4388'. [ 638.418314][ T27] audit: type=1326 audit(2000000340.852:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 638.455416][ T27] audit: type=1326 audit(2000000340.882:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 638.492818][T17169] tmpfs: Bad value for 'mpol' [ 640.131249][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4384'. [ 640.144231][T17144] device batadv_slave_1 entered promiscuous mode [ 640.156615][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4387'. [ 640.175408][T17147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.385303][T17147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.586871][T17182] lo speed is unknown, defaulting to 1000 [ 640.716717][T17191] program syz.4.4404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 640.973667][T17193] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 640.975819][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4407'. [ 640.993763][T17193] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 641.230463][T17204] device syzkaller0 entered promiscuous mode [ 642.268572][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 642.268590][ T27] audit: type=1326 audit(2000000344.712:8421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17226 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 642.334955][ T27] audit: type=1326 audit(2000000344.712:8422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17226 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 642.395661][ T27] audit: type=1326 audit(2000000344.712:8423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17226 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 642.440156][ T27] audit: type=1326 audit(2000000344.712:8424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17226 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 642.469311][ T27] audit: type=1326 audit(2000000344.712:8425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17226 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 642.496270][T17234] program syz.2.4418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.524920][ T27] audit: type=1326 audit(2000000344.742:8426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17226 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 642.562545][ T27] audit: type=1326 audit(2000000344.742:8427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17226 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 642.586700][ T27] audit: type=1326 audit(2000000344.742:8428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17226 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 642.611732][ T27] audit: type=1326 audit(2000000344.742:8429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17226 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 642.639760][ T27] audit: type=1326 audit(2000000344.752:8430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17226 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 645.405125][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4431'. [ 646.227792][T17281] lo speed is unknown, defaulting to 1000 [ 647.118984][T17287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4436'. [ 647.446872][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4441'. [ 647.598924][T17300] loop5: detected capacity change from 0 to 512 [ 647.691984][T17300] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4442: bg 0: block 248: padding at end of block bitmap is not set [ 647.713017][T17309] program syz.6.4446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 647.719572][T17300] __quota_error: 2 callbacks suppressed [ 647.719593][T17300] Quota error (device loop5): write_blk: dquota write failed [ 647.743673][T17300] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 647.760576][T17300] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.4442: Failed to acquire dquot type 1 [ 647.773530][T17300] EXT4-fs (loop5): 1 truncate cleaned up [ 647.785943][T17300] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 647.814681][T17300] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.092243][T15418] EXT4-fs (loop5): unmounting filesystem. [ 648.214402][ T27] audit: type=1326 audit(2000000350.652:8433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17317 comm="syz.5.4449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df3585d29 code=0x7ffc0000 [ 648.434538][T17319] lo speed is unknown, defaulting to 1000 [ 649.253482][ T27] audit: type=1326 audit(2000000350.652:8434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17317 comm="syz.5.4449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f7df3585d29 code=0x7ffc0000 [ 649.334116][ T27] audit: type=1326 audit(2000000350.652:8435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17317 comm="syz.5.4449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df3585d29 code=0x7ffc0000 [ 649.359841][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4451'. [ 649.400684][ T27] audit: type=1326 audit(2000000350.702:8436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17317 comm="syz.5.4449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df3585d29 code=0x7ffc0000 [ 649.643908][T17339] program syz.5.4458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 649.851345][T17349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4459'. [ 650.096571][T17355] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 650.140197][ T27] audit: type=1326 audit(2000000352.572:8437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17353 comm="syz.1.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 650.165486][ T27] audit: type=1326 audit(2000000352.572:8438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17353 comm="syz.1.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 650.924649][ T27] audit: type=1326 audit(2000000352.572:8439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17353 comm="syz.1.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 650.955282][T17363] loop5: detected capacity change from 0 to 512 [ 650.991878][T17358] lo speed is unknown, defaulting to 1000 [ 651.058236][ T27] audit: type=1326 audit(2000000352.572:8440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17353 comm="syz.1.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 651.092715][T17363] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 651.148406][T17363] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.202013][T17374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4467'. [ 651.529317][T15418] EXT4-fs (loop5): unmounting filesystem. [ 651.720410][T17388] loop5: detected capacity change from 0 to 256 [ 651.805924][T17388] FAT-fs (loop5): Directory bread(block 64) failed [ 651.823550][T17392] program syz.6.4475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.834242][T17388] FAT-fs (loop5): Directory bread(block 65) failed [ 651.860067][T17388] FAT-fs (loop5): Directory bread(block 66) failed [ 651.877878][T17388] FAT-fs (loop5): Directory bread(block 67) failed [ 651.897523][T17388] FAT-fs (loop5): Directory bread(block 68) failed [ 651.904129][T17388] FAT-fs (loop5): Directory bread(block 69) failed [ 651.954772][T17388] FAT-fs (loop5): Directory bread(block 70) failed [ 651.976203][T17388] FAT-fs (loop5): Directory bread(block 71) failed [ 651.982902][T17388] FAT-fs (loop5): Directory bread(block 72) failed [ 651.998493][T17388] FAT-fs (loop5): Directory bread(block 73) failed [ 652.077306][T17388] syz.5.4472: attempt to access beyond end of device [ 652.077306][T17388] loop5: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 652.091557][T17388] syz.5.4472: attempt to access beyond end of device [ 652.091557][T17388] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 652.126371][T17388] syz.5.4472: attempt to access beyond end of device [ 652.126371][T17388] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 652.273209][T17410] netlink: 'syz.1.4482': attribute type 13 has an invalid length. [ 652.609937][T17412] lo speed is unknown, defaulting to 1000 [ 653.593652][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 653.593669][ T27] audit: type=1326 audit(2000000356.032:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17424 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 653.670022][ T27] audit: type=1326 audit(2000000356.062:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17424 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 653.761448][T17428] program syz.5.4489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 653.819764][ T27] audit: type=1326 audit(2000000356.072:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17424 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 653.891048][ T27] audit: type=1326 audit(2000000356.072:8452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17424 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 653.969147][ T27] audit: type=1326 audit(2000000356.072:8453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17424 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 654.063944][ T27] audit: type=1326 audit(2000000356.072:8454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17424 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 654.197357][T17448] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4495'. [ 654.226300][ T27] audit: type=1326 audit(2000000356.072:8455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17424 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 654.357567][ T27] audit: type=1326 audit(2000000356.072:8456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17424 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 654.389028][ T27] audit: type=1326 audit(2000000356.072:8457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17424 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 654.465863][ T27] audit: type=1326 audit(2000000356.072:8458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17424 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf0185d29 code=0x7ffc0000 [ 655.066853][T17470] loop6: detected capacity change from 0 to 2048 [ 655.134482][T17470] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 655.187018][T17455] Set syz1 is full, maxelem 65536 reached [ 655.369759][T17481] loop4: detected capacity change from 0 to 512 [ 655.394108][T17476] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 655.433855][T17481] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.4509: inline data xattr refers to an external xattr inode [ 655.468554][T17481] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.4509: couldn't read orphan inode 12 (err -117) [ 655.481889][T17481] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 655.546257][T17484] device pim6reg1 entered promiscuous mode [ 655.584154][ T8116] EXT4-fs (loop6): unmounting filesystem. [ 655.668321][T13153] EXT4-fs (loop4): unmounting filesystem. [ 655.938001][T17498] netlink: 'syz.6.4518': attribute type 13 has an invalid length. [ 656.314615][T17515] loop5: detected capacity change from 0 to 1024 [ 656.355410][T17515] EXT4-fs: Ignoring removed orlov option [ 656.403287][T17515] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 656.553181][T15418] EXT4-fs (loop5): unmounting filesystem. [ 656.741181][T17505] Set syz1 is full, maxelem 65536 reached [ 657.753610][T17535] device pim6reg1 entered promiscuous mode [ 657.783856][T17537] netlink: 'syz.4.4533': attribute type 13 has an invalid length. [ 657.792681][T17537] netlink: 'syz.4.4533': attribute type 27 has an invalid length. [ 657.862035][ T125] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 658.019402][ T125] usb 6-1: device descriptor read/64, error -71 [ 658.102292][T17549] tipc: Started in network mode [ 658.113508][T17549] tipc: Node identity 66474e180a45, cluster identity 4711 [ 658.128485][T17549] tipc: Enabled bearer , priority 0 [ 658.284546][T17549] device syzkaller0 entered promiscuous mode [ 658.305360][ T125] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 658.324529][T17549] tipc: Resetting bearer [ 658.472009][ T9] tipc: Resetting bearer [ 658.477152][ T125] usb 6-1: device descriptor read/64, error -71 [ 658.507524][T17548] tipc: Resetting bearer [ 658.577831][T17564] loop6: detected capacity change from 0 to 1024 [ 658.595982][ T125] usb usb6-port1: attempt power cycle [ 658.785626][T17564] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 658.805024][T17564] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.145120][ T125] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 659.201692][ T125] usb 6-1: device descriptor read/8, error -71 [ 659.612367][ T125] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 659.644277][ T5867] tipc: Node number set to 1812090392 [ 659.678977][ T125] usb 6-1: device descriptor read/8, error -71 [ 659.738572][ T8116] EXT4-fs (loop6): unmounting filesystem. [ 659.815526][ T125] usb usb6-port1: unable to enumerate USB device [ 660.479200][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 660.506975][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 660.524481][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 660.536575][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 660.554510][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 660.572018][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 662.625289][ T4273] Bluetooth: hci4: command 0x0409 tx timeout [ 662.674634][T17548] tipc: Disabling bearer [ 662.689544][T17575] lo speed is unknown, defaulting to 1000 [ 662.696380][T17573] lo speed is unknown, defaulting to 1000 [ 662.714980][T17581] netlink: 'syz.5.4547': attribute type 13 has an invalid length. [ 662.722880][T17581] netlink: 'syz.5.4547': attribute type 27 has an invalid length. [ 662.766912][ T8116] bridge0: port 3(syz_tun) entered disabled state [ 662.872146][ T8116] device syz_tun left promiscuous mode [ 662.911282][ T8116] bridge0: port 3(syz_tun) entered disabled state [ 663.030281][T17583] lo speed is unknown, defaulting to 1000 [ 663.154112][T17591] loop5: detected capacity change from 0 to 128 [ 663.281955][T17596] syz.5.4551: attempt to access beyond end of device [ 663.281955][T17596] loop5: rw=2049, sector=145, nr_sectors = 384 limit=128 [ 663.378863][T17591] syz.5.4551: attempt to access beyond end of device [ 663.378863][T17591] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 663.382948][ T27] kauditd_printk_skb: 63 callbacks suppressed [ 663.382967][ T27] audit: type=1326 audit(2000000365.822:8522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 663.442893][T17591] syz.5.4551: attempt to access beyond end of device [ 663.442893][T17591] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 663.482171][T17591] syz.5.4551: attempt to access beyond end of device [ 663.482171][T17591] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 663.520769][T17591] syz.5.4551: attempt to access beyond end of device [ 663.520769][T17591] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 663.534365][ T27] audit: type=1326 audit(2000000365.882:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 663.534409][ T27] audit: type=1326 audit(2000000365.882:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 663.534446][ T27] audit: type=1326 audit(2000000365.882:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 663.534483][ T27] audit: type=1326 audit(2000000365.882:8526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 663.534519][ T27] audit: type=1326 audit(2000000365.882:8527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 663.534554][ T27] audit: type=1326 audit(2000000365.902:8528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 663.534590][ T27] audit: type=1326 audit(2000000365.902:8529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 663.534625][ T27] audit: type=1326 audit(2000000365.902:8530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 663.534660][ T27] audit: type=1326 audit(2000000365.902:8531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435185d29 code=0x7ffc0000 [ 663.751165][T17591] syz.5.4551: attempt to access beyond end of device [ 663.751165][T17591] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 663.766906][T17591] syz.5.4551: attempt to access beyond end of device [ 663.766906][T17591] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 663.780816][T17591] syz.5.4551: attempt to access beyond end of device [ 663.780816][T17591] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 663.824106][T17591] syz.5.4551: attempt to access beyond end of device [ 663.824106][T17591] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 663.865839][T17591] syz.5.4551: attempt to access beyond end of device [ 663.865839][T17591] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 664.208932][T17583] chnl_net:caif_netlink_parms(): no params data found [ 664.238579][T17614] netlink: 'syz.5.4560': attribute type 13 has an invalid length. [ 664.253829][T17614] netlink: 'syz.5.4560': attribute type 27 has an invalid length. [ 664.349631][T17611] device syzkaller0 entered promiscuous mode [ 664.736461][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 666.785152][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 667.557300][T17619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 667.626541][T17620] lo speed is unknown, defaulting to 1000 [ 667.860219][T17583] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.892991][T17583] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.910095][T17583] device bridge_slave_0 entered promiscuous mode [ 667.925675][T17583] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.932988][T17583] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.956065][T17583] device bridge_slave_1 entered promiscuous mode [ 667.972431][T17625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4563'. [ 668.007440][T17625] device vlan2 entered promiscuous mode [ 668.017200][T17625] device gretap0 entered promiscuous mode [ 668.025954][T17625] device gretap0 left promiscuous mode [ 668.083839][T17583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.101956][T17583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.161012][T17583] team0: Port device team_slave_0 added [ 668.174527][T17583] team0: Port device team_slave_1 added [ 668.261252][T17583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.275805][T17583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.304423][T17583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.326828][ T5342] tipc: Left network mode [ 668.353292][T17583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.368138][T17583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.397711][T17583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.458683][T17583] device hsr_slave_0 entered promiscuous mode [ 668.466239][T17583] device hsr_slave_1 entered promiscuous mode [ 668.727087][T17641] loop4: detected capacity change from 0 to 1024 [ 668.776664][T17641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 668.857325][T17641] EXT4-fs error (device loop4): ext4_check_all_de:663: inode #12: block 7: comm syz.4.4569: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 668.876950][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 669.816491][T13153] EXT4-fs (loop4): unmounting filesystem. [ 670.322329][T17583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.429393][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 670.441697][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 670.465305][T17583] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.560264][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 670.590476][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 670.609293][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.616513][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.626204][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 670.637371][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 670.656082][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.663217][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.691536][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 670.793018][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 670.826170][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 670.903570][ T6554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 670.932220][ T6554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 671.098331][T17676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4580'. [ 671.107923][T17676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4580'. [ 671.224251][ T6554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 671.272586][ T6554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 671.293301][ T6554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 671.313933][ T6554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 671.337907][ T6554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 671.349845][ T6554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 671.360065][ T6554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 671.444953][T17673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4579'. [ 671.851352][T17583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 672.534439][T17696] random: crng reseeded on system resumption [ 673.099534][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 673.115147][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 673.153247][T17583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.193111][ T5342] device hsr_slave_1 left promiscuous mode [ 673.214514][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.254972][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.269532][ T5342] device bridge_slave_1 left promiscuous mode [ 673.305447][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.355598][ T5342] device bridge_slave_0 left promiscuous mode [ 673.361948][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.587968][ T5342] device veth1_macvtap left promiscuous mode [ 673.594095][ T5342] device veth0_macvtap left promiscuous mode [ 673.636193][ T5342] device veth1_vlan left promiscuous mode [ 673.642071][ T5342] device veth0_vlan left promiscuous mode [ 673.863337][T17723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4593'. [ 673.868237][T17721] loop4: detected capacity change from 0 to 8192 [ 673.970799][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 673.970816][ T27] audit: type=1800 audit(2000000376.412:8535): pid=17720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4592" name="bus" dev="loop4" ino=1048659 res=0 errno=0 [ 674.419788][ T5342] bond1 (unregistering): Released all slaves [ 674.764499][T17648] Set syz1 is full, maxelem 65536 reached [ 675.124073][ T5342] team0 (unregistering): Port device team_slave_1 removed [ 675.233447][ T5342] team0 (unregistering): Port device team_slave_0 removed [ 675.391363][ T5342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.512877][ T5342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.301321][ T5342] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 676.310698][ T5342] bond0 (unregistering): Released all slaves [ 676.432636][T17711] device hsr_slave_0 left promiscuous mode [ 676.444787][T17711] device hsr_slave_1 left promiscuous mode [ 677.584998][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 677.693085][T17742] syz.1.4598[17742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 677.693210][T17742] syz.1.4598[17742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 677.919068][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 677.960763][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 678.031689][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 678.051403][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 678.086720][T17583] device veth0_vlan entered promiscuous mode [ 678.103994][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 678.133896][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 678.163929][T17583] device veth1_vlan entered promiscuous mode [ 678.251066][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 678.278181][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 678.302426][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 678.331279][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 678.371496][T17583] device veth0_macvtap entered promiscuous mode [ 678.417021][T17752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4602'. [ 678.449161][T17752] device vlan2 entered promiscuous mode [ 678.454781][T17752] device gretap0 entered promiscuous mode [ 678.511288][T17752] device gretap0 left promiscuous mode [ 678.591610][T17583] device veth1_macvtap entered promiscuous mode [ 678.625577][T17758] device batadv_slave_1 entered promiscuous mode [ 678.660357][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.711038][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.735889][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.747899][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.758161][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.770115][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.794267][T17583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.825679][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4605'. [ 678.930961][T17758] device batadv_slave_1 left promiscuous mode [ 678.951198][T17758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.066950][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 679.075899][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 679.084521][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 679.121824][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 679.187781][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.215035][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.258289][T17583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.317069][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 679.353813][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 679.442853][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4608'. [ 679.573343][T17766] loop5: detected capacity change from 0 to 8192 [ 679.654345][ T4895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.691211][ T4895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.723318][ T27] audit: type=1800 audit(2000000382.162:8536): pid=17766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4607" name="bus" dev="loop5" ino=1048660 res=0 errno=0 [ 679.740073][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 679.773113][T17773] netlink: 'syz.1.4610': attribute type 13 has an invalid length. [ 679.795803][T17773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4610'. [ 679.821830][ T5342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.859879][ T5342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.900600][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 679.957911][T17753] Set syz1 is full, maxelem 65536 reached [ 679.991838][T17777] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4612'. [ 680.083351][ T27] audit: type=1326 audit(2000000382.522:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17776 comm="syz.1.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 680.139815][ T27] audit: type=1326 audit(2000000382.522:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17776 comm="syz.1.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0929187bbc code=0x7ffc0000 [ 680.255679][ T27] audit: type=1326 audit(2000000382.522:8539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17776 comm="syz.1.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0929187af4 code=0x7ffc0000 [ 680.336970][ T27] audit: type=1326 audit(2000000382.522:8540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17776 comm="syz.1.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 680.399376][ T27] audit: type=1326 audit(2000000382.522:8541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17776 comm="syz.1.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 680.409687][T17792] loop5: detected capacity change from 0 to 512 [ 680.434372][T17791] device batadv_slave_1 entered promiscuous mode [ 680.450033][T17791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4617'. [ 680.475394][T17791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.484563][ T27] audit: type=1326 audit(2000000382.522:8542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17776 comm="syz.1.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 680.585199][T17792] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 680.636788][ T27] audit: type=1326 audit(2000000382.522:8543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17776 comm="syz.1.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 680.699311][ T27] audit: type=1326 audit(2000000382.532:8544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17776 comm="syz.1.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 680.724034][ T27] audit: type=1326 audit(2000000382.532:8545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17776 comm="syz.1.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0929185d29 code=0x7ffc0000 [ 680.752436][T17792] EXT4-fs (loop5): 1 truncate cleaned up [ 680.761308][T17792] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 681.522056][T17791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.565934][T15418] EXT4-fs (loop5): unmounting filesystem. [ 681.586749][T17813] tmpfs: Bad value for 'mpol' [ 681.653364][T17797] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4619'. [ 681.777108][T17815] netlink: 'syz.5.4622': attribute type 13 has an invalid length. [ 681.785885][T17815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4622'. [ 682.447740][T17843] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4635'. [ 682.453197][T17844] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4636'. [ 682.497796][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4636'. [ 682.592549][T17818] Set syz1 is full, maxelem 65536 reached [ 682.855988][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4639'. [ 683.976624][T17874] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 684.037092][T17880] loop4: detected capacity change from 0 to 2048 [ 684.146809][T17880] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 684.427263][T13153] EXT4-fs (loop4): unmounting filesystem. [ 685.104864][T17893] Set syz1 is full, maxelem 65536 reached [ 686.654178][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.660592][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.197036][T17906] __nla_validate_parse: 2 callbacks suppressed [ 690.197057][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4656'. [ 690.327097][T17914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4658'. [ 691.626862][T17925] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 701.882998][T17959] nfs4: Unknown parameter ']' [ 704.042092][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4674'. [ 834.664848][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 834.671192][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 951.222789][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 151s! [ 951.232248][ C0] Showing busy workqueues and worker pools: [ 951.238153][ C0] workqueue events: flags=0x0 [ 951.242911][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=15/256 refcnt=16 [ 951.242958][ C0] pending: bpf_prog_free_deferred, free_obj_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, psi_avgs_work, psi_avgs_work, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, switchdev_deferred_process_work [ 951.243259][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=14/256 refcnt=15 [ 951.243296][ C0] in-flight: 16639:bpf_prog_free_deferred, 4304:bpf_prog_free_deferred, 6583:bpf_prog_free_deferred, 16186:bpf_prog_free_deferred [ 951.243383][ C0] pending: bpf_prog_free_deferred, nsim_dev_hwstats_traffic_work, psi_avgs_work, psi_avgs_work, psi_avgs_work, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, rht_deferred_worker, kfree_rcu_monitor, vmstat_shepherd