last executing test programs: 2.931942468s ago: executing program 0 (id=6331): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x10000004}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0xfffffffd, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xad52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x2}, {0x3, 0x8, 0xc, 0x83, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0x800ec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0xc}, {0x6, 0x4, 0x5, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x80000001, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0x7, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0x2000000a}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0x100, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x7769}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0xfffffffd}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x4, 0x54, 0x8, 0x9, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x3, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0xa, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xf, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0x10, 0x1}, {0xffffffc0, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x5, 0x5, 0x0, 0x7}, {0xa, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) 2.913516459s ago: executing program 0 (id=6332): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.897329701s ago: executing program 0 (id=6333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) r2 = io_uring_setup(0x3eac, &(0x7f0000000240)={0x0, 0x8517, 0x40, 0xffffffff, 0x1da}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000780)='GPL\x00', 0xc67, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)="8807", 0x2}], 0x1}, 0x4048043) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001081600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x4800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x5, 0xfff, 0xf06, 0x1, 0x44, 0xfffffff9, 0x5}, 0x9c) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) fcntl$setstatus(r2, 0x4, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, 0x0, 0xa4ff) r11 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r11, 0x0) r12 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r12, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000000000000001, 0x0, 0x0, 0x403, 0x30, 0x2, 0x0, 0x4}) setsockopt$XDP_TX_RING(r9, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) keyctl$set_reqkey_keyring(0xe, 0x2) 2.478912291s ago: executing program 0 (id=6341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) 2.463854833s ago: executing program 0 (id=6342): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x2, &(0x7f0000000640)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000680)='syzkaller\x00', 0x7, 0xad, &(0x7f0000000780)=""/173, 0x40f00, 0x14, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000006c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0xd, 0x1, 0x7a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r0], 0x0, 0x10, 0x5c9a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="03113875c492b796ffffff00000004001801000020206925000000"], &(0x7f0000000600)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000004000000000000000010000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x3004d91, &(0x7f0000000080)={[{@noinit_itable}]}, 0x1, 0x523, &(0x7f0000000a80)="$eJzs3c1vHGcZAPBnNrtJnDi1+ThAJUKhRU4F2bVr2locSpEQnCohyj0Ye21ZXnst77qNVxV1/gIkhACJE1y4IPEHIKFIXDgipEpwBqkIhCCFAwfooJ2d9Vd27W262XXs30+azPvO1/O8m8zszOybmQAurGci4tWIeD9N0+cjYiqSbHohH2KvM7SXe+/BW0vtIYk0ff0fSbZku97dVpKPr+erXY2Ib3494jvJw3Ebu631xVqtup3XK82NrUpjt3V7bWNxtbpa3Zyfn3tp4eWFFxdmh9LOGxHxylf/8sPv/fxrr/z6C2/++c7fbn23ndZkPv9wOz6g4kkzO00vZZ/F4RW2HzHYWVTMWpibGGyde48xHwAA+muf4380Ij4bEc/HVFw6+XQWAAAAeAKlX56M/yYRaW+X+0wHAAAAniCFrA9sUijnfQEmo1Aolzt9eD8e1wq1eqP5+ZX6zuZyp6/sdJQKK2u16mzWVzirJ+36XFY+qL9wrD5/pXO/4QdTE1m9vFSvLY/75gcAAABcENePXf//e6pz/Q8AAACcM9PjTgAAAAB47Fz/AwAAwPnn+h8AAADOtW+89tpERKTd918vv7G7s15/4/ZytbFe3thZKi/Vt7fKq/X6avbMvo3Ttler17e+GJs7dyvNaqNZaey27mzUdzabd9aOvAIbAAAAGKGPfPr+H5OI2PvSRDa0XR53UsBIFPdLST7usff/6anO+N0RJQWMxKUBlnn3yggSAUauOO4EgLEpjTsBYOySU+b37bzzu3z8meHmAwAADN/MJ/v//l84cc29k2cDZ56dGC6uY/t/2jauXIDRyn7/H7TDr5MFOFdKA/UABM6zD/37/6lcVwAAwLhNZkNSKOe39yajUCiXI25krwUoJStrtepsRDwVEX+YKl1p1+diwP84CAAAAAAAAAAAAAAAAAAAAAAAAABk0jTpvPQHAAAAOLciCn9NfpNk7/+amXpu8vj9gcvJf6Yif0Xomz95/Ud3F5vN7bn29H/uT2/+OJ/+wjjuYAAAAADHda/Tu9fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBM7z14a6k7jDLu378SEdO94hfjaja+GqWIuPavJIqH1ksi4tIQ4u/di4hP9IqftNPaD9kr/sTjjx/T+afQK/71IcSHi+x++/jzaq/9rxDPZOPe+18x4kj9UR05/rVuHjn+do9/l/rs/zcGjPH0O7+s9I1/L+LpYu/jTzd+0if+swPG//a3Wq1+89KfRsz0/P5JjsSqNDe2Ko3d1u21jcXV6mp1c35+7qWFlxdeXJitrKzVqvmfPWN8/1O/ev+k9l/rE3/6lPY/N2D7//fO3Qcf6xRLB1Mn9uPferZH/N/+LF/u4fiF/Lvvc3m5PX+mW97rlA+7+Yvf3zyp/csH7S99kL//WwO2fyg7CgAwNI3d1vpirVbdfsIKb+f5n75w+zzrbOT8CIXkbKRxXgtvD3WDaZqm7X+TPWbdj4hBtpPEWfhYssJ4j0sAAMDwHZz0jzsTAAAAAAAAAAAAAAAAAAAAuLgefvpXmsaQH0J2PObefinxZGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mz4fwAAAP//j6PX8g==") sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 1.731063313s ago: executing program 2 (id=6346): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 1.372959098s ago: executing program 2 (id=6348): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x20000000002}, 0x18) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB="7f454c46040700030700000000000000020003"], 0x58) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0x1, 0x0, 0x0, 0x727c45cd4283345, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 1.300293575s ago: executing program 2 (id=6352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) 1.263099228s ago: executing program 3 (id=6353): listen(0xffffffffffffffff, 0x3) open_by_handle_at(0xffffffffffffffff, 0x0, 0x280500) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 1.232156401s ago: executing program 2 (id=6355): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x20000000002}, 0x18) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB="7f454c46040700030700000000000000020003"], 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0x1, 0x0, 0x0, 0x727c45cd4283345, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 1.203013504s ago: executing program 2 (id=6356): syz_emit_ethernet(0x93, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x59, 0x2c, 0x0, @remote, @local, {[], {{0xfff8, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {"90432c2c47fdb08f762fef2b64d8f8c66c3bcf39a3efed498aec5751370e222a0662adbac9ec5364e124b7bad4559d27b4921fc562038041bb77227d18f6597a7f53105581"}}}}}}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x0, 0x3938700}}, &(0x7f0000000680)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet_icmp(0x2, 0x2, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @nl=@unspec, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000200)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000000)="cbc630ee217d9247334a6d54da02dcb83c970af33ef1", 0x16}, {&(0x7f0000000080)="f33da8567e7b76afc772fa78027124ca6dfb4408b0aa9c48dae7a3e894880756710f", 0x22}, {&(0x7f0000000300)="712a1d07df0bebb1585aee611a4fc44f8d2c60734dc8995a82ccd4c3a44279d520cc4f3462eecef7103ba3ce0b923467f825a75f90ad5d137a09d34df775084571415c980744839920e1ba5feb23c8965404c28953a7ceab1d48fca0cd7a1603d35e1b3c70d3b7e84999e9f2", 0x6c}], 0x3, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0xdb}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x321}}], 0x48}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4000001) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.199128324s ago: executing program 3 (id=6357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = syz_io_uring_setup(0xa71, &(0x7f0000000380)={0x0, 0x5885, 0x1, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x2000000000000094, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r1, 0x351e, 0xd3fd, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) r7 = socket$inet_udplite(0x2, 0x2, 0x88) shmget(0x0, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) setsockopt$IPT_SO_SET_REPLACE(r7, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x40000000, 0x0, &(0x7f0000000000), 0x2000000) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84840) write$P9_RAUTH(r11, &(0x7f0000000280)={0x14, 0x67, 0x1, {0x1, 0x3, 0x6}}, 0x14) 1.044806249s ago: executing program 1 (id=6359): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 1.026344331s ago: executing program 1 (id=6360): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) setuid(0x0) 992.500114ms ago: executing program 1 (id=6361): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) 972.506526ms ago: executing program 1 (id=6362): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000001, 0x12, r2, 0x100000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)={@fallback, 0xffffffffffffffff, 0x10}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xc, [0x4, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x4, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x1, 0x2}]}, {0x0, [0x61, 0x30, 0x5f, 0x2e, 0x61]}}, &(0x7f00000000c0)=""/122, 0x2b, 0x7a, 0x0, 0x6}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x1412, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x10) 512.317811ms ago: executing program 0 (id=6363): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x2, &(0x7f0000000640)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000680)='syzkaller\x00', 0x7, 0xad, &(0x7f0000000780)=""/173, 0x40f00, 0x14, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000006c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0xd, 0x1, 0x7a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r0], 0x0, 0x10, 0x5c9a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="03113875c492b796ffffff00000004001801000020206925000000"], &(0x7f0000000600)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000004000000000000000010000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x3004d91, &(0x7f0000000080)={[{@noinit_itable}]}, 0x1, 0x523, &(0x7f0000000a80)="$eJzs3c1vHGcZAPBnNrtJnDi1+ThAJUKhRU4F2bVr2locSpEQnCohyj0Ye21ZXnst77qNVxV1/gIkhACJE1y4IPEHIKFIXDgipEpwBqkIhCCFAwfooJ2d9Vd27W262XXs30+azPvO1/O8m8zszOybmQAurGci4tWIeD9N0+cjYiqSbHohH2KvM7SXe+/BW0vtIYk0ff0fSbZku97dVpKPr+erXY2Ib3494jvJw3Ebu631xVqtup3XK82NrUpjt3V7bWNxtbpa3Zyfn3tp4eWFFxdmh9LOGxHxylf/8sPv/fxrr/z6C2/++c7fbn23ndZkPv9wOz6g4kkzO00vZZ/F4RW2HzHYWVTMWpibGGyde48xHwAA+muf4380Ij4bEc/HVFw6+XQWAAAAeAKlX56M/yYRaW+X+0wHAAAAniCFrA9sUijnfQEmo1Aolzt9eD8e1wq1eqP5+ZX6zuZyp6/sdJQKK2u16mzWVzirJ+36XFY+qL9wrD5/pXO/4QdTE1m9vFSvLY/75gcAAABcENePXf//e6pz/Q8AAACcM9PjTgAAAAB47Fz/AwAAwPnn+h8AAADOtW+89tpERKTd918vv7G7s15/4/ZytbFe3thZKi/Vt7fKq/X6avbMvo3Ttler17e+GJs7dyvNaqNZaey27mzUdzabd9aOvAIbAAAAGKGPfPr+H5OI2PvSRDa0XR53UsBIFPdLST7usff/6anO+N0RJQWMxKUBlnn3yggSAUauOO4EgLEpjTsBYOySU+b37bzzu3z8meHmAwAADN/MJ/v//l84cc29k2cDZ56dGC6uY/t/2jauXIDRyn7/H7TDr5MFOFdKA/UABM6zD/37/6lcVwAAwLhNZkNSKOe39yajUCiXI25krwUoJStrtepsRDwVEX+YKl1p1+diwP84CAAAAAAAAAAAAAAAAAAAAAAAAABk0jTpvPQHAAAAOLciCn9NfpNk7/+amXpu8vj9gcvJf6Yif0Xomz95/Ud3F5vN7bn29H/uT2/+OJ/+wjjuYAAAAADHda/Tu9fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBM7z14a6k7jDLu378SEdO94hfjaja+GqWIuPavJIqH1ksi4tIQ4u/di4hP9IqftNPaD9kr/sTjjx/T+afQK/71IcSHi+x++/jzaq/9rxDPZOPe+18x4kj9UR05/rVuHjn+do9/l/rs/zcGjPH0O7+s9I1/L+LpYu/jTzd+0if+swPG//a3Wq1+89KfRsz0/P5JjsSqNDe2Ko3d1u21jcXV6mp1c35+7qWFlxdeXJitrKzVqvmfPWN8/1O/ev+k9l/rE3/6lPY/N2D7//fO3Qcf6xRLB1Mn9uPferZH/N/+LF/u4fiF/Lvvc3m5PX+mW97rlA+7+Yvf3zyp/csH7S99kL//WwO2fyg7CgAwNI3d1vpirVbdfsIKb+f5n75w+zzrbOT8CIXkbKRxXgtvD3WDaZqm7X+TPWbdj4hBtpPEWfhYssJ4j0sAAMDwHZz0jzsTAAAAAAAAAAAAAAAAAAAAuLgefvpXmsaQH0J2PObefinxZGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mz4fwAAAP//j6PX8g==") sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 364.149605ms ago: executing program 4 (id=6366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400"], 0xa8}}, 0x0) 338.240507ms ago: executing program 3 (id=6367): listen(0xffffffffffffffff, 0x3) open_by_handle_at(0xffffffffffffffff, 0x0, 0x280500) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 310.45008ms ago: executing program 4 (id=6368): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) 284.671082ms ago: executing program 4 (id=6369): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) 251.644316ms ago: executing program 4 (id=6370): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 234.172507ms ago: executing program 4 (id=6371): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="92208f8dd2478c4248608a57ea023ef8845944fce569f274772ca5201b4d19c9435b225c2703c4693641c3dab414ccfaa1ac12e42d3a51a9fd90dbb8dfe62fb80628dedad9cd7198cb4a3151acd3756581ae75ee414b0456b64ef7cc12f7f5a3fc858a533068bf99853d8609541e6b600f496ce1dfa65b139a86732db5e92567e310c4de67464d7250876ff8485fc19836a302e2d02a707c1a4324c8624df0f5f22dcebd53ffd3d6cd01d6d0d6ae9e8c05db3db0e1ac10e46b5cda59dfe7ab7cffd6bf7efd4d1b7068ef0b878aff95af9e3c3cdf815921a9ffe2c0f97cdeaba5e6a40289c27f3b0339b98f8cd7f6684801e60f7b"], 0x4, 0x7dc, &(0x7f0000002a00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[], 0x202400) r3 = syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf906, 0x800, 0x0, 0x308}, &(0x7f0000000080), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f00000008c0)={0xa, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000800)=[0x2, 0x4]}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000190c0)='./file1\x00', 0x129240, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000192c0)={0x11, 0xc, &(0x7f0000019140)=ANY=[], &(0x7f0000019180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000019280)={&(0x7f0000019100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000019240)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fddbdf251500000008002c000000000008002a000600000008000300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="050029000100000008000300", @ANYRES32=0x0, @ANYBLOB="08002c00060000000c000600020000000200000091f837cd364a2a4e04b2084aad39fda3dc26d561d4bb775ece36db5f6e06862e79b8befec90e096334e92af1636b606a75b9379fa9f4f916ba15c158d7c0e3"], 0x58}, 0x1, 0x0, 0x0, 0x40855}, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) io_pgetevents(0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0) 134.228217ms ago: executing program 1 (id=6372): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 133.552047ms ago: executing program 3 (id=6373): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000885000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) 96.373781ms ago: executing program 1 (id=6374): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400"], 0xa8}}, 0x0) 95.408861ms ago: executing program 2 (id=6375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d000000000000002800"], 0x0, 0x42, 0x0, 0xfffffffd}, 0x28) 43.755236ms ago: executing program 3 (id=6376): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) 42.258596ms ago: executing program 3 (id=6377): symlink(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000700), 0x5, r1}, 0x38) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './file0/../file0\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x28) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={r5, 0x6c6}, &(0x7f0000000400)=0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) 0s ago: executing program 4 (id=6378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000d00)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000000000001f0a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4080) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): yz.3.5071' uses deprecated v2 capabilities in a way that may be insecure [ 339.976703][T19030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5068'. [ 339.985743][T19030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5068'. [ 340.029576][T19034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5075'. [ 340.162814][T19046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5080'. [ 340.200099][T19051] lo speed is unknown, defaulting to 1000 [ 340.266669][T19051] ip6_vti0 speed is unknown, defaulting to 1000 [ 340.361121][T19054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5081'. [ 340.431865][T19062] netlink: 'syz.1.5085': attribute type 1 has an invalid length. [ 340.439813][T19062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5085'. [ 340.476763][T19062] netlink: 'syz.1.5085': attribute type 1 has an invalid length. [ 340.593385][T19062] cgroup: fork rejected by pids controller in /syz1 [ 340.725481][T19060] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 341.071737][T19793] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.114628][T19910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5090'. [ 341.141750][T20055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5091'. [ 341.162611][T19793] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.254695][T19793] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.458535][T19793] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.659878][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.704325][T17574] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.752439][T10368] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.813148][T17562] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.580221][T20538] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 342.773409][T20565] netlink: 'syz.2.5115': attribute type 1 has an invalid length. [ 342.782003][T20565] netlink: 'syz.2.5115': attribute type 1 has an invalid length. [ 342.791443][T20568] lo speed is unknown, defaulting to 1000 [ 342.870730][T20565] cgroup: fork rejected by pids controller in /syz2 [ 342.890744][T20568] ip6_vti0 speed is unknown, defaulting to 1000 [ 343.363760][T20568] netlink: 'syz.1.5116': attribute type 3 has an invalid length. [ 343.640326][T25623] lo speed is unknown, defaulting to 1000 [ 343.782173][T25640] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.799023][T25623] ip6_vti0 speed is unknown, defaulting to 1000 [ 343.838986][T25640] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.898782][T25640] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.949269][T25640] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.035312][T25663] lo speed is unknown, defaulting to 1000 [ 344.104775][T25663] ip6_vti0 speed is unknown, defaulting to 1000 [ 344.551471][T25686] lo speed is unknown, defaulting to 1000 [ 344.672676][T25686] ip6_vti0 speed is unknown, defaulting to 1000 [ 344.694707][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 344.694726][ T29] audit: type=1326 audit(1766369574.565:17702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.3.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 344.725686][ T29] audit: type=1326 audit(1766369574.565:17703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.3.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 344.768731][ T29] audit: type=1326 audit(1766369574.625:17704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.3.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 344.792818][ T29] audit: type=1326 audit(1766369574.625:17705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.3.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 344.816571][ T29] audit: type=1326 audit(1766369574.625:17706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.3.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 344.840871][ T29] audit: type=1326 audit(1766369574.625:17707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.3.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 344.864913][ T29] audit: type=1326 audit(1766369574.625:17708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.3.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 344.888645][ T29] audit: type=1326 audit(1766369574.625:17709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.3.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 344.906443][T25695] lo speed is unknown, defaulting to 1000 [ 344.912343][ T29] audit: type=1326 audit(1766369574.625:17710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.3.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 344.941957][ T29] audit: type=1326 audit(1766369574.625:17711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.3.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 344.997597][T25696] __nla_validate_parse: 11 callbacks suppressed [ 344.997616][T25696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5145'. [ 345.064096][T25695] ip6_vti0 speed is unknown, defaulting to 1000 [ 345.344977][T17580] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.371933][T17580] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.388843][T25711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5151'. [ 345.395825][T17580] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.433038][T17580] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.534215][T25723] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 345.657566][T25735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5161'. [ 345.706427][T25737] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.777151][T25737] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.790299][T25748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5165'. [ 345.817582][T25750] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 345.887936][T25737] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.961764][T25737] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.085031][T17581] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.278798][T17581] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.287866][T17581] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.302895][T17581] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.421446][T25788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5183'. [ 346.828993][T25815] pim6reg: entered allmulticast mode [ 346.840751][T25815] pim6reg: left allmulticast mode [ 346.881511][T25817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5196'. [ 346.907710][T25815] lo speed is unknown, defaulting to 1000 [ 346.967129][T25815] ip6_vti0 speed is unknown, defaulting to 1000 [ 347.029420][T25824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5195'. [ 347.058532][T25824] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5195'. [ 347.083606][T25824] netlink: 'syz.2.5195': attribute type 3 has an invalid length. [ 347.091569][T25824] netlink: 'syz.2.5195': attribute type 1 has an invalid length. [ 347.099493][T25824] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.5195'. [ 347.659459][T25850] lo speed is unknown, defaulting to 1000 [ 347.695958][T25850] ip6_vti0 speed is unknown, defaulting to 1000 [ 348.088885][T25880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5219'. [ 348.498395][T25907] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.529447][T25907] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.569089][T25907] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.630452][T25907] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.203013][T25936] netlink: 'syz.3.5241': attribute type 1 has an invalid length. [ 349.211661][T25936] netlink: 'syz.3.5241': attribute type 1 has an invalid length. [ 349.305942][T15448] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.336996][T15448] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.345368][T15448] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.359519][T15448] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.533372][T25993] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.577357][T25995] lo speed is unknown, defaulting to 1000 [ 349.598759][T25993] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.626785][T25995] ip6_vti0 speed is unknown, defaulting to 1000 [ 349.670707][T26006] lo speed is unknown, defaulting to 1000 [ 349.681467][T25993] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.735132][T26006] ip6_vti0 speed is unknown, defaulting to 1000 [ 349.743832][T25993] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.831323][T26014] netlink: 'syz.1.5266': attribute type 1 has an invalid length. [ 349.840613][T26014] netlink: 'syz.1.5266': attribute type 1 has an invalid length. [ 350.115029][T27078] lo speed is unknown, defaulting to 1000 [ 350.176179][T27078] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.416881][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 350.416903][ T29] audit: type=1400 audit(1766369580.225:18203): avc: denied { ioctl } for pid=26016 comm="syz.3.5268" path="socket:[52904]" dev="sockfs" ino=52904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 351.007130][ T29] audit: type=1326 audit(1766369580.865:18204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 351.032027][ T29] audit: type=1326 audit(1766369580.865:18205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 351.056867][ T29] audit: type=1326 audit(1766369580.875:18206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 351.080640][ T29] audit: type=1326 audit(1766369580.875:18207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 351.104571][ T29] audit: type=1326 audit(1766369580.875:18208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 351.129010][ T29] audit: type=1326 audit(1766369580.875:18209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 351.153748][ T29] audit: type=1326 audit(1766369580.875:18210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 351.177868][ T29] audit: type=1326 audit(1766369580.875:18211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 351.202385][ T29] audit: type=1326 audit(1766369580.875:18212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 352.618065][T29177] tipc: Resetting bearer [ 352.714511][T29183] __nla_validate_parse: 10 callbacks suppressed [ 352.714530][T29183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5293'. [ 353.000105][T29195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5296'. [ 353.009340][T29195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5296'. [ 353.018384][T29195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5296'. [ 353.028291][T29195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5296'. [ 353.399798][T29224] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5303'. [ 353.518362][T29228] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 353.560057][T29231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5305'. [ 354.105174][T29248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5312'. [ 354.151657][T29250] lo speed is unknown, defaulting to 1000 [ 354.182412][T29250] ip6_vti0 speed is unknown, defaulting to 1000 [ 354.589876][T29274] netlink: 'syz.0.5322': attribute type 1 has an invalid length. [ 354.598106][T29274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5322'. [ 354.712017][T15466] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.739664][T15466] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.789373][T25993] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.839185][T25993] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.437421][ T29] kauditd_printk_skb: 815 callbacks suppressed [ 355.437438][ T29] audit: type=1326 audit(1766369585.315:19028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.1.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 355.476367][ T29] audit: type=1326 audit(1766369585.345:19029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.1.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 355.500184][ T29] audit: type=1326 audit(1766369585.345:19030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.1.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 355.524337][ T29] audit: type=1326 audit(1766369585.345:19031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.1.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 355.548218][ T29] audit: type=1326 audit(1766369585.345:19032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.1.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 355.571956][ T29] audit: type=1326 audit(1766369585.345:19033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.1.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 355.596415][ T29] audit: type=1326 audit(1766369585.345:19034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.1.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 355.620454][ T29] audit: type=1326 audit(1766369585.345:19035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.1.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 355.644491][ T29] audit: type=1326 audit(1766369585.345:19036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.1.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 355.668374][ T29] audit: type=1326 audit(1766369585.345:19037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.1.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 355.802453][T29332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5340'. [ 355.929275][T29355] netlink: 'syz.1.5344': attribute type 1 has an invalid length. [ 355.972608][T29355] netlink: 'syz.1.5344': attribute type 1 has an invalid length. [ 356.413674][T29363] lo speed is unknown, defaulting to 1000 [ 356.453596][T29363] ip6_vti0 speed is unknown, defaulting to 1000 [ 356.543032][T29369] netlink: 'syz.4.5347': attribute type 1 has an invalid length. [ 356.558145][T29364] lo speed is unknown, defaulting to 1000 [ 356.563995][T29369] netlink: 'syz.4.5347': attribute type 1 has an invalid length. [ 356.649866][T29364] ip6_vti0 speed is unknown, defaulting to 1000 [ 357.162251][T29399] netlink: 'syz.0.5360': attribute type 1 has an invalid length. [ 357.172383][T29399] netlink: 'syz.0.5360': attribute type 1 has an invalid length. [ 357.933953][T29440] __nla_validate_parse: 5 callbacks suppressed [ 357.933971][T29440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5370'. [ 357.965071][T29442] netlink: 'syz.4.5372': attribute type 1 has an invalid length. [ 357.972901][T29442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5372'. [ 357.982071][T29442] netlink: 'syz.4.5372': attribute type 1 has an invalid length. [ 358.391616][T29471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5382'. [ 358.406754][T29473] !yz!: rxe_newlink: already configured on team_slave_0 [ 359.463543][T29502] lo speed is unknown, defaulting to 1000 [ 359.551394][T29502] ip6_vti0 speed is unknown, defaulting to 1000 [ 359.690021][T29528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5400'. [ 359.891081][T29502] chnl_net:caif_netlink_parms(): no params data found [ 359.905331][T29536] netlink: 'syz.2.5402': attribute type 1 has an invalid length. [ 359.913332][T29536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5402'. [ 359.932235][T29536] netlink: 'syz.2.5402': attribute type 1 has an invalid length. [ 360.017924][T29502] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.025264][T29502] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.032890][T29502] bridge_slave_0: entered allmulticast mode [ 360.039493][T29502] bridge_slave_0: entered promiscuous mode [ 360.046532][T29502] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.053718][T29502] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.061358][T29502] bridge_slave_1: entered allmulticast mode [ 360.072995][T29502] bridge_slave_1: entered promiscuous mode [ 360.100950][T29502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.114017][T29502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.137854][T29502] team0: Port device team_slave_0 added [ 360.145059][T29502] team0: Port device team_slave_1 added [ 360.164136][T29502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.179111][T29502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.205826][T29502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.221685][T29502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.229100][T29502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.255361][T29502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.288250][T29502] hsr_slave_0: entered promiscuous mode [ 360.294545][T29502] hsr_slave_1: entered promiscuous mode [ 360.330965][T10368] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.372370][T10368] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.430638][T10368] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.450522][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 360.450542][ T29] audit: type=1326 audit(1766369590.325:19196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29540 comm="syz.2.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 360.509850][T29544] ref_ctr_offset mismatch. inode: 0x8ed offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x23000000 [ 360.529346][T10368] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.544815][ T29] audit: type=1326 audit(1766369590.425:19197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29540 comm="syz.2.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 360.606894][ T29] audit: type=1326 audit(1766369590.425:19198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29540 comm="syz.2.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 360.631541][ T29] audit: type=1326 audit(1766369590.425:19199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29540 comm="syz.2.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 360.655902][ T29] audit: type=1326 audit(1766369590.425:19200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29540 comm="syz.2.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 360.680298][ T29] audit: type=1326 audit(1766369590.425:19201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29540 comm="syz.2.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 360.704363][ T29] audit: type=1326 audit(1766369590.425:19202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29540 comm="syz.2.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 360.728028][ T29] audit: type=1326 audit(1766369590.425:19203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29540 comm="syz.2.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 360.751615][ T29] audit: type=1326 audit(1766369590.425:19204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29540 comm="syz.2.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 360.775615][ T29] audit: type=1326 audit(1766369590.425:19205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29540 comm="syz.2.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 360.987316][T10368] bond0 (unregistering): Released all slaves [ 361.033935][T29567] lo speed is unknown, defaulting to 1000 [ 361.088078][T29569] netlink: 'syz.2.5413': attribute type 3 has an invalid length. [ 361.091055][T29567] ip6_vti0 speed is unknown, defaulting to 1000 [ 361.096160][T29569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5413'. [ 361.134297][T29570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5412'. [ 361.378127][T29502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 361.384522][T29579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5416'. [ 361.413615][T10368] veth1_vlan: left promiscuous mode [ 361.421768][T10368] veth0_vlan: left promiscuous mode [ 361.500457][T10368] pim6reg (unregistering): left allmulticast mode [ 361.602966][T29502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 361.612679][T29502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 361.626384][T29502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 361.697302][T29502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.728953][T29502] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.749008][T17573] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.756147][T17573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.778055][T17584] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.785395][T17584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.832967][T10368] IPVS: stop unused estimator thread 0... [ 361.853116][T29614] lo speed is unknown, defaulting to 1000 [ 361.893698][T29617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5424'. [ 362.004861][T29502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.033749][T29614] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.310810][T29502] veth0_vlan: entered promiscuous mode [ 362.320308][T29502] veth1_vlan: entered promiscuous mode [ 362.340261][T29502] veth0_macvtap: entered promiscuous mode [ 362.358847][T29502] veth1_macvtap: entered promiscuous mode [ 362.379133][T29502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.391417][T29502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.405533][T17584] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.427242][T17584] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.451584][T17584] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.466115][T17584] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.588980][T29656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5394'. [ 363.205534][T29692] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 363.235429][T29692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5445'. [ 363.244617][T29692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5445'. [ 363.255289][T29692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5445'. [ 363.510270][T29721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5454'. [ 363.948396][T29732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5458'. [ 364.342394][T29753] loop0: detected capacity change from 0 to 8192 [ 364.532938][T29776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5479'. [ 365.771805][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 365.771823][ T29] audit: type=1326 audit(1766369595.645:19590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 365.823253][T29813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5490'. [ 365.984723][T29821] loop0: detected capacity change from 0 to 512 [ 366.004657][T29821] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 366.035842][T29821] EXT4-fs mount: 8 callbacks suppressed [ 366.035861][T29821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.117237][T29821] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.184425][T29827] netlink: 'syz.4.5495': attribute type 6 has an invalid length. [ 366.215255][T29827] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5495'. [ 366.230338][T29819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.462043][ T29] audit: type=1326 audit(1766369595.765:19591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 366.486215][ T29] audit: type=1326 audit(1766369595.765:19592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 366.510353][ T29] audit: type=1326 audit(1766369595.765:19593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 366.534646][ T29] audit: type=1326 audit(1766369595.765:19594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 366.558438][ T29] audit: type=1326 audit(1766369595.765:19595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 366.582259][ T29] audit: type=1326 audit(1766369595.765:19596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 366.606049][ T29] audit: type=1326 audit(1766369595.765:19597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 366.629935][ T29] audit: type=1326 audit(1766369595.765:19598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 366.654213][ T29] audit: type=1326 audit(1766369595.765:19599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ab278f749 code=0x7ffc0000 [ 366.733174][T29844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5501'. [ 366.887530][T29861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5507'. [ 368.745371][T30001] __nla_validate_parse: 6 callbacks suppressed [ 368.745390][T30001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5559'. [ 369.360416][T30010] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5558'. [ 370.777154][ T29] kauditd_printk_skb: 912 callbacks suppressed [ 370.777172][ T29] audit: type=1326 audit(1766369600.655:20512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30013 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 371.035313][ T29] audit: type=1326 audit(1766369600.685:20513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30013 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 371.059270][ T29] audit: type=1326 audit(1766369600.695:20514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30013 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 371.083467][ T29] audit: type=1326 audit(1766369600.695:20515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30013 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 371.156863][ T29] audit: type=1326 audit(1766369601.015:20516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30023 comm="syz.2.5569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 371.181186][ T29] audit: type=1326 audit(1766369601.015:20517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30023 comm="syz.2.5569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 371.205470][ T29] audit: type=1326 audit(1766369601.025:20518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30023 comm="syz.2.5569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 371.229470][ T29] audit: type=1326 audit(1766369601.025:20519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30023 comm="syz.2.5569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 371.254834][ T29] audit: type=1326 audit(1766369601.025:20520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30023 comm="syz.2.5569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 371.278761][ T29] audit: type=1326 audit(1766369601.025:20521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30023 comm="syz.2.5569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 371.479336][T30039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5571'. [ 371.896350][T30053] netlink: 'syz.3.5575': attribute type 1 has an invalid length. [ 371.904275][T30053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5575'. [ 372.196959][T30053] netlink: 'syz.3.5575': attribute type 1 has an invalid length. [ 372.298278][T30079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5582'. [ 372.318305][T30081] netlink: 'syz.4.5587': attribute type 1 has an invalid length. [ 372.326195][T30081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5587'. [ 372.383619][T30081] netlink: 'syz.4.5587': attribute type 1 has an invalid length. [ 372.492688][T30105] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5592'. [ 373.355130][T30147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5607'. [ 373.878698][T30174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5618'. [ 374.095432][T30188] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 374.443044][T30200] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5626'. [ 374.574999][T30202] netlink: 'syz.1.5627': attribute type 1 has an invalid length. [ 374.582856][T30202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5627'. [ 374.767701][T30202] netlink: 'syz.1.5627': attribute type 1 has an invalid length. [ 374.927445][T30209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5630'. [ 375.198153][T30221] netlink: 'syz.4.5637': attribute type 1 has an invalid length. [ 375.206365][T30221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5637'. [ 375.307365][T30221] netlink: 'syz.4.5637': attribute type 1 has an invalid length. [ 375.447228][T30227] netlink: 'syz.4.5640': attribute type 1 has an invalid length. [ 375.455013][T30227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5640'. [ 375.523430][T30227] netlink: 'syz.4.5640': attribute type 1 has an invalid length. [ 375.603505][T30238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5642'. [ 375.793261][ T29] kauditd_printk_skb: 608 callbacks suppressed [ 375.793276][ T29] audit: type=1326 audit(1766369605.665:21130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30224 comm="syz.0.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d9bf82005 code=0x7ffc0000 [ 375.848830][ T29] audit: type=1326 audit(1766369605.705:21131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30224 comm="syz.0.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d9bf82005 code=0x7ffc0000 [ 375.872861][ T29] audit: type=1326 audit(1766369605.705:21132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30224 comm="syz.0.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d9bf82005 code=0x7ffc0000 [ 375.896905][ T29] audit: type=1326 audit(1766369605.705:21133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30224 comm="syz.0.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d9bf82005 code=0x7ffc0000 [ 375.920902][ T29] audit: type=1326 audit(1766369605.705:21134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30224 comm="syz.0.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d9bf82005 code=0x7ffc0000 [ 375.944624][ T29] audit: type=1326 audit(1766369605.705:21135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30224 comm="syz.0.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d9bf82005 code=0x7ffc0000 [ 375.968433][ T29] audit: type=1326 audit(1766369605.715:21136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30224 comm="syz.0.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d9bf82005 code=0x7ffc0000 [ 375.992312][ T29] audit: type=1326 audit(1766369605.715:21137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30224 comm="syz.0.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d9bf82005 code=0x7ffc0000 [ 376.016124][ T29] audit: type=1326 audit(1766369605.715:21138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30224 comm="syz.0.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d9bf82005 code=0x7ffc0000 [ 376.040875][ T29] audit: type=1326 audit(1766369605.715:21139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30224 comm="syz.0.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d9bf82005 code=0x7ffc0000 [ 376.465640][T30274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5656'. [ 376.488393][T30272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5652'. [ 376.608318][T30286] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5661'. [ 376.967695][T30328] validate_nla: 2 callbacks suppressed [ 376.967710][T30328] netlink: 'syz.2.5678': attribute type 1 has an invalid length. [ 376.981472][T30328] netlink: 'syz.2.5678': attribute type 1 has an invalid length. [ 377.076191][T30335] bridge_slave_0: left allmulticast mode [ 377.082360][T30335] bridge_slave_0: left promiscuous mode [ 377.088120][T30335] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.097908][T30335] bridge_slave_1: left allmulticast mode [ 377.103753][T30335] bridge_slave_1: left promiscuous mode [ 377.109496][T30335] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.120316][T30335] bond0: (slave bond_slave_0): Releasing backup interface [ 377.130430][T30335] bond0: (slave bond_slave_1): Releasing backup interface [ 377.141958][T30335] team0: Port device team_slave_0 removed [ 377.152475][T30335] team0: Port device team_slave_1 removed [ 377.159701][T30335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.167296][T30335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.178293][T30335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.186319][T30335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.199460][T30335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 378.321644][T30402] netlink: 'syz.2.5704': attribute type 1 has an invalid length. [ 378.329492][T30402] netlink: 'syz.2.5704': attribute type 1 has an invalid length. [ 379.229024][T30435] netlink: 'syz.3.5716': attribute type 1 has an invalid length. [ 379.237343][T30435] __nla_validate_parse: 25 callbacks suppressed [ 379.237358][T30435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5716'. [ 379.253787][T30435] netlink: 'syz.3.5716': attribute type 1 has an invalid length. [ 380.823397][T30472] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5729'. [ 380.898919][T30472] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5729'. [ 381.027928][T30472] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5729'. [ 381.131078][T30479] lo speed is unknown, defaulting to 1000 [ 381.208989][T30501] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5736'. [ 381.220576][T30479] ip6_vti0 speed is unknown, defaulting to 1000 [ 381.284913][ T29] kauditd_printk_skb: 1087 callbacks suppressed [ 381.284933][ T29] audit: type=1326 audit(1766369611.155:22227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 381.376080][ T29] audit: type=1326 audit(1766369611.185:22228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 381.399899][ T29] audit: type=1326 audit(1766369611.185:22229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 381.423853][ T29] audit: type=1326 audit(1766369611.195:22230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 381.447558][ T29] audit: type=1326 audit(1766369611.195:22231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 381.472242][ T29] audit: type=1326 audit(1766369611.195:22232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 381.496256][ T29] audit: type=1326 audit(1766369611.195:22233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 381.520154][ T29] audit: type=1326 audit(1766369611.195:22234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 381.544479][ T29] audit: type=1326 audit(1766369611.195:22235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 381.568207][ T29] audit: type=1326 audit(1766369611.195:22236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 381.656777][T30479] chnl_net:caif_netlink_parms(): no params data found [ 381.672756][T17570] tipc: Disabling bearer [ 381.683019][T17576] smc: removing ib device syz2 [ 381.705817][T17570] bond0 (unregistering): Released all slaves [ 381.795333][T17570] bond1 (unregistering): Released all slaves [ 381.805896][T17570] bond2 (unregistering): Released all slaves [ 382.176769][T30532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5745'. [ 382.489805][T30479] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.496989][T30479] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.506928][T30532] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5745'. [ 382.515982][T30532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5745'. [ 382.597282][T30479] bridge_slave_0: entered allmulticast mode [ 382.603759][T30479] bridge_slave_0: entered promiscuous mode [ 382.660728][T30479] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.667921][T30479] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.709214][T30479] bridge_slave_1: entered allmulticast mode [ 382.717760][T30538] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5747'. [ 382.769090][T30479] bridge_slave_1: entered promiscuous mode [ 382.782733][T30538] hsr_slave_0: left promiscuous mode [ 382.827196][T30538] hsr_slave_1: left promiscuous mode [ 382.953103][T30479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.010018][T30479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.077467][T30479] team0: Port device team_slave_0 added [ 383.103629][T30479] team0: Port device team_slave_1 added [ 383.145105][T30479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.152162][T30479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.178690][T30479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.264203][T30479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.271288][T30479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.297584][T30479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.409418][T17570] tipc: Disabling bearer [ 383.415211][T17570] tipc: Left network mode [ 383.524590][T30479] hsr_slave_0: entered promiscuous mode [ 383.545780][T30479] hsr_slave_1: entered promiscuous mode [ 383.650245][T17576] smc: removing ib device syz1 [ 383.764256][T30561] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5755'. [ 383.938605][T30567] 9pnet: p9_errstr2errno: server reported unknown error [ 383.976730][T30479] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.987550][T30479] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.001108][T30479] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.042795][T30479] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.121929][T30479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.146718][T30479] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.169700][T17570] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.177535][T17570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.228786][T17570] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.236089][T17570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.287675][T30479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.294831][T30598] __nla_validate_parse: 3 callbacks suppressed [ 384.294849][T30598] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5765'. [ 384.298463][T30479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.374575][T30479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.539740][T30479] veth0_vlan: entered promiscuous mode [ 384.553231][T30621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5770'. [ 384.558270][T30479] veth1_vlan: entered promiscuous mode [ 384.562422][T30621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5770'. [ 384.576918][T30621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5770'. [ 384.587463][T30479] veth0_macvtap: entered promiscuous mode [ 384.623522][T30479] veth1_macvtap: entered promiscuous mode [ 384.637557][T30621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5770'. [ 384.652976][T30479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.671299][T30479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.694013][T17577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.722013][T17577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.749040][T17577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.766016][T17577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.777674][T30634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5771'. [ 385.176542][T30653] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5778'. [ 385.275902][T30658] netlink: 'syz.4.5780': attribute type 1 has an invalid length. [ 385.284085][T30658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5780'. [ 385.320681][T30658] netlink: 'syz.4.5780': attribute type 1 has an invalid length. [ 385.876936][T30681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5783'. [ 385.927529][T30687] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5789'. [ 386.360297][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 386.360318][ T29] audit: type=1326 audit(1766369616.235:22755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.4.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcaef9365e7 code=0x7ffc0000 [ 386.422199][ T29] audit: type=1326 audit(1766369616.235:22756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.4.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcaef8db829 code=0x7ffc0000 [ 386.445991][ T29] audit: type=1326 audit(1766369616.235:22757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.4.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcaef9365e7 code=0x7ffc0000 [ 386.469987][ T29] audit: type=1326 audit(1766369616.235:22758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.4.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcaef8db829 code=0x7ffc0000 [ 386.493873][ T29] audit: type=1326 audit(1766369616.235:22759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.4.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 386.517661][ T29] audit: type=1326 audit(1766369616.235:22760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.4.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 386.541555][ T29] audit: type=1326 audit(1766369616.235:22761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.4.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 386.565549][ T29] audit: type=1326 audit(1766369616.235:22762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.4.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 386.589332][ T29] audit: type=1326 audit(1766369616.235:22763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.4.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 386.613224][ T29] audit: type=1326 audit(1766369616.235:22764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.4.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaef93f749 code=0x7ffc0000 [ 388.384011][T30760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.440047][T30760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.523274][T30760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.600652][T30760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.701186][T17574] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.718105][T17574] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.737466][T30767] lo speed is unknown, defaulting to 1000 [ 388.748194][T17574] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.773737][T17574] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.784519][T30767] lo speed is unknown, defaulting to 1000 [ 388.813996][T30767] lo speed is unknown, defaulting to 1000 [ 388.831568][T30767] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 388.852568][T30767] lo speed is unknown, defaulting to 1000 [ 388.860489][T30767] lo speed is unknown, defaulting to 1000 [ 388.874385][T30767] lo speed is unknown, defaulting to 1000 [ 388.881733][T30767] lo speed is unknown, defaulting to 1000 [ 388.889101][T30767] lo speed is unknown, defaulting to 1000 [ 389.063633][T30794] lo speed is unknown, defaulting to 1000 [ 389.899604][T30815] __nla_validate_parse: 2 callbacks suppressed [ 389.899625][T30815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5837'. [ 390.171300][T30814] lo speed is unknown, defaulting to 1000 [ 390.385983][T30831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5842'. [ 390.523546][T30836] bridge2: entered promiscuous mode [ 390.573275][T30836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5845'. [ 390.610238][T30836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5845'. [ 390.636636][T30840] loop3: detected capacity change from 0 to 512 [ 390.650192][T30840] ext2: Unknown parameter 'subj_type' [ 390.657758][T30836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5845'. [ 391.280712][T30849] loop3: detected capacity change from 0 to 512 [ 391.309203][T30849] EXT4-fs (loop3): orphan cleanup on readonly fs [ 391.315926][T30849] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.5847: Failed to acquire dquot type 1 [ 391.328250][T30849] EXT4-fs (loop3): 1 truncate cleaned up [ 391.887333][T30849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 392.102326][ T29] kauditd_printk_skb: 1280 callbacks suppressed [ 392.102341][ T29] audit: type=1326 audit(1766369621.975:24043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.1.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 392.241097][ T29] audit: type=1326 audit(1766369622.015:24044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.1.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 392.264931][ T29] audit: type=1326 audit(1766369622.015:24045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.1.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 392.288652][ T29] audit: type=1326 audit(1766369622.015:24046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.1.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 392.312729][ T29] audit: type=1326 audit(1766369622.015:24047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.1.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 392.336587][ T29] audit: type=1326 audit(1766369622.015:24048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.1.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 392.360914][ T29] audit: type=1326 audit(1766369622.015:24049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.1.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 392.385064][ T29] audit: type=1326 audit(1766369622.015:24050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.1.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 392.408760][ T29] audit: type=1326 audit(1766369622.015:24051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.1.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 392.432660][ T29] audit: type=1326 audit(1766369622.015:24052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.1.5853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 392.477414][T30865] lo speed is unknown, defaulting to 1000 [ 392.763017][T30479] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.970238][T30884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5859'. [ 393.056499][T30875] loop3: detected capacity change from 0 to 512 [ 393.066325][T30888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5861'. [ 393.135555][T30875] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5856: bg 0: block 248: padding at end of block bitmap is not set [ 393.153510][T30875] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.5856: Failed to acquire dquot type 1 [ 393.175254][T30875] EXT4-fs (loop3): 1 truncate cleaned up [ 393.195925][T30875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.211220][T30875] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.255119][T30479] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.400950][T30903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 395.161397][T30915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5870'. [ 395.511970][T30925] loop3: detected capacity change from 0 to 512 [ 395.555811][T30925] ext2: Unknown parameter 'subj_type' [ 396.336359][T30944] loop3: detected capacity change from 0 to 512 [ 396.392663][T30944] EXT4-fs (loop3): orphan cleanup on readonly fs [ 396.400184][T30944] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.5880: Failed to acquire dquot type 1 [ 396.412608][T30944] EXT4-fs (loop3): 1 truncate cleaned up [ 396.594729][T30952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5883'. [ 397.024645][T30944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.281973][T30967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5889'. [ 397.344541][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 397.344558][ T29] audit: type=1326 audit(1766369627.215:24216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30976 comm="syz.2.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 397.393599][ T29] audit: type=1326 audit(1766369627.255:24217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30976 comm="syz.2.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 397.417298][ T29] audit: type=1326 audit(1766369627.255:24218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30976 comm="syz.2.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 397.441781][ T29] audit: type=1326 audit(1766369627.255:24219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30976 comm="syz.2.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 397.465543][ T29] audit: type=1326 audit(1766369627.255:24220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30976 comm="syz.2.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 397.489525][ T29] audit: type=1326 audit(1766369627.255:24221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30976 comm="syz.2.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 397.513309][ T29] audit: type=1326 audit(1766369627.255:24222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30976 comm="syz.2.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 397.537381][ T29] audit: type=1326 audit(1766369627.255:24223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30976 comm="syz.2.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 397.561454][ T29] audit: type=1326 audit(1766369627.255:24224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30976 comm="syz.2.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 397.585212][ T29] audit: type=1326 audit(1766369627.255:24225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30976 comm="syz.2.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 397.840596][T30986] v: renamed from ip6_vti0 (while UP) [ 397.873379][T30986] tipc: Disabling bearer [ 397.896674][T30979] lo speed is unknown, defaulting to 1000 [ 397.897200][T30479] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.005812][T30974] lo speed is unknown, defaulting to 1000 [ 398.084014][T30978] lo speed is unknown, defaulting to 1000 [ 398.230258][T31003] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5901'. [ 398.560157][T31016] bridge1: entered promiscuous mode [ 398.649971][T31021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5906'. [ 398.792723][T31018] lo speed is unknown, defaulting to 1000 [ 399.868423][T31051] loop3: detected capacity change from 0 to 512 [ 399.891018][T31057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5923'. [ 400.003857][T31051] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5920: bg 0: block 248: padding at end of block bitmap is not set [ 400.020402][T31051] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.5920: Failed to acquire dquot type 1 [ 400.044124][T31051] EXT4-fs (loop3): 1 truncate cleaned up [ 400.068776][T31051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.083935][T31051] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.160648][T30479] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.250548][T31073] loop3: detected capacity change from 0 to 512 [ 400.278761][T31077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=31077 comm=syz.2.5930 [ 400.327440][T31073] ext2: Unknown parameter 'subj_type' [ 400.404132][T17574] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.423099][T31086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5934'. [ 400.426854][T17574] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.465484][T17574] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.491739][T17574] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.535542][T31092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5936'. [ 400.728198][T31104] bridge1: entered promiscuous mode [ 401.120813][T31124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5947'. [ 401.285038][T31130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5948'. [ 401.367406][T31140] bridge1: entered promiscuous mode [ 401.499025][T31153] lo speed is unknown, defaulting to 1000 [ 401.518195][T31155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5958'. [ 401.690122][T31163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5959'. [ 401.744266][ T3926] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 401.752212][ T3926] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 401.781705][ T3926] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 401.805091][T31160] lo speed is unknown, defaulting to 1000 [ 401.847152][ T3926] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 401.989218][T31175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5964'. [ 402.344953][T31197] bridge1: entered promiscuous mode [ 402.409251][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 402.409270][ T29] audit: type=1326 audit(1766369632.285:24339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 402.489907][ T29] audit: type=1326 audit(1766369632.285:24340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 402.513647][ T29] audit: type=1326 audit(1766369632.285:24341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 402.537535][ T29] audit: type=1326 audit(1766369632.285:24342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 402.561156][ T29] audit: type=1326 audit(1766369632.285:24343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 402.585307][ T29] audit: type=1326 audit(1766369632.285:24344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 402.609127][ T29] audit: type=1326 audit(1766369632.285:24345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 402.632842][ T29] audit: type=1326 audit(1766369632.285:24346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 402.656515][ T29] audit: type=1326 audit(1766369632.285:24347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 402.680158][ T29] audit: type=1326 audit(1766369632.285:24348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 402.772597][T31208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5977'. [ 402.878946][T31220] lo speed is unknown, defaulting to 1000 [ 402.897886][T31223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5979'. [ 403.214254][T31238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5985'. [ 403.704742][T31260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.750432][T31260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.790333][T31271] bridge2: entered promiscuous mode [ 403.840433][T31260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.901008][T31260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.958825][T17574] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.966738][T31285] loop3: detected capacity change from 0 to 512 [ 403.971938][T17574] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.987530][T31285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 404.000591][T31285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.019302][T17574] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.027709][T31285] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.054935][T17580] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.140088][T31284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.172580][T31301] bridge2: entered promiscuous mode [ 404.289518][T31311] lo speed is unknown, defaulting to 1000 [ 405.482974][T31349] __nla_validate_parse: 3 callbacks suppressed [ 405.483009][T31349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6030'. [ 405.564097][T31346] lo speed is unknown, defaulting to 1000 [ 405.790180][T31350] lo speed is unknown, defaulting to 1000 [ 406.217804][T31376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6037'. [ 406.847107][T31390] lo speed is unknown, defaulting to 1000 [ 406.899601][T31391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6043'. [ 407.689890][T31416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6048'. [ 407.986915][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 407.986980][ T29] audit: type=1326 audit(1766369637.795:24822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.6051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 408.016933][ T29] audit: type=1326 audit(1766369637.795:24823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.6051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 408.040771][ T29] audit: type=1326 audit(1766369637.795:24824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.6051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 408.064489][ T29] audit: type=1326 audit(1766369637.795:24825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.6051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 408.088633][ T29] audit: type=1326 audit(1766369637.795:24826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.6051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 408.112388][ T29] audit: type=1326 audit(1766369637.795:24827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.6051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 408.136856][ T29] audit: type=1326 audit(1766369637.805:24828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.6051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 408.160968][ T29] audit: type=1326 audit(1766369637.805:24829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.6051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 408.184898][ T29] audit: type=1326 audit(1766369637.805:24830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.6051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 408.208631][ T29] audit: type=1326 audit(1766369637.805:24831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.6051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c441f749 code=0x7ffc0000 [ 409.356040][T31481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6076'. [ 409.685764][T31494] lo speed is unknown, defaulting to 1000 [ 411.329630][T31512] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.408884][T31512] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.489679][T31512] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.568918][T31512] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.645371][T17583] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.666854][T17583] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.701978][T17583] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.739427][T17583] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.878905][T31530] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6092'. [ 411.888071][T31530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6092'. [ 411.897322][T31530] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6092'. [ 411.977574][T31530] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6092'. [ 412.219636][T31536] bridge3: entered promiscuous mode [ 412.393770][T31547] bridge2: entered promiscuous mode [ 412.480507][T31552] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.550369][T31555] lo speed is unknown, defaulting to 1000 [ 412.591402][T31552] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.648880][T31552] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.729401][T31552] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.814333][T17574] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.837538][T17574] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.876019][T17574] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.914180][T17574] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.302417][T31581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6107'. [ 413.497614][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 413.497633][ T29] audit: type=1326 audit(1766369643.375:24978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 413.622452][ T29] audit: type=1326 audit(1766369643.405:24979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 413.646698][ T29] audit: type=1326 audit(1766369643.405:24980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 413.670554][ T29] audit: type=1326 audit(1766369643.405:24981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 413.694498][ T29] audit: type=1326 audit(1766369643.405:24982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 413.718305][ T29] audit: type=1326 audit(1766369643.405:24983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 413.741980][ T29] audit: type=1326 audit(1766369643.405:24984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 413.765646][ T29] audit: type=1326 audit(1766369643.405:24985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 413.789885][ T29] audit: type=1326 audit(1766369643.405:24986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 413.813564][ T29] audit: type=1326 audit(1766369643.405:24987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9bf4f749 code=0x7ffc0000 [ 414.021488][T31600] bridge3: entered promiscuous mode [ 414.783067][T17574] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.841865][T17574] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.873817][T31647] lo speed is unknown, defaulting to 1000 [ 414.901735][T17574] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.955493][T17574] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.987378][T31647] chnl_net:caif_netlink_parms(): no params data found [ 415.042232][T31647] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.049418][T31647] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.057021][T31647] bridge_slave_0: entered allmulticast mode [ 415.063916][T31647] bridge_slave_0: entered promiscuous mode [ 415.070970][T31647] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.078120][T31647] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.085484][T31647] bridge_slave_1: entered allmulticast mode [ 415.092054][T31647] bridge_slave_1: entered promiscuous mode [ 415.111859][T31647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.122805][T31647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.143912][T31647] team0: Port device team_slave_0 added [ 415.151020][T31647] team0: Port device team_slave_1 added [ 415.168232][T31647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.175328][T31647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.201400][T31647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.212966][T31647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.220072][T31647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.246400][T31647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.282139][T31647] hsr_slave_0: entered promiscuous mode [ 415.288590][T31647] hsr_slave_1: entered promiscuous mode [ 415.295145][T31647] debugfs: 'hsr0' already exists in 'hsr' [ 415.300927][T31647] Cannot create hsr debugfs directory [ 415.558134][T31696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6147'. [ 415.620282][T31691] lo speed is unknown, defaulting to 1000 [ 415.910370][T31712] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6154'. [ 416.482446][T31739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6160'. [ 416.491504][T31739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6160'. [ 417.078757][T17574] bond0 (unregistering): Released all slaves [ 417.210577][T17574] veth1_macvtap: left promiscuous mode [ 417.226422][T17574] veth0_macvtap: left promiscuous mode [ 417.236349][T17574] veth1_vlan: left promiscuous mode [ 417.273066][T17574] veth0_vlan: left promiscuous mode [ 417.702621][T31765] bridge0: port 3(ipvlan2) entered blocking state [ 417.709213][T31765] bridge0: port 3(ipvlan2) entered disabled state [ 417.717087][T31765] ipvlan2: entered allmulticast mode [ 417.722502][T31765] bridge0: entered allmulticast mode [ 417.731852][T31765] ipvlan2: left allmulticast mode [ 417.737077][T31765] bridge0: left allmulticast mode [ 417.852353][T31647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.869104][T31647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.887920][T31647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.899394][T31647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.950045][T31800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6181'. [ 417.959193][T31800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6181'. [ 417.968253][T31800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6181'. [ 418.003622][T31800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6181'. [ 418.038387][T31647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.085151][T31647] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.113450][T17588] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.121024][T17588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.138434][T17588] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.145578][T17588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.164326][T31647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.175017][T31647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.245400][T31647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.333543][T31647] veth0_vlan: entered promiscuous mode [ 418.351106][T31647] veth1_vlan: entered promiscuous mode [ 418.370560][T31647] veth0_macvtap: entered promiscuous mode [ 418.379308][T31647] veth1_macvtap: entered promiscuous mode [ 418.392225][T31647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.404805][T31647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.416310][T17574] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.429200][T17574] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.440741][T17574] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.452770][T17574] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.508213][T31830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6191'. [ 418.587215][T31831] lo speed is unknown, defaulting to 1000 [ 418.623307][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 418.623325][ T29] audit: type=1326 audit(1766369648.495:25406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.1.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 418.713846][ T29] audit: type=1326 audit(1766369648.535:25407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.1.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0bc7ddf90 code=0x7ffc0000 [ 418.737876][ T29] audit: type=1326 audit(1766369648.535:25408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.1.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 418.761909][ T29] audit: type=1326 audit(1766369648.535:25409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.1.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 418.785565][ T29] audit: type=1326 audit(1766369648.535:25410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.1.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 418.809143][ T29] audit: type=1326 audit(1766369648.535:25411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.1.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 418.833153][ T29] audit: type=1326 audit(1766369648.535:25412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.1.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 418.856814][ T29] audit: type=1326 audit(1766369648.535:25413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.1.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 418.880908][ T29] audit: type=1326 audit(1766369648.535:25414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.1.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 418.904922][ T29] audit: type=1326 audit(1766369648.535:25415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.1.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bc7df749 code=0x7ffc0000 [ 418.984442][T31842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6131'. [ 419.357913][T31858] veth0_to_team: entered promiscuous mode [ 419.600662][T31866] loop2: detected capacity change from 0 to 512 [ 419.615487][T31855] lo speed is unknown, defaulting to 1000 [ 419.630724][T31866] ext2: Unknown parameter 'subj_type' [ 419.769679][T31855] chnl_net:caif_netlink_parms(): no params data found [ 419.815394][T31876] FAULT_INJECTION: forcing a failure. [ 419.815394][T31876] name failslab, interval 1, probability 0, space 0, times 0 [ 419.828172][T31876] CPU: 0 UID: 0 PID: 31876 Comm: syz.2.6202 Not tainted syzkaller #0 PREEMPT(voluntary) [ 419.828205][T31876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.828219][T31876] Call Trace: [ 419.828228][T31876] [ 419.828237][T31876] __dump_stack+0x1d/0x30 [ 419.828310][T31876] dump_stack_lvl+0x95/0xd0 [ 419.828333][T31876] dump_stack+0x15/0x1b [ 419.828352][T31876] should_fail_ex+0x265/0x280 [ 419.828374][T31876] should_failslab+0x8c/0xb0 [ 419.828395][T31876] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 419.828457][T31876] ? __get_vm_area_node+0x106/0x1d0 [ 419.828521][T31876] __get_vm_area_node+0x106/0x1d0 [ 419.828550][T31876] __vmalloc_node_range_noprof+0x28e/0x1310 [ 419.828580][T31876] ? sel_write_load+0x157/0x380 [ 419.828654][T31876] ? path_openat+0x1e82/0x23b0 [ 419.828735][T31876] ? _parse_integer_limit+0x170/0x190 [ 419.828757][T31876] ? _parse_integer+0x27/0x40 [ 419.828786][T31876] ? __rcu_read_unlock+0x4f/0x70 [ 419.828810][T31876] ? avc_has_perm_noaudit+0xab/0x130 [ 419.828836][T31876] ? sel_write_load+0x157/0x380 [ 419.828858][T31876] vmalloc_noprof+0x82/0xc0 [ 419.828886][T31876] ? sel_write_load+0x157/0x380 [ 419.828980][T31876] sel_write_load+0x157/0x380 [ 419.829003][T31876] ? __pfx_sel_write_load+0x10/0x10 [ 419.829026][T31876] vfs_write+0x269/0x960 [ 419.829086][T31876] ? __rcu_read_unlock+0x4f/0x70 [ 419.829106][T31876] ? __fget_files+0x184/0x1c0 [ 419.829127][T31876] ? mutex_lock+0x58/0x90 [ 419.829152][T31876] ksys_write+0xda/0x1a0 [ 419.829171][T31876] __x64_sys_write+0x40/0x50 [ 419.829200][T31876] x64_sys_call+0x2847/0x3000 [ 419.829228][T31876] do_syscall_64+0xca/0x2b0 [ 419.829268][T31876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.829294][T31876] RIP: 0033:0x7fe35610f749 [ 419.829314][T31876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.829371][T31876] RSP: 002b:00007fe354b77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 419.829462][T31876] RAX: ffffffffffffffda RBX: 00007fe356365fa0 RCX: 00007fe35610f749 [ 419.829482][T31876] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000006 [ 419.829510][T31876] RBP: 00007fe354b77090 R08: 0000000000000000 R09: 0000000000000000 [ 419.829522][T31876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.829534][T31876] R13: 00007fe356366038 R14: 00007fe356365fa0 R15: 00007ffe41c385c8 [ 419.829553][T31876] [ 419.829563][T31876] syz.2.6202: vmalloc error: size 101, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 420.088238][T31876] CPU: 0 UID: 0 PID: 31876 Comm: syz.2.6202 Not tainted syzkaller #0 PREEMPT(voluntary) [ 420.088270][T31876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.088330][T31876] Call Trace: [ 420.088338][T31876] [ 420.088347][T31876] __dump_stack+0x1d/0x30 [ 420.088373][T31876] dump_stack_lvl+0x95/0xd0 [ 420.088458][T31876] dump_stack+0x15/0x1b [ 420.088484][T31876] warn_alloc+0x12b/0x1a0 [ 420.088518][T31876] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 420.088548][T31876] ? path_openat+0x1e82/0x23b0 [ 420.088639][T31876] ? _parse_integer_limit+0x170/0x190 [ 420.088666][T31876] ? _parse_integer+0x27/0x40 [ 420.088688][T31876] ? __rcu_read_unlock+0x4f/0x70 [ 420.088712][T31876] ? avc_has_perm_noaudit+0xab/0x130 [ 420.088748][T31876] ? sel_write_load+0x157/0x380 [ 420.088767][T31876] vmalloc_noprof+0x82/0xc0 [ 420.088812][T31876] ? sel_write_load+0x157/0x380 [ 420.088829][T31876] sel_write_load+0x157/0x380 [ 420.088887][T31876] ? __pfx_sel_write_load+0x10/0x10 [ 420.089005][T31876] vfs_write+0x269/0x960 [ 420.089023][T31876] ? __rcu_read_unlock+0x4f/0x70 [ 420.089088][T31876] ? __fget_files+0x184/0x1c0 [ 420.089156][T31876] ? mutex_lock+0x58/0x90 [ 420.089185][T31876] ksys_write+0xda/0x1a0 [ 420.089266][T31876] __x64_sys_write+0x40/0x50 [ 420.089291][T31876] x64_sys_call+0x2847/0x3000 [ 420.089320][T31876] do_syscall_64+0xca/0x2b0 [ 420.089378][T31876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.089404][T31876] RIP: 0033:0x7fe35610f749 [ 420.089421][T31876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.089443][T31876] RSP: 002b:00007fe354b77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.089467][T31876] RAX: ffffffffffffffda RBX: 00007fe356365fa0 RCX: 00007fe35610f749 [ 420.089490][T31876] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000006 [ 420.089503][T31876] RBP: 00007fe354b77090 R08: 0000000000000000 R09: 0000000000000000 [ 420.089516][T31876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.089528][T31876] R13: 00007fe356366038 R14: 00007fe356365fa0 R15: 00007ffe41c385c8 [ 420.089546][T31876] [ 420.089554][T31876] Mem-Info: [ 420.312153][T31876] active_anon:3644 inactive_anon:12 isolated_anon:0 [ 420.312153][T31876] active_file:25833 inactive_file:2421 isolated_file:0 [ 420.312153][T31876] unevictable:16393 dirty:376 writeback:0 [ 420.312153][T31876] slab_reclaimable:3616 slab_unreclaimable:19192 [ 420.312153][T31876] mapped:29692 shmem:420 pagetables:1010 [ 420.312153][T31876] sec_pagetables:0 bounce:0 [ 420.312153][T31876] kernel_misc_reclaimable:0 [ 420.312153][T31876] free:1857940 free_pcp:12549 free_cma:0 [ 420.358084][T31876] Node 0 active_anon:14576kB inactive_anon:48kB active_file:103332kB inactive_file:9684kB unevictable:65572kB isolated(anon):0kB isolated(file):0kB mapped:118768kB dirty:1504kB writeback:0kB shmem:1680kB kernel_stack:5168kB pagetables:4040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 420.363857][T31881] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6203'. [ 420.386131][T31876] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 420.425211][T31876] lowmem_reserve[]: 0 2880 7859 7859 [ 420.430602][T31876] Node 0 DMA32 free:2945884kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 420.462013][T31876] lowmem_reserve[]: 0 0 4978 4978 [ 420.467138][T31876] Node 0 Normal free:4470516kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14576kB inactive_anon:48kB active_file:103332kB inactive_file:9684kB unevictable:65572kB writepending:1504kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:46064kB local_pcp:29980kB free_cma:0kB [ 420.500827][T31876] lowmem_reserve[]: 0 0 0 0 [ 420.505581][T31876] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 420.518440][T31876] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945884kB [ 420.534766][T31876] Node 0 Normal: 3383*4kB (UME) 1709*8kB (UME) 960*16kB (UME) 637*32kB (UME) 386*64kB (UME) 174*128kB (UME) 153*256kB (UME) 144*512kB (UME) 56*1024kB (UME) 58*2048kB (UME) 994*4096kB (UM) = 4470372kB [ 420.554893][T31876] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 420.564277][T31876] 45119 total pagecache pages [ 420.568965][T31876] 59 pages in swap cache [ 420.573202][T31876] Free swap = 123404kB [ 420.577515][T31876] Total swap = 124996kB [ 420.581658][T31876] 2097051 pages RAM [ 420.585542][T31876] 0 pages HighMem/MovableOnly [ 420.590221][T31876] 81272 pages reserved [ 420.595606][T31881] hsr_slave_0: left promiscuous mode [ 420.602068][T31881] hsr_slave_1: left promiscuous mode [ 420.614232][T17580] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.637459][T31855] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.644683][T31855] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.652310][T31855] bridge_slave_0: entered allmulticast mode [ 420.660025][T31855] bridge_slave_0: entered promiscuous mode [ 420.678813][T17580] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.701551][T31855] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.709059][T31855] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.716714][T31855] bridge_slave_1: entered allmulticast mode [ 420.724247][T31855] bridge_slave_1: entered promiscuous mode [ 420.732941][T31894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6209'. [ 420.762826][T31855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.771030][T31900] loop2: detected capacity change from 0 to 512 [ 420.778677][T31900] ext2: Unknown parameter 'subj_type' [ 420.779560][T17580] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.796892][T31855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.818137][T31855] team0: Port device team_slave_0 added [ 420.826443][T31903] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6210'. [ 420.835534][T31903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6210'. [ 420.848379][T31855] team0: Port device team_slave_1 added [ 420.870999][T31855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.878080][T31855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.904092][T31855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.928383][T17580] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.957538][T31855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.964600][T31855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.991143][T31855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.035672][T31855] hsr_slave_0: entered promiscuous mode [ 421.042354][T31855] hsr_slave_1: entered promiscuous mode [ 421.204571][T31921] loop2: detected capacity change from 0 to 512 [ 421.213361][T31921] EXT4-fs (loop2): orphan cleanup on readonly fs [ 421.220218][T31921] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6216: Failed to acquire dquot type 1 [ 421.232414][T31921] EXT4-fs (loop2): 1 truncate cleaned up [ 421.238842][T31921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 421.388644][T17580] bond0 (unregistering): Released all slaves [ 421.430471][T17580] tipc: Disabling bearer [ 421.435842][T17580] tipc: Left network mode [ 421.470164][T17580] veth1_macvtap: left promiscuous mode [ 421.475802][T17580] veth0_macvtap: left promiscuous mode [ 421.481418][T17580] veth1_vlan: left promiscuous mode [ 421.486744][T17580] veth0_vlan: left promiscuous mode [ 421.559633][T17572] smc: removing ib device !yz! [ 421.887802][T31647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.053115][T31855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 422.114903][T31855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.169571][T31855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.217098][T31855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 422.235085][T31964] x_tables: duplicate underflow at hook 2 [ 422.248527][T31962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.311791][T31855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.323190][T31855] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.333366][T17574] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.340522][T17574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.351830][T17572] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.359461][T17572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.421892][T31855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.539307][T31855] veth0_vlan: entered promiscuous mode [ 422.548264][T31855] veth1_vlan: entered promiscuous mode [ 422.563764][T31855] veth0_macvtap: entered promiscuous mode [ 422.571770][T31855] veth1_macvtap: entered promiscuous mode [ 422.582512][T31855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.594143][T31855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.606107][T17588] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.615558][T17588] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.626164][T17588] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.635617][T17588] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.671978][T32002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=32002 comm=syz.3.6241 [ 422.685565][T32003] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=32003 comm=syz.3.6241 [ 422.752665][T32016] macvtap1: entered promiscuous mode [ 422.758181][T32016] macvtap1: entered allmulticast mode [ 423.070895][T32033] __nla_validate_parse: 15 callbacks suppressed [ 423.070929][T32033] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6251'. [ 423.352151][T32047] wireguard0: entered promiscuous mode [ 423.357882][T32047] wireguard0: entered allmulticast mode [ 423.673216][T31962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.737835][T31962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.783310][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 423.783329][ T29] audit: type=1326 audit(1766369653.655:25670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.3.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb82f749 code=0x7ffc0000 [ 423.814168][ T29] audit: type=1326 audit(1766369653.655:25671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.3.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb82f749 code=0x7ffc0000 [ 423.837896][ T29] audit: type=1326 audit(1766369653.655:25672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.3.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb82f749 code=0x7ffc0000 [ 423.862005][ T29] audit: type=1326 audit(1766369653.655:25673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.3.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb82f749 code=0x7ffc0000 [ 423.886113][ T29] audit: type=1326 audit(1766369653.655:25674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.3.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6abb82f749 code=0x7ffc0000 [ 423.909828][ T29] audit: type=1326 audit(1766369653.655:25675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.3.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb82f749 code=0x7ffc0000 [ 423.933888][ T29] audit: type=1326 audit(1766369653.655:25676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.3.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb82f749 code=0x7ffc0000 [ 423.957594][ T29] audit: type=1326 audit(1766369653.655:25677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.3.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb82f749 code=0x7ffc0000 [ 423.981248][ T29] audit: type=1326 audit(1766369653.655:25678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.3.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb82f749 code=0x7ffc0000 [ 424.005066][ T29] audit: type=1326 audit(1766369653.655:25679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.3.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6abb82f749 code=0x7ffc0000 [ 424.051452][T31962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.127939][T17574] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.139416][T32081] loop4: detected capacity change from 0 to 512 [ 424.147867][T32081] EXT4-fs (loop4): orphan cleanup on readonly fs [ 424.154643][T32081] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.6265: Failed to acquire dquot type 1 [ 424.167545][T32081] EXT4-fs (loop4): 1 truncate cleaned up [ 424.173829][T32081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.255893][T17588] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.291196][T17588] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.299795][T17588] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.465325][T32105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6269'. [ 424.538099][ T3486] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 424.545845][ T3486] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 424.569203][ T3486] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 424.596922][T32109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6271'. [ 424.606033][T32109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6271'. [ 424.615300][T32109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6271'. [ 424.624858][ T3486] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 424.674058][T32109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6271'. [ 424.779952][T31855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.822417][T32115] loop4: detected capacity change from 0 to 1024 [ 424.868420][T32115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 424.892251][T32115] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.921235][T32115] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.6276: lblock 3 mapped to illegal pblock 3 (length 3) [ 424.935973][T32115] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 424.948673][T32115] EXT4-fs (loop4): This should not happen!! Data will be lost [ 424.948673][T32115] [ 424.972644][T17580] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:111: lblock 8 mapped to illegal pblock 8 (length 8) [ 424.988182][T17580] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 425.000590][T17580] EXT4-fs (loop4): This should not happen!! Data will be lost [ 425.000590][T17580] [ 425.011712][T31855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 425.053333][T32124] loop4: detected capacity change from 0 to 128 [ 425.277159][T32140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6281'. [ 425.301988][T32137] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6284'. [ 425.339107][T32145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6285'. [ 425.348316][T32145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6285'. [ 425.497388][T32148] loop2: detected capacity change from 0 to 512 [ 425.505548][T32148] EXT4-fs (loop2): orphan cleanup on readonly fs [ 425.513007][T32148] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6286: Failed to acquire dquot type 1 [ 425.525522][T32148] EXT4-fs (loop2): 1 truncate cleaned up [ 425.533742][T32148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 426.054058][T32183] loop4: detected capacity change from 0 to 1024 [ 426.057729][T32173] lo speed is unknown, defaulting to 1000 [ 426.061617][T32183] EXT4-fs: dax option not supported [ 426.123003][T17580] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.176383][T31647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.203802][T32173] chnl_net:caif_netlink_parms(): no params data found [ 426.216081][T17580] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.258704][T17580] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.283009][T32173] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.290285][T32173] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.297628][T32173] bridge_slave_0: entered allmulticast mode [ 426.304381][T32173] bridge_slave_0: entered promiscuous mode [ 426.311234][T32201] hsr_slave_0: left promiscuous mode [ 426.318690][T32201] hsr_slave_1: left promiscuous mode [ 426.329228][T32173] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.336323][T32173] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.343672][T32173] bridge_slave_1: entered allmulticast mode [ 426.350472][T32173] bridge_slave_1: entered promiscuous mode [ 426.363748][T17580] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.382740][T32173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.393446][T32173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.415817][T32173] team0: Port device team_slave_0 added [ 426.422991][T32173] team0: Port device team_slave_1 added [ 426.444042][T32173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.451097][T32173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.477661][T32173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.489909][T32173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.497023][T32173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.523637][T32173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.575288][T32173] hsr_slave_0: entered promiscuous mode [ 426.587372][T32173] hsr_slave_1: entered promiscuous mode [ 426.594497][T32173] debugfs: 'hsr0' already exists in 'hsr' [ 426.600292][T32173] Cannot create hsr debugfs directory [ 426.818727][T17580] bond0 (unregistering): Released all slaves [ 426.946519][T17580] veth1_macvtap: left promiscuous mode [ 426.954043][T17580] veth0_macvtap: left promiscuous mode [ 426.961302][T17580] veth1_vlan: left promiscuous mode [ 426.966662][T17580] veth0_vlan: left promiscuous mode [ 427.080319][T32235] loop4: detected capacity change from 0 to 764 [ 427.092658][T32235] Symlink component flag not implemented [ 427.273442][T32173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 427.282217][T32173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 427.291407][T32173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 427.300548][T32173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 427.333777][T32173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.352057][T32173] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.363161][T17572] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.370290][T17572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.379383][T17572] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.386598][T17572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.450306][T32173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.514471][T32173] veth0_vlan: entered promiscuous mode [ 427.522416][T32173] veth1_vlan: entered promiscuous mode [ 427.537278][T32173] veth0_macvtap: entered promiscuous mode [ 427.544421][T32173] veth1_macvtap: entered promiscuous mode [ 427.555440][T32173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.566710][T32173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.578199][T17572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.588068][T17572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.599110][T17572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.608618][T17574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.177772][T32291] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.189214][T32291] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.203848][T32291] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.215656][T32291] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.226571][T32302] veth0_to_team: entered promiscuous mode [ 428.233939][T32291] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.245574][T32291] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.256520][T32291] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.267751][T32291] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.281216][T32291] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.292567][T32291] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.434827][T32308] __nla_validate_parse: 12 callbacks suppressed [ 428.434845][T32308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6337'. [ 428.551743][T32316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6343'. [ 428.563046][T32316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6343'. [ 428.572520][T32316] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6343'. [ 428.581768][T32316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6343'. [ 428.591214][T32316] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6343'. [ 428.926959][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 428.926979][ T29] audit: type=1326 audit(1766369658.785:25927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32322 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35610f749 code=0x7ffc0000 [ 428.956844][ T29] audit: type=1326 audit(1766369658.785:25928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32322 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35610f749 code=0x7ffc0000 [ 428.980862][ T29] audit: type=1326 audit(1766369658.785:25929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32322 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35610f749 code=0x7ffc0000 [ 429.004807][ T29] audit: type=1326 audit(1766369658.785:25930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32322 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35610f749 code=0x7ffc0000 [ 429.028666][ T29] audit: type=1326 audit(1766369658.785:25931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32322 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe35610f749 code=0x7ffc0000 [ 429.052694][ T29] audit: type=1326 audit(1766369658.785:25932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32322 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35610f749 code=0x7ffc0000 [ 429.076657][ T29] audit: type=1326 audit(1766369658.785:25934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32322 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe35610f749 code=0x7ffc0000 [ 429.100565][ T29] audit: type=1326 audit(1766369658.785:25933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32322 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35610f749 code=0x7ffc0000 [ 429.124492][ T29] audit: type=1326 audit(1766369658.785:25935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32322 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35610f749 code=0x7ffc0000 [ 429.148554][ T29] audit: type=1326 audit(1766369658.785:25936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32322 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35610f749 code=0x7ffc0000 [ 429.671674][T32340] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6353'. [ 429.746336][T32351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6354'. [ 429.755592][T32351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6354'. [ 429.764651][T32351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6354'. [ 429.806208][T32352] bridge_slave_0: left allmulticast mode [ 429.811985][T32352] bridge_slave_0: left promiscuous mode [ 429.816665][T32349] xt_socket: unknown flags 0x50 [ 429.818010][T32352] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.912017][T32360] loop2: detected capacity change from 0 to 512 [ 429.966974][T32360] ------------[ cut here ]------------ [ 429.972600][T32360] EA inode 11 i_nlink=2 [ 429.972617][T32360] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.2.6356/32360 [ 429.988218][T32360] Modules linked in: [ 429.992215][T32360] CPU: 1 UID: 0 PID: 32360 Comm: syz.2.6356 Not tainted syzkaller #0 PREEMPT(voluntary) [ 430.002480][T32360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 430.012911][T32360] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 430.019766][T32360] Code: 81 e2 9c ff 4c 8d 2d 3a f1 20 05 49 8d 7e 40 e8 81 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 95 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 8c ad ba 03 66 66 66 2e 0f 1f 84 [ 430.039753][T32360] RSP: 0018:ffffc90004b1f5a0 EFLAGS: 00010246 [ 430.046238][T32360] RAX: ffff88810436cc90 RBX: ffff88811a6aa080 RCX: ffffffff81bb1c6b [ 430.054506][T32360] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0d90 [ 430.062634][T32360] RBP: 000000000000000b R08: 000188811a6aa033 R09: 0000000000000000 [ 430.070827][T32360] R10: ffffc90004b1f4d0 R11: 0001c90004b1f4d0 R12: ffff88811a6aa030 [ 430.079041][T32360] R13: ffffffff86dc0d90 R14: ffff88811a6a9fe8 R15: 0000000000000001 [ 430.087053][T32360] FS: 00007fe3547126c0(0000) GS:ffff8882aeec5000(0000) knlGS:0000000000000000 [ 430.096055][T32360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.102774][T32360] CR2: 00000000ffffffff CR3: 0000000149194000 CR4: 00000000003506f0 [ 430.110901][T32360] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 430.119044][T32360] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 430.127172][T32360] Call Trace: [ 430.130469][T32360] [ 430.133511][T32360] ext4_xattr_set_entry+0x77f/0x1020 [ 430.138901][T32360] ext4_xattr_ibody_set+0x184/0x3c0 [ 430.144526][T32360] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 430.150538][T32360] __ext4_expand_extra_isize+0x246/0x280 [ 430.156260][T32360] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 430.161865][T32360] ext4_evict_inode+0x7c4/0xd40 [ 430.166857][T32360] ? __pfx_ext4_evict_inode+0x10/0x10 [ 430.172380][T32360] evict+0x2af/0x510 [ 430.176391][T32360] ? __dquot_initialize+0x146/0x7c0 [ 430.181704][T32360] iput+0x4bd/0x650 [ 430.185579][T32360] ext4_process_orphan+0x1a9/0x1c0 [ 430.190802][T32360] ext4_orphan_cleanup+0x6a8/0xa00 [ 430.195969][T32360] ext4_fill_super+0x3411/0x37a0 [ 430.201185][T32360] ? _raw_spin_lock+0x52/0xa0 [ 430.205889][T32360] ? set_blocksize+0x1a8/0x310 [ 430.210781][T32360] ? sb_set_blocksize+0xfc/0x170 [ 430.215873][T32360] ? setup_bdev_super+0x30e/0x370 [ 430.221013][T32360] ? __pfx_ext4_fill_super+0x10/0x10 [ 430.226502][T32360] get_tree_bdev_flags+0x291/0x300 [ 430.231755][T32360] ? __pfx_ext4_fill_super+0x10/0x10 [ 430.237261][T32360] get_tree_bdev+0x1f/0x30 [ 430.241728][T32360] ext4_get_tree+0x1c/0x30 [ 430.246239][T32360] vfs_get_tree+0x57/0x1d0 [ 430.250700][T32360] do_new_mount+0x24d/0x6a0 [ 430.255226][T32360] path_mount+0x4ab/0xb80 [ 430.259649][T32360] ? user_path_at+0xbf/0x130 [ 430.264275][T32360] __se_sys_mount+0x28c/0x2e0 [ 430.269079][T32360] __x64_sys_mount+0x67/0x80 [ 430.273700][T32360] x64_sys_call+0x2cca/0x3000 [ 430.278525][T32360] do_syscall_64+0xca/0x2b0 [ 430.283273][T32360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.289239][T32360] RIP: 0033:0x7fe356110eea [ 430.293735][T32360] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.313629][T32360] RSP: 002b:00007fe354711e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 430.322509][T32360] RAX: ffffffffffffffda RBX: 00007fe354711ef0 RCX: 00007fe356110eea [ 430.330755][T32360] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fe354711eb0 [ 430.338868][T32360] RBP: 0000200000000180 R08: 00007fe354711ef0 R09: 0000000000800700 [ 430.347195][T32360] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 430.355785][T32360] R13: 00007fe354711eb0 R14: 000000000000046f R15: 000000000000002c [ 430.363844][T32360] [ 430.366990][T32360] ---[ end trace 0000000000000000 ]--- [ 430.378759][T32360] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.6356: iget: bad extra_isize 90 (inode size 256) [ 430.393475][T32360] EXT4-fs (loop2): Remounting filesystem read-only [ 430.400587][T32360] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 430.419181][T32352] bridge_slave_1: left allmulticast mode [ 430.425021][T32352] bridge_slave_1: left promiscuous mode [ 430.428487][T32360] EXT4-fs (loop2): 1 orphan inode deleted [ 430.430807][T32352] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.436970][T32360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.496648][T32352] bond0: (slave bond_slave_0): Releasing backup interface [ 430.520010][T32352] bond0: (slave bond_slave_1): Releasing backup interface [ 430.550971][T32352] team0: Port device team_slave_0 removed [ 430.566146][T32352] team0: Port device team_slave_1 removed [ 430.573504][T32352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.581047][T32352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.596043][T32352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.603674][T32352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.704285][T32390] loop4: detected capacity change from 0 to 764 [ 430.717644][T32390] Symlink component flag not implemented [ 430.831597][T31647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.877765][T32376] ================================================================== [ 430.885907][T32376] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 430.892581][T32376] [ 430.894940][T32376] write to 0xffff888119d0c0f8 of 144 bytes by interrupt on cpu 0: [ 430.902755][T32376] __bpf_get_stackid+0x737/0x7d0 [ 430.907736][T32376] bpf_get_stackid+0xf3/0x130 [ 430.912443][T32376] bpf_get_stackid_raw_tp+0xf6/0x120 [ 430.917752][T32376] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 430.923923][T32376] bpf_trace_run2+0x107/0x1d0 [ 430.928818][T32376] __traceiter_kfree+0x2e/0x50 [ 430.933637][T32376] kfree+0x353/0x3c0 [ 430.937624][T32376] unwind_task_free+0x25/0x40 [ 430.942363][T32376] __put_task_struct+0x7f/0x2e0 [ 430.947240][T32376] __put_task_struct_rcu_cb+0x1c/0x30 [ 430.952651][T32376] rcu_core+0x544/0xc40 [ 430.956912][T32376] rcu_core_si+0xd/0x20 [ 430.961078][T32376] handle_softirqs+0xba/0x290 [ 430.965812][T32376] __irq_exit_rcu+0x3a/0xc0 [ 430.970346][T32376] sysvec_apic_timer_interrupt+0x74/0x80 [ 430.976098][T32376] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 430.982176][T32376] _raw_spin_unlock_irq+0x2f/0x50 [ 430.987227][T32376] worker_thread+0x663/0x770 [ 430.991914][T32376] kthread+0x489/0x510 [ 430.996001][T32376] ret_from_fork+0x149/0x290 [ 431.000600][T32376] ret_from_fork_asm+0x1a/0x30 [ 431.005545][T32376] [ 431.007955][T32376] read to 0xffff888119d0c140 of 8 bytes by task 32376 on cpu 1: [ 431.015760][T32376] bcmp+0x23/0x90 [ 431.019496][T32376] __bpf_get_stackid+0x382/0x7d0 [ 431.024546][T32376] bpf_get_stackid+0xf3/0x130 [ 431.029251][T32376] bpf_get_stackid_raw_tp+0xf6/0x120 [ 431.034556][T32376] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 431.040019][T32376] bpf_trace_run2+0x107/0x1d0 [ 431.044708][T32376] __traceiter_kfree+0x2e/0x50 [ 431.049481][T32376] kfree+0x353/0x3c0 [ 431.053512][T32376] ___sys_recvmsg+0x135/0x370 [ 431.058199][T32376] do_recvmmsg+0x1ef/0x540 [ 431.063358][T32376] __x64_sys_recvmmsg+0xe5/0x170 [ 431.068336][T32376] x64_sys_call+0x2b75/0x3000 [ 431.073117][T32376] do_syscall_64+0xca/0x2b0 [ 431.077685][T32376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.083672][T32376] [ 431.085995][T32376] value changed: 0xffffffff81000130 -> 0xffffffff8139598a [ 431.093134][T32376] [ 431.095462][T32376] Reported by Kernel Concurrency Sanitizer on: [ 431.101614][T32376] CPU: 1 UID: 0 PID: 32376 Comm: syz.0.6363 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 431.113006][T32376] Tainted: [W]=WARN [ 431.116804][T32376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 431.126948][T32376] ================================================================== [ 431.450618][T17580] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.549882][T17580] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.630088][T17580] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.690626][T17580] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.780727][T17580] bridge_slave_1: left allmulticast mode [ 431.786665][T17580] bridge_slave_1: left promiscuous mode [ 431.792354][T17580] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.809489][T17580] bridge_slave_0: left allmulticast mode [ 431.815169][T17580] bridge_slave_0: left promiscuous mode [ 431.820935][T17580] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.931518][T17580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.942035][T17580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.951836][T17580] bond0 (unregistering): Released all slaves [ 432.012197][T17580] hsr_slave_0: left promiscuous mode [ 432.018431][T17580] hsr_slave_1: left promiscuous mode [ 432.024196][T17580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.031610][T17580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.039392][T17580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.046875][T17580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.058347][T17580] veth1_macvtap: left promiscuous mode [ 432.063848][T17580] veth0_macvtap: left promiscuous mode [ 432.069595][T17580] veth1_vlan: left promiscuous mode [ 432.074891][T17580] veth0_vlan: left promiscuous mode [ 432.149867][T17580] team0 (unregistering): Port device team_slave_1 removed [ 432.159868][T17580] team0 (unregistering): Port device team_slave_0 removed [ 432.580250][T17580] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.618529][T17580] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.678355][T17580] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.738058][T17580] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.792799][T17580] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.838588][T17580] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.878385][T17580] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.948815][T17580] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.011399][T17580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.039286][T17580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.079500][T17580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.139317][T17580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.191008][T17580] bridge_slave_1: left allmulticast mode [ 433.196955][T17580] bridge_slave_1: left promiscuous mode [ 433.202622][T17580] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.210606][T17580] bridge_slave_0: left allmulticast mode [ 433.216360][T17580] bridge_slave_0: left promiscuous mode [ 433.222077][T17580] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.518426][T17580] bond0 (unregistering): Released all slaves [ 433.608412][T17580] bond0 (unregistering): Released all slaves [ 433.758889][T17580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.768719][T17580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.778223][T17580] bond0 (unregistering): Released all slaves [ 433.828137][T17580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.835535][T17580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.843122][T17580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.850674][T17580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.863989][T17580] veth1_macvtap: left promiscuous mode [ 433.869512][T17580] veth0_macvtap: left promiscuous mode [ 433.875091][T17580] veth1_vlan: left promiscuous mode [ 433.880628][T17580] veth0_vlan: left promiscuous mode [ 433.886321][T17580] veth1_macvtap: left promiscuous mode [ 433.891828][T17580] veth0_macvtap: left promiscuous mode [ 433.897886][T17580] veth1_vlan: left promiscuous mode [ 433.903173][T17580] veth0_vlan: left promiscuous mode [ 433.909451][T17580] veth1_macvtap: left promiscuous mode [ 433.915132][T17580] veth0_macvtap: left promiscuous mode [ 433.920664][T17580] veth1_vlan: left promiscuous mode [ 433.926296][T17580] veth0_vlan: left promiscuous mode [ 434.128692][T17580] team0 (unregistering): Port device team_slave_1 removed [ 434.138392][T17580] team0 (unregistering): Port device team_slave_0 removed [ 434.171366][ T3483] lo speed is unknown, defaulting to 1000 [ 434.177514][ T3483] infiniband syz2: ib_query_port failed (-19) [ 434.860789][T17580] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.899287][T17580] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.969966][T17580] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.009807][T17580] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.098996][T17580] bridge_slave_1: left allmulticast mode [ 435.104788][T17580] bridge_slave_1: left promiscuous mode [ 435.110544][T17580] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.118590][T17580] bridge_slave_0: left allmulticast mode [ 435.124330][T17580] bridge_slave_0: left promiscuous mode [ 435.130104][T17580] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.190221][T17580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.199838][T17580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.209355][T17580] bond0 (unregistering): Released all slaves [ 435.270183][T17580] hsr_slave_0: left promiscuous mode [ 435.275964][T17580] hsr_slave_1: left promiscuous mode [ 435.281973][T17580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.290239][T17580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.297976][T17580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.305526][T17580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.315643][T17580] veth1_macvtap: left promiscuous mode [ 435.321380][T17580] veth0_macvtap: left promiscuous mode [ 435.326912][T17580] veth1_vlan: left promiscuous mode [ 435.332562][T17580] veth0_vlan: left promiscuous mode [ 435.389998][T17580] team0 (unregistering): Port device team_slave_1 removed [ 435.400235][T17580] team0 (unregistering): Port device team_slave_0 removed