last executing test programs: 7.311649386s ago: executing program 1 (id=1062): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r4, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r3, 0x7) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x2d, 0x5, 0x200, 0x81, 0x1}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f00000004c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x7, 0xebf, 0x2, 0x1040, r1, 0xc, '\x00', 0x0, r2, 0x0, 0x3, 0x1, 0xc, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x9, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc0d, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x31, &(0x7f0000000480)=""/49, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xe, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000640)=[r6, r2, r1, r1, r1, r1], &(0x7f0000000680)=[{0x2, 0x2, 0x5, 0x5}, {0x4, 0x2, 0xd, 0x1}, {0x2, 0x5, 0x1, 0x5}, {0x5, 0x2, 0xa, 0xd}, {0x1, 0x1, 0xa, 0x4}], 0x10, 0xfffffb7b, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 5.479774299s ago: executing program 1 (id=1074): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) io_setup(0x401, &(0x7f0000000340)=0x0) r4 = timerfd_create(0x0, 0x800) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000004740)=[{{&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) r8 = fsmount(r1, 0x0, 0x0) fchdir(r8) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.36547782s ago: executing program 1 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000009d000085000000860000008500000050000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="170000000000000004", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000006d7f6a9a2ce82a08f05ff332ad0eb89dcf27299ad07a4416ca2535577b4f8f8284f2ad47baba1e24c16639ed2659cf9d2e115766301ce149b2b90e8924c2a6a24cee0bfdbb3153f74773e31dae8244a8db6d96d2a8a828afc254ea170fa94962df97c4dfc8b89c4f55f504a9d946f3671c47476bb3a8c5183d8ad1a56bb6a7d14b8bb0911b3f5127d57b934bf6b1f3ac845f07120dca927aa7ed144436fbf98ad83ff87ed39bac8d5d87cffdda32", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x3c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_SYNPROXY={0x4}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x3}]}}, @CTA_TUPLE_REPLY={0x4}, @CTA_MARK={0x8}]}, 0x3c}}, 0x24004090) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) timerfd_create(0x1, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) eventfd(0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x20050800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.33790182s ago: executing program 1 (id=1080): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x50}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000030400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r5, @ANYBLOB="8f651805b54f00000000e0f188baec0d2880cc6032e8371fb2581341429381b2eeb2bd2ce41c7dc2c5f42f50933d8f508788bc78687556b8ef82f638b785603bd4fe828a4dab4dacddc886777ec4fb2d3869b3a56250cbe4658a89112f259786b029c60776630c92a5ecafe527248e62eda11399ddb597ceeb83be85748ad3527bc1551dffe799ca23f423fdc2eda681f38dc886a7c56513e34077500261192e0ce79662cf9b3d43a7eb3b421cbfa9019396bbad6939ced28186a2f8a2e7"], 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', r5, 0x10, 0x20, 0x5, 0x1000, {{0x5, 0x4, 0x0, 0x18, 0x14, 0x66, 0x0, 0x3, 0x2f, 0x0, @local, @broadcast}}}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r6, 0xd}, 0x8) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) 5.30749112s ago: executing program 0 (id=1081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) close_range(r3, r4, 0x200000000000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xc, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r6, 0x0, 0x100000}, 0x18) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000004c0)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}, 0x0}, {@nouid32}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@minixdf}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0xa, 0x516, &(0x7f0000000f80)="$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") syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) 5.123889142s ago: executing program 3 (id=1086): r0 = socket$rxrpc(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x5320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x405}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xb0, 0x0, 0xfffffffffffffffe, 0x1}, 0x0, &(0x7f00000002c0)={0x3fe, 0x0, 0x10001, 0x8000000000000003, 0x8, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) dup2(r7, 0xffffffffffffffff) close(r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) connect$rxrpc(r0, &(0x7f00000002c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010100}}, 0x24) 5.123399272s ago: executing program 0 (id=1087): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000403000000000000000000000902"], 0x0, 0x56, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x135}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x1}]}}}]}, 0x3c}}, 0x0) open(0x0, 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000001fffffff3000000800395032"], 0x15) pipe2$9p(&(0x7f0000000000), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x5, 0x2, 0x1a, 0x1}, {0x2, 0xde, 0x6, 0xe}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) tee(r1, r4, 0x60000000000, 0x1000000000000000) 4.928205583s ago: executing program 1 (id=1088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYBLOB="000000000000004000000400000000", @ANYRES32=0x0, @ANYRES32], 0x48) unshare(0x62040200) r4 = getpid() r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0)=r4, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) 3.933294631s ago: executing program 0 (id=1089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB="738dd1ab253c88c8a427e7058c071b87f5b36f167a164cc395d1e2b7659837ff070000f52e219d5958"], 0x3c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x2, 0x3, 0x80, 0x0}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000300)={r8, 0x5}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11320, 0xfffffffd, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x200000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x286c188, 0x0, 0xff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 2.856886199s ago: executing program 3 (id=1100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 2.73925671s ago: executing program 2 (id=1091): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r0, 0x0, 0x0, 0x24000080, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file1\x00'}, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0xfff, 0xfb}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) io_submit(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) mmap(&(0x7f0000f4b000/0x3000)=nil, 0x3000, 0x1, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0xcc4c6000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x105042, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15bd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2.73662796s ago: executing program 3 (id=1103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 2.68278796s ago: executing program 1 (id=1092): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x260, 0x20a, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3c}, @private1, [], [], 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 2.627026471s ago: executing program 3 (id=1093): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x700, 0x12) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') read$msr(r4, &(0x7f0000000040)=""/59, 0xffb5) preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0, 0x0) read$msr(r4, &(0x7f0000000080)=""/202, 0xca) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x8, 0x3, 0x5, 0x0, r2, 0x3, '\x00', 0x0, r3, 0x0, 0x4, 0x5, 0x2, @void, @value, @void, @value}, 0x50) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001bc0)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002200), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x28, r9, 0xd61, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x200c051}, 0x2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4beb161557b4c87e}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40044000}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x48844) 2.564624721s ago: executing program 3 (id=1094): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) readahead(0xffffffffffffffff, 0xfffffffffffff914, 0x6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r9, @ANYBLOB="08000500", @ANYRES32=r9], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 2.564149951s ago: executing program 4 (id=1095): r0 = socket$inet(0x10, 0x4, 0xffffffff) r1 = syz_io_uring_setup(0x111, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r1, 0x1e76, 0x0, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r7, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r8}], 0x2c, 0xffffffffffbffff8) r9 = dup2(r7, r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x26d, &(0x7f00000002c0)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r10, &(0x7f0000000000)='2', 0x1, 0x4fed0) sendfile(r10, r10, 0x0, 0xe3aa6ea) fcntl$setown(r7, 0x8, r6) tkill(r6, 0x13) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd24, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x98, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfd, [0x3, 0x4, 0x2, 0x4000, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x3c, 0x2, 0x0, 0x1, [{0x4}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xad99}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xc8}}, 0x40) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 2.205566044s ago: executing program 0 (id=1096): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@map, 0xffffffffffffffff, 0x2, 0x24, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20142, 0x0) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) kcmp(r6, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000280)={0x78d7, 0x0, &(0x7f0000000080)=[r1, r1, r4, r0, r0, r5, r4, r3]}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) r7 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_triestat\x00') lseek(r7, 0x10001, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000680)={[{@init_itable_val}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x439, &(0x7f0000000d80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) socket(0x10, 0x3, 0x0) unlink(&(0x7f0000000180)='./file1\x00') futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000400)=0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x400, 0x0) 1.612882648s ago: executing program 4 (id=1097): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000c80000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r6}, 0x18) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8010) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0xb) splice(r4, 0x0, r9, 0x0, 0xf3a, 0x0) write$binfmt_misc(r9, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r9, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x80489439, &(0x7f0000000000)) 1.611975328s ago: executing program 2 (id=1110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="000000000000fdffffff6168c7420000000000", @ANYRES32=0x0, @ANYRES32], 0x50) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x1) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000400)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) 1.42484771s ago: executing program 2 (id=1098): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mlockall(0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) mlockall(0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4008000) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000030c0)=[{}], &(0x7f0000000040)=0x8) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0xfffe}, 0x90) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 1.276977191s ago: executing program 0 (id=1099): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000080)={[{@auto_da_alloc}, {@nobh}]}, 0x1, 0x76f, &(0x7f0000001580)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) pivot_root(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r5}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) 1.110650702s ago: executing program 2 (id=1102): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000100000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r3}) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000001000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/8, 0x8}, {0x0}], 0x2, 0x8, 0xffffff10) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open(&(0x7f0000000980)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r7, 0x0, 0x7fff}, 0x18) rt_tgsigqueueinfo(0x0, 0x0, 0x12, 0x0) 1.026902893s ago: executing program 2 (id=1104): unshare(0x28020480) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0xcb3, 0x1000}, &(0x7f00000000c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x6) fallocate(r1, 0x0, 0x0, 0x200401) fallocate(r1, 0x0, 0x0, 0x200401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@bridge_getvlan={0x48, 0x72, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x48}}, 0x80) syz_usbip_server_init(0x1) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0x11, 0x0, 0x70bd2a, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, '['}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}, @sadb_key={0x1, 0x9}]}, 0x88}, 0x1, 0x7}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r3, 0x0, r3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000004c0)=0xe) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 912.409773ms ago: executing program 0 (id=1105): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}, 0x1, 0x0, 0x0, 0x4040800}, 0x840) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}}, 0x20}}, 0x0) 734.209325ms ago: executing program 4 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 671.439956ms ago: executing program 4 (id=1107): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x700, 0x12) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') read$msr(r4, &(0x7f0000000040)=""/59, 0xffb5) preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0, 0x0) read$msr(r4, &(0x7f0000000080)=""/202, 0xca) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x8, 0x3, 0x5, 0x0, r2, 0x3, '\x00', 0x0, r3, 0x0, 0x4, 0x5, 0x2, @void, @value, @void, @value}, 0x50) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001bc0)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002200), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x28, r9, 0xd61, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x200c051}, 0x2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4beb161557b4c87e}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40044000}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x48844) 671.102895ms ago: executing program 3 (id=1108): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) 670.501456ms ago: executing program 4 (id=1109): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 348.81µs ago: executing program 2 (id=1111): r0 = socket$inet(0x10, 0x4, 0xffffffff) r1 = syz_io_uring_setup(0x111, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r1, 0x1e76, 0x0, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r7, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r8}], 0x2c, 0xffffffffffbffff8) r9 = dup2(r7, r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x26d, &(0x7f00000002c0)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r10, &(0x7f0000000000)='2', 0x1, 0x4fed0) sendfile(r10, r10, 0x0, 0xe3aa6ea) fcntl$setown(r7, 0x8, r6) tkill(r6, 0x13) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd24, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x98, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfd, [0x3, 0x4, 0x2, 0x4000, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x3c, 0x2, 0x0, 0x1, [{0x4}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xad99}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xc8}}, 0x40) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 0s ago: executing program 4 (id=1112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x0, 0x0, "ec59dc5d72795ee9711e26a702d4e7a14019d24773a7cefe76e263a443e8c0ad0c73c049796fef70bf76dd7dcc21c3556810a6e989f2a694d414cbf13171724b7f5432e86cb60a905f573c876f6ee7def7b164bb812e29b3f0ba51303cbbd51d0eee700bf6419114c322503b8d339b4b9f809ecb0ccc3d9c1e6a0ddd9df6e1244716541137654482d00241999f6426641feca790e79c4b977b83b3f39c4269be09c492ad17d173206b7e5517a742348e5a41ad0f25c77c8cb2b73de92781ba2290b0b2415e0544caac3b12866b27fbeae2f8b22e164a177da1bc6991d38725b36f2e028d9bd91dad315ec97ba2cb7f9383afce6894cb56535bca0c970263bbcb"}) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, &(0x7f0000000080)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)={'#! ', './file0'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) close(0x3) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) kernel console output (not intermixed with test programs): permissive=1 [ 75.063980][ T4638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.330'. [ 75.072991][ T4638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 75.085133][ T30] audit: type=1326 audit(1742404367.414:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4627 comm="syz.0.329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x0 [ 75.332697][ T4632] vlan2: left allmulticast mode [ 75.432910][ T30] audit: type=1400 audit(1742404368.034:2846): avc: denied { getopt } for pid=4641 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 75.467141][ T30] audit: type=1400 audit(1742404368.084:2847): avc: denied { watch watch_reads } for pid=4641 comm="syz.0.331" path="/66" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.519024][ T4646] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 75.528106][ T30] audit: type=1400 audit(1742404368.144:2848): avc: denied { bind } for pid=4643 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.547442][ T30] audit: type=1400 audit(1742404368.144:2849): avc: denied { ioctl } for pid=4643 comm="syz.0.332" path="socket:[8694]" dev="sockfs" ino=8694 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.599457][ T30] audit: type=1400 audit(1742404368.224:2850): avc: denied { create } for pid=4648 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.603207][ T4618] Set syz1 is full, maxelem 65536 reached [ 75.640843][ T30] audit: type=1400 audit(1742404368.254:2851): avc: denied { setopt } for pid=4643 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.668416][ T4651] netlink: 'syz.2.334': attribute type 10 has an invalid length. [ 75.735900][ T4654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.767552][ T4654] loop4: detected capacity change from 0 to 512 [ 75.780471][ T4654] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 75.814258][ T4654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 75.822408][ T4654] EXT4-fs (loop4): orphan cleanup on readonly fs [ 75.834365][ T4654] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.335: bg 0: block 361: padding at end of block bitmap is not set [ 75.848952][ T4654] EXT4-fs (loop4): Remounting filesystem read-only [ 75.855763][ T4651] hsr_slave_0: left promiscuous mode [ 75.861030][ T4654] EXT4-fs (loop4): 1 truncate cleaned up [ 75.867516][ T4654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 75.881221][ T4651] hsr_slave_1: left promiscuous mode [ 75.881406][ T4654] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 75.893874][ T4654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 75.955489][ T4668] bridge_slave_0: left allmulticast mode [ 75.961240][ T4668] bridge_slave_0: left promiscuous mode [ 75.967107][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.976030][ T4668] bridge_slave_1: left allmulticast mode [ 75.981784][ T4668] bridge_slave_1: left promiscuous mode [ 75.987568][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.997862][ T4668] bond0: (slave bond_slave_0): Releasing backup interface [ 76.005813][ T4668] bond_slave_0: left promiscuous mode [ 76.013372][ T4668] bond0: (slave bond_slave_1): Releasing backup interface [ 76.021857][ T4668] bond_slave_1: left promiscuous mode [ 76.032091][ T4668] team_slave_0: left promiscuous mode [ 76.042286][ T4668] team0: Port device team_slave_0 removed [ 76.051093][ T4668] team_slave_1: left promiscuous mode [ 76.064624][ T4668] team0: Port device team_slave_1 removed [ 76.082869][ T4668] batadv1: left allmulticast mode [ 76.087953][ T4668] batadv1: left promiscuous mode [ 76.093222][ T4668] bridge0: port 3(batadv1) entered disabled state [ 76.101974][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 76.114945][ T4671] team0: Mode changed to "loadbalance" [ 76.135344][ T4675] team0 (unregistering): left promiscuous mode [ 76.392855][ T4681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.340'. [ 76.831429][ T4689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.345'. [ 76.987472][ T4697] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 77.027479][ T4695] loop4: detected capacity change from 0 to 512 [ 77.102587][ T4695] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 77.116221][ T4695] EXT4-fs (loop4): 1 truncate cleaned up [ 77.122248][ T4695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.146897][ T4695] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 77.174941][ T4702] netlink: 'syz.2.349': attribute type 10 has an invalid length. [ 77.313509][ T4711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.445939][ T4716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 77.604373][ T4719] pim6reg: entered allmulticast mode [ 77.610663][ T4719] x_tables: duplicate underflow at hook 3 [ 77.616815][ T4719] pim6reg: left allmulticast mode [ 77.720900][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.781044][ T4722] loop4: detected capacity change from 0 to 2048 [ 77.824495][ T4722] Alternate GPT is invalid, using primary GPT. [ 77.830927][ T4722] loop4: p1 p2 p3 [ 77.970089][ T4729] ip6gretap1: entered promiscuous mode [ 77.977920][ T4729] ip6gretap1: entered allmulticast mode [ 78.011101][ T4733] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.043005][ T4730] Falling back ldisc for ttyS3. [ 78.066788][ T4736] loop2: detected capacity change from 0 to 2048 [ 78.090206][ T4736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.103882][ T4736] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.108604][ T4742] tipc: New replicast peer: 255.0.0.255 [ 78.120068][ T4742] tipc: Enabled bearer , priority 10 [ 78.132592][ T4736] netlink: 'syz.2.360': attribute type 3 has an invalid length. [ 78.142034][ T4736] netlink: 'syz.2.360': attribute type 3 has an invalid length. [ 78.151545][ T4744] futex_wake_op: syz.3.362 tries to shift op by 32; fix this program [ 78.171598][ T4744] loop3: detected capacity change from 0 to 512 [ 78.186730][ T4744] EXT4-fs (loop3): too many log groups per flexible block group [ 78.194701][ T4744] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 78.202378][ T4744] EXT4-fs (loop3): mount failed [ 78.222007][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.559777][ T4769] lo speed is unknown, defaulting to 1000 [ 78.819207][ T4772] loop4: detected capacity change from 0 to 2048 [ 78.929134][ T4772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.233948][ T9] tipc: Node number set to 3855710320 [ 79.263659][ T4781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 79.545154][ T4796] lo speed is unknown, defaulting to 1000 [ 79.624371][ T4797] lo speed is unknown, defaulting to 1000 [ 79.674506][ T4797] Cannot find add_set index 0 as target [ 79.796458][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.865571][ T4804] x_tables: duplicate underflow at hook 2 [ 79.878958][ T4802] infiniband syz!: set down [ 79.883860][ T4802] infiniband syz!: added team_slave_0 [ 79.909111][ T4802] RDS/IB: syz!: added [ 79.913974][ T4802] smc: adding ib device syz! with port count 1 [ 79.920551][ T4802] smc: ib device syz! port 1 has pnetid [ 80.034644][ T4814] lo speed is unknown, defaulting to 1000 [ 80.065224][ T4816] netlink: 'syz.4.380': attribute type 4 has an invalid length. [ 80.073794][ T4816] netlink: 152 bytes leftover after parsing attributes in process `syz.4.380'. [ 80.101849][ T4816] : renamed from bond0 (while UP) [ 80.267217][ T4821] netlink: 'syz.1.382': attribute type 4 has an invalid length. [ 80.285315][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 80.307260][ T4819] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 80.350901][ T4828] loop3: detected capacity change from 0 to 256 [ 80.372206][ T4825] geneve0: entered allmulticast mode [ 80.374479][ T30] kauditd_printk_skb: 259 callbacks suppressed [ 80.374498][ T30] audit: type=1400 audit(1742404372.994:3111): avc: denied { bind } for pid=4829 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.410892][ T4828] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 80.415528][ T30] audit: type=1400 audit(1742404373.034:3112): avc: denied { mount } for pid=4826 comm="syz.3.385" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 80.490329][ T4830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 80.503293][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.531894][ T30] audit: type=1400 audit(1742404373.104:3113): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 80.592016][ T4843] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 80.600389][ T4843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.390'. [ 80.611260][ T4830] bridge_slave_1 (unregistering): left allmulticast mode [ 80.618597][ T4830] bridge_slave_1 (unregistering): left promiscuous mode [ 80.626598][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.634181][ T30] audit: type=1400 audit(18314964.247:3114): avc: denied { bind } for pid=4844 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.654171][ T30] audit: type=1400 audit(18314964.247:3115): avc: denied { connect } for pid=4844 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.673814][ T30] audit: type=1400 audit(18314964.247:3116): avc: denied { read write } for pid=4844 comm="syz.3.389" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.697282][ T30] audit: type=1400 audit(18314964.247:3117): avc: denied { open } for pid=4844 comm="syz.3.389" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.720434][ T30] audit: type=1400 audit(18314964.247:3118): avc: denied { ioctl } for pid=4844 comm="syz.3.389" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.839150][ T30] audit: type=1326 audit(18314964.257:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4841 comm="syz.1.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 80.863443][ T30] audit: type=1326 audit(18314964.257:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4841 comm="syz.1.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 81.080605][ T4843] batadv0: entered promiscuous mode [ 81.086645][ T4843] batadv0: entered allmulticast mode [ 81.225935][ T4843] bridge0: port 1(batadv0) entered blocking state [ 81.232630][ T4843] bridge0: port 1(batadv0) entered disabled state [ 81.698958][ T4843] bridge0: port 1(batadv0) entered blocking state [ 81.705507][ T4843] bridge0: port 1(batadv0) entered forwarding state [ 81.725703][ T3533] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 81.735162][ T3533] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 82.467652][ T4860] netlink: 'syz.2.394': attribute type 4 has an invalid length. [ 82.568170][ T4860] loop2: detected capacity change from 0 to 128 [ 82.595050][ T4852] lo speed is unknown, defaulting to 1000 [ 82.640899][ T4864] loop3: detected capacity change from 0 to 512 [ 82.750087][ T4864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.782023][ T4877] loop2: detected capacity change from 0 to 512 [ 82.793078][ T4877] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.802237][ T4877] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 82.815129][ T4877] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 82.825730][ T4877] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 82.835441][ T4877] System zones: 0-2, 18-18, 34-35 [ 82.841606][ T4877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.858710][ T4877] program syz.2.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.881584][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.900017][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.158258][ T4889] loop2: detected capacity change from 0 to 1024 [ 83.165261][ T4889] EXT4-fs: Ignoring removed orlov option [ 83.171008][ T4889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.209776][ T4889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.323702][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.702076][ T4906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.719101][ T4906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.767459][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 83.995756][ T4932] netlink: 'syz.0.413': attribute type 13 has an invalid length. [ 84.056132][ T4932] bridge0: port 1(batadv0) entered disabled state [ 84.129046][ T4932] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.138343][ T4932] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.147564][ T4932] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.157378][ T4932] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.177714][ T3380] lo speed is unknown, defaulting to 1000 [ 84.320328][ T4938] xt_NFQUEUE: number of total queues is 0 [ 84.334444][ T4938] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 84.343792][ T4936] xt_CT: No such helper "snmp_trap" [ 84.367836][ T4938] tipc: New replicast peer: 255.255.255.255 [ 84.374688][ T4938] tipc: Enabled bearer , priority 10 [ 84.405810][ T4945] loop2: detected capacity change from 0 to 512 [ 84.416239][ T4945] netlink: 'syz.2.417': attribute type 4 has an invalid length. [ 84.542697][ T4955] loop4: detected capacity change from 0 to 512 [ 84.549757][ T4955] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.558872][ T4955] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 84.569802][ T4955] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 84.586003][ T4955] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 84.594447][ T4955] System zones: 0-2, 18-18, 34-35 [ 84.600811][ T4955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.630381][ T4960] Illegal XDP return value 53 on prog (id 316) dev N/A, expect packet loss! [ 84.728002][ T4966] loop3: detected capacity change from 0 to 1024 [ 84.747207][ T4966] ext4: Unknown parameter 'fowner<00000000000000000000' [ 84.756005][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.875203][ T4971] loop4: detected capacity change from 0 to 8192 [ 85.001243][ T4980] veth0_vlan: entered allmulticast mode [ 85.493655][ T2963] tipc: Node number set to 859027732 [ 85.649454][ T4995] lo speed is unknown, defaulting to 1000 [ 85.829427][ T4999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 86.594051][ T5003] gretap0: entered allmulticast mode [ 86.600065][ T5003] bridge0: port 2(gretap0) entered blocking state [ 86.607055][ T5003] bridge0: port 2(gretap0) entered disabled state [ 86.614894][ T5003] gretap0: entered promiscuous mode [ 86.620883][ T30] kauditd_printk_skb: 585 callbacks suppressed [ 86.620900][ T30] audit: type=1326 audit(18314970.237:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 86.624008][ T4992] siw: device registration error -23 [ 86.627157][ T30] audit: type=1326 audit(18314970.237:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 86.627188][ T30] audit: type=1326 audit(18314970.237:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 86.701961][ T30] audit: type=1326 audit(18314970.237:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 86.725280][ T30] audit: type=1326 audit(18314970.237:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 86.748439][ T30] audit: type=1326 audit(18314970.237:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 86.771710][ T30] audit: type=1326 audit(18314970.237:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 86.795103][ T30] audit: type=1326 audit(18314970.237:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 86.818351][ T30] audit: type=1326 audit(18314970.237:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 86.841672][ T30] audit: type=1326 audit(18314970.237:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 87.190210][ T5005] loop4: detected capacity change from 0 to 512 [ 87.217916][ T5005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 87.309444][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 87.325157][ T5014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 87.334167][ T5014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.341880][ T5014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.364772][ T5014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.372261][ T5014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.427214][ T5021] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 87.439128][ T5019] loop3: detected capacity change from 0 to 2048 [ 87.448719][ T5021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5021 comm=syz.4.441 [ 87.463517][ T5023] loop2: detected capacity change from 0 to 256 [ 87.476091][ T5021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5021 comm=syz.4.441 [ 87.485640][ T5019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.604987][ T5034] loop2: detected capacity change from 0 to 512 [ 87.624981][ T3518] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:49: bg 0: block 345: padding at end of block bitmap is not set [ 87.647695][ T5030] netlink: 'syz.1.446': attribute type 4 has an invalid length. [ 87.683512][ T5034] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 87.710468][ T3518] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 166 with error 117 [ 87.723119][ T3518] EXT4-fs (loop3): This should not happen!! Data will be lost [ 87.723119][ T3518] [ 87.975604][ T5045] gretap1: entered allmulticast mode [ 87.982213][ T5045] bridge0: port 2(gretap1) entered blocking state [ 87.989333][ T5045] bridge0: port 2(gretap1) entered disabled state [ 87.997296][ T5045] gretap1: entered promiscuous mode [ 88.002929][ T5045] bridge0: port 2(gretap1) entered blocking state [ 88.009457][ T5045] bridge0: port 2(gretap1) entered forwarding state [ 88.139923][ T5043] lo speed is unknown, defaulting to 1000 [ 88.444643][ T3518] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 182 with max blocks 2 with error 117 [ 88.457411][ T3518] EXT4-fs (loop3): This should not happen!! Data will be lost [ 88.457411][ T3518] [ 88.666697][ T5056] loop2: detected capacity change from 0 to 512 [ 88.713801][ T5056] EXT4-fs: inline encryption not supported [ 88.736857][ T5056] EXT4-fs (loop2): failed to initialize system zone (-117) [ 88.757271][ T5056] EXT4-fs (loop2): mount failed [ 89.146606][ T5058] lo speed is unknown, defaulting to 1000 [ 89.233688][ T5031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.443'. [ 89.245688][ T5031] usb usb6: usbfs: process 5031 (syz.3.443) did not claim interface 0 before use [ 89.579292][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.690780][ T5080] lo speed is unknown, defaulting to 1000 [ 89.749400][ T5085] 9pnet_fd: Insufficient options for proto=fd [ 89.790198][ T5078] loop3: detected capacity change from 0 to 512 [ 89.857068][ T5078] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.880228][ T5087] loop4: detected capacity change from 0 to 8192 [ 90.056464][ T5096] bridge0: port 2(gretap1) entered disabled state [ 90.064062][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.086430][ T5096] bridge0: entered allmulticast mode [ 90.134234][ T5102] gretap1: left promiscuous mode [ 90.139386][ T5102] bridge0: port 2(gretap1) entered disabled state [ 90.148369][ T5102] bridge_slave_0: left allmulticast mode [ 90.154502][ T5102] bridge_slave_0: left promiscuous mode [ 90.160724][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.169947][ T5078] EXT4-fs (loop3): 1 truncate cleaned up [ 90.190875][ T5078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.561502][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.673929][ T5116] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.684171][ T5110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5110 comm=syz.3.463 [ 90.723930][ T5119] netlink: 'syz.2.464': attribute type 27 has an invalid length. [ 90.728623][ T5116] vhci_hcd: invalid port number 186 [ 90.738412][ T5116] vhci_hcd: default hub control req: 2314 v0008 i00ba l0 [ 91.497521][ T5119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.514586][ T5119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.564539][ T5119] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.573674][ T5119] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.582913][ T5119] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.591815][ T5119] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.631242][ T5119] gretap1: left allmulticast mode [ 91.639554][ T5144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.472'. [ 91.707331][ T30] kauditd_printk_skb: 344 callbacks suppressed [ 91.707348][ T30] audit: type=1326 audit(18314975.327:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 91.747373][ T5149] netlink: 'syz.3.475': attribute type 3 has an invalid length. [ 91.780874][ T30] audit: type=1326 audit(18314975.367:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 91.804808][ T30] audit: type=1326 audit(18314975.367:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 91.828708][ T30] audit: type=1326 audit(18314975.367:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 91.852541][ T30] audit: type=1326 audit(18314975.367:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 91.876484][ T30] audit: type=1326 audit(18314975.367:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 91.900525][ T30] audit: type=1326 audit(18314975.367:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 91.924533][ T30] audit: type=1326 audit(18314975.367:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 91.948360][ T30] audit: type=1326 audit(18314975.367:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 91.972643][ T30] audit: type=1326 audit(18314975.367:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 91.972795][ T5157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'. [ 92.226658][ T5162] bridge0: entered allmulticast mode [ 92.277701][ T5166] gretap0: left promiscuous mode [ 92.283021][ T5166] bridge0: port 2(gretap0) entered disabled state [ 92.290825][ T5166] bridge0: port 1(batadv0) entered disabled state [ 92.316860][ T5164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5164 comm=syz.2.478 [ 92.366792][ T5164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.478'. [ 92.731680][ T5180] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.741355][ T5180] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 93.020860][ T5187] lo speed is unknown, defaulting to 1000 [ 93.147856][ T5189] netlink: 'syz.1.485': attribute type 27 has an invalid length. [ 93.621103][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.664443][ T5189] $Hÿ: left promiscuous mode [ 93.669529][ T5189] bond_slave_1: left promiscuous mode [ 93.984526][ T5189] geneve0: left allmulticast mode [ 93.992987][ T5189] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.001550][ T5189] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.010785][ T5189] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.019425][ T5189] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.066268][ T5189] macvtap1: left promiscuous mode [ 94.071459][ T5189] macvtap1: left allmulticast mode [ 94.182432][ T5201] random: crng reseeded on system resumption [ 94.320379][ T5210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 94.348816][ T5201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.488'. [ 94.575625][ T5214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5214 comm=syz.1.490 [ 94.733726][ T5219] loop2: detected capacity change from 0 to 512 [ 94.763117][ T5219] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.804816][ T5219] EXT4-fs (loop2): 1 truncate cleaned up [ 94.815682][ T5219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.845914][ T5234] lo speed is unknown, defaulting to 1000 [ 94.886984][ T5235] loop4: detected capacity change from 0 to 512 [ 94.917651][ T5235] EXT4-fs error (device loop4): ext4_quota_enable:7101: comm syz.4.495: inode #33554432: comm syz.4.495: iget: illegal inode # [ 94.933744][ T5235] EXT4-fs error (device loop4): ext4_quota_enable:7104: comm syz.4.495: Bad quota inode: 33554432, type: 2 [ 94.946532][ T5235] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 94.962915][ T5235] EXT4-fs (loop4): mount failed [ 95.559187][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.697968][ T5262] bridge0: entered allmulticast mode [ 96.727788][ T30] kauditd_printk_skb: 658 callbacks suppressed [ 96.727806][ T30] audit: type=1326 audit(18314980.337:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 96.749162][ T5262] bridge_slave_1: left allmulticast mode [ 96.766212][ T5262] bridge_slave_1: left promiscuous mode [ 96.766212][ T30] audit: type=1326 audit(18314980.347:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 96.768681][ T5262] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.771905][ T30] audit: type=1326 audit(18314980.347:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 96.771941][ T30] audit: type=1326 audit(18314980.347:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 96.853659][ T30] audit: type=1326 audit(18314980.347:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 96.877723][ T30] audit: type=1326 audit(18314980.347:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 96.901761][ T30] audit: type=1326 audit(18314980.417:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 96.925459][ T30] audit: type=1326 audit(18314980.417:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 96.949345][ T30] audit: type=1326 audit(18314980.417:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 96.958745][ T5273] loop3: detected capacity change from 0 to 512 [ 96.973388][ T30] audit: type=1326 audit(18314980.417:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 97.036689][ T5273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.129014][ T5281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5281 comm=syz.4.508 [ 97.179197][ T5285] lo speed is unknown, defaulting to 1000 [ 97.336417][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.382681][ T5297] lo speed is unknown, defaulting to 1000 [ 97.511989][ T5298] lo speed is unknown, defaulting to 1000 [ 97.972417][ T5314] lo speed is unknown, defaulting to 1000 [ 97.992918][ T5319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 98.002470][ T5319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 98.129401][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 98.138991][ T5332] veth1_macvtap: left promiscuous mode [ 98.236979][ T5339] netlink: 5 bytes leftover after parsing attributes in process `syz.1.525'. [ 98.255069][ T5339] 0ªX¹¦D: renamed from gretap0 [ 98.265126][ T5339] 0ªX¹¦D: entered allmulticast mode [ 98.273602][ T5339] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 98.290255][ T5334] tipc: Enabled bearer , priority 0 [ 98.383531][ T5333] tipc: Resetting bearer [ 98.429792][ T5333] tipc: Disabling bearer [ 98.608255][ T5361] lo speed is unknown, defaulting to 1000 [ 99.406746][ T5367] lo speed is unknown, defaulting to 1000 [ 99.707900][ T5375] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5375 comm=syz.0.538 [ 99.770534][ T5383] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 99.783884][ T5382] hsr_slave_0: left promiscuous mode [ 99.799190][ T5382] hsr_slave_1: left promiscuous mode [ 99.813558][ T5383] netlink: 5 bytes leftover after parsing attributes in process `syz.3.540'. [ 99.827495][ T5383] 0ªX¹¦D: renamed from gretap0 [ 99.835458][ T5383] 0ªX¹¦D: entered allmulticast mode [ 99.844999][ T5383] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 99.914815][ T5391] tipc: Enabling of bearer rejected, failed to enable media [ 99.928663][ T5388] netlink: 'syz.0.542': attribute type 4 has an invalid length. [ 100.093337][ T5405] 9pnet_fd: p9_fd_create_tcp (5405): problem connecting socket to 127.0.0.1 [ 100.159226][ T5406] loop3: detected capacity change from 0 to 512 [ 100.167257][ T5406] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.186977][ T5406] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.194085][ T5406] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.546: Failed to acquire dquot type 1 [ 100.207162][ T5406] EXT4-fs (loop3): 1 truncate cleaned up [ 100.213543][ T5406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.530460][ T5411] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 100.553437][ T5411] netlink: 5 bytes leftover after parsing attributes in process `syz.2.558'. [ 100.564609][ T5411] 0ªX¹¦D: renamed from gretap0 [ 100.571533][ T5411] 0ªX¹¦D: entered allmulticast mode [ 100.578609][ T5411] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 100.637465][ T5418] lo speed is unknown, defaulting to 1000 [ 100.855857][ T5422] lo speed is unknown, defaulting to 1000 [ 101.087157][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.161444][ T5424] lo speed is unknown, defaulting to 1000 [ 101.266345][ T5428] loop3: detected capacity change from 0 to 512 [ 101.278348][ T5428] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.291057][ T5428] EXT4-fs (loop3): 1 truncate cleaned up [ 101.297201][ T5428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.363945][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.432943][ T5438] $Hÿ: renamed from bond0 [ 101.440211][ T5438] $Hÿ: entered promiscuous mode [ 101.650801][ T5442] tipc: Enabling of bearer rejected, failed to enable media [ 101.731144][ T5453] loop4: detected capacity change from 0 to 512 [ 101.737832][ T30] kauditd_printk_skb: 156 callbacks suppressed [ 101.737849][ T30] audit: type=1326 audit(18314985.357:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efe5b91bdca code=0x7ffc0000 [ 101.738322][ T5453] msdos: Unknown parameter 'errerrors' [ 101.747294][ T30] audit: type=1326 audit(18314985.357:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efe5b91bdca code=0x7ffc0000 [ 101.797235][ T30] audit: type=1326 audit(18314985.357:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efe5b91b9d7 code=0x7ffc0000 [ 101.821066][ T30] audit: type=1326 audit(18314985.357:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efe5b91e90a code=0x7ffc0000 [ 101.848433][ T30] audit: type=1326 audit(18314985.427:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe5b91bad0 code=0x7ffc0000 [ 101.872961][ T30] audit: type=1326 audit(18314985.427:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe5b91cd6b code=0x7ffc0000 [ 101.896238][ T30] audit: type=1326 audit(18314985.427:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efe5b91bdca code=0x7ffc0000 [ 101.920212][ T30] audit: type=1326 audit(18314985.427:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 101.944218][ T30] audit: type=1326 audit(18314985.427:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 101.967543][ T30] audit: type=1326 audit(18314985.427:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 102.891125][ T5481] loop2: detected capacity change from 0 to 2048 [ 102.936053][ T5481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.017529][ T5492] loop3: detected capacity change from 0 to 764 [ 103.030137][ T5487] loop4: detected capacity change from 0 to 1024 [ 103.037757][ T5487] EXT4-fs: Ignoring removed orlov option [ 103.043545][ T5487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.076201][ T5487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.082566][ T5496] lo speed is unknown, defaulting to 1000 [ 103.107417][ T5501] lo speed is unknown, defaulting to 1000 [ 103.153885][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.195705][ T5504] vlan0: entered promiscuous mode [ 103.200944][ T5504] hsr_slave_1: entered promiscuous mode [ 103.207350][ T5504] vlan0: entered allmulticast mode [ 103.212511][ T5504] hsr_slave_1: entered allmulticast mode [ 103.273132][ T5504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 103.344188][ T5504] hsr_slave_1 (unregistering): left allmulticast mode [ 103.351129][ T5504] hsr_slave_1 (unregistering): left promiscuous mode [ 103.725361][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.776791][ T5510] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 104.002623][ T5522] loop2: detected capacity change from 0 to 1024 [ 104.025391][ T5522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.155017][ T5539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.586'. [ 104.164770][ T5539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.586'. [ 104.180793][ T5529] netlink: 'syz.1.585': attribute type 4 has an invalid length. [ 104.193736][ T5539] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 104.201968][ T5539] ip6gretap0: entered promiscuous mode [ 104.213401][ T5539] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 104.221233][ T5539] Cannot create hsr debugfs directory [ 104.227969][ T5539] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 104.238360][ T5539] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 104.481739][ T5549] hsr_slave_0: left promiscuous mode [ 104.923207][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.046821][ T5565] lo speed is unknown, defaulting to 1000 [ 105.217616][ T5572] netlink: 44 bytes leftover after parsing attributes in process `syz.0.595'. [ 105.299975][ T5574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 105.354437][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 105.594250][ T5591] 9pnet_fd: p9_fd_create_tcp (5591): problem connecting socket to 127.0.0.1 [ 105.660960][ T5592] loop4: detected capacity change from 0 to 512 [ 105.669112][ T5592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.681687][ T5592] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.688672][ T5592] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.601: Failed to acquire dquot type 1 [ 105.701761][ T5592] EXT4-fs (loop4): 1 truncate cleaned up [ 105.714235][ T5592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.862437][ T5595] lo speed is unknown, defaulting to 1000 [ 106.186616][ T5600] netlink: 'syz.2.603': attribute type 4 has an invalid length. [ 106.494060][ T5607] Set syz1 is full, maxelem 65536 reached [ 106.522568][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.568496][ T5619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 106.580928][ T5619] bridge0: port 1(batadv0) entered blocking state [ 106.588324][ T5619] bridge0: port 1(batadv0) entered disabled state [ 106.596195][ T5619] batadv0: entered allmulticast mode [ 106.602230][ T5619] batadv0: entered promiscuous mode [ 106.676199][ T5620] loop4: detected capacity change from 0 to 1024 [ 106.684076][ T5620] EXT4-fs: Ignoring removed orlov option [ 106.689900][ T5620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.736790][ T5620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.758079][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 106.758095][ T30] audit: type=1400 audit(18314990.377:5051): avc: denied { execute } for pid=5615 comm="syz.4.608" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.788607][ T5622] tipc: Enabled bearer , priority 0 [ 106.795860][ T5621] tipc: Resetting bearer [ 106.808322][ T5621] tipc: Disabling bearer [ 106.814353][ T30] audit: type=1400 audit(18314990.427:5052): avc: denied { setattr } for pid=5615 comm="syz.4.608" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.863516][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.094652][ T5635] vlan2: entered promiscuous mode [ 107.099808][ T5635] vlan2: entered allmulticast mode [ 107.105082][ T5635] hsr_slave_1: entered allmulticast mode [ 107.135307][ T3533] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 107.144602][ T3533] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 107.166332][ T5641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 107.190670][ T5641] hsr_slave_1 (unregistering): left allmulticast mode [ 107.201288][ T5632] loop4: detected capacity change from 0 to 2048 [ 107.210076][ T5641] hsr_slave_1 (unregistering): left promiscuous mode [ 107.233030][ T5632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.591471][ T30] audit: type=1326 audit(18314991.207:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 107.614728][ T30] audit: type=1326 audit(18314991.207:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 107.651029][ T30] audit: type=1326 audit(18314991.257:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 107.674345][ T30] audit: type=1326 audit(18314991.257:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 107.697792][ T30] audit: type=1326 audit(18314991.257:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 107.721072][ T30] audit: type=1326 audit(18314991.257:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 107.723365][ T3533] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:64: bg 0: block 345: padding at end of block bitmap is not set [ 107.744129][ T30] audit: type=1326 audit(18314991.257:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 107.744163][ T30] audit: type=1326 audit(18314991.257:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 107.831049][ T3533] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 107.844463][ T3533] EXT4-fs (loop4): This should not happen!! Data will be lost [ 107.844463][ T3533] [ 107.923331][ T3529] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 107.936116][ T3529] EXT4-fs (loop4): This should not happen!! Data will be lost [ 107.936116][ T3529] [ 107.945798][ T3529] EXT4-fs (loop4): Total free blocks count 0 [ 107.951913][ T3529] EXT4-fs (loop4): Free/Dirty block details [ 107.957898][ T3529] EXT4-fs (loop4): free_blocks=0 [ 107.962905][ T3529] EXT4-fs (loop4): dirty_blocks=2048 [ 107.968211][ T3529] EXT4-fs (loop4): Block reservation details [ 107.982451][ T5656] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.617'. [ 108.003192][ T5647] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.617'. [ 108.461275][ T5671] loop4: detected capacity change from 0 to 512 [ 108.493624][ T5671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.526949][ T5671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.565925][ T5671] lo speed is unknown, defaulting to 1000 [ 109.134377][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.243879][ T5687] lo speed is unknown, defaulting to 1000 [ 109.256320][ T5690] netlink: 'syz.3.627': attribute type 10 has an invalid length. [ 109.264198][ T5690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.627'. [ 109.291192][ T5678] netlink: 'syz.4.624': attribute type 4 has an invalid length. [ 109.293423][ T5690] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 109.371577][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 109.386056][ T5695] macvtap1: entered promiscuous mode [ 109.391422][ T5695] bond0: entered promiscuous mode [ 109.396882][ T5695] bond_slave_0: entered promiscuous mode [ 109.402856][ T5695] bond_slave_1: entered promiscuous mode [ 109.408839][ T5695] macvtap1: entered allmulticast mode [ 109.414301][ T5695] bond0: entered allmulticast mode [ 109.419538][ T5695] bond_slave_0: entered allmulticast mode [ 109.425316][ T5695] bond_slave_1: entered allmulticast mode [ 109.435761][ T5695] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 109.458164][ T5697] bond0: left allmulticast mode [ 109.463212][ T5697] bond_slave_0: left allmulticast mode [ 109.469222][ T5697] bond_slave_1: left allmulticast mode [ 109.474968][ T5697] bond0: left promiscuous mode [ 109.479759][ T5697] bond_slave_0: left promiscuous mode [ 109.485469][ T5697] bond_slave_1: left promiscuous mode [ 109.501064][ T5700] vlan2: entered promiscuous mode [ 109.506479][ T5700] hsr_slave_1: entered promiscuous mode [ 109.512365][ T5700] vlan2: entered allmulticast mode [ 109.517719][ T5700] hsr_slave_1: entered allmulticast mode [ 109.579135][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 109.600431][ T5706] hsr_slave_1 (unregistering): left allmulticast mode [ 109.608096][ T5706] hsr_slave_1 (unregistering): left promiscuous mode [ 109.615545][ T5705] netlink: 324 bytes leftover after parsing attributes in process `syz.0.636'. [ 109.731666][ T5715] tipc: Enabling of bearer rejected, failed to enable media [ 110.114047][ T5727] lo speed is unknown, defaulting to 1000 [ 110.220231][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 110.264619][ T5736] netlink: 'syz.4.645': attribute type 13 has an invalid length. [ 110.471172][ T5738] netlink: 'syz.3.655': attribute type 4 has an invalid length. [ 110.577912][ T5736] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.587226][ T5736] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.595816][ T5736] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.605092][ T5736] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.677636][ T5745] lo speed is unknown, defaulting to 1000 [ 110.796289][ T5766] netlink: 324 bytes leftover after parsing attributes in process `syz.4.648'. [ 110.833615][ T5769] loop2: detected capacity change from 0 to 2048 [ 110.855379][ T5769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.117111][ T5780] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 111.148070][ T5777] tipc: Enabled bearer , priority 0 [ 111.157091][ T5775] tipc: Resetting bearer [ 111.278486][ T5775] tipc: Disabling bearer [ 111.873346][ T5791] tipc: Enabled bearer , priority 0 [ 111.910307][ T5788] tipc: Resetting bearer [ 111.934289][ T5788] tipc: Disabling bearer [ 112.575749][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.606104][ T30] kauditd_printk_skb: 239 callbacks suppressed [ 112.606121][ T30] audit: type=1326 audit(18314996.227:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.654" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a73e9d169 code=0x0 [ 112.652833][ T5797] netlink: 'syz.4.666': attribute type 10 has an invalid length. [ 112.675922][ T5797] loop4: detected capacity change from 0 to 512 [ 112.686850][ T5799] vlan0: entered promiscuous mode [ 112.691962][ T5799] hsr_slave_1: entered promiscuous mode [ 112.697639][ T5799] vlan0: entered allmulticast mode [ 112.702816][ T5799] hsr_slave_1: entered allmulticast mode [ 112.711020][ T30] audit: type=1326 audit(18314996.327:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 112.724156][ T5797] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 112.741249][ T30] audit: type=1326 audit(18314996.327:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 112.772260][ T30] audit: type=1326 audit(18314996.327:5303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 112.780145][ T5797] EXT4-fs (loop4): mount failed [ 112.795377][ T30] audit: type=1326 audit(18314996.327:5304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 112.795488][ T30] audit: type=1326 audit(18314996.327:5305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 112.797343][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 112.862868][ T5803] hsr_slave_1 (unregistering): left allmulticast mode [ 112.869691][ T5803] hsr_slave_1 (unregistering): left promiscuous mode [ 112.887686][ T5749] syz.0.646 (5749) used greatest stack depth: 6208 bytes left [ 112.900768][ T30] audit: type=1326 audit(18314996.517:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 112.924783][ T30] audit: type=1326 audit(18314996.517:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 112.950122][ T30] audit: type=1326 audit(18314996.517:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 112.974101][ T30] audit: type=1326 audit(18314996.517:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 113.513360][ T5811] loop2: detected capacity change from 0 to 8192 [ 113.520245][ T5811] vfat: Unknown parameter 'ÿ' [ 113.852939][ T5839] tipc: Enabled bearer , priority 0 [ 113.883784][ T5838] tipc: Resetting bearer [ 113.905084][ T5838] tipc: Disabling bearer [ 114.229895][ T5849] tipc: Enabled bearer , priority 0 [ 114.269853][ T5846] tipc: Resetting bearer [ 114.288268][ T5846] tipc: Disabling bearer [ 114.598685][ T5860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.625682][ T5861] ÿÿÿÿÿÿ: renamed from vlan1 [ 114.691487][ T5865] SELinux: policydb string length -1380463184 does not match expected length 8 [ 114.713012][ T5865] SELinux: failed to load policy [ 114.794001][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 114.928007][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 115.197810][ T5891] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 115.575339][ T5903] loop2: detected capacity change from 0 to 512 [ 115.604393][ T5903] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 115.752237][ T5909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.796237][ T5913] netlink: 'syz.0.691': attribute type 10 has an invalid length. [ 115.839407][ T5915] tipc: Enabled bearer , priority 0 [ 115.846792][ T5914] tipc: Resetting bearer [ 115.868335][ T5914] tipc: Disabling bearer [ 116.091926][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.694'. [ 116.177999][ T5928] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 116.730560][ T5937] netlink: 'syz.3.700': attribute type 4 has an invalid length. [ 116.921436][ T5947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.703'. [ 117.083368][ T5947] siw: device registration error -23 [ 117.384195][ T5960] tipc: Enabled bearer , priority 0 [ 117.398125][ T5949] tipc: Resetting bearer [ 117.423195][ T5949] tipc: Disabling bearer [ 117.524267][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 117.720258][ T30] kauditd_printk_skb: 231 callbacks suppressed [ 117.720273][ T30] audit: type=1326 audit(18315001.337:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 117.757055][ T30] audit: type=1326 audit(18315001.367:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 117.961249][ T30] audit: type=1326 audit(18315001.577:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 118.058653][ T30] audit: type=1326 audit(18315001.577:5544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 118.082579][ T30] audit: type=1326 audit(18315001.607:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 118.106365][ T30] audit: type=1326 audit(18315001.607:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 118.130165][ T30] audit: type=1326 audit(18315001.607:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 118.154164][ T30] audit: type=1326 audit(18315001.607:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 118.178195][ T30] audit: type=1326 audit(18315001.607:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 118.201492][ T30] audit: type=1326 audit(18315001.607:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 118.450247][ T5987] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 118.458102][ T5987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.724'. [ 118.470037][ T5987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.478857][ T5987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.593192][ T5987] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 118.628318][ T5987] team0: Failed to send options change via netlink (err -105) [ 118.635952][ T5987] team0: Port device geneve1 added [ 118.682388][ T5988] lo speed is unknown, defaulting to 1000 [ 118.901335][ T5986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.935530][ T5992] loop2: detected capacity change from 0 to 128 [ 118.942285][ T5992] EXT4-fs: Ignoring removed nobh option [ 118.949632][ T5992] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.965327][ T5986] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 118.974677][ T5986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.010179][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.031425][ T5986] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.043337][ T5986] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.055214][ T5986] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.067719][ T5986] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.286950][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 119.403455][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'. [ 119.412348][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.420496][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.826861][ T6019] block device autoloading is deprecated and will be removed. [ 119.834719][ T6019] bio_check_eod: 97 callbacks suppressed [ 119.834735][ T6019] syz.2.721: attempt to access beyond end of device [ 119.834735][ T6019] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 119.947788][ T6020] tipc: Enabling of bearer rejected, failed to enable media [ 120.835774][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.728'. [ 120.846175][ T6039] program syz.2.739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.859977][ T6039] syz.2.739: attempt to access beyond end of device [ 120.859977][ T6039] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 121.145769][ T6048] lo speed is unknown, defaulting to 1000 [ 121.460219][ T6050] netlink: 'syz.2.730': attribute type 10 has an invalid length. [ 121.468086][ T6050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.730'. [ 121.524094][ T6050] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 121.594981][ T6046] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 121.844885][ T6053] lo speed is unknown, defaulting to 1000 [ 121.855718][ T6055] netlink: 'syz.0.744': attribute type 4 has an invalid length. [ 121.922599][ T6063] tipc: Enabling of bearer rejected, failed to enable media [ 121.983550][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 122.021199][ T6061] batadv0 (unregistering): left allmulticast mode [ 122.028202][ T6061] batadv0 (unregistering): left promiscuous mode [ 122.035052][ T6061] bridge0: port 1(batadv0) entered disabled state [ 123.740888][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 123.740903][ T30] audit: type=1326 audit(18315007.357:5672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 123.813435][ T30] audit: type=1326 audit(18315007.387:5673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 123.837464][ T30] audit: type=1326 audit(18315007.387:5674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 123.861486][ T30] audit: type=1326 audit(18315007.387:5675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 123.884810][ T30] audit: type=1326 audit(18315007.387:5676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 123.908634][ T30] audit: type=1326 audit(18315007.387:5677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 123.932473][ T30] audit: type=1326 audit(18315007.387:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 123.956212][ T30] audit: type=1326 audit(18315007.407:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 123.980129][ T30] audit: type=1326 audit(18315007.407:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 124.004011][ T30] audit: type=1326 audit(18315007.417:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 124.257508][ T6107] loop2: detected capacity change from 0 to 512 [ 124.270930][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 124.393230][ T6107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.518466][ T6107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.554648][ T6107] lo speed is unknown, defaulting to 1000 [ 124.901786][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.237984][ T6130] loop2: detected capacity change from 0 to 512 [ 125.244748][ T6130] ext2: Unknown parameter 'euid>00000000000000000000' [ 125.309346][ T6131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.766'. [ 125.318487][ T6131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.766'. [ 126.358362][ T6148] lo speed is unknown, defaulting to 1000 [ 126.776619][ T6158] lo speed is unknown, defaulting to 1000 [ 127.277846][ T6168] tipc: Enabled bearer , priority 0 [ 127.309731][ T6167] tipc: Resetting bearer [ 127.345008][ T6167] tipc: Disabling bearer [ 127.368879][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 127.380902][ T6172] lo speed is unknown, defaulting to 1000 [ 127.388176][ T6174] netlink: 'syz.0.776': attribute type 13 has an invalid length. [ 127.412021][ T6174] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.420522][ T6174] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.429719][ T6174] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.438151][ T6174] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.510439][ T6181] team0: No ports can be present during mode change [ 127.524233][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 127.535593][ T6181] team0 (unregistering): Port device geneve1 removed [ 128.343404][ T6200] loop2: detected capacity change from 0 to 2048 [ 128.355725][ T6200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.518138][ T6219] tipc: Enabled bearer , priority 0 [ 128.533745][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.546012][ T6214] tipc: Resetting bearer [ 128.643164][ T6214] tipc: Disabling bearer [ 128.812539][ T30] kauditd_printk_skb: 116 callbacks suppressed [ 128.812556][ T30] audit: type=1400 audit(18315012.427:5798): avc: denied { ioctl } for pid=6216 comm="syz.1.777" path="socket:[13721]" dev="sockfs" ino=13721 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.986677][ T6193] Set syz1 is full, maxelem 65536 reached [ 129.133056][ T30] audit: type=1400 audit(18315012.677:5799): avc: denied { ioctl } for pid=6221 comm="syz.2.779" path="socket:[13020]" dev="sockfs" ino=13020 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 129.199602][ T6222] lo speed is unknown, defaulting to 1000 [ 129.454504][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 129.485472][ T6236] netlink: 'syz.2.780': attribute type 13 has an invalid length. [ 129.488259][ T6233] lo speed is unknown, defaulting to 1000 [ 129.652847][ T30] audit: type=1326 audit(18315013.267:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 129.676077][ T30] audit: type=1326 audit(18315013.267:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 129.699444][ T30] audit: type=1326 audit(18315013.267:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 129.700077][ T6251] netlink: 60 bytes leftover after parsing attributes in process `syz.4.783'. [ 129.722725][ T30] audit: type=1326 audit(18315013.267:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 129.722910][ T30] audit: type=1326 audit(18315013.267:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 129.722939][ T30] audit: type=1326 audit(18315013.267:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 129.722970][ T30] audit: type=1326 audit(18315013.267:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 129.723001][ T30] audit: type=1326 audit(18315013.267:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 129.828727][ T6246] SELinux: syz.2.796 (6246) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 129.851219][ T6251] netlink: 60 bytes leftover after parsing attributes in process `syz.4.783'. [ 129.982580][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.798'. [ 129.992289][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.798'. [ 131.864777][ T6272] lo speed is unknown, defaulting to 1000 [ 131.955395][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 132.301719][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.794'. [ 132.479626][ T6306] loop2: detected capacity change from 0 to 512 [ 132.574132][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'. [ 133.595585][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.805'. [ 133.832735][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 133.832755][ T30] audit: type=1326 audit(18315017.417:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 133.862131][ T30] audit: type=1326 audit(18315017.417:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 133.885298][ T30] audit: type=1326 audit(18315017.417:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 133.908603][ T30] audit: type=1326 audit(18315017.417:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 133.931936][ T30] audit: type=1326 audit(18315017.417:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 133.955075][ T30] audit: type=1326 audit(18315017.417:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 133.978264][ T30] audit: type=1326 audit(18315017.417:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 134.001516][ T30] audit: type=1326 audit(18315017.417:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 134.024778][ T30] audit: type=1326 audit(18315017.417:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 134.047942][ T30] audit: type=1326 audit(18315017.417:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 134.227452][ T6341] loop2: detected capacity change from 0 to 2048 [ 134.240887][ T6341] EXT4-fs: Ignoring removed nobh option [ 134.270116][ T6341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.374030][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 134.467181][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 134.628376][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 134.697916][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.828327][ T6370] futex_wake_op: syz.2.818 tries to shift op by 32; fix this program [ 134.884214][ T6370] loop2: detected capacity change from 0 to 512 [ 134.944362][ T6370] EXT4-fs (loop2): too many log groups per flexible block group [ 134.952151][ T6370] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 134.979917][ T6370] EXT4-fs (loop2): mount failed [ 135.432974][ T6353] Set syz1 is full, maxelem 65536 reached [ 135.502607][ T6379] lo speed is unknown, defaulting to 1000 [ 135.753045][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.819'. [ 135.762002][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.819'. [ 135.773666][ T6376] bridge0: port 1(vlan0) entered blocking state [ 135.779997][ T6376] bridge0: port 1(vlan0) entered disabled state [ 135.786424][ T6376] vlan0: entered allmulticast mode [ 135.798145][ T6381] loop2: detected capacity change from 0 to 1024 [ 135.805449][ T6376] vlan0: left allmulticast mode [ 135.844140][ T6381] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 135.853881][ T6381] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 135.865436][ T6381] EXT4-fs (loop2): invalid journal inode [ 136.135011][ T6388] tipc: Enabling of bearer rejected, failed to enable media [ 136.163177][ T6381] syzkaller0: entered promiscuous mode [ 136.168801][ T6381] syzkaller0: entered allmulticast mode [ 136.256455][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 136.314378][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'. [ 136.428981][ T6410] ip6gretap1: entered promiscuous mode [ 136.434604][ T6410] ip6gretap1: entered allmulticast mode [ 136.625304][ T6425] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 136.650538][ T6422] vlan0: entered promiscuous mode [ 136.657085][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'. [ 136.668199][ T6433] netlink: 'syz.2.837': attribute type 4 has an invalid length. [ 136.679730][ T6431] tipc: Enabling of bearer rejected, failed to enable media [ 136.710754][ T6437] loop2: detected capacity change from 0 to 128 [ 136.782505][ T6444] loop2: detected capacity change from 0 to 2048 [ 136.815511][ T6444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.549853][ T6464] syzkaller0: entered promiscuous mode [ 137.556133][ T6464] syzkaller0: entered allmulticast mode [ 137.623142][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.754012][ T3311] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 137.765060][ T3311] CPU: 1 UID: 0 PID: 3311 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 137.765120][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.765132][ T3311] Call Trace: [ 137.765139][ T3311] [ 137.765147][ T3311] dump_stack_lvl+0xf2/0x150 [ 137.765174][ T3311] dump_stack+0x15/0x1a [ 137.765195][ T3311] dump_header+0x83/0x2d0 [ 137.765257][ T3311] oom_kill_process+0x341/0x4c0 [ 137.765294][ T3311] out_of_memory+0x9af/0xbe0 [ 137.765343][ T3311] ? css_next_descendant_pre+0x11c/0x140 [ 137.765371][ T3311] mem_cgroup_out_of_memory+0x13e/0x190 [ 137.765403][ T3311] try_charge_memcg+0x508/0x7f0 [ 137.765428][ T3311] charge_memcg+0x50/0xc0 [ 137.765535][ T3311] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 137.765570][ T3311] __read_swap_cache_async+0x236/0x480 [ 137.765602][ T3311] swap_cluster_readahead+0x279/0x3f0 [ 137.765632][ T3311] swapin_readahead+0xe4/0x6f0 [ 137.765687][ T3311] ? swap_cache_get_folio+0x77/0x210 [ 137.765718][ T3311] do_swap_page+0x31b/0x2550 [ 137.765762][ T3311] ? hrtimer_try_to_cancel+0x1d3/0x1e0 [ 137.765790][ T3311] ? __rcu_read_lock+0x36/0x50 [ 137.765843][ T3311] ? __pfx_default_wake_function+0x10/0x10 [ 137.765875][ T3311] handle_mm_fault+0x8e4/0x2b00 [ 137.765902][ T3311] exc_page_fault+0x3b9/0x650 [ 137.765936][ T3311] asm_exc_page_fault+0x26/0x30 [ 137.765997][ T3311] RIP: 0033:0x7efe5b94f9e5 [ 137.766016][ T3311] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e db 1b 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 137.766035][ T3311] RSP: 002b:00007ffd0f94aef8 EFLAGS: 00010246 [ 137.766095][ T3311] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 00007efe5b94f9e3 [ 137.766110][ T3311] RDX: 00007ffd0f94af10 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.766128][ T3311] RBP: 00007ffd0f94af7c R08: 0000000028ec158c R09: 0000000000000000 [ 137.766142][ T3311] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 137.766154][ T3311] R13: 00000000000927c0 R14: 0000000000021856 R15: 00007ffd0f94afd0 [ 137.766199][ T3311] [ 137.766205][ T3311] memory: usage 307200kB, limit 307200kB, failcnt 484 [ 137.979724][ T3311] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 137.987747][ T3311] kmem: usage 228332kB, limit 9007199254740988kB, failcnt 0 [ 137.995239][ T3311] Memory cgroup stats for /syz4: [ 138.019901][ T3311] cache 80760832 [ 138.028914][ T3311] rss 0 [ 138.031829][ T3311] shmem 0 [ 138.034835][ T3311] mapped_file 0 [ 138.038311][ T3311] dirty 0 [ 138.041314][ T3311] writeback 0 [ 138.044647][ T3311] workingset_refault_anon 610 [ 138.049458][ T3311] workingset_refault_file 2233 [ 138.054260][ T3311] swap 393216 [ 138.057554][ T3311] swapcached 0 [ 138.061006][ T3311] pgpgin 178675 [ 138.064529][ T3311] pgpgout 158958 [ 138.068083][ T3311] pgfault 143741 [ 138.071643][ T3311] pgmajfault 99 [ 138.075165][ T3311] inactive_anon 0 [ 138.078868][ T3311] active_anon 0 [ 138.082341][ T3311] inactive_file 0 [ 138.086107][ T3311] active_file 0 [ 138.089579][ T3311] unevictable 80760832 [ 138.093702][ T3311] hierarchical_memory_limit 314572800 [ 138.099090][ T3311] hierarchical_memsw_limit 9223372036854771712 [ 138.105372][ T3311] total_cache 80760832 [ 138.109456][ T3311] total_rss 0 [ 138.112860][ T3311] total_shmem 0 [ 138.116349][ T3311] total_mapped_file 0 [ 138.120357][ T3311] total_dirty 0 [ 138.123877][ T3311] total_writeback 0 [ 138.127688][ T3311] total_workingset_refault_anon 610 [ 138.132909][ T3311] total_workingset_refault_file 2233 [ 138.138256][ T3311] total_swap 393216 [ 138.142058][ T3311] total_swapcached 0 [ 138.146063][ T3311] total_pgpgin 178675 [ 138.150081][ T3311] total_pgpgout 158958 [ 138.154174][ T3311] total_pgfault 143741 [ 138.158274][ T3311] total_pgmajfault 99 [ 138.162261][ T3311] total_inactive_anon 0 [ 138.166471][ T3311] total_active_anon 0 [ 138.170512][ T3311] total_inactive_file 0 [ 138.174737][ T3311] total_active_file 0 [ 138.178746][ T3311] total_unevictable 80760832 [ 138.183363][ T3311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.570,pid=5493,uid=0 [ 138.198011][ T3311] Memory cgroup out of memory: Killed process 5493 (syz.4.570) total-vm:95628kB, anon-rss:952kB, file-rss:20608kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 138.215862][ T6479] __nla_validate_parse: 1 callbacks suppressed [ 138.215880][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 138.254561][ T3311] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 138.265594][ T3311] CPU: 1 UID: 0 PID: 3311 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 138.265625][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.265638][ T3311] Call Trace: [ 138.265645][ T3311] [ 138.265653][ T3311] dump_stack_lvl+0xf2/0x150 [ 138.265696][ T3311] dump_stack+0x15/0x1a [ 138.265723][ T3311] dump_header+0x83/0x2d0 [ 138.265786][ T3311] oom_kill_process+0x341/0x4c0 [ 138.265825][ T3311] out_of_memory+0x9af/0xbe0 [ 138.265866][ T3311] ? css_next_descendant_pre+0x11c/0x140 [ 138.265918][ T3311] mem_cgroup_out_of_memory+0x13e/0x190 [ 138.265959][ T3311] try_charge_memcg+0x508/0x7f0 [ 138.265990][ T3311] charge_memcg+0x50/0xc0 [ 138.266016][ T3311] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 138.266061][ T3311] __read_swap_cache_async+0x236/0x480 [ 138.266205][ T3311] swap_cluster_readahead+0x279/0x3f0 [ 138.266245][ T3311] swapin_readahead+0xe4/0x6f0 [ 138.266341][ T3311] ? swap_cache_get_folio+0x77/0x210 [ 138.266374][ T3311] do_swap_page+0x31b/0x2550 [ 138.266419][ T3311] ? hrtimer_try_to_cancel+0x1d3/0x1e0 [ 138.266483][ T3311] ? __rcu_read_lock+0x36/0x50 [ 138.266516][ T3311] ? __pfx_default_wake_function+0x10/0x10 [ 138.266562][ T3311] handle_mm_fault+0x8e4/0x2b00 [ 138.266591][ T3311] exc_page_fault+0x3b9/0x650 [ 138.266620][ T3311] asm_exc_page_fault+0x26/0x30 [ 138.266720][ T3311] RIP: 0033:0x7efe5b94f9e5 [ 138.266738][ T3311] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e db 1b 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 138.266761][ T3311] RSP: 002b:00007ffd0f94aef8 EFLAGS: 00010246 [ 138.266780][ T3311] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 00007efe5b94f9e3 [ 138.266795][ T3311] RDX: 00007ffd0f94af10 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.266857][ T3311] RBP: 00007ffd0f94af7c R08: 0000000028ec158c R09: 0000000000000000 [ 138.266868][ T3311] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 138.266882][ T3311] R13: 00000000000927c0 R14: 0000000000021856 R15: 00007ffd0f94afd0 [ 138.266937][ T3311] [ 138.266946][ T3311] memory: usage 307200kB, limit 307200kB, failcnt 643 [ 138.479517][ T3311] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 138.487476][ T3311] kmem: usage 228332kB, limit 9007199254740988kB, failcnt 0 [ 138.494910][ T3311] Memory cgroup stats for /syz4: [ 138.495166][ T3311] cache 80760832 [ 138.503734][ T3311] rss 0 [ 138.506511][ T3311] shmem 0 [ 138.509479][ T3311] mapped_file 0 [ 138.512959][ T3311] dirty 0 [ 138.515899][ T3311] writeback 0 [ 138.519254][ T3311] workingset_refault_anon 610 [ 138.523952][ T3311] workingset_refault_file 2233 [ 138.528777][ T3311] swap 221184 [ 138.532056][ T3311] swapcached 0 [ 138.535523][ T3311] pgpgin 178675 [ 138.538989][ T3311] pgpgout 158958 [ 138.542528][ T3311] pgfault 143741 [ 138.546149][ T3311] pgmajfault 99 [ 138.549705][ T3311] inactive_anon 0 [ 138.553359][ T3311] active_anon 0 [ 138.556869][ T3311] inactive_file 0 [ 138.560553][ T3311] active_file 0 [ 138.564037][ T3311] unevictable 80760832 [ 138.568114][ T3311] hierarchical_memory_limit 314572800 [ 138.573551][ T3311] hierarchical_memsw_limit 9223372036854771712 [ 138.579725][ T3311] total_cache 80760832 [ 138.583903][ T3311] total_rss 0 [ 138.587201][ T3311] total_shmem 0 [ 138.590686][ T3311] total_mapped_file 0 [ 138.594704][ T3311] total_dirty 0 [ 138.598167][ T3311] total_writeback 0 [ 138.601992][ T3311] total_workingset_refault_anon 610 [ 138.607234][ T3311] total_workingset_refault_file 2233 [ 138.612570][ T3311] total_swap 221184 [ 138.616437][ T3311] total_swapcached 0 [ 138.620358][ T3311] total_pgpgin 178675 [ 138.624456][ T3311] total_pgpgout 158958 [ 138.628601][ T3311] total_pgfault 143741 [ 138.632673][ T3311] total_pgmajfault 99 [ 138.636708][ T3311] total_inactive_anon 0 [ 138.640867][ T3311] total_active_anon 0 [ 138.644891][ T3311] total_inactive_file 0 [ 138.649057][ T3311] total_active_file 0 [ 138.653077][ T3311] total_unevictable 80760832 [ 138.657683][ T3311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.843,pid=6449,uid=0 [ 138.672415][ T3311] Memory cgroup out of memory: Killed process 6449 (syz.4.843) total-vm:95892kB, anon-rss:916kB, file-rss:22356kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:0 [ 138.767880][ T6483] tipc: Enabled bearer , priority 0 [ 138.778629][ T6485] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 138.786957][ T6482] tipc: Disabling bearer [ 138.803439][ T6485] x_tables: duplicate underflow at hook 2 [ 138.870560][ T6487] netlink: 'syz.1.851': attribute type 4 has an invalid length. [ 138.960217][ T6490] tipc: Enabling of bearer rejected, failed to enable media [ 138.973409][ T30] kauditd_printk_skb: 602 callbacks suppressed [ 138.973423][ T30] audit: type=1326 audit(18315022.597:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 139.011753][ T6495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.865'. [ 139.021178][ T30] audit: type=1326 audit(18315022.597:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 139.021787][ T6493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.045126][ T30] audit: type=1326 audit(18315022.597:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 139.064335][ T6493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.076717][ T30] audit: type=1326 audit(18315022.597:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 139.107699][ T30] audit: type=1326 audit(18315022.597:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 139.131563][ T30] audit: type=1326 audit(18315022.597:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 139.155562][ T30] audit: type=1326 audit(18315022.597:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 139.178946][ T30] audit: type=1326 audit(18315022.597:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 139.192316][ T6504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.855'. [ 139.203004][ T30] audit: type=1326 audit(18315022.597:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 139.218838][ T6504] siw: device registration error -23 [ 139.235346][ T30] audit: type=1326 audit(18315022.597:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a73e9d169 code=0x7ffc0000 [ 139.291949][ T6509] tipc: Enabling of bearer rejected, failed to enable media [ 139.304695][ T6511] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 140.013398][ T6530] loop2: detected capacity change from 0 to 256 [ 140.051453][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'. [ 140.104171][ T6530] msdos: Bad value for 'gid' [ 140.108853][ T6530] msdos: Bad value for 'gid' [ 140.229644][ T6530] loop2: detected capacity change from 0 to 2048 [ 140.273803][ T6530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.462857][ T6546] atomic_op ffff888117c36928 conn xmit_atomic 0000000000000000 [ 140.500396][ T6548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.871'. [ 140.510243][ T6548] siw: device registration error -23 [ 140.532397][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.570802][ T6559] loop2: detected capacity change from 0 to 128 [ 140.597056][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 140.639862][ T6550] siw: device registration error -23 [ 141.365848][ T6597] lo speed is unknown, defaulting to 1000 [ 142.151312][ T6614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.170652][ T6614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.544639][ T6618] xt_CONNSECMARK: invalid mode: 0 [ 142.618350][ T6631] bond0: entered promiscuous mode [ 142.623569][ T6631] bond0: entered allmulticast mode [ 142.629411][ T6631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.651821][ T6631] bond0 (unregistering): Released all slaves [ 142.753586][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.901'. [ 142.851204][ T6643] syz.3.904: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 142.865928][ T6643] CPU: 1 UID: 0 PID: 6643 Comm: syz.3.904 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 142.865961][ T6643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.865978][ T6643] Call Trace: [ 142.865987][ T6643] [ 142.865996][ T6643] dump_stack_lvl+0xf2/0x150 [ 142.866056][ T6643] dump_stack+0x15/0x1a [ 142.866079][ T6643] warn_alloc+0x145/0x1b0 [ 142.866106][ T6643] ? __schedule+0x75b/0x990 [ 142.866129][ T6643] ? __vmalloc_node_range_noprof+0x88/0xe70 [ 142.866246][ T6643] __vmalloc_node_range_noprof+0xaa/0xe70 [ 142.866286][ T6643] ? __pfx_futex_wake_mark+0x10/0x10 [ 142.866389][ T6643] ? __rcu_read_unlock+0x4e/0x70 [ 142.866440][ T6643] ? avc_has_perm_noaudit+0x1cc/0x210 [ 142.866467][ T6643] ? should_fail_ex+0x31/0x260 [ 142.866501][ T6643] ? xskq_create+0x36/0xd0 [ 142.866605][ T6643] ? should_failslab+0x8f/0xb0 [ 142.866719][ T6643] vmalloc_user_noprof+0x59/0x70 [ 142.866752][ T6643] ? xskq_create+0x79/0xd0 [ 142.866791][ T6643] xskq_create+0x79/0xd0 [ 142.866830][ T6643] xsk_init_queue+0x82/0xd0 [ 142.866894][ T6643] xsk_setsockopt+0x388/0x520 [ 142.866930][ T6643] ? __pfx_xsk_setsockopt+0x10/0x10 [ 142.866992][ T6643] __sys_setsockopt+0x187/0x200 [ 142.867020][ T6643] __x64_sys_setsockopt+0x66/0x80 [ 142.867046][ T6643] x64_sys_call+0x282e/0x2dc0 [ 142.867142][ T6643] do_syscall_64+0xc9/0x1c0 [ 142.867178][ T6643] ? clear_bhb_loop+0x55/0xb0 [ 142.867229][ T6643] ? clear_bhb_loop+0x55/0xb0 [ 142.867309][ T6643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.867349][ T6643] RIP: 0033:0x7f0a73e9d169 [ 142.867364][ T6643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.867384][ T6643] RSP: 002b:00007f0a72507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.867407][ T6643] RAX: ffffffffffffffda RBX: 00007f0a740b5fa0 RCX: 00007f0a73e9d169 [ 142.867422][ T6643] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 142.867506][ T6643] RBP: 00007f0a73f1e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 142.867517][ T6643] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.867528][ T6643] R13: 0000000000000000 R14: 00007f0a740b5fa0 R15: 00007fffc5a6ece8 [ 142.867674][ T6643] [ 142.867995][ T6643] Mem-Info: [ 143.002505][ T6648] lo speed is unknown, defaulting to 1000 [ 143.006662][ T6643] active_anon:5878 inactive_anon:11 isolated_anon:0 [ 143.006662][ T6643] active_file:19210 inactive_file:2655 isolated_file:0 [ 143.006662][ T6643] unevictable:19717 dirty:182 writeback:1 [ 143.006662][ T6643] slab_reclaimable:2957 slab_unreclaimable:77721 [ 143.006662][ T6643] mapped:29597 shmem:1812 pagetables:1078 [ 143.006662][ T6643] sec_pagetables:0 bounce:0 [ 143.006662][ T6643] kernel_misc_reclaimable:0 [ 143.006662][ T6643] free:1802108 free_pcp:12055 free_cma:0 [ 143.006727][ T6643] Node 0 active_anon:23512kB inactive_anon:44kB active_file:76840kB inactive_file:10620kB unevictable:78868kB isolated(anon):0kB isolated(file):0kB mapped:118388kB dirty:728kB writeback:4kB shmem:7248kB writeback_tmp:0kB kernel_stack:4208kB pagetables:4312kB sec_pagetables:0kB all_unreclaimable? no [ 143.175591][ T6643] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 143.202539][ T6643] lowmem_reserve[]: 0 2885 7863 7863 [ 143.207929][ T6643] Node 0 DMA32 free:2950824kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954356kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 143.236325][ T6643] lowmem_reserve[]: 0 0 4978 4978 [ 143.241511][ T6643] Node 0 Normal free:4241748kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:23744kB inactive_anon:44kB active_file:76840kB inactive_file:10620kB unevictable:78868kB writepending:732kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:44276kB local_pcp:17056kB free_cma:0kB [ 143.272282][ T6643] lowmem_reserve[]: 0 0 0 0 [ 143.276854][ T6643] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 143.289633][ T6643] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 5*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950824kB [ 143.305869][ T6643] Node 0 Normal: 479*4kB (ME) 379*8kB (UME) 178*16kB (UME) 127*32kB (ME) 154*64kB (UME) 127*128kB (UME) 199*256kB (UME) 147*512kB (UME) 140*1024kB (UME) 81*2048kB (UME) 920*4096kB (UM) = 4241748kB [ 143.325518][ T6643] Node 0 hugepages_total=7 hugepages_free=7 hugepages_surp=3 hugepages_size=2048kB [ 143.334856][ T6643] 43412 total pagecache pages [ 143.339543][ T6643] 20 pages in swap cache [ 143.343809][ T6643] Free swap = 123632kB [ 143.348037][ T6643] Total swap = 124996kB [ 143.352186][ T6643] 2097051 pages RAM [ 143.356018][ T6643] 0 pages HighMem/MovableOnly [ 143.360704][ T6643] 80070 pages reserved [ 143.469236][ T6657] loop2: detected capacity change from 0 to 2048 [ 143.532553][ T6657] ALSA: seq fatal error: cannot create timer (-22) [ 144.220917][ T6683] loop2: detected capacity change from 0 to 8192 [ 144.266690][ T6687] xt_hashlimit: max too large, truncated to 1048576 [ 144.340870][ T6692] netlink: 'syz.2.917': attribute type 30 has an invalid length. [ 144.349821][ T6687] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.441130][ T6693] lo speed is unknown, defaulting to 1000 [ 144.473465][ T30] kauditd_printk_skb: 746 callbacks suppressed [ 144.473482][ T30] audit: type=1326 audit(18315028.097:7265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 144.552851][ T30] audit: type=1326 audit(18315028.097:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 144.576814][ T30] audit: type=1326 audit(18315028.097:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 144.600688][ T30] audit: type=1326 audit(18315028.097:7268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 144.624598][ T30] audit: type=1326 audit(18315028.097:7269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 144.648464][ T30] audit: type=1326 audit(18315028.097:7270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 144.672220][ T30] audit: type=1326 audit(18315028.097:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 144.696089][ T30] audit: type=1326 audit(18315028.097:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 144.720023][ T30] audit: type=1326 audit(18315028.097:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 144.744293][ T30] audit: type=1326 audit(18315028.097:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5b91d169 code=0x7ffc0000 [ 144.773747][ T6703] rdma_op ffff88815184e980 conn xmit_rdma 0000000000000000 [ 144.794807][ T6688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.911'. [ 144.932582][ T6707] netlink: 44 bytes leftover after parsing attributes in process `syz.4.923'. [ 144.988664][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 145.968298][ T6728] lo speed is unknown, defaulting to 1000 [ 146.519699][ T6761] netlink: 'syz.2.940': attribute type 4 has an invalid length. [ 146.559877][ T6768] bond1: entered promiscuous mode [ 146.565718][ T6768] bond1: entered allmulticast mode [ 146.599130][ T6768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.633528][ T6768] bond1 (unregistering): Released all slaves [ 146.657417][ T6766] lo speed is unknown, defaulting to 1000 [ 146.676037][ T6773] loop2: detected capacity change from 0 to 512 [ 146.709927][ T6773] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.719333][ T6773] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 146.738945][ T6773] EXT4-fs error (device loop2): ext4_orphan_get:1389: comm syz.2.942: inode #15: comm syz.2.942: iget: illegal inode # [ 146.752873][ T6773] EXT4-fs (loop2): Remounting filesystem read-only [ 146.753907][ T6775] lo speed is unknown, defaulting to 1000 [ 146.759872][ T6773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.796342][ T6773] SELinux: (dev loop2, type ext2) getxattr errno 5 [ 146.820341][ T6773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.853007][ T6781] netlink: 'syz.4.946': attribute type 3 has an invalid length. [ 146.874853][ T6781] siw: device registration error -23 [ 146.984657][ T6785] loop2: detected capacity change from 0 to 1024 [ 146.991477][ T6785] ext4: Unknown parameter 'fowner<00000000000000000000' [ 147.077582][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'. [ 147.188870][ T6783] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 147.330122][ T6789] loop2: detected capacity change from 0 to 512 [ 147.340597][ T6789] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.950: casefold flag without casefold feature [ 147.354401][ T6789] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.950: couldn't read orphan inode 15 (err -117) [ 147.373545][ T6789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.776859][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.000047][ T6825] loop2: detected capacity change from 0 to 2048 [ 148.046208][ T6825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.143301][ T6825] lo speed is unknown, defaulting to 1000 [ 148.287725][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.309271][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 148.336696][ T6840] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 148.721585][ T6861] xt_hashlimit: size too large, truncated to 1048576 [ 149.482774][ T30] kauditd_printk_skb: 667 callbacks suppressed [ 149.482794][ T30] audit: type=1326 audit(18315033.097:7942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 149.772438][ T6879] siw: device registration error -23 [ 149.792107][ T30] audit: type=1326 audit(18315033.127:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 149.815333][ T30] audit: type=1326 audit(18315033.137:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 149.838437][ T30] audit: type=1326 audit(18315033.137:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 149.861672][ T30] audit: type=1326 audit(18315033.137:7946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 149.884929][ T30] audit: type=1326 audit(18315033.367:7947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 149.908106][ T30] audit: type=1326 audit(18315033.367:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 149.931281][ T30] audit: type=1326 audit(18315033.367:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 149.954451][ T30] audit: type=1326 audit(18315033.367:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 149.977672][ T30] audit: type=1326 audit(18315033.367:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 150.014936][ T6880] atomic_op ffff88815180b128 conn xmit_atomic 0000000000000000 [ 150.522028][ T6891] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 150.642522][ T6897] ip6t_rpfilter: unknown options [ 150.648893][ T6897] netlink: 'syz.1.995': attribute type 13 has an invalid length. [ 150.666118][ T6894] loop2: detected capacity change from 0 to 128 [ 150.672650][ T6894] vfat: Unknown parameter 'CCùð)¨ê…[ã' [ 150.699389][ T6897] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 150.713281][ T6897] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.771219][ T6897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.929589][ T6904] lo speed is unknown, defaulting to 1000 [ 151.252111][ T6915] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 151.682110][ T6919] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 152.105827][ T6925] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 152.403109][ T6938] atomic_op ffff888151809128 conn xmit_atomic 0000000000000000 [ 152.779818][ T6945] loop2: detected capacity change from 0 to 512 [ 152.795837][ T6945] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.805132][ T6945] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 152.833616][ T6945] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 152.870958][ T6945] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 152.882772][ T6945] System zones: 0-2, 18-18, 34-35 [ 152.893187][ T6945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.975138][ T6951] netlink: 'syz.3.1001': attribute type 3 has an invalid length. [ 153.017353][ T6951] siw: device registration error -23 [ 153.038206][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.260231][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.991'. [ 153.340124][ T6966] lo speed is unknown, defaulting to 1000 [ 153.992529][ T6980] lo speed is unknown, defaulting to 1000 [ 154.654761][ T30] kauditd_printk_skb: 940 callbacks suppressed [ 154.654777][ T30] audit: type=1326 audit(18315038.277:8892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 154.731215][ T30] audit: type=1326 audit(18315038.307:8893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 154.755201][ T30] audit: type=1326 audit(18315038.307:8894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 154.778577][ T30] audit: type=1326 audit(18315038.307:8895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 154.802561][ T30] audit: type=1326 audit(18315038.307:8896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 154.811180][ T7000] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 154.826554][ T30] audit: type=1326 audit(18315038.307:8897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 154.860171][ T30] audit: type=1326 audit(18315038.307:8898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05e5c8bad0 code=0x7ffc0000 [ 154.884247][ T30] audit: type=1326 audit(18315038.307:8899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05e5c8bad0 code=0x7ffc0000 [ 154.908515][ T30] audit: type=1326 audit(18315038.307:8900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 154.933043][ T30] audit: type=1326 audit(18315038.307:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e5c8d169 code=0x7ffc0000 [ 155.394644][ T7020] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.404011][ T7020] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 155.417841][ T7020] loop2: detected capacity change from 0 to 164 [ 155.420861][ T7018] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 155.434521][ T7020] Unable to read rock-ridge attributes [ 155.444488][ T7020] Unable to read rock-ridge attributes [ 155.853784][ T7029] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 156.272088][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1025'. [ 156.930436][ T7054] lo speed is unknown, defaulting to 1000 [ 158.454805][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.462460][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1045'. [ 158.521284][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.998488][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 159.078340][ T7129] loop2: detected capacity change from 0 to 512 [ 159.094364][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 159.110291][ T7130] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 159.110581][ T7132] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 159.123191][ T7129] ext4: Unknown parameter 'euid' [ 159.663637][ T30] kauditd_printk_skb: 1828 callbacks suppressed [ 159.663658][ T30] audit: type=1326 audit(18315043.287:10730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9301c64127 code=0x7ffc0000 [ 159.693909][ T30] audit: type=1326 audit(18315043.287:10731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9301c09359 code=0x7ffc0000 [ 159.717901][ T30] audit: type=1326 audit(18315043.287:10732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 159.741911][ T30] audit: type=1326 audit(18315043.297:10733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9301c64127 code=0x7ffc0000 [ 159.765773][ T30] audit: type=1326 audit(18315043.297:10734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9301c09359 code=0x7ffc0000 [ 159.789668][ T30] audit: type=1326 audit(18315043.297:10735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 159.813723][ T30] audit: type=1326 audit(18315043.307:10736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9301c64127 code=0x7ffc0000 [ 159.837605][ T30] audit: type=1326 audit(18315043.307:10737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9301c09359 code=0x7ffc0000 [ 159.861459][ T30] audit: type=1326 audit(18315043.307:10738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9301c6d169 code=0x7ffc0000 [ 159.885390][ T30] audit: type=1326 audit(18315043.317:10739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9301c64127 code=0x7ffc0000 [ 160.011013][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'. [ 160.087787][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1059'. [ 160.683986][ T7173] lo speed is unknown, defaulting to 1000 [ 161.106740][ T7180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.291977][ T7187] loop2: detected capacity change from 0 to 2048 [ 161.392462][ T7191] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 161.407325][ T7187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.474142][ T7194] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 162.078727][ T7187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1068'. [ 162.097218][ T7187] usb usb6: usbfs: process 7187 (syz.2.1068) did not claim interface 0 before use [ 162.336551][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1076'. [ 162.445960][ T7216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.516286][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.555017][ T7222] loop2: detected capacity change from 0 to 256 [ 162.562116][ T7223] x_tables: duplicate underflow at hook 3 [ 162.575356][ T7222] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 162.672319][ T7214] ip6gretap1: entered promiscuous mode [ 162.706810][ T7214] ip6gretap1: entered allmulticast mode [ 162.781861][ T7218] pim6reg: entered allmulticast mode [ 162.788295][ T7223] pim6reg: left allmulticast mode [ 162.805537][ T7227] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 162.956887][ T7237] lo speed is unknown, defaulting to 1000 [ 164.012142][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 164.728936][ T7239] lo speed is unknown, defaulting to 1000 [ 165.123322][ T30] kauditd_printk_skb: 683 callbacks suppressed [ 165.123337][ T30] audit: type=1326 audit(18315048.747:11423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 165.224768][ T30] audit: type=1326 audit(18315048.777:11424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 165.248258][ T30] audit: type=1326 audit(18315048.777:11425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 165.271686][ T30] audit: type=1326 audit(18315048.777:11426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 165.295052][ T30] audit: type=1326 audit(18315048.787:11427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 165.318636][ T30] audit: type=1326 audit(18315048.787:11428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 165.342234][ T30] audit: type=1326 audit(18315048.787:11429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 165.365628][ T30] audit: type=1326 audit(18315048.787:11430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 165.388991][ T30] audit: type=1326 audit(18315048.787:11431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 165.412403][ T30] audit: type=1326 audit(18315048.787:11432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d13cd169 code=0x7ffc0000 [ 165.657490][ T7280] lo speed is unknown, defaulting to 1000 [ 165.697850][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1094'. [ 165.707083][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1094'. [ 166.185682][ T7291] bond0: (slave bond_slave_0): Releasing backup interface [ 166.216185][ T7291] bond0: (slave bond_slave_1): Releasing backup interface [ 166.467601][ T7293] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 166.500555][ T7293] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 166.785081][ T7303] lo speed is unknown, defaulting to 1000 [ 166.825751][ T7304] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 166.832318][ T7304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.834508][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1105'. [ 166.840165][ T7304] vhci_hcd vhci_hcd.0: Device attached [ 166.850082][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'. [ 167.110309][ T5758] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 167.168963][ T7306] vhci_hcd: connection reset by peer [ 167.181298][ T3496] vhci_hcd: stop threads [ 167.186381][ T3496] vhci_hcd: release socket [ 167.191032][ T3496] vhci_hcd: disconnect device [ 167.303093][ T7321] lo speed is unknown, defaulting to 1000 [ 167.954828][ T7327] ================================================================== [ 167.962963][ T7327] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 167.969759][ T7327] [ 167.972087][ T7327] write to 0xffff888103155e78 of 8 bytes by task 7324 on cpu 1: [ 167.979733][ T7327] vms_clear_ptes+0x1a2/0x300 [ 167.984430][ T7327] mmap_region+0x659/0x1620 [ 167.988950][ T7327] do_mmap+0x98a/0xc30 [ 167.993039][ T7327] vm_mmap_pgoff+0x16d/0x2d0 [ 167.997647][ T7327] ksys_mmap_pgoff+0x286/0x330 [ 168.002447][ T7327] x64_sys_call+0x1940/0x2dc0 [ 168.007147][ T7327] do_syscall_64+0xc9/0x1c0 [ 168.011688][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.017604][ T7327] [ 168.019934][ T7327] read to 0xffff888103155e78 of 8 bytes by task 7327 on cpu 0: [ 168.027480][ T7327] getrusage+0xa15/0xb70 [ 168.031730][ T7327] io_sq_thread+0x5f9/0x1100 [ 168.036338][ T7327] ret_from_fork+0x4b/0x60 [ 168.040774][ T7327] ret_from_fork_asm+0x1a/0x30 [ 168.045557][ T7327] [ 168.047889][ T7327] value changed: 0x00000000000014e5 -> 0x00000000000016a1 [ 168.055048][ T7327] [ 168.057375][ T7327] Reported by Kernel Concurrency Sanitizer on: [ 168.063549][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: iou-sqp-7325 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 168.074412][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.084483][ T7327] ================================================================== [ 168.135282][ T7331] loop2: detected capacity change from 0 to 128 [ 168.154054][ T7331] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.576813][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.142970][ T5758] usb 5-1: enqueue for inactive port 0 [ 172.148491][ T5758] usb 5-1: enqueue for inactive port 0 [ 172.222795][ T5758] vhci_hcd: vhci_device speed not set