last executing test programs: 2m49.189764636s ago: executing program 0 (id=9308): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005880)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x2d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2m49.101762664s ago: executing program 0 (id=9310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1000, 0x1a9, 0x9b, 0x8, 0x4, 0xfbf, 0x1, 0x1, 0x40}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="bad330fbc9b55400040000ea07", 0xd, 0x400d0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2m48.949103908s ago: executing program 0 (id=9312): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0xc000400) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 2m48.943792989s ago: executing program 0 (id=9314): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 2m48.07151444s ago: executing program 0 (id=9335): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0x9, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000600)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000800)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m47.516878371s ago: executing program 0 (id=9340): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b000000000000000000000009001e0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) 2m47.516749531s ago: executing program 32 (id=9340): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b000000000000000000000009001e0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) 3.040420277s ago: executing program 2 (id=12329): socket$kcm(0x10, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.00117301s ago: executing program 1 (id=12330): r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0x18}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x5, 0x0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000000), &(0x7f0000000180)=r10}, 0x20) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r11], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x9}}, 0x20) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r14, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xa, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xfb, &(0x7f0000000400)=""/251, 0x41000, 0x26, '\x00', r6, @fallback=0x34, r7, 0x8, &(0x7f0000000300)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xe, 0x8, 0x8001}, 0x10, r8, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[r9, r11, r12, r13, r14], &(0x7f0000000700)=[{0x3, 0x5, 0x8, 0x7}, {0x1, 0x2, 0xc, 0x1}], 0x10, 0x7fff}, 0x94) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805008000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='fsi_master_gpio_crc_cmd_error\x00', r15, 0x0, 0x80000000000}, 0x18) 2.990496211s ago: executing program 2 (id=12331): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$kcm(0x29, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.200010905s ago: executing program 4 (id=12340): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000005a00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000020000020c000000180001801400020076657468305f746f5f626f6e6400000004000380"], 0x30}}, 0x20000000) 2.14386452s ago: executing program 1 (id=12343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) unshare(0x22020400) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x401]}}]}}]}, 0x8c}}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d5854797120dbba200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 2.139874551s ago: executing program 4 (id=12344): mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) rt_sigtimedwait(&(0x7f0000000000)={[0x8]}, &(0x7f0000000040), &(0x7f00000000c0)={0x77359400}, 0x8) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = inotify_init1(0x800) inotify_rm_watch(r0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000180)={0x60, 0x6, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x8000000000000000, &(0x7f0000000140)=[{0x7, 0x1, 0xd}, {0x3, 0x7, 0x9}], 0x2, 0x6df, 0x7c, 0x7b, 0xc, 0x2}) r2 = dup3(r0, r1, 0x80000) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000200)=0xffffffff, 0x4) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x1, 0x8498, 0x3, 0x0, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x7f, 0x2b, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x24, 0xcc, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@multicast1, 0x8}, {@remote, 0x4}]}]}}}}}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000340)={0x0, 0x1, 0x1, r5, 0xb}, 0xc) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000380), 0x18000) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x8010, r6, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000400)={0x6, &(0x7f00000003c0)=[{0x4, 0x5, 0x8, 0x5}, {0xff, 0x1, 0x80, 0x9}, {0x6a8f, 0xfe, 0x9, 0x7}, {0x1, 0x6, 0x8, 0x6}, {0xff80, 0x1c, 0x0, 0x51dc9e3d}, {0x7, 0xd, 0x34, 0xfff}]}) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000c40)=@broute={'broute\x00', 0x20, 0x4, 0x788, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x10, 0x88e5, 'veth0_to_hsr\x00', 'veth0_vlan\x00', 'pimreg1\x00', 'lo\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xd6, 0x126, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffd}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x2, {0x8}}}}}, {0x11, 0x10, 0x884c, 'bond_slave_1\x00', 'veth0_vlan\x00', 'bridge0\x00', 'veth1\x00', @local, [0x0, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0xff], 0xd6, 0x106, 0x236, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x1}}}, @mac={{'mac\x00', 0x0, 0x10}, {{@remote}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:ldconfig_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x5, 0x50, 0x88be, 'macvlan0\x00', 'syz_tun\x00', 'team_slave_0\x00', 'geneve1\x00', @remote, [0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff], 0xce, 0x17e, 0x1ae, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0xaa, 0x6, 0x1, 0x4}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0xc7c, 0x1}}}], [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 0xffffffffffffffff}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x40, 0x7, 0xfbff, 0x1, 0x0, "9f59e3733e10c8438d27a6a383841402ea7a0de3323dd130afe96f3525bec14c80001f9ea64fe11cf7c03ed51331953718c6a9133eb3af5974e62738d87819bb"}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{0x9, 0x20, 0x10, 'bridge0\x00', 'veth0\x00', 'dvmrp0\x00', '\x00', @local, [0x0, 0xff, 0xff, 0xff, 0xff], @remote, [], 0xe6, 0x18e, 0x1be, [@state={{'state\x00', 0x0, 0x8}, {{0x8}}}, @limit={{'limit\x00', 0x0, 0x20}, {{0x80, 0x2, 0x80000000, 0x8000000, 0x0, 0x3}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x4, 0xd, 0x0, 0x0, 0x0, "ecfc46adfec609e1f9c1d175499247c360e63169349ca9b8af1d728dfd2b04dd88e8aa258c0becc83d36890368e90ded6f46ff20fb2033e70936b232aa601838"}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x401}}}}]}]}, 0x800) fstat(r1, &(0x7f0000000cc0)) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x5, 0x0, r3, 0x7, '\x00', r5, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) r7 = memfd_create(&(0x7f0000000e40)='\xfe/\x00', 0xcc183f5d41f4dc46) copy_file_range(r3, &(0x7f0000000e00)=0x6, r7, &(0x7f0000000e80)=0x5, 0x9, 0x0) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_setup(0x8000, &(0x7f0000000ec0)=0x0) io_submit(r8, 0x1, &(0x7f0000000fc0)=[&(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000f00)="8076cc596bb1077b86755b8222d299a2d8637bc95ea0fdd9d4ac13011e14c267c9d271a649721da62eb0e4259793485e43418cbe17dd46ebc94481f02e527ae08938e2196d154c87dff265ca99f5da4dad115f0d2a97cfbe2dd17c51088c3c6030dfa8590a7a9cde547b2971571bb8e735809fb64c788b705f82b3771674dc", 0x7f, 0xd}]) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, &(0x7f00000010c0)=0x10, 0x48b6787d, 0x4) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x44, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44048081) getxattr(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)=@random={'trusted.', 'state\x00'}, &(0x7f00000012c0)=""/142, 0x8e) 2.095626015s ago: executing program 2 (id=12346): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x9}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805008000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 2.046485779s ago: executing program 2 (id=12348): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180afc855c8ea58196e7641176d2983112000006000000000000000099371f5888ecb1bc000000850000000e0f00009500000a04200000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = fcntl$dupfd(r2, 0x406, r0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x32) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b32, 0x91) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="200000001114010028bd7000fcdbdf2508000300012000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socket$kcm(0x1e, 0x8, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x1001, @private1, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000006c0)="01cca9", 0x3}], 0x1, &(0x7f0000000680)=ANY=[@ANYRES32=0x0], 0x30, 0x8000}, 0x2800c055) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcee, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r10 = socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000240)=0x9, 0x4) sendmsg$kcm(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000880)="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", 0x105}, {&(0x7f0000000100)="8a3e52dba0d79e597058d5f4f521eaad7d6d26cc33833aa0b6cf44fa7275e4d0097ba7023a1ff4674fb7eb98833e45423ea1b372e7881ce18f4267dd3559d474518955f97331eddc1aec63e07184afdff8a90728d2f4772d1593f1fdbe7b31035412eaa85c9109b6", 0x68}, {&(0x7f0000000180)="ca8be024b7d3396913009eee085cbfd194f2635a89cac67dd9da7152c77aec7c36908c3b87098d0be7d6278b4f4d630082e4c4a36d9121245e", 0x39}], 0x3}, 0x20000880) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0xf, 0xfff1}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000c00) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11}, 0x4) 2.045619989s ago: executing program 1 (id=12350): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x10007ffffffff}, 0x18) listxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 2.018144792s ago: executing program 1 (id=12352): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getuid() 2.017669682s ago: executing program 2 (id=12353): r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0x18}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x5, 0x0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000000), &(0x7f0000000180)=r10}, 0x20) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r11], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x9}}, 0x20) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r14, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xa, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xfb, &(0x7f0000000400)=""/251, 0x41000, 0x26, '\x00', r6, @fallback=0x34, r7, 0x8, &(0x7f0000000300)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xe, 0x8, 0x8001}, 0x10, r8, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[r9, r11, r12, r13, r14], &(0x7f0000000700)=[{0x3, 0x5, 0x8, 0x7}, {0x1, 0x2, 0xc, 0x1}], 0x10, 0x7fff}, 0x94) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805008000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='fsi_master_gpio_crc_cmd_error\x00', r15, 0x0, 0x80000000000}, 0x18) 1.769873025s ago: executing program 1 (id=12356): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$kcm(0x29, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.493039101s ago: executing program 5 (id=12357): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1.456251784s ago: executing program 5 (id=12358): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x70) poll(0x0, 0x0, 0xf0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000080)=ANY=[], 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x7, 0x0, 0x41, 0x0, 0x8}, 0xffffffffffffffff, 0x80000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.247610184s ago: executing program 3 (id=12360): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 1.214433097s ago: executing program 3 (id=12361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) unshare(0x22020400) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x401]}}]}}]}, 0x8c}}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d5854797120dbba200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 1.152091963s ago: executing program 4 (id=12362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xf}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) 1.130076445s ago: executing program 5 (id=12363): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180afc855c8ea58196e7641176d2983112000006000000000000000099371f5888ecb1bc000000850000000e0f00009500000a04200000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = fcntl$dupfd(r2, 0x406, r0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x32) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b32, 0x91) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="200000001114010028bd7000fcdbdf2508000300012000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socket$kcm(0x1e, 0x8, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x1001, @private1, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000006c0)="01cca9", 0x3}], 0x1, &(0x7f0000000680)=ANY=[@ANYRES32=0x0], 0x30, 0x8000}, 0x2800c055) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcee, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r10 = socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000240)=0x9, 0x4) sendmsg$kcm(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000880)="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", 0x105}, {&(0x7f0000000100)="8a3e52dba0d79e597058d5f4f521eaad7d6d26cc33833aa0b6cf44fa7275e4d0097ba7023a1ff4674fb7eb98833e45423ea1b372e7881ce18f4267dd3559d474518955f97331eddc1aec63e07184afdff8a90728d2f4772d1593f1fdbe7b31035412eaa85c9109b6", 0x68}, {&(0x7f0000000180)="ca8be024b7d3396913009eee085cbfd194f2635a89cac67dd9da7152c77aec7c36908c3b87098d0be7d6278b4f4d630082e4c4a36d9121245e", 0x39}], 0x3}, 0x20000880) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0xf, 0xfff1}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000c00) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11}, 0x4) 1.128375845s ago: executing program 2 (id=12364): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='pstate_sample\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x132c1d195b3331a8, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x4000000}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='virtiofs\x00', 0x200c0, &(0x7f00000003c0)='\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7fff, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1.08146368s ago: executing program 4 (id=12365): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, 0x0, &(0x7f0000000700)=r1}, 0x20) sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="092757ec70", 0x5}], 0x1, &(0x7f0000001240)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x20008000}, 0x4000080) 1.0807725s ago: executing program 3 (id=12366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) unshare(0x22020400) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x401]}}]}}]}, 0x8c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x0, 0x0}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d5854797120dbba200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 1.053166592s ago: executing program 4 (id=12367): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000190c66752e7b3566f4007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e6", 0xa1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02130000020000000008000000000000"], 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='netlink_extack\x00', r5, 0x0, 0x392e}, 0x18) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x80000000) mlockall(0x1) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r1], 0x10}}, 0x20000000) close_range(r1, 0xffffffffffffffff, 0x0) 1.052714162s ago: executing program 5 (id=12368): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) unshare(0x22020400) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x401]}}]}}]}, 0x8c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d5854797120dbba200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 1.003001397s ago: executing program 3 (id=12369): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/199, 0xc7}], 0x92}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)="c36ef0fdbb2048e7b0db22eb7343f07638297c2cee289edf89390fedf67b6125cdcc848ae4f9a477a3f972ffc7e7bf2c77a73e284d08e415959bcd31db065e", 0x3f}, {&(0x7f0000000100)="772aa9a6dac1ccdcc977eac41ac8226d0ec33a0ed435ff0f84b915f6cf68052c146208654dc7eaf9f49b6998f9ea7285ecb6a62f04d72d14f0e0224d533c258e7dfd85bc10d4e4cce556d7ba4577af8fab8ceddd94aca65e26c6cd02a2e151c1f6154737e9f0c96f0c8eb5a7a68a391aa2293de88f1bf1ce92df61cf59a0c688c42dd9aa04", 0x85}], 0x2}}], 0x1, 0x0) 962.458891ms ago: executing program 5 (id=12370): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x20}}], 0x30, 0x8004}, 0x0) 870.095609ms ago: executing program 1 (id=12371): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getuid() newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x527d}, 0x94) msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) fstat(r2, &(0x7f0000000540)) syz_clone3(&(0x7f0000000700)={0x200000, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000380), {0x17}, &(0x7f00000005c0)=""/75, 0x4b, &(0x7f0000000640)=""/77, &(0x7f00000006c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x0) 731.860812ms ago: executing program 5 (id=12372): r0 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=':\'-\'\'**,\x00', &(0x7f00000002c0)=',\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000040)={0x4, 0x7fff, 0x7, 0x6, 0x40, 0x77}) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_config_ext={0x0, 0x7}, 0xa00, 0x81, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r6, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000008500000061000000180100002064682500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9f8030768045c8c989a14f088a8", 0x0, 0x809e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) 103.149951ms ago: executing program 3 (id=12373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.38657ms ago: executing program 3 (id=12374): mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) rt_sigtimedwait(&(0x7f0000000000)={[0x8]}, &(0x7f0000000040), &(0x7f00000000c0)={0x77359400}, 0x8) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = inotify_init1(0x800) inotify_rm_watch(r0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000180)={0x60, 0x6, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x8000000000000000, &(0x7f0000000140)=[{0x7, 0x1, 0xd}, {0x3, 0x7, 0x9}], 0x2, 0x6df, 0x7c, 0x7b, 0xc, 0x2}) r2 = dup3(r0, r1, 0x80000) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000200)=0xffffffff, 0x4) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x1, 0x8498, 0x3, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x64, 0x0, 0x7f, 0x2b, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x2c, 0xcc, 0x1, 0x4, [{@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@multicast1, 0x8}, {@remote, 0x4}]}]}}}}}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000380), 0x18000) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x8010, r6, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000400)={0x6, &(0x7f00000003c0)=[{0x4, 0x5, 0x8, 0x5}, {0xff, 0x1, 0x80, 0x9}, {0x6a8f, 0xfe, 0x9, 0x7}, {0x1, 0x6, 0x8, 0x6}, {0xff80, 0x1c, 0x0, 0x51dc9e3d}, {0x7, 0xd, 0x34, 0xfff}]}) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000c40)=@broute={'broute\x00', 0x20, 0x4, 0x788, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x10, 0x88e5, 'veth0_to_hsr\x00', 'veth0_vlan\x00', 'pimreg1\x00', 'lo\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xd6, 0x126, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffd}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x2, {0x8}}}}}, {0x11, 0x10, 0x884c, 'bond_slave_1\x00', 'veth0_vlan\x00', 'bridge0\x00', 'veth1\x00', @local, [0x0, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0xff], 0xd6, 0x106, 0x236, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x1}}}, @mac={{'mac\x00', 0x0, 0x10}, {{@remote}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:ldconfig_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x5, 0x50, 0x88be, 'macvlan0\x00', 'syz_tun\x00', 'team_slave_0\x00', 'geneve1\x00', @remote, [0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff], 0xce, 0x17e, 0x1ae, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0xaa, 0x6, 0x1, 0x4}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0xc7c, 0x1}}}], [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 0xffffffffffffffff}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x40, 0x7, 0xfbff, 0x1, 0x0, "9f59e3733e10c8438d27a6a383841402ea7a0de3323dd130afe96f3525bec14c80001f9ea64fe11cf7c03ed51331953718c6a9133eb3af5974e62738d87819bb"}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{0x9, 0x20, 0x10, 'bridge0\x00', 'veth0\x00', 'dvmrp0\x00', '\x00', @local, [0x0, 0xff, 0xff, 0xff, 0xff], @remote, [], 0xe6, 0x18e, 0x1be, [@state={{'state\x00', 0x0, 0x8}, {{0x8}}}, @limit={{'limit\x00', 0x0, 0x20}, {{0x80, 0x2, 0x80000000, 0x8000000, 0x0, 0x3}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x4, 0xd, 0x0, 0x0, 0x0, "ecfc46adfec609e1f9c1d175499247c360e63169349ca9b8af1d728dfd2b04dd88e8aa258c0becc83d36890368e90ded6f46ff20fb2033e70936b232aa601838"}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x401}}}}]}]}, 0x800) fstat(r1, &(0x7f0000000cc0)) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x5, 0x0, r3, 0x7, '\x00', r5, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) r7 = memfd_create(&(0x7f0000000e40)='\xfe/\x00', 0xcc183f5d41f4dc46) copy_file_range(r3, &(0x7f0000000e00)=0x6, r7, &(0x7f0000000e80)=0x5, 0x9, 0x0) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_setup(0x8000, &(0x7f0000000ec0)=0x0) io_submit(r8, 0x1, &(0x7f0000000fc0)=[&(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000f00)="8076cc596bb1077b86755b8222d299a2d8637bc95ea0fdd9d4ac13011e14c267c9d271a649721da62eb0e4259793485e43418cbe17dd46ebc94481f02e527ae08938e2196d154c87dff265ca99f5da4dad115f0d2a97cfbe2dd17c51088c3c6030dfa8590a7a9cde547b2971571bb8e735809fb64c788b705f82b3771674dc", 0x7f, 0xd}]) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, &(0x7f00000010c0)=0x10, 0x48b6787d, 0x4) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x44, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44048081) getxattr(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)=@random={'trusted.', 'state\x00'}, &(0x7f00000012c0)=""/142, 0x8e) 0s ago: executing program 4 (id=12375): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000005a00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000020000020c000000180001801400020076657468305f746f5f626f6e6400000004000380"], 0x30}}, 0x20000000) kernel console output (not intermixed with test programs): debugfs directory [ 661.785479][ T8769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.883387][ T8828] loop2: detected capacity change from 0 to 512 [ 661.899398][ T8769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.920716][ T8828] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.9575: error while reading EA inode 32 err=-116 [ 661.961083][ T8828] EXT4-fs (loop2): Remounting filesystem read-only [ 661.967658][ T8828] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 661.989296][ T8769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.999059][ T8828] EXT4-fs (loop2): 1 orphan inode deleted [ 662.022490][ T8828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.056408][ T8769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.062539][ T8828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.156427][ T8769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 662.171667][ T8769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 662.186120][ T8769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 662.212753][ T8769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 662.267604][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9577'. [ 662.277677][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9577'. [ 662.312536][ T8769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.339471][ T8769] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.349148][ T8845] netlink: 'syz.2.9579': attribute type 4 has an invalid length. [ 662.360882][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.368009][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.513658][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.520740][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.547565][ T8769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 662.559029][ T8769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 662.647739][ T8769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.711842][ T8869] loop2: detected capacity change from 0 to 512 [ 662.721044][ T8869] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.9585: iget: bad extra_isize 90 (inode size 256) [ 662.742627][ T8869] EXT4-fs (loop2): Remounting filesystem read-only [ 662.752571][ T8869] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 662.771956][ T8869] EXT4-fs (loop2): 1 orphan inode deleted [ 662.778118][ T8869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.803521][ T6302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.916868][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9588'. [ 662.925870][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9588'. [ 663.118840][ T8885] netlink: 'syz.2.9590': attribute type 1 has an invalid length. [ 663.127706][ T8885] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9590'. [ 663.389606][ T8769] veth0_vlan: entered promiscuous mode [ 663.419959][ T8769] veth1_vlan: entered promiscuous mode [ 663.475629][ T8769] veth0_macvtap: entered promiscuous mode [ 663.488682][ T8769] veth1_macvtap: entered promiscuous mode [ 663.519955][ T8769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.537724][ T8769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.553996][ T6279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.580131][ T6279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.597135][ T6279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.607021][ T6279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.632481][ T8913] netlink: 'syz.3.9600': attribute type 12 has an invalid length. [ 663.828387][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9605'. [ 663.956457][ T8944] netlink: 'syz.1.9613': attribute type 4 has an invalid length. [ 664.001326][ T8946] netlink: 'syz.1.9614': attribute type 1 has an invalid length. [ 664.009167][ T8946] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9614'. [ 664.604476][ T8972] netlink: 'syz.1.9625': attribute type 4 has an invalid length. [ 664.628074][ T8974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9626'. [ 664.657520][ T8976] bond0: entered promiscuous mode [ 664.663689][ T8976] batadv0: entered promiscuous mode [ 664.669450][ T8976] debugfs: 'hsr1' already exists in 'hsr' [ 664.675213][ T8976] Cannot create hsr debugfs directory [ 664.680797][ T8976] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 664.691659][ T8976] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 664.904209][ T8989] macvtap1: entered promiscuous mode [ 664.909566][ T8989] team0: entered promiscuous mode [ 664.916950][ T8989] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 664.998355][ T8993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9632'. [ 665.047790][ T8993] siw: device registration error -23 [ 665.143349][ T8999] netlink: 'syz.3.9637': attribute type 4 has an invalid length. [ 665.155712][ T9001] program syz.4.9638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 666.081971][ T9031] netlink: 'syz.1.9650': attribute type 4 has an invalid length. [ 666.679426][ T9048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.689106][ T9048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.700641][ T9051] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9658'. [ 666.703462][ T9052] netlink: 'syz.4.9659': attribute type 12 has an invalid length. [ 666.720100][ T9051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.756363][ T9054] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9660'. [ 666.771276][ T9058] netlink: 'syz.4.9661': attribute type 4 has an invalid length. [ 666.921163][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9670'. [ 666.930701][ T9076] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 667.022711][ T9081] siw: device registration error -23 [ 667.033140][ T9080] netlink: 'syz.3.9672': attribute type 12 has an invalid length. [ 667.894572][ T5822] bond0 (unregistering): left promiscuous mode [ 667.904704][ T5822] bond0 (unregistering): Released all slaves [ 667.944990][ T9091] lo speed is unknown, defaulting to 1000 [ 667.953371][ T5822] tipc: Disabling bearer [ 667.958677][ T5822] tipc: Left network mode [ 668.044357][ T5822] batadv0: left promiscuous mode [ 668.055253][ T5822] hsr_slave_0: left promiscuous mode [ 668.061149][ T5822] hsr_slave_1: left promiscuous mode [ 668.199826][ T9091] chnl_net:caif_netlink_parms(): no params data found [ 668.249037][ T9091] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.257213][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.265744][ T9091] bridge_slave_0: entered allmulticast mode [ 668.273331][ T9091] bridge_slave_0: entered promiscuous mode [ 668.280346][ T9091] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.287510][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.294909][ T9091] bridge_slave_1: entered allmulticast mode [ 668.301875][ T9091] bridge_slave_1: entered promiscuous mode [ 668.323934][ T9091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.336165][ T9091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.366094][ T9091] team0: Port device team_slave_0 added [ 668.374145][ T9091] team0: Port device team_slave_1 added [ 668.395695][ T5822] IPVS: stop unused estimator thread 0... [ 668.405400][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.413616][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.440654][ T9091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.461187][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.468242][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.495366][ T9091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.535811][ T9091] hsr_slave_0: entered promiscuous mode [ 668.542993][ T9091] hsr_slave_1: entered promiscuous mode [ 668.548886][ T9091] debugfs: 'hsr0' already exists in 'hsr' [ 668.555534][ T9091] Cannot create hsr debugfs directory [ 668.562227][ T9128] validate_nla: 1 callbacks suppressed [ 668.562258][ T9128] netlink: 'syz.5.9687': attribute type 4 has an invalid length. [ 668.692141][ T9142] bond0: entered promiscuous mode [ 668.698507][ T9142] batadv0: entered promiscuous mode [ 668.705326][ T9142] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 668.716422][ T9142] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 668.777789][ T9151] __nla_validate_parse: 3 callbacks suppressed [ 668.777807][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9697'. [ 668.794003][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9697'. [ 668.814023][ T9151] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 669.000657][ T9091] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 669.010198][ T9091] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 669.020414][ T9091] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 669.030285][ T9091] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 669.071837][ T9091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.087898][ T9091] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.120421][ T9091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 669.131986][ T9091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 669.145929][ T9177] netlink: 'syz.2.9705': attribute type 4 has an invalid length. [ 669.153815][ T9177] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9705'. [ 669.206416][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.213531][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.224350][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.231423][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.295615][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.394937][ T9091] veth0_vlan: entered promiscuous mode [ 669.404718][ T9091] veth1_vlan: entered promiscuous mode [ 669.427700][ T9091] veth0_macvtap: entered promiscuous mode [ 669.437518][ T9091] veth1_macvtap: entered promiscuous mode [ 669.454923][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.468970][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.482639][ T6279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.566451][ T6279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.583290][ T6279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.601604][ T6279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.629621][ T9194] program syz.3.9673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 669.673204][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9709'. [ 669.683210][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9709'. [ 669.756374][ T9198] bridge_slave_0: left allmulticast mode [ 669.763082][ T9198] bridge_slave_0: left promiscuous mode [ 669.768769][ T9198] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.782309][ T9198] bridge_slave_1: left allmulticast mode [ 669.788077][ T9198] bridge_slave_1: left promiscuous mode [ 669.794971][ T9198] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.803342][ T29] audit: type=1400 audit(1767172134.533:41760): avc: denied { setopt } for pid=9211 comm="syz.4.9716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 669.807717][ T9198] bond0: (slave bond_slave_0): Releasing backup interface [ 669.829520][ T9198] bond0: (slave bond_slave_1): Releasing backup interface [ 669.839264][ T9198] team0: Port device team_slave_0 removed [ 669.857930][ T9198] team0: Port device team_slave_1 removed [ 669.866063][ T9198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.874642][ T9198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.885973][ T9198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.894544][ T9198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.907751][ T9198] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 669.925075][ T9208] netlink: 'syz.1.9712': attribute type 12 has an invalid length. [ 669.937636][ T9210] bond0: entered promiscuous mode [ 669.943795][ T9210] bond_slave_0: entered promiscuous mode [ 669.949606][ T9210] bond_slave_1: entered promiscuous mode [ 669.961998][ T9210] batadv0: entered promiscuous mode [ 669.967536][ T9210] debugfs: 'hsr1' already exists in 'hsr' [ 669.974309][ T9210] Cannot create hsr debugfs directory [ 669.980428][ T9210] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 670.127667][ T9231] program syz.4.9723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 670.155617][ T9233] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9724'. [ 670.473898][ T9245] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9729'. [ 671.325495][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9737'. [ 671.335578][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9737'. [ 671.406237][ T9271] netlink: 'syz.1.9740': attribute type 12 has an invalid length. [ 671.923314][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9750'. [ 672.405460][ T9301] loop4: detected capacity change from 0 to 1024 [ 672.420564][ T9303] bond0: entered promiscuous mode [ 672.443656][ T9303] batadv0: entered promiscuous mode [ 672.463976][ T9301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 672.482974][ T9303] debugfs: 'hsr1' already exists in 'hsr' [ 672.488763][ T9303] Cannot create hsr debugfs directory [ 672.523650][ T9301] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.540716][ T9303] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 672.551873][ T9303] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 672.558743][ T9301] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9752: bg 0: block 112: padding at end of block bitmap is not set [ 672.576421][ T9313] netlink: 'syz.1.9756': attribute type 12 has an invalid length. [ 672.598403][ T8769] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 672.884837][ T9345] bond0: entered promiscuous mode [ 672.890129][ T9345] bond_slave_0: entered promiscuous mode [ 672.896427][ T9345] bond_slave_1: entered promiscuous mode [ 672.903950][ T9345] batadv0: entered promiscuous mode [ 672.909718][ T9345] debugfs: 'hsr1' already exists in 'hsr' [ 672.916086][ T9345] Cannot create hsr debugfs directory [ 672.922291][ T9345] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 672.932348][ T9345] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 672.964674][ T9353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.974466][ T9353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.985910][ T9353] netlink: 'syz.4.9774': attribute type 1 has an invalid length. [ 673.522623][ T9356] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 673.650081][ T9379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.660189][ T9379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.674715][ T9379] netlink: 'syz.1.9786': attribute type 1 has an invalid length. [ 674.199405][ T9391] __nla_validate_parse: 10 callbacks suppressed [ 674.199494][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9791'. [ 674.215140][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9791'. [ 674.229820][ T9391] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 674.429409][ T9412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.437968][ T9412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.454344][ T9412] netlink: 'syz.3.9801': attribute type 1 has an invalid length. [ 674.462244][ T9412] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9801'. [ 674.581692][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.590901][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.144671][ T9446] lo speed is unknown, defaulting to 1000 [ 675.636912][ T9478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9817'. [ 676.097779][ T9482] siw: device registration error -23 [ 676.275068][ T9486] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9827'. [ 676.468810][ T9502] loop4: detected capacity change from 0 to 1024 [ 676.483553][ T9502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 676.529901][ T9502] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.577236][ T9502] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9835: bg 0: block 112: padding at end of block bitmap is not set [ 676.801276][ T8769] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 677.481803][ T9518] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9839'. [ 677.614371][ T29] audit: type=1400 audit(1767172142.353:41761): avc: denied { append } for pid=9528 comm="syz.3.9843" name="loop9" dev="devtmpfs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 677.655687][ T9530] loop9: detected capacity change from 0 to 7 [ 678.142048][ T9546] netlink: 'syz.3.9852': attribute type 12 has an invalid length. [ 678.426779][ T9573] loop4: detected capacity change from 0 to 1024 [ 678.444786][ T9573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 678.462619][ T9573] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.475729][ T9573] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9865: bg 0: block 112: padding at end of block bitmap is not set [ 678.505743][ T9584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9869'. [ 678.516205][ T8769] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 678.566993][ T9592] netlink: 'syz.4.9871': attribute type 1 has an invalid length. [ 678.635527][ T9598] netlink: 'syz.4.9876': attribute type 4 has an invalid length. [ 678.645920][ T9598] netlink: 'syz.4.9876': attribute type 4 has an invalid length. [ 678.754697][ T9611] loop4: detected capacity change from 0 to 1024 [ 678.804830][ T9611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 678.845217][ T9611] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.922871][ T9611] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9882: bg 0: block 112: padding at end of block bitmap is not set [ 679.084316][ T8769] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 679.099491][ T9622] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9888'. [ 679.449881][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.687384][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.766282][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.827389][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.052168][ T41] dvmrp6 (unregistering): left allmulticast mode [ 680.117105][ T41] bond0 (unregistering): Released all slaves [ 680.134859][ T41] bond1 (unregistering): Released all slaves [ 680.195972][ T9666] loop4: detected capacity change from 0 to 256 [ 680.309314][ T9666] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 680.758336][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9912'. [ 680.987412][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9911'. [ 681.012725][ T9698] siw: device registration error -23 [ 681.323240][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.333248][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.342094][ T41] hsr_slave_0: left promiscuous mode [ 681.348139][ T41] hsr_slave_1: left promiscuous mode [ 681.365655][ T9708] netlink: 'syz.3.9916': attribute type 1 has an invalid length. [ 681.374651][ T9708] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9916'. [ 681.392853][ T41] veth1_macvtap: left promiscuous mode [ 681.418436][ T41] veth0_macvtap: left promiscuous mode [ 681.422654][ T29] audit: type=1400 audit(1767172146.153:41762): avc: denied { unmount } for pid=6302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 681.449183][ T41] veth1_vlan: left promiscuous mode [ 681.458681][ T9712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.469627][ T9712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.486778][ T41] veth0_vlan: left promiscuous mode [ 681.900014][ T9716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 681.907412][ T9716] IPv6: NLM_F_CREATE should be set when creating new route [ 681.972814][ T41] IPVS: stop unused estimator thread 0... [ 681.981876][ T9718] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9922'. [ 682.553436][ T9728] netlink: 'syz.2.9926': attribute type 12 has an invalid length. [ 683.565797][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9934'. [ 683.773651][ T9761] netlink: 'syz.4.9939': attribute type 12 has an invalid length. [ 684.967591][ T9773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9942'. [ 684.992787][ T9773] siw: device registration error -23 [ 685.074315][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9948'. [ 686.480726][ T9814] loop4: detected capacity change from 0 to 512 [ 686.489252][ T9814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 687.132981][ T9814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 687.477517][ T9814] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.746049][ T29] audit: type=1400 audit(1767172152.483:41763): avc: denied { append } for pid=9813 comm="syz.4.9959" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 687.968757][ T8769] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 689.053689][ T9853] netlink: 'syz.4.9974': attribute type 12 has an invalid length. [ 689.253586][ T9868] loop4: detected capacity change from 0 to 256 [ 689.280774][ T9868] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 689.408324][ T9877] netlink: 'syz.4.9986': attribute type 12 has an invalid length. [ 690.339143][ T9896] netlink: 'syz.3.9994': attribute type 1 has an invalid length. [ 690.346972][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9994'. [ 690.417621][ T9906] netlink: 'syz.5.9999': attribute type 12 has an invalid length. [ 690.427920][ T9907] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9995'. [ 690.437793][ T9907] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9995'. [ 690.704881][ T9920] loop4: detected capacity change from 0 to 512 [ 690.721569][ T9920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 691.118606][ T9920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 691.137777][ T9920] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.421686][ T8769] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 691.684628][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10022'. [ 691.695384][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10022'. [ 691.705545][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10022'. [ 691.714791][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10022'. [ 692.720169][ T9986] netlink: 'syz.4.10024': attribute type 4 has an invalid length. [ 692.729086][ T9986] netlink: 17 bytes leftover after parsing attributes in process `syz.4.10024'. [ 692.838400][ T9997] loop2: detected capacity change from 0 to 2048 [ 692.929719][ T3480] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 692.953049][ T3480] hid-generic 0000:0000:0000.00B2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 692.991356][ T9997] loop2: p1 < > p4 [ 692.995906][ T9997] loop2: p4 start 42180 is beyond EOD, truncated [ 694.787404][ T41] bond1: left allmulticast mode [ 694.793026][ T41] bond1: left promiscuous mode [ 694.798047][ T41] bridge0: port 1(bond1) entered disabled state [ 695.172324][T10075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.188549][T10075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.313660][ T41] team0: Port device gtp0 removed [ 695.344831][ T29] audit: type=1400 audit(1767172160.083:41764): avc: denied { bind } for pid=10076 comm="syz.5.10070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 695.673326][ T41] bond0 (unregistering): (slave team0): Releasing backup interface [ 695.683473][ T41] bond0 (unregistering): Released all slaves [ 695.692205][ T41] bond1 (unregistering): Released all slaves [ 695.702164][ T41] bond2 (unregistering): Released all slaves [ 696.639801][T10114] loop4: detected capacity change from 0 to 256 [ 696.701304][T10119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.709724][T10119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.733933][T10114] FAT-fs (loop4): codepage cp863 not found [ 696.885498][T10133] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10091'. [ 697.354159][ T41] tipc: Left network mode [ 697.488085][T10141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10094'. [ 697.653720][T10148] serio: Serial port ptm0 [ 698.039765][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10105'. [ 698.062596][T10169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10106'. [ 698.072702][T10170] tmpfs: Bad value for 'mpol' [ 698.107194][T10173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 700.136863][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10117'. [ 700.155602][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10118'. [ 700.164664][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10118'. [ 700.179487][ T9148] bond1 (unregistering): (slave bond0): Releasing active interface [ 700.188536][ T9148] bond0 (unregistering): Released all slaves [ 700.197321][ T9148] bond1 (unregistering): Released all slaves [ 700.224057][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10122'. [ 700.236803][T10212] vlan2: entered promiscuous mode [ 700.250371][T10217] netlink: 'syz.1.10124': attribute type 10 has an invalid length. [ 700.259621][T10217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10124'. [ 700.280237][ T9148] tipc: Disabling bearer [ 700.286530][ T9148] tipc: Left network mode [ 700.299625][T10217] geneve1: entered promiscuous mode [ 700.307802][T10217] team0: Port device geneve1 added [ 700.366665][ T9148] hsr_slave_0: left promiscuous mode [ 700.378957][ T9148] hsr_slave_1: left promiscuous mode [ 700.418724][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10127'. [ 700.694979][ T9148] IPVS: stop unused estimator thread 0... [ 700.799714][T10234] netlink: 'syz.5.10129': attribute type 4 has an invalid length. [ 701.174859][T10243] tipc: Started in network mode [ 701.179951][T10243] tipc: Node identity 0eb46963e301, cluster identity 4711 [ 701.187963][T10243] tipc: Enabled bearer , priority 0 [ 701.195342][T10243] syzkaller0: entered promiscuous mode [ 701.200842][T10243] syzkaller0: entered allmulticast mode [ 701.302637][T10243] tipc: Resetting bearer [ 701.330820][T10242] tipc: Resetting bearer [ 701.338667][T10242] tipc: Disabling bearer [ 701.713409][ T29] audit: type=1400 audit(1767172166.433:41765): avc: denied { create } for pid=10262 comm="syz.1.10140" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 701.756520][ T29] audit: type=1400 audit(1767172166.433:41766): avc: denied { write } for pid=10262 comm="syz.1.10140" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 701.800351][ T29] audit: type=1400 audit(1767172166.433:41767): avc: denied { open } for pid=10262 comm="syz.1.10140" path="/244/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 701.845387][ T29] audit: type=1400 audit(1767172166.433:41768): avc: denied { unlink } for pid=10262 comm="syz.1.10140" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 702.089202][T10276] __nla_validate_parse: 2 callbacks suppressed [ 702.089221][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10145'. [ 702.127557][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10146'. [ 702.831836][T10296] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 702.872366][T10298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.890355][T10298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.930588][T10298] netlink: 'syz.4.10155': attribute type 1 has an invalid length. [ 702.939590][T10298] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10155'. [ 702.984944][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10157'. [ 703.348913][T10332] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10170'. [ 704.050056][T10343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.059376][T10343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.113453][T10347] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 704.269755][T10359] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10180'. [ 704.318925][T10364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.327655][T10364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.389778][T10370] netlink: 'syz.3.10178': attribute type 4 has an invalid length. [ 704.397717][T10370] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10178'. [ 704.578202][T10377] loop4: detected capacity change from 0 to 512 [ 704.594352][T10377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 704.606926][T10381] tipc: Started in network mode [ 704.612536][T10381] tipc: Node identity ac14141b, cluster identity 4711 [ 704.619444][T10381] tipc: New replicast peer: 255.255.255.255 [ 704.625717][T10381] tipc: Enabled bearer , priority 10 [ 704.649366][T10377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 704.663022][T10377] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 704.801422][ T8769] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 705.740996][ T3401] tipc: Node number set to 2886997019 [ 706.023160][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10201'. [ 706.042323][T10418] siw: device registration error -23 [ 706.168753][T10422] sg_write: data in/out 989/126 bytes for SCSI command 0x7-- guessing data in; [ 706.168753][T10422] program syz.1.10203 not setting count and/or reply_len properly [ 706.298591][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.327604][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.604841][T10450] sg_write: data in/out 989/126 bytes for SCSI command 0x7-- guessing data in; [ 707.604841][T10450] program syz.1.10215 not setting count and/or reply_len properly [ 707.688342][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.703035][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.719809][T10454] netlink: 'syz.5.10217': attribute type 1 has an invalid length. [ 707.727803][T10454] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10217'. [ 707.818225][ T29] audit: type=1326 audit(1767172172.553:41769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10456 comm="syz.2.10218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2956f3f749 code=0x0 [ 707.842489][ T29] audit: type=1400 audit(1767172172.563:41770): avc: denied { accept } for pid=10464 comm="syz.4.10222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 707.947738][T10476] sg_write: data in/out 989/126 bytes for SCSI command 0x7-- guessing data in; [ 707.947738][T10476] program syz.4.10226 not setting count and/or reply_len properly [ 708.005710][T10483] syzkaller0: entered promiscuous mode [ 708.011319][T10483] syzkaller0: entered allmulticast mode [ 708.018996][T10483] tipc: Enabled bearer , priority 0 [ 708.027331][T10482] tipc: Resetting bearer [ 708.036984][T10482] tipc: Disabling bearer [ 708.045638][T10479] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 708.050023][ T36] IPVS: starting estimator thread 0... [ 708.130420][T10495] syzkaller0: entered promiscuous mode [ 708.137118][T10495] syzkaller0: entered allmulticast mode [ 708.144020][T10485] IPVS: using max 3408 ests per chain, 170400 per kthread [ 708.306078][T10504] sg_write: data in/out 989/126 bytes for SCSI command 0x7-- guessing data in; [ 708.306078][T10504] program syz.2.10240 not setting count and/or reply_len properly [ 708.395008][T10499] sit0: entered promiscuous mode [ 708.407296][T10499] netlink: 'syz.4.10236': attribute type 1 has an invalid length. [ 708.416333][T10499] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10236'. [ 708.575480][T10527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.599874][T10527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.657740][T10532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.667587][T10532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.679350][T10532] netlink: 'syz.5.10250': attribute type 1 has an invalid length. [ 708.688238][T10532] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10250'. [ 708.725044][T10523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.734121][T10523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.136934][T10534] syzkaller0: entered promiscuous mode [ 709.143467][T10534] syzkaller0: entered allmulticast mode [ 709.232704][T10538] sg_write: data in/out 989/126 bytes for SCSI command 0x7-- guessing data in; [ 709.232704][T10538] program syz.4.10253 not setting count and/or reply_len properly [ 709.310587][T10548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.328276][T10548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.346685][T10551] ref_ctr increment failed for inode: 0x346 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810005af40 [ 709.363073][T10550] uprobe: syz.4.10260:10550 failed to unregister, leaking uprobe [ 709.463927][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10264'. [ 709.519555][T10568] sg_write: data in/out 989/126 bytes for SCSI command 0x7-- guessing data in; [ 709.519555][T10568] program syz.2.10267 not setting count and/or reply_len properly [ 709.563176][T10574] ref_ctr increment failed for inode: 0x79d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881041e21c0 [ 709.947101][T10597] sg_write: data in/out 989/126 bytes for SCSI command 0x7-- guessing data in; [ 709.947101][T10597] program syz.5.10279 not setting count and/or reply_len properly [ 709.994760][T10604] tmpfs: Unknown parameter 'quota' [ 710.263697][T10626] sg_write: data in/out 989/126 bytes for SCSI command 0x7-- guessing data in; [ 710.263697][T10626] program syz.1.10291 not setting count and/or reply_len properly [ 710.315123][T10630] netlink: 'syz.1.10293': attribute type 4 has an invalid length. [ 710.365229][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10295'. [ 710.379490][T10636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 710.391137][T10636] bond1 (unregistering): Released all slaves [ 710.538647][T10639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10296'. [ 710.877983][T10656] sg_write: data in/out 989/126 bytes for SCSI command 0x7-- guessing data in; [ 710.877983][T10656] program syz.2.10303 not setting count and/or reply_len properly [ 710.977523][T10668] Invalid argument reading file caps for ./file0 [ 711.030468][T10666] netlink: 'syz.3.10300': attribute type 4 has an invalid length. [ 711.039541][T10666] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10300'. [ 711.123961][T10674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.133165][T10674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.214674][T10674] netlink: 'syz.5.10309': attribute type 1 has an invalid length. [ 711.223569][T10674] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10309'. [ 711.780482][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10315'. [ 711.797974][T10688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 711.807640][T10686] syzkaller0: entered promiscuous mode [ 711.814195][T10686] syzkaller0: entered allmulticast mode [ 711.847417][T10688] bond1 (unregistering): Released all slaves [ 712.018536][T10715] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 712.024132][T10715] dvmrp1: persist disabled [ 712.028790][T10715] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 712.035063][T10715] dvmrp1: persist disabled [ 712.164314][T10729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.173805][T10729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.719126][T10759] sg_write: data in/out 989/126 bytes for SCSI command 0x7-- guessing data in; [ 712.719126][T10759] program syz.3.10342 not setting count and/or reply_len properly [ 712.723592][T10758] syzkaller0: entered promiscuous mode [ 712.741621][T10758] syzkaller0: entered allmulticast mode [ 712.947278][T10785] sg_write: data in/out 989/126 bytes for SCSI command 0x7-- guessing data in; [ 712.947278][T10785] program syz.5.10353 not setting count and/or reply_len properly [ 713.025807][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10359'. [ 713.047129][T10798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 713.063009][T10798] bond1 (unregistering): Released all slaves [ 713.083260][T10804] syzkaller0: entered promiscuous mode [ 713.088774][T10804] syzkaller0: entered allmulticast mode [ 713.163083][T10807] 8021q: VLANs not supported on gre0 [ 713.223750][ T3479] IPVS: starting estimator thread 0... [ 713.232896][T10816] sg_write: data in/out 989/126 bytes for SCSI command 0x7-- guessing data in; [ 713.232896][T10816] program syz.2.10367 not setting count and/or reply_len properly [ 713.310966][T10814] IPVS: using max 2304 ests per chain, 115200 per kthread [ 713.347933][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10374'. [ 713.365995][T10832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 713.382001][T10832] bond1 (unregistering): Released all slaves [ 713.442867][T10842] syzkaller0: entered promiscuous mode [ 713.448469][T10842] syzkaller0: entered allmulticast mode [ 713.705350][T10852] netlink: 'syz.4.10381': attribute type 4 has an invalid length. [ 713.714045][T10852] netlink: 17 bytes leftover after parsing attributes in process `syz.4.10381'. [ 713.818538][T10856] syzkaller0: entered promiscuous mode [ 713.824921][T10856] syzkaller0: entered allmulticast mode [ 713.880535][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10385'. [ 713.936518][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10388'. [ 713.952746][T10864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 713.966101][T10864] bond1 (unregistering): Released all slaves [ 713.979403][ T29] audit: type=1400 audit(1767172178.723:41771): avc: denied { write } for pid=10866 comm="syz.5.10389" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 714.052703][T10873] syzkaller0: entered promiscuous mode [ 714.058257][T10873] syzkaller0: entered allmulticast mode [ 714.195392][T10886] syzkaller0: entered promiscuous mode [ 714.200989][T10886] syzkaller0: entered allmulticast mode [ 714.258783][T10894] 9pnet_virtio: no channels available for device syz [ 714.304159][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10404'. [ 714.319573][T10902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 714.327870][T10905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10905 comm=syz.3.10405 [ 714.341265][T10905] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10405'. [ 714.352052][T10902] bond1 (unregistering): Released all slaves [ 714.360669][T10905] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10405'. [ 714.370793][T10905] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.377944][T10905] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.436590][T10909] syzkaller0: entered promiscuous mode [ 714.443265][T10909] syzkaller0: entered allmulticast mode [ 714.497216][T10917] syzkaller0: entered promiscuous mode [ 714.503860][T10917] syzkaller0: entered allmulticast mode [ 714.527997][T10921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.536631][T10921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.607423][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10418'. [ 714.626937][T10935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 714.640705][T10935] bond1 (unregistering): Released all slaves [ 714.923047][T10949] netlink: 'syz.4.10423': attribute type 4 has an invalid length. [ 714.931738][T10949] netlink: 17 bytes leftover after parsing attributes in process `syz.4.10423'. [ 715.013601][T10955] loop4: detected capacity change from 0 to 7 [ 715.037555][T10957] syzkaller0: entered promiscuous mode [ 715.043121][T10957] syzkaller0: entered allmulticast mode [ 715.070245][T10959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.085553][T10959] ip6gretap1: entered promiscuous mode [ 715.092102][T10959] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 715.128857][T10963] Invalid argument reading file caps for ./file0 [ 715.161482][T10969] loop2: detected capacity change from 0 to 512 [ 715.168589][T10969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 715.188766][T10969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 715.206960][T10969] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 715.211505][T10974] syzkaller0: entered promiscuous mode [ 715.223747][T10974] syzkaller0: entered allmulticast mode [ 715.309541][ T6302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 715.325411][ T3488] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 715.354504][ T3488] hid-generic 0000:0000:0000.00B3: hidraw0: HID v0.00 Device [syz1] on syz0 [ 715.465501][T10994] syzkaller0: entered promiscuous mode [ 715.471166][T10994] syzkaller0: entered allmulticast mode [ 715.490848][T10996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.512484][T10996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.704478][ T3516] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 715.726487][ T3516] hid-generic 0000:0000:0000.00B4: hidraw0: HID v0.00 Device [syz1] on syz0 [ 715.750323][T11028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.759377][T11028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.277453][T11049] netlink: 'syz.3.10464': attribute type 4 has an invalid length. [ 716.287445][ T29] audit: type=1400 audit(1767172181.023:41772): avc: denied { append } for pid=11050 comm="syz.4.10466" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 716.379606][T11053] syzkaller1: entered promiscuous mode [ 716.386270][T11053] syzkaller1: entered allmulticast mode [ 717.268781][T11093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.278332][T11093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.314250][T11097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 717.332320][T11097] bond1 (unregistering): Released all slaves [ 717.513098][T11105] syzkaller0: entered promiscuous mode [ 717.518645][T11105] syzkaller0: entered allmulticast mode [ 717.536076][T11104] syzkaller0: entered promiscuous mode [ 717.541625][T11104] syzkaller0: entered allmulticast mode [ 717.592417][T11107] 9pnet_virtio: no channels available for device syz [ 719.332056][T11147] netlink: 'syz.1.10506': attribute type 4 has an invalid length. [ 719.339967][T11147] __nla_validate_parse: 7 callbacks suppressed [ 719.340101][T11147] netlink: 17 bytes leftover after parsing attributes in process `syz.1.10506'. [ 721.804649][T11213] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10534'. [ 721.814789][T11213] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10534'. [ 722.012088][T11241] 9pnet_virtio: no channels available for device syz [ 722.207020][T11251] loop4: detected capacity change from 0 to 7 [ 722.997456][T11283] loop4: detected capacity change from 0 to 512 [ 723.005162][T11283] EXT4-fs: Ignoring removed bh option [ 723.012054][T11283] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 723.024260][T11283] EXT4-fs (loop4): 1 truncate cleaned up [ 723.030761][T11283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.053600][ T8769] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.070006][T11288] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 723.115860][T11294] 9pnet_virtio: no channels available for device syz [ 723.383064][T11303] can0: slcan on ttyS3. [ 723.471076][T11303] can0 (unregistered): slcan off ttyS3. [ 723.513239][T11311] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10573'. [ 723.523037][T11311] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10573'. [ 723.906916][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.910824][T11346] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10588'. [ 723.916172][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.935388][T11346] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10588'. [ 724.303911][T11364] loop4: detected capacity change from 0 to 7 [ 725.226681][T11395] process '/newroot/219/file0' started with executable stack [ 725.481727][ T1652] bond4: left allmulticast mode [ 725.486669][ T1652] bond4: left promiscuous mode [ 725.491707][ T1652] bridge0: port 3(bond4) entered disabled state [ 725.498614][ T1652] bond3: left allmulticast mode [ 725.503991][ T1652] bond3: left promiscuous mode [ 725.508947][ T1652] bridge0: port 2(bond3) entered disabled state [ 725.515829][ T1652] bond1: left allmulticast mode [ 725.520760][ T1652] bond1: left promiscuous mode [ 725.526451][ T1652] bridge0: port 1(bond1) entered disabled state [ 725.556833][ T1652] bond5 (unregistering): (slave geneve2): Releasing active interface [ 725.753959][ T1652] team0: Port device bond0 removed [ 725.760325][ T1652] bond0 (unregistering): Released all slaves [ 725.772612][ T1652] bond1 (unregistering): Released all slaves [ 725.781194][ T1652] bond2 (unregistering): Released all slaves [ 725.789604][ T1652] bond3 (unregistering): Released all slaves [ 725.798028][ T1652] bond4 (unregistering): Released all slaves [ 725.806765][ T1652] bond5 (unregistering): Released all slaves [ 725.846075][ T1652] tipc: Left network mode [ 725.875048][ T1652] hsr_slave_0: left promiscuous mode [ 725.880683][ T1652] hsr_slave_1: left promiscuous mode [ 725.919638][ T5305] smc: removing ib device !yz! [ 726.138598][ T1652] IPVS: stop unused estimator thread 0... [ 726.166549][T11444] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10627'. [ 726.176804][T11444] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10627'. [ 726.325713][T11457] netlink: 'syz.4.10631': attribute type 10 has an invalid length. [ 726.334666][T11457] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10631'. [ 726.350536][T11457] team0: Port device geneve1 added [ 726.398187][T11463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11463 comm=syz.1.10634 [ 726.581676][T11477] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10641'. [ 726.590837][T11477] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10641'. [ 726.676827][T11488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.686820][T11488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.699159][T11488] netlink: 'syz.5.10646': attribute type 1 has an invalid length. [ 726.708135][T11488] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10646'. [ 726.849385][T11491] netlink: 'syz.3.10647': attribute type 10 has an invalid length. [ 726.858378][T11491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10647'. [ 726.875124][T11491] team0: Port device geneve1 added [ 727.066839][T11514] loop4: detected capacity change from 0 to 7 [ 727.344652][T11519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10669'. [ 727.392765][T11527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.405286][T11527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.412444][T11529] netlink: 'syz.5.10663': attribute type 10 has an invalid length. [ 727.421107][T11529] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10663'. [ 727.449525][T11529] team0: Port device geneve1 added [ 727.856635][T11566] SELinux: ebitmap start bit (1819243365) is not a multiple of the map unit size (64) [ 727.868083][T11566] SELinux: failed to load policy [ 727.931037][ T29] audit: type=1400 audit(1767172192.593:41773): avc: denied { kexec_image_load } for pid=11565 comm="syz.2.10681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 728.038085][T11576] loop4: detected capacity change from 0 to 7 [ 728.246140][T11581] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10688'. [ 728.708817][T11605] netlink: 'syz.4.10698': attribute type 4 has an invalid length. [ 728.918982][T11607] loop4: detected capacity change from 0 to 7 [ 729.037117][T11555] siw: device registration error -23 [ 730.194647][T11653] loop4: detected capacity change from 0 to 7 [ 730.817102][T11681] netlink: 'syz.2.10729': attribute type 10 has an invalid length. [ 730.832330][T11681] team0: Port device geneve1 added [ 730.872961][T11685] loop4: detected capacity change from 0 to 7 [ 730.998003][T11693] syzkaller0: entered promiscuous mode [ 731.004568][T11693] syzkaller0: entered allmulticast mode [ 731.299521][T11713] netlink: 'syz.1.10741': attribute type 10 has an invalid length. [ 731.308603][T11713] __nla_validate_parse: 5 callbacks suppressed [ 731.308620][T11713] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10741'. [ 731.360161][T11717] loop4: detected capacity change from 0 to 7 [ 731.636048][T11748] loop4: detected capacity change from 0 to 7 [ 732.035168][T11778] loop4: detected capacity change from 0 to 7 [ 732.229028][T11792] SELinux: ebitmap: truncated map [ 732.234877][T11792] SELinux: failed to load policy [ 732.296482][T11800] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 733.215992][T11835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10790'. [ 733.237105][T11835] siw: device registration error -23 [ 733.339136][T11840] loop4: detected capacity change from 0 to 7 [ 733.462455][ T29] audit: type=1400 audit(1767172198.203:41774): avc: denied { write } for pid=11845 comm="syz.5.10795" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 733.484087][ T29] audit: type=1400 audit(1767172198.203:41775): avc: denied { read } for pid=11845 comm="syz.5.10795" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 733.512733][T11848] netlink: 'syz.1.10796': attribute type 10 has an invalid length. [ 733.520681][T11848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10796'. [ 734.547818][T11879] SELinux: ebitmap: truncated map [ 734.554304][T11879] SELinux: failed to load policy [ 734.575596][T11885] loop4: detected capacity change from 0 to 7 [ 734.614177][ T29] audit: type=1400 audit(1767172199.353:41776): avc: denied { create } for pid=11890 comm="syz.1.10814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 734.634938][ T29] audit: type=1400 audit(1767172199.373:41777): avc: denied { sys_admin } for pid=11890 comm="syz.1.10814" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 734.645204][T11891] lo speed is unknown, defaulting to 1000 [ 735.249446][T11916] loop4: detected capacity change from 0 to 7 [ 735.343220][T11925] SELinux: ebitmap: truncated map [ 735.348452][T11925] SELinux: failed to load policy [ 735.524399][T11931] netlink: 'syz.4.10830': attribute type 4 has an invalid length. [ 735.739847][T11944] tipc: Enabled bearer , priority 10 [ 735.804064][T11949] loop4: detected capacity change from 0 to 7 [ 736.539166][T11976] loop4: detected capacity change from 0 to 7 [ 736.602507][T11977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10844'. [ 736.624104][T11977] siw: device registration error -23 [ 736.675685][T11996] netlink: 'syz.4.10858': attribute type 10 has an invalid length. [ 736.683756][T11996] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10858'. [ 736.736799][T12001] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10860'. [ 736.787784][T12016] tipc: Enabled bearer , priority 0 [ 736.799948][T12016] tipc: Resetting bearer [ 736.807354][T12015] tipc: Disabling bearer [ 736.936257][T12028] netlink: 'syz.4.10871': attribute type 10 has an invalid length. [ 736.945125][T12028] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10871'. [ 737.363553][ T29] audit: type=1400 audit(1767172202.103:41778): avc: denied { unmount } for pid=8769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 737.697333][T12072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10889'. [ 738.071916][T12121] syzkaller0: entered promiscuous mode [ 738.077468][T12121] syzkaller0: entered allmulticast mode [ 738.489727][T12133] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 738.500265][T12133] SELinux: failed to load policy [ 738.544941][ T3514] IPVS: starting estimator thread 0... [ 738.651070][T12144] IPVS: using max 1872 ests per chain, 93600 per kthread [ 738.694200][T12157] syzkaller0: entered promiscuous mode [ 738.699735][T12157] syzkaller0: entered allmulticast mode [ 739.018053][T12186] netlink: 'syz.5.10928': attribute type 10 has an invalid length. [ 739.026779][T12186] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10928'. [ 739.264409][T12189] netlink: 'syz.2.10925': attribute type 4 has an invalid length. [ 739.273365][T12189] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10925'. [ 739.736761][T12201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.766329][T12203] syzkaller0: entered promiscuous mode [ 739.772965][T12203] syzkaller0: entered allmulticast mode [ 739.791760][T12201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.392097][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10947'. [ 740.928691][T12276] netlink: 'syz.1.10954': attribute type 10 has an invalid length. [ 740.937675][T12276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10954'. [ 741.248917][T12287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.281787][T12287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.527191][T12291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10960'. [ 741.889977][T12311] netlink: 'syz.3.10971': attribute type 10 has an invalid length. [ 741.898989][T12311] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10971'. [ 742.142616][T12327] Invalid argument reading file caps for ./file0 [ 742.381641][T12338] netlink: 'syz.3.10977': attribute type 4 has an invalid length. [ 742.389567][T12338] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10977'. [ 742.523770][T12344] netlink: 'syz.5.10985': attribute type 10 has an invalid length. [ 742.531771][T12344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10985'. [ 742.607738][ T3488] IPVS: starting estimator thread 0... [ 742.655513][T12355] Invalid argument reading file caps for ./file0 [ 742.798286][T12351] IPVS: using max 2496 ests per chain, 124800 per kthread [ 743.168105][T12374] loop4: detected capacity change from 0 to 7 [ 743.747908][T12399] netlink: 'syz.1.11009': attribute type 10 has an invalid length. [ 743.756873][T12399] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11009'. [ 744.354783][T12410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11012'. [ 745.530558][T12451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11029'. [ 745.878184][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11035'. [ 745.944884][T12473] netlink: 'syz.5.11026': attribute type 4 has an invalid length. [ 745.952800][T12473] netlink: 17 bytes leftover after parsing attributes in process `syz.5.11026'. [ 745.966953][T12469] SELinux: ebitmap: truncated map [ 745.972897][T12469] SELinux: failed to load policy [ 746.018966][T12478] loop4: detected capacity change from 0 to 7 [ 746.234734][ T63] team0: Port device bond0 removed [ 746.246552][ T63] bond0 (unregistering): Released all slaves [ 746.265839][ T63] bond1 (unregistering): Released all slaves [ 746.334085][ T63] tipc: Left network mode [ 746.343393][ T63] hsr_slave_0: left promiscuous mode [ 746.372183][ T63] hsr_slave_1: left promiscuous mode [ 746.711986][T12511] netlink: 'syz.3.11049': attribute type 10 has an invalid length. [ 746.719957][T12511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11049'. [ 746.974456][T12524] loop4: detected capacity change from 0 to 7 [ 747.120606][T12533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11058'. [ 747.135614][ T63] IPVS: stop unused estimator thread 0... [ 747.275388][T12537] SELinux: ebitmap: truncated map [ 747.286646][T12537] SELinux: failed to load policy [ 747.574626][T12550] syzkaller0: entered promiscuous mode [ 747.580167][T12550] syzkaller0: entered allmulticast mode [ 747.964291][T12570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11074'. [ 748.071893][T12574] syzkaller0: entered promiscuous mode [ 748.077497][T12574] syzkaller0: entered allmulticast mode [ 748.466677][ T29] audit: type=1400 audit(1767172213.203:41779): avc: denied { unmount } for pid=12611 comm="syz.3.11091" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 748.630739][T12644] netlink: 'syz.3.11105': attribute type 10 has an invalid length. [ 748.639795][T12644] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11105'. [ 748.970657][T12684] netlink: 'syz.3.11122': attribute type 10 has an invalid length. [ 748.979809][T12684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11122'. [ 749.696392][T12746] netlink: 'syz.5.11145': attribute type 10 has an invalid length. [ 749.704450][T12746] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11145'. [ 749.924329][T12777] veth0_vlan: entered allmulticast mode [ 750.166040][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11182'. [ 750.712266][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11197'. [ 751.136442][T12891] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11203'. [ 751.158558][T12891] siw: device registration error -23 [ 751.197037][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11209'. [ 752.997554][T12960] netlink: 'syz.3.11236': attribute type 4 has an invalid length. [ 753.006070][T12960] netlink: 17 bytes leftover after parsing attributes in process `syz.3.11236'. [ 754.267261][T13043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11270'. [ 755.306009][T13111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11293'. [ 755.317413][T13111] siw: device registration error -23 [ 756.605856][T13147] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11309'. [ 757.489574][T13176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.498408][T13176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.555440][T13176] netlink: 'syz.4.11321': attribute type 1 has an invalid length. [ 757.564472][T13176] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11321'. [ 758.136925][T13298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13298 comm=syz.3.11379 [ 758.308351][T13326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.317752][T13328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13328 comm=syz.3.11393 [ 758.334825][T13326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.345883][T13326] netlink: 'syz.4.11392': attribute type 1 has an invalid length. [ 758.354912][T13326] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11392'. [ 758.477608][T13350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13350 comm=syz.3.11404 [ 758.608551][ T29] audit: type=1400 audit(1767172223.343:41780): avc: denied { associate } for pid=13365 comm="syz.3.11411" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 758.937092][T13400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13400 comm=syz.5.11427 [ 760.823915][T13607] chnl_net:caif_netlink_parms(): no params data found [ 760.896693][T13667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11548'. [ 760.955135][T13607] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.962326][T13607] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.975053][T13607] bridge_slave_0: entered allmulticast mode [ 760.983101][T13607] bridge_slave_0: entered promiscuous mode [ 760.990528][T13607] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.997624][T13607] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.004989][T13607] bridge_slave_1: entered allmulticast mode [ 761.012213][T13607] bridge_slave_1: entered promiscuous mode [ 761.039477][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.054526][T13607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.065530][T13607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.093543][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.109391][T13607] team0: Port device team_slave_0 added [ 761.123226][T13607] team0: Port device team_slave_1 added [ 761.151790][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.181312][T13607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.188289][T13607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.214933][T13607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.226755][T13607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.233817][T13607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.260388][T13607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.309412][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.373858][T13607] hsr_slave_0: entered promiscuous mode [ 761.387813][T13607] hsr_slave_1: entered promiscuous mode [ 761.400563][T13607] debugfs: 'hsr0' already exists in 'hsr' [ 761.407431][T13607] Cannot create hsr debugfs directory [ 761.443371][ T12] tipc: Resetting bearer [ 761.459392][T13744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11584'. [ 761.506717][ T12] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 761.517300][ T12] ip6gretap1 (unregistering): left promiscuous mode [ 761.530302][ T12] tipc: Disabling bearer [ 761.559681][ T12] team0: Port device geneve1 removed [ 761.593889][ T12] bond0 (unregistering): left promiscuous mode [ 761.600415][ T12] bond0 (unregistering): Released all slaves [ 761.645506][ T12] tipc: Disabling bearer [ 761.650792][ T12] tipc: Left network mode [ 761.669386][ T12] batadv0: left promiscuous mode [ 761.677217][ T12] hsr_slave_0: left promiscuous mode [ 761.683952][ T12] hsr_slave_1: left promiscuous mode [ 761.694281][ T12] veth1_macvtap: left promiscuous mode [ 761.710011][ T12] veth0_macvtap: left promiscuous mode [ 761.716655][ T12] veth1_vlan: left promiscuous mode [ 761.890037][ T12] team0 (unregistering): Port device dummy0 removed [ 762.306481][T13607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 762.327271][ T12] IPVS: stop unused estimator thread 0... [ 762.342215][T13607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 762.362394][T13607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 762.378858][T13607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 762.450490][T13607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.477498][T13607] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.497918][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.505037][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.525850][T13607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 762.537226][T13607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 762.565453][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.572627][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.698720][T13607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.864948][T13607] veth0_vlan: entered promiscuous mode [ 762.886156][T13607] veth1_vlan: entered promiscuous mode [ 762.918004][T13607] veth0_macvtap: entered promiscuous mode [ 762.940284][T13607] veth1_macvtap: entered promiscuous mode [ 762.968029][T13607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.988244][T13607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.027697][ T407] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.061649][ T407] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.072828][ T407] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.200690][ T407] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.309659][T13903] syzkaller0: entered promiscuous mode [ 763.316376][T13903] syzkaller0: entered allmulticast mode [ 763.750285][T13926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11654'. [ 764.473469][T13998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11683'. [ 765.664798][T14077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14077 comm=syz.3.11713 [ 766.122550][T14118] siw: device registration error -23 [ 766.662158][T14124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.725200][ T12] bond1 (unregistering): (slave bond0): Releasing active interface [ 766.787304][T14124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.814207][ T12] bond0 (unregistering): Released all slaves [ 766.846504][T14124] netlink: 'syz.2.11730': attribute type 1 has an invalid length. [ 766.854431][T14124] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11730'. [ 766.865758][ T12] bond1 (unregistering): Released all slaves [ 766.904037][ T12] bond2 (unregistering): Released all slaves [ 767.019621][ T12] tipc: Left network mode [ 767.025832][ T12] IPVS: stopping backup sync thread 8456 ... [ 767.047224][ T12] IPVS: stopping backup sync thread 8455 ... [ 767.071982][ T12] IPVS: stopping backup sync thread 8454 ... [ 767.092136][ T12] IPVS: stopping backup sync thread 8453 ... [ 767.117848][ T12] hsr_slave_0: left promiscuous mode [ 767.132634][ T12] hsr_slave_1: left promiscuous mode [ 767.172900][ T12] veth1_macvtap: left promiscuous mode [ 767.192185][ T12] veth0_macvtap: left promiscuous mode [ 767.197801][ T12] veth1_vlan: left promiscuous mode [ 767.222410][ T12] veth0_vlan: left promiscuous mode [ 767.339570][T14160] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11741'. [ 767.717677][T14184] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 767.747558][T14191] xt_hashlimit: max too large, truncated to 1048576 [ 767.844455][T14198] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.568939][T14207] siw: device registration error -23 [ 768.580763][ T29] audit: type=1326 audit(1767172232.843:41781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.1.11763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eaf78f749 code=0x7ffc0000 [ 768.606791][ T29] audit: type=1326 audit(1767172232.843:41782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.1.11763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eaf78f749 code=0x7ffc0000 [ 768.631518][ T29] audit: type=1326 audit(1767172232.843:41783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.1.11763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eaf78f749 code=0x7ffc0000 [ 768.656361][ T29] audit: type=1326 audit(1767172232.843:41784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.1.11763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eaf78f749 code=0x7ffc0000 [ 768.681048][ T29] audit: type=1326 audit(1767172232.843:41785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.1.11763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eaf78f749 code=0x7ffc0000 [ 768.705799][ T29] audit: type=1326 audit(1767172232.843:41786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.1.11763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6eaf78f749 code=0x7ffc0000 [ 768.730444][ T29] audit: type=1326 audit(1767172232.843:41787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.1.11763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eaf78f749 code=0x7ffc0000 [ 768.755290][ T29] audit: type=1326 audit(1767172232.843:41788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.1.11763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eaf78f749 code=0x7ffc0000 [ 768.779957][ T29] audit: type=1326 audit(1767172232.843:41789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.1.11763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eaf78f749 code=0x7ffc0000 [ 768.804688][ T29] audit: type=1326 audit(1767172232.843:41790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.1.11763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eaf78f749 code=0x7ffc0000 [ 768.976559][T14198] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.025332][ T12] IPVS: stop unused estimator thread 0... [ 769.068476][T14198] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.164427][T14198] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.229967][ T407] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.255518][ T407] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.293165][ T407] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.337376][ T407] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.854421][T14258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11781'. [ 770.829065][T14282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11791'. [ 773.000981][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11818'. [ 773.078174][T14379] netlink: 'syz.1.11816': attribute type 4 has an invalid length. [ 773.086123][T14379] netlink: 17 bytes leftover after parsing attributes in process `syz.1.11816'. [ 773.706014][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 773.706031][ T29] audit: type=1326 audit(1767172238.433:42029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14405 comm="syz.4.11833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448a94f749 code=0x7ffc0000 [ 773.737893][ T29] audit: type=1326 audit(1767172238.433:42030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14405 comm="syz.4.11833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448a94f749 code=0x7ffc0000 [ 773.762706][ T29] audit: type=1326 audit(1767172238.433:42031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14405 comm="syz.4.11833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f448a94f749 code=0x7ffc0000 [ 773.787447][ T29] audit: type=1326 audit(1767172238.433:42032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14405 comm="syz.4.11833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448a94f749 code=0x7ffc0000 [ 773.812198][ T29] audit: type=1326 audit(1767172238.433:42033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14405 comm="syz.4.11833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448a94f749 code=0x7ffc0000 [ 773.836922][ T29] audit: type=1326 audit(1767172238.433:42034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14405 comm="syz.4.11833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f448a94f749 code=0x7ffc0000 [ 773.861587][ T29] audit: type=1326 audit(1767172238.433:42035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14405 comm="syz.4.11833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448a94f749 code=0x7ffc0000 [ 773.886354][ T29] audit: type=1326 audit(1767172238.433:42036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14405 comm="syz.4.11833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448a94f749 code=0x7ffc0000 [ 773.911009][ T29] audit: type=1326 audit(1767172238.433:42037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14405 comm="syz.4.11833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f448a94df90 code=0x7ffc0000 [ 773.935674][ T29] audit: type=1326 audit(1767172238.433:42038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14405 comm="syz.4.11833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448a94f749 code=0x7ffc0000 [ 774.158403][T14442] infiniband !yz!: set down [ 774.163031][T14442] infiniband !yz!: added team_slave_0 [ 774.172781][T14444] netlink: 184 bytes leftover after parsing attributes in process `syz.5.11846'. [ 774.174950][T14442] RDS/IB: !yz!: added [ 774.183689][T14444] netlink: 'syz.5.11846': attribute type 13 has an invalid length. [ 774.187136][T14442] smc: adding ib device !yz! with port count 1 [ 774.203231][T14442] smc: ib device !yz! port 1 has no pnetid [ 774.509585][ T5305] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.536900][ T5305] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.579130][ T5305] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.601448][ T5305] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.705235][T14451] tc_dump_action: action bad kind [ 776.127439][T14491] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 776.138679][T14491] netlink: 184 bytes leftover after parsing attributes in process `syz.4.11863'. [ 776.149032][T14491] netlink: 'syz.4.11863': attribute type 13 has an invalid length. [ 776.192891][T14491] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.200145][T14491] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.284580][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.297649][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.381820][ T1652] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.391215][ T1652] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.400451][ T1652] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.410774][ T1652] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.693733][T14521] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 776.866125][T14537] xt_hashlimit: max too large, truncated to 1048576 [ 777.849506][T14579] syzkaller0: entered promiscuous mode [ 777.856119][T14579] syzkaller0: entered allmulticast mode [ 779.269754][T14632] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 779.344779][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 779.344797][ T29] audit: type=1326 audit(1767172244.083:42101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.5.11916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 779.387067][ T29] audit: type=1326 audit(1767172244.083:42102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.5.11916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 779.411900][ T29] audit: type=1326 audit(1767172244.083:42103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.5.11916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 779.436819][ T29] audit: type=1326 audit(1767172244.083:42104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.5.11916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 779.462284][ T29] audit: type=1326 audit(1767172244.083:42105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.5.11916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 779.486999][ T29] audit: type=1326 audit(1767172244.083:42106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.5.11916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 779.511800][ T29] audit: type=1326 audit(1767172244.083:42107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.5.11916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 779.536561][ T29] audit: type=1326 audit(1767172244.083:42108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.5.11916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 779.561318][ T29] audit: type=1326 audit(1767172244.083:42109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.5.11916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 779.586085][ T29] audit: type=1326 audit(1767172244.083:42110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.5.11916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 780.617347][T14663] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 780.782119][T14684] !yz!: rxe_newlink: already configured on team_slave_0 [ 780.790144][T14684] netlink: 184 bytes leftover after parsing attributes in process `syz.5.11931'. [ 780.799531][T14684] netlink: 'syz.5.11931': attribute type 13 has an invalid length. [ 780.980536][T14692] xt_hashlimit: max too large, truncated to 1048576 [ 781.220229][T14697] netlink: 'syz.1.11936': attribute type 10 has an invalid length. [ 781.252529][T14699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11937'. [ 781.836582][T14730] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11948'. [ 781.859321][T14734] netlink: 'syz.2.11949': attribute type 10 has an invalid length. [ 781.872060][T14734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.880658][T14734] team0: Port device bond0 added [ 782.052433][T14737] loop2: detected capacity change from 0 to 512 [ 782.059889][T14737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 782.185185][T14737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.203340][T14737] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 782.251869][T13607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.407029][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.528394][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.570481][T14738] chnl_net:caif_netlink_parms(): no params data found [ 782.616403][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.700369][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.748562][T14777] xt_hashlimit: max too large, truncated to 1048576 [ 782.757110][T14738] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.764285][T14738] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.785163][T14738] bridge_slave_0: entered allmulticast mode [ 782.800148][T14738] bridge_slave_0: entered promiscuous mode [ 782.830746][T14738] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.837899][T14738] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.849236][T14738] bridge_slave_1: entered allmulticast mode [ 782.856001][T14738] bridge_slave_1: entered promiscuous mode [ 782.868108][T14779] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 782.888061][T14777] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.908535][T14781] xt_hashlimit: max too large, truncated to 1048576 [ 782.924951][T14738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.983786][ T12] team0: Port device geneve1 removed [ 783.034013][ T12] bond0 (unregistering): left promiscuous mode [ 783.040638][ T12] bond0 (unregistering): Released all slaves [ 783.052861][T14777] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.067736][T14738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.102213][T14738] team0: Port device team_slave_0 added [ 783.116835][T14738] team0: Port device team_slave_1 added [ 783.136478][ T12] batadv0: left promiscuous mode [ 783.149453][ T12] hsr_slave_0: left promiscuous mode [ 783.157507][ T12] hsr_slave_1: left promiscuous mode [ 783.169043][ T12] team0: left promiscuous mode [ 783.175370][ T12] veth1_macvtap: left promiscuous mode [ 783.186512][ T12] veth0_macvtap: left promiscuous mode [ 783.197598][ T12] veth1_vlan: left promiscuous mode [ 783.204360][ T12] veth0_vlan: left promiscuous mode [ 783.374951][T14777] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.398816][T14738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.405882][T14738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.432905][T14738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.445451][T14738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.453545][T14738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.480524][T14738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.593611][T14777] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.615565][T14738] hsr_slave_0: entered promiscuous mode [ 783.621967][T14738] hsr_slave_1: entered promiscuous mode [ 783.709378][T14799] loop2: detected capacity change from 0 to 2048 [ 783.763369][T14799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.788417][ T5402] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.839265][ T5402] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.867104][T13607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.926496][ T5402] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.954402][T14807] netlink: 'syz.3.11969': attribute type 10 has an invalid length. [ 783.981423][ T5402] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.133767][T14738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 784.143904][T14738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 784.175870][T14738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 784.284211][T14738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 784.335564][T14738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.371616][T14738] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.381771][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.388942][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.406836][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 784.406856][ T29] audit: type=1326 audit(1767172249.143:42557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.2.11975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c16ff749 code=0x7ffc0000 [ 784.436828][ T29] audit: type=1326 audit(1767172249.143:42558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.2.11975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c16ff749 code=0x7ffc0000 [ 784.460508][ T29] audit: type=1326 audit(1767172249.143:42559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.2.11975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17c16ff749 code=0x7ffc0000 [ 784.484097][ T29] audit: type=1326 audit(1767172249.143:42560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.2.11975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c16ff749 code=0x7ffc0000 [ 784.507783][ T29] audit: type=1326 audit(1767172249.143:42561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.2.11975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c16ff749 code=0x7ffc0000 [ 784.531476][ T29] audit: type=1326 audit(1767172249.143:42562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.2.11975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f17c16ff749 code=0x7ffc0000 [ 784.583240][ T29] audit: type=1326 audit(1767172249.293:42563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.2.11975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c16ff749 code=0x7ffc0000 [ 784.607935][ T29] audit: type=1326 audit(1767172249.293:42564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.2.11975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c16ff749 code=0x7ffc0000 [ 784.741467][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.748581][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.795858][T14848] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 784.842965][T14738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.012426][T14738] veth0_vlan: entered promiscuous mode [ 785.036658][T14738] veth1_vlan: entered promiscuous mode [ 785.105872][T14738] veth0_macvtap: entered promiscuous mode [ 785.113927][T14738] veth1_macvtap: entered promiscuous mode [ 785.130723][T14738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.147644][T14738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.159160][ T357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.246145][T14885] loop2: detected capacity change from 0 to 512 [ 785.254287][T14885] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 785.275940][ T357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.286964][ T357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.299121][ T357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.299423][T14885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.322987][T14885] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 785.413820][T14895] team0: Port device bond0 removed [ 785.419051][ T29] audit: type=1326 audit(1767172250.133:42565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14882 comm="syz.5.11988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 785.442883][ T29] audit: type=1326 audit(1767172250.133:42566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14882 comm="syz.5.11988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 785.501580][T14895] bridge_slave_0: left allmulticast mode [ 785.507286][T14895] bridge_slave_0: left promiscuous mode [ 785.512967][T14895] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.603573][T14895] bridge_slave_1: left allmulticast mode [ 785.609388][T14895] bridge_slave_1: left promiscuous mode [ 785.615218][T14895] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.735852][T14895] bond0: (slave bond_slave_0): Releasing backup interface [ 785.788348][T14895] bond0: (slave bond_slave_1): Releasing backup interface [ 785.825449][T14895] team0: Port device team_slave_0 removed [ 785.835110][T14895] team0: Port device team_slave_1 removed [ 785.848358][T14895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.855906][T14895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.883520][T14895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.891001][T14895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.910030][T14895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 785.958982][T13607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.681577][T14951] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 787.735897][ T1652] bond0 (unregistering): Released all slaves [ 787.833789][ T1652] tipc: Disabling bearer [ 787.839074][ T1652] tipc: Left network mode [ 787.885086][ T1652] hsr_slave_0: left promiscuous mode [ 787.890959][ T1652] hsr_slave_1: left promiscuous mode [ 787.899285][ T1652] veth1_macvtap: left promiscuous mode [ 787.905025][ T1652] veth0_macvtap: left promiscuous mode [ 787.910668][ T1652] veth1_vlan: left promiscuous mode [ 787.915962][ T1652] veth0_vlan: left promiscuous mode [ 788.791849][ T5576] infiniband syz0: ib_query_port failed (-19) [ 789.590924][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 789.590944][ T29] audit: type=1326 audit(1767172253.983:42755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15038 comm="syz.1.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 789.620968][ T29] audit: type=1326 audit(1767172253.983:42756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15038 comm="syz.1.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 789.644667][ T29] audit: type=1326 audit(1767172253.983:42757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15038 comm="syz.1.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 789.668367][ T29] audit: type=1326 audit(1767172253.983:42758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15038 comm="syz.1.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 789.692189][ T29] audit: type=1326 audit(1767172253.983:42759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15038 comm="syz.1.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 789.715859][ T29] audit: type=1326 audit(1767172253.983:42760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15038 comm="syz.1.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 789.739537][ T29] audit: type=1326 audit(1767172253.983:42761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15038 comm="syz.1.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f696cc9df90 code=0x7ffc0000 [ 789.763198][ T29] audit: type=1326 audit(1767172253.983:42762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15038 comm="syz.1.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 789.786908][ T29] audit: type=1326 audit(1767172253.983:42763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15038 comm="syz.1.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 789.810411][ T29] audit: type=1326 audit(1767172253.983:42764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15038 comm="syz.1.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 789.848504][T15047] loop2: detected capacity change from 0 to 2048 [ 789.940602][T15047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.974357][ T1652] IPVS: stop unused estimator thread 0... [ 790.111833][T13607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.233030][T15076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.248409][T15076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.268844][T15076] netlink: 'syz.2.12047': attribute type 1 has an invalid length. [ 790.276844][T15076] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12047'. [ 790.328957][T15079] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 790.752968][T15093] netlink: 'syz.3.12054': attribute type 10 has an invalid length. [ 791.244696][T15105] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 791.392380][T15111] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 791.458204][T15115] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12062'. [ 793.155668][T15156] tc_dump_action: action bad kind [ 793.233106][T15169] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.240296][T15169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.323853][T15169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.351199][T15169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 793.562972][T15179] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 794.644704][T15224] netlink: 'syz.4.12102': attribute type 10 has an invalid length. [ 794.720613][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 794.720635][ T29] audit: type=1326 audit(1767172259.443:43239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.1.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 794.750593][ T29] audit: type=1326 audit(1767172259.443:43240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.1.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 794.774325][ T29] audit: type=1326 audit(1767172259.443:43241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.1.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 794.798023][ T29] audit: type=1326 audit(1767172259.443:43242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.1.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 794.821838][ T29] audit: type=1326 audit(1767172259.443:43243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.1.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 794.845527][ T29] audit: type=1326 audit(1767172259.443:43244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.1.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 794.869188][ T29] audit: type=1326 audit(1767172259.443:43245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.1.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 794.892874][ T29] audit: type=1326 audit(1767172259.443:43246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.1.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 794.916523][ T29] audit: type=1326 audit(1767172259.443:43247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.1.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f696cc9df90 code=0x7ffc0000 [ 794.940260][ T29] audit: type=1326 audit(1767172259.443:43248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.1.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 795.089055][T15237] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 795.127905][T15237] netlink: 184 bytes leftover after parsing attributes in process `syz.3.12107'. [ 795.194421][T15246] netlink: 'syz.3.12107': attribute type 13 has an invalid length. [ 795.354737][T15246] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.396328][T15259] netlink: 'syz.1.12116': attribute type 10 has an invalid length. [ 795.467516][T15246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.481274][T15246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.517496][T15259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.526164][T15259] team0: Port device bond0 added [ 795.531406][ T1652] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.542622][ T1652] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.570538][ T1652] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.590533][ T1652] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.972400][T15288] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 797.358286][T15294] loop2: detected capacity change from 0 to 2048 [ 797.415152][T15294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 797.448432][T15300] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 797.456429][T15300] netlink: 184 bytes leftover after parsing attributes in process `syz.4.12131'. [ 797.465915][T15300] netlink: 'syz.4.12131': attribute type 13 has an invalid length. [ 797.518882][T13607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.571890][T15303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 797.686299][T15318] xt_hashlimit: max too large, truncated to 1048576 [ 797.835708][T15327] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.356804][T15332] siw: device registration error -23 [ 798.384186][T15327] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.456223][T15327] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.745506][T15327] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.798978][T15341] !yz!: rxe_newlink: already configured on team_slave_0 [ 798.821550][T15341] netlink: 184 bytes leftover after parsing attributes in process `syz.5.12147'. [ 798.851777][ T407] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.883596][ T407] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.892936][T15341] netlink: 'syz.5.12147': attribute type 13 has an invalid length. [ 798.921623][ T407] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.953656][ T407] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.471514][T15372] xt_hashlimit: max too large, truncated to 1048576 [ 799.517697][T15375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12157'. [ 799.864274][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 799.864357][ T29] audit: type=1326 audit(1767172264.603:43584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.5.12165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 799.909868][ T29] audit: type=1326 audit(1767172264.613:43585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.5.12165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 799.933628][ T29] audit: type=1326 audit(1767172264.613:43586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.5.12165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 799.957360][ T29] audit: type=1326 audit(1767172264.613:43587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.5.12165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 799.980991][ T29] audit: type=1326 audit(1767172264.613:43588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.5.12165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 800.004732][ T29] audit: type=1326 audit(1767172264.613:43589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.5.12165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5aa9c3df90 code=0x7ffc0000 [ 800.028408][ T29] audit: type=1326 audit(1767172264.613:43590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.5.12165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 800.052246][ T29] audit: type=1326 audit(1767172264.613:43591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.5.12165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 800.075744][ T29] audit: type=1326 audit(1767172264.613:43592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.5.12165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9c3f749 code=0x7ffc0000 [ 800.099415][ T29] audit: type=1326 audit(1767172264.633:43593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15393 comm="syz.3.12166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88d81f749 code=0x7ffc0000 [ 800.293379][T15418] xt_hashlimit: max too large, truncated to 1048576 [ 800.453634][T15435] netlink: 'syz.5.12168': attribute type 4 has an invalid length. [ 800.461592][T15435] netlink: 17 bytes leftover after parsing attributes in process `syz.5.12168'. [ 800.630546][T15441] netlink: 'syz.3.12183': attribute type 10 has an invalid length. [ 800.868680][T15461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12189'. [ 801.305611][T15472] xt_hashlimit: max too large, truncated to 1048576 [ 801.374461][T15473] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.442803][T15473] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.502717][T15473] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.567938][T15473] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.634060][ T407] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.661053][ T407] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.679478][ T407] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.688086][ T407] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.987042][T15507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12209'. [ 802.192392][T15519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.201056][T15519] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.211507][T15519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 802.422323][T15525] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 802.776869][T15533] tc_dump_action: action bad kind [ 802.869269][T15545] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12223'. [ 803.359262][T15565] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 803.413773][T15566] netlink: 'syz.4.12226': attribute type 4 has an invalid length. [ 803.421719][T15566] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12226'. [ 804.783237][T15598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.810927][T15598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 804.872120][T15603] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 804.886824][T14141] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x4 [ 804.894626][T14141] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x2 [ 804.902407][T14141] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x0 [ 804.910069][T14141] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x0 [ 804.917876][T14141] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x0 [ 804.925662][T14141] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x0 [ 804.933411][T14141] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x0 [ 804.941139][T14141] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x0 [ 804.948792][T14141] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x0 [ 804.956492][T14141] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x0 [ 804.971093][T15603] netlink: 184 bytes leftover after parsing attributes in process `syz.3.12245'. [ 804.980554][T15603] netlink: 'syz.3.12245': attribute type 13 has an invalid length. [ 805.031636][T14141] hid-generic 0000:3000000:0000.00B5: hidraw0: HID v0.00 Device [sy] on syz0 [ 805.567254][T15623] siw: device registration error -23 [ 805.894351][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 805.894370][ T29] audit: type=1326 audit(1767172270.633:43983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.1.12253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 806.117879][ T29] audit: type=1326 audit(1767172270.663:43984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.1.12253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 806.141680][ T29] audit: type=1326 audit(1767172270.663:43985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.1.12253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 806.165333][ T29] audit: type=1326 audit(1767172270.663:43986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.1.12253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 806.189117][ T29] audit: type=1326 audit(1767172270.663:43987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.1.12253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 806.212845][ T29] audit: type=1326 audit(1767172270.663:43988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.1.12253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 806.236404][ T29] audit: type=1326 audit(1767172270.663:43989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.1.12253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 806.260190][ T29] audit: type=1326 audit(1767172270.663:43990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.1.12253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 806.283843][ T29] audit: type=1326 audit(1767172270.663:43991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.1.12253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f696cc9df90 code=0x7ffc0000 [ 806.307496][ T29] audit: type=1326 audit(1767172270.663:43992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.1.12253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 807.015879][T15645] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 807.032106][T15645] netlink: 184 bytes leftover after parsing attributes in process `syz.1.12259'. [ 807.054453][T15645] netlink: 'syz.1.12259': attribute type 13 has an invalid length. [ 807.145197][T15645] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.152512][T15645] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.192623][T15655] block device autoloading is deprecated and will be removed. [ 807.303700][T15645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.334352][T15645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.437852][ T3507] syz0: Port: 1 Link DOWN [ 807.450805][ T9148] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.459290][ T9148] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.469014][ T9148] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.477583][ T9148] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.472536][T15692] netlink: 'syz.2.12270': attribute type 4 has an invalid length. [ 808.480413][T15692] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12270'. [ 808.678337][T15704] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 808.960993][ T3515] hid-generic 0000:3000000:0000.00B6: hidraw0: HID v0.00 Device [sy] on syz0 [ 809.082461][T15717] netlink: 184 bytes leftover after parsing attributes in process `syz.5.12285'. [ 809.103761][T15717] netlink: 'syz.5.12285': attribute type 13 has an invalid length. [ 810.376111][T15751] netlink: 184 bytes leftover after parsing attributes in process `syz.4.12298'. [ 810.385670][T15751] netlink: 'syz.4.12298': attribute type 13 has an invalid length. [ 810.901124][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 810.901140][ T29] audit: type=1326 audit(1767172275.643:44269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.1.12303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f696ccd2005 code=0x7ffc0000 [ 810.950926][ T29] audit: type=1326 audit(1767172275.673:44270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.1.12303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f696ccd2005 code=0x7ffc0000 [ 810.974772][ T29] audit: type=1326 audit(1767172275.603:44253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.1.12303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 810.998462][ T29] audit: type=1326 audit(1767172275.673:44271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.1.12303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f696ccd2005 code=0x7ffc0000 [ 811.022187][ T29] audit: type=1326 audit(1767172275.673:44272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.1.12303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f696ccd2005 code=0x7ffc0000 [ 811.045850][ T29] audit: type=1326 audit(1767172275.673:44273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.1.12303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f696ccd2005 code=0x7ffc0000 [ 811.069566][ T29] audit: type=1326 audit(1767172275.673:44274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.1.12303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f696ccd2005 code=0x7ffc0000 [ 811.093244][ T29] audit: type=1326 audit(1767172275.673:44275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.1.12303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f696ccd2005 code=0x7ffc0000 [ 811.116974][ T29] audit: type=1326 audit(1767172275.673:44276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.1.12303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f696ccd2005 code=0x7ffc0000 [ 811.140657][ T29] audit: type=1326 audit(1767172275.683:44277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.1.12303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f696ccd2005 code=0x7ffc0000 [ 811.461338][T15781] netlink: 184 bytes leftover after parsing attributes in process `syz.2.12309'. [ 811.477375][T15781] netlink: 'syz.2.12309': attribute type 13 has an invalid length. [ 811.490897][T15785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12308'. [ 811.651923][ T1652] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.673451][ T1652] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.681975][ T1652] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.690409][ T1652] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.145596][T15799] loop2: detected capacity change from 0 to 512 [ 812.153184][T15799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 812.172992][T15799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.186007][T15799] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 812.198401][T15799] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 812.223959][T13607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.391663][T15821] netlink: 184 bytes leftover after parsing attributes in process `syz.5.12321'. [ 812.401274][T15821] netlink: 'syz.5.12321': attribute type 13 has an invalid length. [ 812.496799][T15829] netlink: 'syz.1.12324': attribute type 30 has an invalid length. [ 812.558721][T15835] loop2: detected capacity change from 0 to 512 [ 812.566627][T15835] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 812.583543][T15835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.596373][T15835] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 812.618407][T15835] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 812.644996][T13607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.743593][T15849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12330'. [ 813.111745][T15854] netlink: 184 bytes leftover after parsing attributes in process `syz.4.12332'. [ 813.185600][T15857] netlink: 'syz.4.12332': attribute type 13 has an invalid length. [ 813.617926][T15894] netlink: 184 bytes leftover after parsing attributes in process `syz.2.12348'. [ 813.627485][T15894] netlink: 'syz.2.12348': attribute type 13 has an invalid length. [ 813.745917][T15907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12353'. [ 814.570431][T15932] netlink: 184 bytes leftover after parsing attributes in process `syz.5.12363'. [ 814.579951][T15932] netlink: 'syz.5.12363': attribute type 13 has an invalid length. [ 814.620278][T15935] tc_dump_action: action bad kind [ 815.706690][T15945] ================================================================== [ 815.714823][T15945] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 815.721784][T15945] [ 815.724117][T15945] read-write to 0xffff88812327312c of 4 bytes by task 15935 on cpu 1: [ 815.732283][T15945] fifo_open+0x86/0x5d0 [ 815.736456][T15945] do_dentry_open+0x54b/0xa60 [ 815.741157][T15945] vfs_open+0x37/0x1e0 [ 815.745258][T15945] path_openat+0x1ddd/0x23b0 [ 815.749879][T15945] do_filp_open+0x109/0x230 [ 815.754406][T15945] do_sys_openat2+0xa6/0x150 [ 815.759026][T15945] __x64_sys_open+0xe6/0x110 [ 815.763631][T15945] x64_sys_call+0x166f/0x3000 [ 815.768327][T15945] do_syscall_64+0xca/0x2b0 [ 815.772857][T15945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.778769][T15945] [ 815.781098][T15945] read to 0xffff88812327312c of 4 bytes by task 15945 on cpu 0: [ 815.788743][T15945] wait_for_partner+0xf7/0x1c0 [ 815.793523][T15945] fifo_open+0x462/0x5d0 [ 815.797783][T15945] do_dentry_open+0x54b/0xa60 [ 815.802475][T15945] vfs_open+0x37/0x1e0 [ 815.806565][T15945] path_openat+0x1ddd/0x23b0 [ 815.811191][T15945] do_filp_open+0x109/0x230 [ 815.815715][T15945] do_sys_openat2+0xa6/0x150 [ 815.820328][T15945] __x64_sys_open+0xe6/0x110 [ 815.824939][T15945] x64_sys_call+0x166f/0x3000 [ 815.829636][T15945] do_syscall_64+0xca/0x2b0 [ 815.834164][T15945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.840079][T15945] [ 815.842409][T15945] value changed: 0x00000001 -> 0x00000002 [ 815.848132][T15945] [ 815.850463][T15945] Reported by Kernel Concurrency Sanitizer on: [ 815.856627][T15945] CPU: 0 UID: 0 PID: 15945 Comm: syz.2.12364 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 815.868199][T15945] Tainted: [W]=WARN [ 815.872007][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 815.882072][T15945] ================================================================== [ 815.910887][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 815.910957][ T29] audit: type=1326 audit(1767172280.633:44724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15949 comm="syz.1.12371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 815.940895][ T29] audit: type=1326 audit(1767172280.633:44725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15949 comm="syz.1.12371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 815.964919][ T29] audit: type=1326 audit(1767172280.643:44726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15949 comm="syz.1.12371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000 [ 815.988588][ T29] audit: type=1326 audit(1767172280.643:44727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15949 comm="syz.1.12371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f696cc9f749 code=0x7ffc0000