last executing test programs: 3m47.012764276s ago: executing program 0 (id=2346): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 3m47.012425205s ago: executing program 0 (id=2347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000a00)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000020601020000000000000000010000020c0007800800120000000000050001000700000005000400000000000900020073797a3000000000050005000200000011000300686173683a69702c706f7274000000009ba3e74e3c17d2171cefeaf453339b660a7794d1812f7d1ce05d7738"], 0x58}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3m46.128921143s ago: executing program 0 (id=2361): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x40, 0x1409, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1080}, 0x48844) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000002000000e27f00000300000012000000", @ANYBLOB="8fe90b25e9336963d1c812", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 3m45.474821726s ago: executing program 0 (id=2368): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x54) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001200), 0x10) (async) connect$can_bcm(r5, &(0x7f0000001200), 0x10) close(r5) (async) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="63727566742c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303031362c636865636b3d72656c617865642c636865636b3d72656c617865642c004ebe02d83839c183098ea4c343c253a3817a1be99fce11d4eb199c8293a8e4edde99717f074b2f8657ce6ba6ad43223cc53c7956558e58c034cc0480ac8c6aa3dc369cd820bf5e83cbc56c0a80d15de24e02d679ed41f8c6c857ae056f277f0cf61fd89cdbf69e958ecb1fb37260f1579c4aa969bbd1f441590c9176efa1e5b98583b0ed66fdc6f1c3311d3033b260303cc6556bd6ce3d5e3c85b1d4cf3d35b7dbce8b8545f832c1346e6a0dd95ed6144444fba9592efe8559", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$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") 3m45.353758088s ago: executing program 0 (id=2372): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) 3m44.579751924s ago: executing program 0 (id=2384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffe75, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0xffd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000000)="00f0", 0x34000, 0x880, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() sendmsg$unix(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3m44.559285426s ago: executing program 32 (id=2384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffe75, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0xffd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000000)="00f0", 0x34000, 0x880, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() sendmsg$unix(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4.129811087s ago: executing program 5 (id=6002): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) unshare(0x22020400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 3.835482415s ago: executing program 5 (id=6007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 3.751628773s ago: executing program 5 (id=6008): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000001200)=ANY=[@ANYRES8=r0], 0x858) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) write$binfmt_elf32(r0, &(0x7f0000001200)=ANY=[@ANYRES8=r0], 0x858) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) (async) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async) close(r0) (async) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) 3.623791376s ago: executing program 5 (id=6009): fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r0, 0x0, 0x0) 1.950526669s ago: executing program 4 (id=6020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x200, 0x1020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x1004010, &(0x7f0000000800)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRES32=r4], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r9], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000002000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_nanosleep(0x8, 0x0, &(0x7f0000000580)={0x0, 0x3938700}, 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.888739655s ago: executing program 1 (id=6021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, 0x100}, 0x94) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = getuid() quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000000)=@filename='./file0\x00', r2, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 1.888299046s ago: executing program 1 (id=6022): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {}, 0xa}}, 0x26) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0xff, 0x1000, &(0x7f0000002480)="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", 0x0, 0x1}]}) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5], 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc020000000000000000000000000001fe8000000000050000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000e000000100000000000000000000000007000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000200000000000000000000004c001400636d6163286165732900"/244], 0x13c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @local, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000340)="e070f6f5ff313ee6217586ff1ca39167e53ec278ff3f49f3daa32bcb424350cb708602e2f7ec281d042da79126bc6e292851ab25247b02c810f4ca643c57bb48ef7d35b451995252afc093c620c1af369edd398b7ce3bf8a27e6ffcd093e2f0838e64a3c1a91e9115f2fc8e754d288e12c20a0238a9a9880dd3b2c530e8d41cf09cac41382edafa6bea6ea6b948ea308f866", 0x92}, {&(0x7f0000000180)="25cc45c489e188f33d3c95bdfab92fe6c3ac927b4db9d2eccc49c87924e7fd020bb88d00c2df69276f452b52302a76c7", 0x30}, {&(0x7f0000000400)="dd0b5b9fee5cc609d28362c87f36ab4b899184e54576d25cdd23ec90df39de53077a0c29b800723aec641c36a88ffccf4927639aef9cd6bdb28f94165c5efc5f190bcbd54cff607e8846c012a563d9f7c17bd9357b29dbda1be40a3c887863731cf24902d6e2cf5d5a2e018013d50770beae42f86be1ac01bf3fdf72", 0x7c}, {&(0x7f0000000480)="5b361d23feef1cf61378596271cad4a0adc0de20c15e6556722b6e153ee252b497252bc96e5d44f23523f426dbc92f4508ad8531119f8157eb62c7d2b64aa3fa0c0457c1de8d60841eeaf08cd881a02f49f4cc0ac502fdb5ed024cdd8ed825a5699b3d748bbee32ceac8deee20c87c1e3bc62e9601bef12ca92a78533e60583a105bb48a47134ade20fb7831eba509f330f162eeef76257c3a4a9490889c2c3e4b1ecc3fa70a1604e21bc98078181ea9f9", 0xb1}, {&(0x7f0000000540)="01a6684953f82d7d6ecf09f2662846e8b939d57d018219aa448a9a6ed269ae2262e258f73ac2158be278a6f212514108bbb463b444d1f972ed2cc52e6ed35ac018f0101271a71082cae0b574eaa6f003fcfd3a0968f7e1849753d9900e108c1d1a981fafd7846f4e62a308bbc12247de3c64efcd3bb1eee7157e2b458e3a50f70cb1ae1063bb26d71ec7f14c4935541758ce0eaa803c0eecf6324c6c0a00cebbfe3648a9739b20a4dd71d3f2de0a8892", 0xb0}, {&(0x7f0000000600)="3454ca3cd85a7297b0cd509b0b7ec9edec65d0121b08b2b28d7e6b8f16ebd446d259cacb9bddd9f9d8184c880899d45419e7ebc08bb4d955afb1d7dcce837d192d74a17874c0ad697203d5005532e546abc2ddd4f9663cc5b12446822d9ccef031c277df2b7f798797f22808b00f297e00d031ad9072d9cc174bddc54d11bea962c9be25dd0a1824f27ba3d6274e3186c09268bd8a51270b1935e8df837919624bfed6c3472b5adc85be12098af299d3f7", 0xb1}], 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="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"/296], 0x128}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 1.850423619s ago: executing program 1 (id=6023): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000004c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) iopl(0x3) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x1) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x19c) getdents(r7, &(0x7f0000000300)=""/56, 0x38) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) 1.347736318s ago: executing program 3 (id=6025): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[], 0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000540)='\x00', &(0x7f0000000580)='./file0\x00', 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a00012400000009000000000000000000000000000000000600000000000000020013000300"], 0x98}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x8004, './file0/file1\x00'}}) 1.237305239s ago: executing program 4 (id=6027): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[], 0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000540)='\x00', &(0x7f0000000580)='./file0\x00', 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a00012400000009000000000000000000000000000000000600000000000000020013000300"], 0x98}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x8004, './file0/file1\x00'}}) 1.165163606s ago: executing program 2 (id=6028): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x2c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7fe, 0x9, 0xc, 0x3, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000640)=ANY=[@ANYBLOB="3d97000001"]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r6) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0x1}, 0x18) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x40000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) 1.12090999s ago: executing program 3 (id=6029): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1}, 0x18) unshare(0x22020400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1.032038129s ago: executing program 5 (id=6030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 1.031273579s ago: executing program 4 (id=6031): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x40, 0x1409, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1080}, 0x48844) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000002000000e27f00000300000012000000", @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 975.551675ms ago: executing program 3 (id=6032): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x1fffc002) 950.067627ms ago: executing program 1 (id=6033): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 938.276328ms ago: executing program 4 (id=6034): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 907.559801ms ago: executing program 5 (id=6035): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x800000000006}, 0x18) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r5, &(0x7f00000000c0)=""/22, 0x16, 0x6) 901.357622ms ago: executing program 3 (id=6036): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[], 0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000540)='\x00', &(0x7f0000000580)='./file0\x00', 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a00012400000009000000000000000000000000000000000600000000000000020013000300"], 0x98}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x8004, './file0/file1\x00'}}) 845.947647ms ago: executing program 2 (id=6037): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[], 0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000540)='\x00', &(0x7f0000000580)='./file0\x00', 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a00012400000009000000000000000000000000000000000600000000000000020013000300"], 0x98}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x8004, './file0/file1\x00'}}) 845.132888ms ago: executing program 3 (id=6038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x200, 0x1020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x1004010, &(0x7f0000000800)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRES32=r4], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r9], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000002000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_nanosleep(0x8, 0x0, &(0x7f0000000580)={0x0, 0x3938700}, 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 835.336368ms ago: executing program 2 (id=6039): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r0, 0xffffffffffffffff, 0x0) 775.388914ms ago: executing program 4 (id=6040): fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 675.523004ms ago: executing program 4 (id=6041): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0xd0, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040}, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000016b1183000000000085100000020000008500000000950000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 674.907604ms ago: executing program 1 (id=6051): fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 631.246618ms ago: executing program 3 (id=6042): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 614.53039ms ago: executing program 1 (id=6043): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) iopl(0x3) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x1) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x19c) getdents(r8, &(0x7f0000000300)=""/56, 0x38) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) 383.516772ms ago: executing program 2 (id=6044): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x40, 0x1409, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1080}, 0x48844) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000002000000e27f00000300000012000000", @ANYBLOB="8fe90b25e933", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 129.807307ms ago: executing program 2 (id=6045): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000002}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) 0s ago: executing program 2 (id=6046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): n readonly fs [ 251.244199][T15920] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4256: bg 0: block 248: padding at end of block bitmap is not set [ 251.282268][T15920] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4256: Failed to acquire dquot type 1 [ 251.295583][T15920] EXT4-fs (loop2): 1 truncate cleaned up [ 251.302279][T15920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.358182][T11827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.412083][T15949] loop2: detected capacity change from 0 to 128 [ 251.517554][T15965] netlink: 'syz.3.4265': attribute type 21 has an invalid length. [ 251.766314][T15984] loop4: detected capacity change from 0 to 512 [ 251.788274][T15984] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 251.815970][T15984] EXT4-fs (loop4): 1 truncate cleaned up [ 251.822350][T15984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.850849][T12364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.882889][T15996] loop2: detected capacity change from 0 to 128 [ 251.917200][T15993] siw: device registration error -23 [ 252.173236][T16006] __nla_validate_parse: 3 callbacks suppressed [ 252.173261][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4286'. [ 252.550896][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4288'. [ 252.641939][T16024] loop5: detected capacity change from 0 to 512 [ 252.658856][T16024] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.701226][T16024] EXT4-fs (loop5): 1 truncate cleaned up [ 252.719670][T16024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.739271][T16031] loop2: detected capacity change from 0 to 128 [ 252.763720][T10135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.872343][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4301'. [ 253.026893][T16051] netlink: 'syz.2.4297': attribute type 21 has an invalid length. [ 253.040030][T16050] netlink: 'syz.1.4302': attribute type 4 has an invalid length. [ 253.048081][T16050] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4302'. [ 253.095136][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4302'. [ 253.177422][T16057] loop3: detected capacity change from 0 to 512 [ 253.186474][T16057] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 253.326779][T16066] loop5: detected capacity change from 0 to 512 [ 253.334642][T16066] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 253.346343][T16066] EXT4-fs (loop5): 1 truncate cleaned up [ 253.352709][T16066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.378702][T10135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.449241][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4314'. [ 253.486074][T16091] sctp: [Deprecated]: syz.3.4317 (pid 16091) Use of int in maxseg socket option. [ 253.486074][T16091] Use struct sctp_assoc_value instead [ 253.523723][T16095] loop3: detected capacity change from 0 to 512 [ 253.531326][T16095] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 253.545702][T16095] EXT4-fs (loop3): 1 truncate cleaned up [ 253.553259][T16095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.578819][T11125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.709198][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4327'. [ 253.726585][T16120] sctp: [Deprecated]: syz.3.4329 (pid 16120) Use of int in maxseg socket option. [ 253.726585][T16120] Use struct sctp_assoc_value instead [ 253.869008][T16129] loop2: detected capacity change from 0 to 512 [ 253.901693][T16129] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 253.930040][T16129] EXT4-fs (loop2): 1 truncate cleaned up [ 253.936609][T16129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.962649][T11827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.043089][T16151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4341'. [ 254.086454][T16156] netlink: 'syz.5.4334': attribute type 21 has an invalid length. [ 254.245388][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4353'. [ 254.316372][T16193] team0: Port device syz_tun added [ 254.461648][T16203] sctp: [Deprecated]: syz.4.4360 (pid 16203) Use of int in maxseg socket option. [ 254.461648][T16203] Use struct sctp_assoc_value instead [ 254.494269][T16201] loop2: detected capacity change from 0 to 1024 [ 254.529888][T16201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.556810][T16201] lo speed is unknown, defaulting to 1000 [ 254.592999][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4364'. [ 254.594558][T16201] lo speed is unknown, defaulting to 1000 [ 254.608878][T16201] lo speed is unknown, defaulting to 1000 [ 254.773758][T16235] sctp: [Deprecated]: syz.5.4371 (pid 16235) Use of int in maxseg socket option. [ 254.773758][T16235] Use struct sctp_assoc_value instead [ 254.819265][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 254.819284][ T29] audit: type=1400 audit(254.788:13114): avc: denied { ioctl } for pid=16237 comm="syz.1.4373" path="socket:[50179]" dev="sockfs" ino=50179 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.851210][ T29] audit: type=1400 audit(254.828:13115): avc: denied { bind } for pid=16237 comm="syz.1.4373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.926117][T16245] loop5: detected capacity change from 0 to 128 [ 254.935648][T16245] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.960732][T10135] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.100840][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810c498400: rx timeout, send abort [ 255.187948][T11827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.205726][T16263] netlink: 'syz.3.4381': attribute type 21 has an invalid length. [ 255.211025][T16264] sctp: [Deprecated]: syz.2.4382 (pid 16264) Use of int in maxseg socket option. [ 255.211025][T16264] Use struct sctp_assoc_value instead [ 255.600857][ C1] vcan0: j1939_tp_rxtimer: 0xffff888125759600: rx timeout, send abort [ 255.609455][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810c498400: abort rx timeout. Force session deactivation [ 255.691040][T16294] sctp: [Deprecated]: syz.4.4393 (pid 16294) Use of int in maxseg socket option. [ 255.691040][T16294] Use struct sctp_assoc_value instead [ 255.833376][T16301] loop4: detected capacity change from 0 to 512 [ 255.864167][T16301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.038736][T12364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.109172][ C1] vcan0: j1939_tp_rxtimer: 0xffff888125759600: abort rx timeout. Force session deactivation [ 256.281507][T16319] loop5: detected capacity change from 0 to 128 [ 256.450725][T16335] loop2: detected capacity change from 0 to 128 [ 256.460393][T16335] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.473371][ T29] audit: type=1326 audit(256.448:13116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16337 comm="syz.4.4409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 256.497114][ T29] audit: type=1326 audit(256.448:13117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16337 comm="syz.4.4409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 256.521100][ T29] audit: type=1326 audit(256.448:13118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16337 comm="syz.4.4409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 256.545505][ T29] audit: type=1326 audit(256.448:13119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16337 comm="syz.4.4409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 256.569425][ T29] audit: type=1326 audit(256.448:13120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16337 comm="syz.4.4409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 256.593500][ T29] audit: type=1326 audit(256.448:13121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16337 comm="syz.4.4409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 256.618119][ T29] audit: type=1326 audit(256.448:13122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16337 comm="syz.4.4409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 256.642389][ T29] audit: type=1326 audit(256.448:13123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16337 comm="syz.4.4409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 256.676623][T16334] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.749596][T16356] netlink: 'syz.5.4407': attribute type 21 has an invalid length. [ 256.758779][T16358] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 256.782020][T16361] vlan2: entered allmulticast mode [ 256.930403][T16377] loop3: detected capacity change from 0 to 512 [ 256.941346][T16377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.012010][T16384] blktrace: Concurrent blktraces are not allowed on sg0 [ 257.083256][T16386] netlink: 'syz.2.4422': attribute type 11 has an invalid length. [ 257.156651][T16388] lo speed is unknown, defaulting to 1000 [ 257.177679][T11125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.196436][T16388] lo speed is unknown, defaulting to 1000 [ 257.213248][T16388] lo speed is unknown, defaulting to 1000 [ 257.306063][T16392] loop5: detected capacity change from 0 to 128 [ 257.323480][T16393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16393 comm=syz.2.4423 [ 257.412444][T16395] __nla_validate_parse: 11 callbacks suppressed [ 257.412470][T16395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4424'. [ 257.517041][T15110] hid_parser_main: 33 callbacks suppressed [ 257.517154][T15110] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 257.531038][T15110] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 257.538881][T15110] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 257.547332][T15110] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 257.556780][T15110] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 257.564772][T15110] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 257.572562][T15110] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 257.580381][T15110] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 257.588126][T15110] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 257.595826][T15110] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 257.636164][T15110] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz0] on syz1 [ 257.825158][T16424] loop4: detected capacity change from 0 to 128 [ 257.868408][T16429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4437'. [ 258.029201][T16405] bridge0: port 3(gretap0) entered blocking state [ 258.035969][T16405] bridge0: port 3(gretap0) entered disabled state [ 258.043005][T16405] gretap0: entered allmulticast mode [ 258.049368][T16405] gretap0: entered promiscuous mode [ 258.055059][T16405] bridge0: port 3(gretap0) entered blocking state [ 258.061708][T16405] bridge0: port 3(gretap0) entered forwarding state [ 258.070341][T16405] gretap0: left allmulticast mode [ 258.075719][T16405] gretap0: left promiscuous mode [ 258.081261][T16405] bridge0: port 3(gretap0) entered disabled state [ 258.295089][T16443] siw: device registration error -23 [ 258.674719][T16457] tmpfs: Unknown parameter 'mÂLave' [ 258.824809][T16470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4448'. [ 259.068198][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4456'. [ 259.465081][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4461'. [ 259.840051][T16517] siw: device registration error -23 [ 259.866353][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 259.866380][ T29] audit: type=1326 audit(259.818:13358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16509 comm="syz.1.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 259.897814][ T29] audit: type=1326 audit(259.828:13359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.1.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d3c55b099 code=0x7ffc0000 [ 259.921754][ T29] audit: type=1326 audit(259.828:13360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.1.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 259.945548][ T29] audit: type=1326 audit(259.828:13361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.1.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 260.051867][ T29] audit: type=1326 audit(259.998:13362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 260.075195][ T29] audit: type=1326 audit(259.998:13363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 260.099249][ T29] audit: type=1326 audit(259.998:13364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 260.122844][ T29] audit: type=1326 audit(259.998:13365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 260.146663][ T29] audit: type=1326 audit(259.998:13366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 260.170146][ T29] audit: type=1326 audit(259.998:13367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.5.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 260.218219][T16531] pim6reg: entered allmulticast mode [ 260.225844][T16531] pim6reg: left allmulticast mode [ 260.332234][T16541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4473'. [ 260.343471][T16537] loop4: detected capacity change from 0 to 128 [ 260.389680][T16537] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.476231][T16537] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.599675][T16564] siw: device registration error -23 [ 260.645141][T16570] netlink: 'syz.4.4484': attribute type 11 has an invalid length. [ 260.810839][T16575] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.841693][T16583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4486'. [ 260.898888][T16570] netlink: 'syz.4.4484': attribute type 11 has an invalid length. [ 260.911423][T16575] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.983126][T16575] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.092628][T16575] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.208827][ T3585] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.224094][ T4242] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.252880][ T4242] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.279590][ T4242] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.397860][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4498'. [ 261.420857][T16626] loop5: detected capacity change from 0 to 512 [ 261.463287][T16626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.644494][T16647] team0: Port device team_slave_0 removed [ 261.736504][T10135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.766857][T16658] loop5: detected capacity change from 0 to 512 [ 261.852679][T16658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.034260][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4511'. [ 262.289240][T10135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.602734][T16699] netlink: 'syz.2.4527': attribute type 1 has an invalid length. [ 263.540817][T16787] batadv_slave_0: entered promiscuous mode [ 263.549815][T16785] batadv_slave_0: left promiscuous mode [ 263.562772][T16789] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4546'. [ 263.629203][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4547'. [ 263.638854][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4547'. [ 263.725230][T16812] bond1 (unregistering): Released all slaves [ 264.555404][T16949] capability: warning: `syz.2.4579' uses 32-bit capabilities (legacy support in use) [ 264.650316][T16960] syzkaller1: entered promiscuous mode [ 264.656242][T16960] syzkaller1: entered allmulticast mode [ 264.696567][T16963] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4585'. [ 264.832638][T16975] tipc: Enabling of bearer rejected, failed to enable media [ 264.950606][T16985] netlink: 'syz.1.4594': attribute type 1 has an invalid length. [ 265.217409][T17008] syz_tun: entered allmulticast mode [ 265.226460][T17007] syz_tun: left allmulticast mode [ 265.377442][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 265.377460][ T29] audit: type=1400 audit(265.348:13522): avc: denied { read } for pid=17017 comm="syz.1.4608" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 265.523362][T17030] macvtap0: entered promiscuous mode [ 265.529551][T17030] macvtap0: left promiscuous mode [ 265.651340][T17042] ipvlan2: entered promiscuous mode [ 265.657526][T17042] bridge0: port 3(ipvlan2) entered blocking state [ 265.664529][T17042] bridge0: port 3(ipvlan2) entered disabled state [ 265.671685][T17042] ipvlan2: entered allmulticast mode [ 265.677138][T17042] bridge0: entered allmulticast mode [ 265.683254][T17042] ipvlan2: left allmulticast mode [ 265.688437][T17042] bridge0: left allmulticast mode [ 265.772367][ T29] audit: type=1400 audit(265.748:13523): avc: denied { listen } for pid=17037 comm="syz.5.4616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 266.976497][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4635'. [ 266.977460][ T29] audit: type=1400 audit(266.948:13524): avc: denied { nlmsg_read } for pid=17087 comm="syz.1.4635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.101914][T12496] hid-generic FFFF:0000:0002.0028: item fetching failed at offset 2/5 [ 267.111193][T12496] hid-generic FFFF:0000:0002.0028: probe with driver hid-generic failed with error -22 [ 267.326310][T17115] netlink: 'syz.2.4647': attribute type 10 has an invalid length. [ 267.441009][T17115] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.460465][T17115] bond0: (slave team0): Enslaving as an active interface with an up link [ 268.083025][T12496] hid_parser_main: 33 callbacks suppressed [ 268.083047][T12496] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 268.107134][T12496] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.208310][ T29] audit: type=1400 audit(268.178:13525): avc: denied { read } for pid=17173 comm="syz.5.4673" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 268.493969][ T29] audit: type=1326 audit(268.468:13526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.2.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afcacefc9 code=0x7ffc0000 [ 268.518225][ T29] audit: type=1326 audit(268.468:13527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.2.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afcacefc9 code=0x7ffc0000 [ 268.562136][ T29] audit: type=1326 audit(268.528:13528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.2.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6afcacefc9 code=0x7ffc0000 [ 268.586177][ T29] audit: type=1326 audit(268.528:13529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.2.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afcacefc9 code=0x7ffc0000 [ 268.610111][ T29] audit: type=1326 audit(268.528:13530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.2.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afcacefc9 code=0x7ffc0000 [ 268.633698][ T29] audit: type=1326 audit(268.528:13531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.2.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6afcacefc9 code=0x7ffc0000 [ 268.968507][T17201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.980544][T17201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.085018][T17213] netlink: 'syz.5.4686': attribute type 10 has an invalid length. [ 269.094916][T17213] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.103960][T17213] bond0: (slave team0): Enslaving as an active interface with an up link [ 269.190009][T17229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.200364][T17229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.329676][ T3427] lo speed is unknown, defaulting to 1000 [ 269.335707][T17244] lo speed is unknown, defaulting to 1000 [ 269.335720][ T3427] sz1: Port: 1 Link DOWN [ 269.346280][ T3427] lo speed is unknown, defaulting to 1000 [ 269.375709][T17244] lo speed is unknown, defaulting to 1000 [ 269.382200][T17244] lo speed is unknown, defaulting to 1000 [ 269.998768][T17279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.008322][T17279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.493402][T17308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4725'. [ 270.513259][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4725'. [ 270.682346][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 270.682363][ T29] audit: type=1400 audit(270.658:13534): avc: denied { getopt } for pid=17331 comm="syz.3.4737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 270.748231][T17342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4741'. [ 270.783357][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4741'. [ 270.788891][ T29] audit: type=1400 audit(270.758:13535): avc: denied { bind } for pid=17347 comm="syz.5.4746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 270.820845][T17350] syz_tun: entered allmulticast mode [ 270.827225][T17349] syz_tun: left allmulticast mode [ 270.832611][ T29] audit: type=1400 audit(270.808:13536): avc: denied { setopt } for pid=17353 comm="syz.4.4747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 270.966426][T12496] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 270.974558][T12496] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 271.145966][T17383] syz_tun: entered allmulticast mode [ 271.203054][T17382] syz_tun: left allmulticast mode [ 271.307209][T17398] netlink: 'syz.4.4768': attribute type 10 has an invalid length. [ 271.330875][T17398] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.351713][T17398] bond0: (slave team0): Enslaving as an active interface with an up link [ 271.429640][T17414] syz_tun: entered allmulticast mode [ 271.467731][ T29] audit: type=1326 audit(271.428:13537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 271.469518][T17412] syz_tun: left allmulticast mode [ 271.491443][ T29] audit: type=1326 audit(271.428:13538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 271.520466][ T29] audit: type=1326 audit(271.438:13539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 271.544517][ T29] audit: type=1326 audit(271.438:13540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 271.568009][ T29] audit: type=1326 audit(271.438:13541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 271.591716][ T29] audit: type=1326 audit(271.438:13542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 271.615260][ T29] audit: type=1326 audit(271.438:13543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 272.593710][T17460] netlink: 'syz.4.4789': attribute type 11 has an invalid length. [ 272.936067][T17495] siw: device registration error -23 [ 273.022272][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4811'. [ 273.115961][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4814'. [ 273.135470][T17516] team0: Port device team_slave_1 removed [ 273.555493][T17536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4823'. [ 273.682768][T17544] 9pnet_fd: Insufficient options for proto=fd [ 274.232321][T17586] siw: device registration error -23 [ 274.609941][T17610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4853'. [ 274.629833][T17610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4853'. [ 274.751275][T17620] loop5: detected capacity change from 0 to 128 [ 275.278875][T17648] loop5: detected capacity change from 0 to 128 [ 275.462344][T17658] 9pnet_fd: Insufficient options for proto=fd [ 275.469200][T17658] netlink: 'syz.1.4869': attribute type 21 has an invalid length. [ 275.699854][T17684] netlink: 'syz.5.4877': attribute type 25 has an invalid length. [ 275.707867][T17684] netlink: 'syz.5.4877': attribute type 7 has an invalid length. [ 275.733748][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 275.733767][ T29] audit: type=1326 audit(275.708:13633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 275.794101][ T29] audit: type=1326 audit(275.708:13634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 275.818020][ T29] audit: type=1326 audit(275.708:13635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 275.842370][ T29] audit: type=1326 audit(275.738:13636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 275.866068][ T29] audit: type=1326 audit(275.738:13637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 275.890137][ T29] audit: type=1326 audit(275.738:13638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 275.905775][T17693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4884'. [ 275.914330][ T29] audit: type=1326 audit(275.738:13639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 275.947679][ T29] audit: type=1326 audit(275.738:13640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 275.971360][ T29] audit: type=1326 audit(275.738:13641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 275.994849][ T29] audit: type=1326 audit(275.738:13642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 276.026082][T17693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4884'. [ 276.333073][T17711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4889'. [ 276.373748][T17710] netlink: 'syz.1.4889': attribute type 1 has an invalid length. [ 276.408911][T17710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.473124][T17711] bond0 (unregistering): Released all slaves [ 276.843288][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4893'. [ 276.891817][T17731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4895'. [ 276.957967][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4895'. [ 277.002802][T17739] loop5: detected capacity change from 0 to 256 [ 277.185452][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4903'. [ 277.275423][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4907'. [ 277.394735][T17761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17761 comm=syz.5.4908 [ 277.418840][T17759] team0: Port device team_slave_1 removed [ 277.528673][T17769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4910'. [ 277.551832][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4912'. [ 277.597541][T17773] siw: device registration error -23 [ 277.618961][T17779] netlink: 'syz.4.4914': attribute type 10 has an invalid length. [ 277.645262][T17781] loop3: detected capacity change from 0 to 256 [ 278.050714][T17806] loop3: detected capacity change from 0 to 128 [ 278.136927][T17808] loop3: detected capacity change from 0 to 512 [ 278.564999][T17808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.652125][T11125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.268321][T17838] netlink: 'syz.3.4932': attribute type 32 has an invalid length. [ 279.574719][T17847] bond1: invalid ARP target 0.0.0.0 specified for addition [ 279.582221][T17847] bond1: option arp_ip_target: invalid value (0) [ 279.587655][T17861] loop5: detected capacity change from 0 to 128 [ 279.596162][T17847] bond1 (unregistering): Released all slaves [ 279.597497][T17861] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 279.645746][T17861] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 279.862929][T17889] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 279.875295][T17889] bond2 (unregistering): Released all slaves [ 280.073619][T17904] loop3: detected capacity change from 0 to 128 [ 280.357770][T17920] loop3: detected capacity change from 0 to 128 [ 280.382964][T17920] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.444921][T17920] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.479715][ T3416] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 280.492120][ T3416] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 280.777964][T17962] netlink: 'syz.4.4976': attribute type 11 has an invalid length. [ 280.900297][T17971] veth0: entered promiscuous mode [ 280.945089][T17953] bond1: invalid ARP target 0.0.0.0 specified for addition [ 280.952768][T17953] bond1: option arp_ip_target: invalid value (0) [ 280.961192][T17953] bond1 (unregistering): Released all slaves [ 281.104814][T17984] loop3: detected capacity change from 0 to 512 [ 281.139932][T17984] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 281.337187][T17984] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 281.449953][T17996] __nla_validate_parse: 5 callbacks suppressed [ 281.449976][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4984'. [ 281.466887][T17984] EXT4-fs (loop3): 1 truncate cleaned up [ 281.479992][T17984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.733194][T17963] veth0: left promiscuous mode [ 281.834632][T18009] netlink: 'syz.4.4989': attribute type 11 has an invalid length. [ 281.937591][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4993'. [ 281.997211][T18027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4996'. [ 282.115329][T18035] netlink: 'syz.1.4999': attribute type 3 has an invalid length. [ 282.643794][T18061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5007'. [ 282.934515][T18072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5012'. [ 283.204953][T18070] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5011'. [ 283.228701][T18086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5011'. [ 283.237892][T18086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5011'. [ 283.280310][T18088] siw: device registration error -23 [ 284.064907][T18109] siw: device registration error -23 [ 284.250200][T11125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.326794][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5023'. [ 284.353707][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5025'. [ 284.952217][T18141] siw: device registration error -23 [ 285.570256][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 285.570277][ T29] audit: type=1326 audit(285.548:13871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 285.681365][ T29] audit: type=1326 audit(285.548:13872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 285.704843][ T29] audit: type=1326 audit(285.598:13873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 285.728099][ T29] audit: type=1326 audit(285.598:13874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 285.751530][ T29] audit: type=1326 audit(285.598:13875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 285.775395][ T29] audit: type=1326 audit(285.608:13876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 285.799784][ T29] audit: type=1326 audit(285.608:13877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 285.823591][ T29] audit: type=1326 audit(285.608:13878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 285.847738][ T29] audit: type=1326 audit(285.618:13879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 285.871648][ T29] audit: type=1326 audit(285.618:13880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91455efc9 code=0x7ffc0000 [ 287.492149][T18210] __nla_validate_parse: 2 callbacks suppressed [ 287.492175][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5053'. [ 287.531246][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5054'. [ 287.655786][T18217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5055'. [ 287.824136][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5055'. [ 288.313751][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5066'. [ 288.598630][T18271] netlink: 'syz.5.5071': attribute type 11 has an invalid length. [ 289.084281][T18284] loop3: detected capacity change from 0 to 512 [ 289.091274][T18284] EXT4-fs: dax option not supported [ 289.131802][T18292] 9pnet_fd: Insufficient options for proto=fd [ 289.154143][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5079'. [ 289.212061][T18300] netlink: 'syz.4.5085': attribute type 10 has an invalid length. [ 289.290939][T18302] netlink: 'syz.3.5082': attribute type 11 has an invalid length. [ 289.344081][T18309] Cannot find del_set index 3 as target [ 289.414414][T18323] 9pnet_fd: Insufficient options for proto=fd [ 289.434000][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5095'. [ 289.461858][T18326] team0: Port device team_slave_1 removed [ 289.492041][T18332] netlink: 'syz.5.5097': attribute type 21 has an invalid length. [ 289.501358][T18327] siw: device registration error -23 [ 289.508244][T18332] netlink: 'syz.5.5097': attribute type 6 has an invalid length. [ 289.516367][T18332] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5097'. [ 289.584139][T18339] netlink: 'syz.5.5099': attribute type 10 has an invalid length. [ 290.127884][T18349] netlink: 'syz.5.5103': attribute type 11 has an invalid length. [ 290.606081][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 290.606099][ T29] audit: type=1326 audit(290.578:13977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.3.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 290.606442][ T29] audit: type=1326 audit(290.578:13978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.3.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 290.606730][ T29] audit: type=1326 audit(290.578:13979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.3.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 290.606921][ T29] audit: type=1326 audit(290.578:13980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.3.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 290.607257][ T29] audit: type=1326 audit(290.578:13981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.3.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 290.607747][ T29] audit: type=1326 audit(290.578:13982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.3.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 290.607866][ T29] audit: type=1326 audit(290.578:13983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.3.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 290.608035][ T29] audit: type=1326 audit(290.578:13984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.3.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 290.608340][ T29] audit: type=1326 audit(290.578:13985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.3.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 290.608446][ T29] audit: type=1326 audit(290.578:13986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.3.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 290.653025][T18372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5109'. [ 290.730109][T18378] netlink: 'syz.1.5111': attribute type 10 has an invalid length. [ 290.735670][T18378] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.770009][T18378] .`: (slave team0): Enslaving as an active interface with an up link [ 291.072996][T18380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5112'. [ 291.253305][ T3416] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.261402][ T3416] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.269571][ T3416] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.278334][ T3416] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.286596][ T3416] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.294247][ T3416] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.301743][ T3416] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.309846][ T3416] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.317839][ T3416] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.326246][ T3416] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.339962][ T3416] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.03 Device [syz1] on syz1 [ 291.438432][T18401] loop3: detected capacity change from 0 to 1024 [ 291.450455][T18401] EXT4-fs: Ignoring removed orlov option [ 291.456624][T18401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.480132][T18401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.635294][T11125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.734287][ T4243] Bluetooth: hci0: Frame reassembly failed (-84) [ 291.826518][T18435] siw: device registration error -23 [ 292.052326][T18463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=18463 comm=syz.2.5140 [ 293.038471][T18506] __nla_validate_parse: 5 callbacks suppressed [ 293.038506][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5155'. [ 293.231154][T18511] netlink: 'syz.1.5156': attribute type 10 has an invalid length. [ 293.335877][T18519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18519 comm=syz.1.5160 [ 293.409803][T18531] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5165'. [ 293.420055][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5165'. [ 293.698041][T18547] netlink: 'syz.4.5168': attribute type 10 has an invalid length. [ 293.779703][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 293.798873][T18550] netlink: 'syz.4.5170': attribute type 11 has an invalid length. [ 293.870537][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5169'. [ 294.405205][T18570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5176'. [ 294.432978][T18574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5177'. [ 294.493028][T18574] hub 8-0:1.0: USB hub found [ 294.497914][T18574] hub 8-0:1.0: 8 ports detected [ 294.541796][T18579] netlink: 'syz.3.5181': attribute type 11 has an invalid length. [ 294.571346][T18580] netlink: 'syz.5.5180': attribute type 10 has an invalid length. [ 294.636417][T18589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5183'. [ 294.707744][T18582] netlink: 'syz.2.5175': attribute type 3 has an invalid length. [ 294.724845][T18593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5185'. [ 294.842384][T18607] lo speed is unknown, defaulting to 1000 [ 294.871022][T18613] loop3: detected capacity change from 0 to 512 [ 295.002532][T18607] lo speed is unknown, defaulting to 1000 [ 295.026653][T18607] lo speed is unknown, defaulting to 1000 [ 295.093971][T18611] netlink: 'syz.4.5188': attribute type 13 has an invalid length. [ 295.124583][T18627] netlink: 'syz.5.5194': attribute type 10 has an invalid length. [ 295.165604][T18611] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.176666][T18611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.435360][T18631] netlink: 'syz.2.5195': attribute type 11 has an invalid length. [ 295.568551][T18644] netlink: 'syz.1.5202': attribute type 2 has an invalid length. [ 295.576803][T18644] netlink: 'syz.1.5202': attribute type 1 has an invalid length. [ 295.584848][T18644] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5202'. [ 295.720150][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 295.720169][ T29] audit: type=1326 audit(295.698:14071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.2.5199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6afcacefc9 code=0x0 [ 295.917228][ T29] audit: type=1326 audit(295.748:14072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.2.5199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6afcacefc9 code=0x0 [ 296.333518][T18669] siw: device registration error -23 [ 296.527869][T18677] loop3: detected capacity change from 0 to 128 [ 296.561050][ T29] audit: type=1400 audit(296.508:14073): avc: denied { append } for pid=18676 comm="syz.3.5213" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 296.717809][ T29] audit: type=1400 audit(296.688:14074): avc: denied { read write } for pid=18676 comm="syz.3.5213" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 296.811479][ T29] audit: type=1400 audit(296.688:14075): avc: denied { open } for pid=18676 comm="syz.3.5213" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 297.508668][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5231'. [ 298.070369][T18766] siw: device registration error -23 [ 299.329523][T18794] wg2: entered promiscuous mode [ 299.334484][T18794] wg2: entered allmulticast mode [ 299.453944][T18800] loop3: detected capacity change from 0 to 128 [ 299.571856][T18800] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.603610][T18800] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.827601][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5253'. [ 300.736866][ T29] audit: type=1326 audit(300.698:14076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 300.761880][ T29] audit: type=1326 audit(300.698:14077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 300.786066][ T29] audit: type=1326 audit(300.698:14078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 300.811142][ T29] audit: type=1326 audit(300.698:14079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 300.834542][ T29] audit: type=1326 audit(300.698:14080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 300.857837][ T29] audit: type=1326 audit(300.698:14081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 300.881297][ T29] audit: type=1326 audit(300.698:14082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 300.904890][ T29] audit: type=1326 audit(300.698:14083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 300.928524][ T29] audit: type=1326 audit(300.698:14084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 300.951917][ T29] audit: type=1326 audit(300.698:14085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 300.981869][T18825] validate_nla: 2 callbacks suppressed [ 300.981894][T18825] netlink: 'syz.4.5259': attribute type 11 has an invalid length. [ 301.559021][T18860] netlink: 'syz.5.5272': attribute type 10 has an invalid length. [ 301.574006][T18862] netlink: 'syz.2.5273': attribute type 10 has an invalid length. [ 301.664092][T18862] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 301.858822][T18865] SET target dimension over the limit! [ 301.877301][T18867] netlink: 'syz.2.5275': attribute type 11 has an invalid length. [ 302.168622][T18894] siw: device registration error -23 [ 302.220898][T18902] netlink: 'syz.5.5286': attribute type 11 has an invalid length. [ 302.257539][T18904] siw: device registration error -23 [ 302.339116][T18913] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 302.772086][T18925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5291'. [ 303.540520][T18952] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.550723][T18952] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.817860][T18952] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.827950][T18952] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.278599][T18952] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.289055][T18952] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.510301][T18952] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.520584][T18952] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.618704][T18987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5311'. [ 304.810081][ T4192] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.818955][ T4192] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.873338][ T4192] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.882482][ T4192] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.908074][T18980] lo speed is unknown, defaulting to 1000 [ 305.018708][ T4192] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.027518][ T4192] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.049813][ T4192] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.058480][ T4192] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.126209][T18980] lo speed is unknown, defaulting to 1000 [ 305.133578][T18980] lo speed is unknown, defaulting to 1000 [ 305.215265][T18980] chnl_net:caif_netlink_parms(): no params data found [ 305.302003][T18980] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.309166][T18980] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.321379][T18980] bridge_slave_0: entered allmulticast mode [ 305.328272][T18980] bridge_slave_0: entered promiscuous mode [ 305.335727][T18980] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.343122][T18980] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.350503][T18980] bridge_slave_1: entered allmulticast mode [ 305.357386][T18980] bridge_slave_1: entered promiscuous mode [ 305.380801][T18980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.392387][T18980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.419235][T18980] team0: Port device team_slave_0 added [ 305.430858][T19009] bond0: invalid ARP target 0.0.0.0 specified for addition [ 305.438170][T19009] bond0: option arp_ip_target: invalid value (0) [ 305.446091][T19009] bond0 (unregistering): Released all slaves [ 305.456421][T18980] team0: Port device team_slave_1 added [ 305.476294][T18980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.483667][T18980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.510694][T18980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.523035][T18980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.530582][T18980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.557102][T18980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.593010][T18980] hsr_slave_0: entered promiscuous mode [ 305.604911][T18980] hsr_slave_1: entered promiscuous mode [ 305.613836][T18980] debugfs: 'hsr0' already exists in 'hsr' [ 305.619974][T18980] Cannot create hsr debugfs directory [ 305.876756][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 305.876835][ T29] audit: type=1326 audit(305.848:14185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.3.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 305.878642][ T3427] kernel read not supported for file /newroot/413 (pid: 3427 comm: kworker/1:6) [ 305.884043][ T29] audit: type=1326 audit(305.858:14186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.3.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 305.920010][T19030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5320'. [ 305.950496][ T29] audit: type=1326 audit(305.888:14187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.3.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 305.974478][ T29] audit: type=1326 audit(305.888:14188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.3.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 306.050723][T18980] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 306.061971][T18980] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 306.078881][T19038] siw: device registration error -23 [ 306.079263][T18980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 306.095433][T18980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 306.184441][T18980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.198898][T19063] netlink: 'syz.2.5323': attribute type 21 has an invalid length. [ 306.238531][T18980] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.251110][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.258454][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.284058][T18980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.294684][T18980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.525763][T18980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.644675][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.652140][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.016181][T18980] veth0_vlan: entered promiscuous mode [ 307.044212][T18980] veth1_vlan: entered promiscuous mode [ 307.110123][T19081] bond1: invalid ARP target 0.0.0.0 specified for addition [ 307.117546][T19081] bond1: option arp_ip_target: invalid value (0) [ 307.181219][T19081] bond1 (unregistering): Released all slaves [ 307.193160][T19096] 9pnet_fd: Insufficient options for proto=fd [ 307.265681][T18980] veth0_macvtap: entered promiscuous mode [ 307.303869][T18980] veth1_macvtap: entered promiscuous mode [ 307.337931][T18980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.440097][T18980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.464299][ T4242] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.474036][ T4242] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.504587][ T4242] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.526675][ T4242] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.659748][T19129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5335'. [ 307.691754][T19132] siw: device registration error -23 [ 307.714381][T19134] siw: device registration error -23 [ 307.943114][ T29] audit: type=1326 audit(307.918:14189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 307.967054][ T29] audit: type=1326 audit(307.918:14190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 308.007969][ T29] audit: type=1326 audit(307.978:14191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6abee0ee7 code=0x7ffc0000 [ 308.031610][ T29] audit: type=1326 audit(307.978:14192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 308.055282][ T29] audit: type=1326 audit(307.978:14193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 308.080000][ T29] audit: type=1326 audit(308.058:14194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa6abedefc9 code=0x7ffc0000 [ 309.130265][T19155] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5348'. [ 309.208321][T19155] 0ªX¹¦À: renamed from caif0 [ 309.242516][T19155] 0ªX¹¦À: entered allmulticast mode [ 309.247815][T19155] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 310.387664][T19182] loop5: detected capacity change from 0 to 128 [ 310.503945][T19182] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.623985][T19182] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.722638][T19194] lo speed is unknown, defaulting to 1000 [ 310.784465][T19194] lo speed is unknown, defaulting to 1000 [ 310.791832][T19194] lo speed is unknown, defaulting to 1000 [ 311.002347][T19205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5365'. [ 311.241784][T19208] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5366'. [ 311.260639][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5366'. [ 311.628862][T19221] siw: device registration error -23 [ 311.764537][T19226] netlink: 'syz.4.5371': attribute type 21 has an invalid length. [ 312.350718][T19236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5376'. [ 312.460183][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 312.460205][ T29] audit: type=1326 audit(312.438:14229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.4.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 312.492759][ T29] audit: type=1326 audit(312.438:14230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.4.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 312.518008][ T29] audit: type=1326 audit(312.468:14231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.4.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 312.541560][ T29] audit: type=1326 audit(312.468:14232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.4.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 312.565613][ T29] audit: type=1326 audit(312.468:14233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.4.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 312.590238][ T29] audit: type=1326 audit(312.538:14234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.4.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 312.615091][ T29] audit: type=1326 audit(312.538:14235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.4.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 312.641033][ T29] audit: type=1326 audit(312.538:14236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.4.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 312.673463][ T29] audit: type=1326 audit(312.568:14237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.4.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 312.698650][ T29] audit: type=1326 audit(312.568:14238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.4.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 313.026422][T19281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5392'. [ 313.038743][T19285] netlink: 'syz.5.5387': attribute type 21 has an invalid length. [ 313.551429][T19316] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7 sclass=netlink_xfrm_socket pid=19316 comm=syz.1.5403 [ 313.586347][T19318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5404'. [ 313.596810][T19318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5404'. [ 313.846325][T19330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5408'. [ 313.855938][T19329] wireguard0: entered promiscuous mode [ 313.862086][T19329] wireguard0: entered allmulticast mode [ 314.057803][T19349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5416'. [ 314.128611][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5418'. [ 314.285762][T19364] netlink: 'syz.3.5420': attribute type 21 has an invalid length. [ 314.789988][T19387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=19387 comm=syz.2.5428 [ 314.803132][T19387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=19387 comm=syz.2.5428 [ 314.816182][T19387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=19387 comm=syz.2.5428 [ 314.829001][T19387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=19387 comm=syz.2.5428 [ 314.926297][T19387] lo speed is unknown, defaulting to 1000 [ 315.017117][T19387] lo speed is unknown, defaulting to 1000 [ 315.030394][T19387] lo speed is unknown, defaulting to 1000 [ 315.176804][T19395] hsr_slave_1 (unregistering): left promiscuous mode [ 316.083765][T19437] __nla_validate_parse: 5 callbacks suppressed [ 316.083784][T19437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5447'. [ 316.103694][T19432] tipc: Started in network mode [ 316.109037][T19432] tipc: Node identity ac14140f, cluster identity 4711 [ 316.155040][T19437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=19437 comm=syz.1.5447 [ 316.159137][T19432] tipc: New replicast peer: 255.255.255.83 [ 316.168583][T19437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=19437 comm=syz.1.5447 [ 316.174500][T19432] tipc: Enabled bearer , priority 10 [ 316.187603][T19437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=19437 comm=syz.1.5447 [ 316.207090][T19437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=19437 comm=syz.1.5447 [ 316.210104][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5447'. [ 316.348222][T19437] lo speed is unknown, defaulting to 1000 [ 316.442516][T19437] lo speed is unknown, defaulting to 1000 [ 316.462515][T19437] lo speed is unknown, defaulting to 1000 [ 316.470158][T19447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5451'. [ 316.501908][T19447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5451'. [ 316.750750][T19455] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 316.901672][T19461] $Hÿ: renamed from bond0 (while UP) [ 316.941180][T19461] $Hÿ: entered promiscuous mode [ 316.946642][T19461] bond_slave_0: entered promiscuous mode [ 316.952978][T19461] bond_slave_1: entered promiscuous mode [ 316.959837][T19456] siw: device registration error -23 [ 317.075710][T19472] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 317.169418][T15112] tipc: Node number set to 2886997007 [ 317.461012][T19483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5462'. [ 317.498589][T19483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5462'. [ 317.559902][T19490] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 317.843572][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 317.843591][ T29] audit: type=1326 audit(317.818:14525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.1.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 318.165663][ T29] audit: type=1326 audit(317.848:14526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.1.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 318.219249][T19517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5474'. [ 318.253932][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5474'. [ 318.331539][T19528] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 318.556004][T19547] 9p: Unknown access argument ¿: -22 [ 318.653951][T19557] netlink: 'syz.4.5487': attribute type 16 has an invalid length. [ 318.662229][T19557] netlink: 'syz.4.5487': attribute type 17 has an invalid length. [ 318.694544][T19555] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.716054][T19555] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.864360][T19557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.896139][T19563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5491'. [ 318.907570][T19563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=19563 comm=syz.3.5491 [ 318.921064][T19563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=19563 comm=syz.3.5491 [ 318.934155][T19563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=19563 comm=syz.3.5491 [ 318.949096][T19563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=19563 comm=syz.3.5491 [ 318.989884][T19563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5491'. [ 319.179376][ T29] audit: type=1107 audit(319.118:14527): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='GPè' [ 319.466477][ T29] audit: type=1326 audit(319.438:14528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19606 comm="syz.5.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 319.519169][ T29] audit: type=1326 audit(319.478:14529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19606 comm="syz.5.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 319.543106][ T29] audit: type=1326 audit(319.478:14530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19606 comm="syz.5.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 319.566504][ T29] audit: type=1326 audit(319.478:14531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19606 comm="syz.5.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 319.590895][ T29] audit: type=1326 audit(319.478:14532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19606 comm="syz.5.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 319.592218][T19605] netlink: 'syz.1.5503': attribute type 3 has an invalid length. [ 319.615151][ T29] audit: type=1326 audit(319.478:14533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19606 comm="syz.5.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 319.647002][ T29] audit: type=1326 audit(319.478:14534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19606 comm="syz.5.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 319.775104][T19619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=19619 comm=syz.5.5510 [ 319.789153][T19619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=19619 comm=syz.5.5510 [ 319.803929][T19619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=19619 comm=syz.5.5510 [ 319.817038][T19619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=19619 comm=syz.5.5510 [ 319.940222][T19628] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 320.278282][T19650] 9pnet_fd: Insufficient options for proto=fd [ 321.313721][T19726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=19726 comm=syz.2.5542 [ 321.326897][T19726] __nla_validate_parse: 5 callbacks suppressed [ 321.326917][T19726] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5542'. [ 322.179421][ T4206] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 322.184408][T19743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5547'. [ 322.188379][ T4206] ref_tracker: netdev@ffff8881043b0558 has 1/1 users at [ 322.188379][ T4206] fib_check_nh+0x5be/0xbe0 [ 322.188379][ T4206] rtm_new_nexthop+0x220b/0x45f0 [ 322.188379][ T4206] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 322.188379][ T4206] netlink_rcv_skb+0x123/0x220 [ 322.188379][ T4206] rtnetlink_rcv+0x1c/0x30 [ 322.188379][ T4206] netlink_unicast+0x5c0/0x690 [ 322.188379][ T4206] netlink_sendmsg+0x58b/0x6b0 [ 322.188379][ T4206] __sock_sendmsg+0x145/0x180 [ 322.188379][ T4206] ____sys_sendmsg+0x345/0x4e0 [ 322.188379][ T4206] ___sys_sendmsg+0x17b/0x1d0 [ 322.188379][ T4206] __sys_sendmmsg+0x178/0x300 [ 322.188379][ T4206] __x64_sys_sendmmsg+0x57/0x70 [ 322.188379][ T4206] x64_sys_call+0x1c4a/0x3000 [ 322.188379][ T4206] do_syscall_64+0xd2/0x200 [ 322.188379][ T4206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.188379][ T4206] [ 322.320091][T19742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=19742 comm=syz.1.5547 [ 322.333763][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5547'. [ 322.595392][T19761] siw: device registration error -23 [ 322.971114][T19776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5559'. [ 323.060600][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5559'. [ 323.347496][T19785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5562'. [ 323.397023][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5562'. [ 323.484694][T19791] siw: device registration error -23 [ 323.889228][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 323.889262][ T29] audit: type=1400 audit(323.858:14845): avc: denied { setopt } for pid=19816 comm="syz.1.5572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 323.935423][T19820] netlink: 'syz.4.5574': attribute type 10 has an invalid length. [ 323.959454][T19820] team0: Port device dummy0 added [ 324.006632][T19823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5575'. [ 324.059923][T19823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5575'. [ 324.203314][ T29] audit: type=1326 audit(324.178:14846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19829 comm="syz.4.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 324.289331][ T29] audit: type=1326 audit(324.208:14847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19829 comm="syz.4.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 324.312593][ T29] audit: type=1326 audit(324.208:14848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19829 comm="syz.4.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 324.336286][ T29] audit: type=1326 audit(324.208:14849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19829 comm="syz.4.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 324.360764][ T29] audit: type=1326 audit(324.208:14850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19829 comm="syz.4.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 324.384642][ T29] audit: type=1326 audit(324.208:14851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19829 comm="syz.4.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 324.408372][ T29] audit: type=1326 audit(324.208:14852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19829 comm="syz.4.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 324.431763][ T29] audit: type=1326 audit(324.208:14853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19829 comm="syz.4.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 324.455086][ T29] audit: type=1326 audit(324.218:14854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19829 comm="syz.4.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 324.613197][T19847] siw: device registration error -23 [ 324.730581][T19858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5584'. [ 325.254691][T19908] siw: device registration error -23 [ 325.272474][T19910] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 325.595516][T19919] selinux_netlink_send: 7 callbacks suppressed [ 325.595541][T19919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19919 comm=syz.5.5602 [ 325.735303][T19930] siw: device registration error -23 [ 325.758542][T19936] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 325.851436][T19941] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 325.928998][T19952] netlink: 'syz.1.5618': attribute type 4 has an invalid length. [ 326.145099][T19963] siw: device registration error -23 [ 326.233611][T19982] netlink: 'syz.2.5629': attribute type 11 has an invalid length. [ 326.497541][T20002] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 326.546567][T20007] __nla_validate_parse: 3 callbacks suppressed [ 326.546591][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5638'. [ 327.036305][T20035] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 327.123316][T20041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5650'. [ 327.158872][T20041] vlan2: entered allmulticast mode [ 327.164953][T20041] dummy0: entered allmulticast mode [ 327.201295][T20047] netlink: 'syz.2.5652': attribute type 11 has an invalid length. [ 327.241928][T20050] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 327.411318][T20064] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 327.650649][T20077] netlink: 'syz.5.5664': attribute type 11 has an invalid length. [ 327.751491][T20058] bond1: invalid ARP target 0.0.0.0 specified for addition [ 327.759094][T20058] bond1: option arp_ip_target: invalid value (0) [ 327.770283][T20058] bond1 (unregistering): Released all slaves [ 327.858489][T20100] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.868533][T20100] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.922817][T20100] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.932821][T20100] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.971056][T20100] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.981368][T20100] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.051465][T20100] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.062593][T20100] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.137990][ T3585] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.146364][ T3585] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.180380][ T4242] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.188919][ T4242] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.219403][ T4242] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.227751][ T4242] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.236459][ T4242] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.244830][ T4242] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.435935][T20117] netlink: 'syz.1.5678': attribute type 11 has an invalid length. [ 328.706388][T20124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5680'. [ 329.252478][T20154] bond1: invalid ARP target 0.0.0.0 specified for addition [ 329.260140][T20154] bond1: option arp_ip_target: invalid value (0) [ 329.331576][T20154] bond1 (unregistering): Released all slaves [ 329.408251][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5697'. [ 329.450484][T20174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5697'. [ 329.475673][T20174] lo speed is unknown, defaulting to 1000 [ 329.518178][T20174] lo speed is unknown, defaulting to 1000 [ 329.524932][T20174] lo speed is unknown, defaulting to 1000 [ 329.940465][T20189] 9pnet_fd: Insufficient options for proto=fd [ 330.802354][T20222] 9pnet_fd: Insufficient options for proto=fd [ 330.923528][T20228] siw: device registration error -23 [ 330.997010][T20233] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5715'. [ 331.022534][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5715'. [ 331.557676][T20241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5718'. [ 331.619429][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5718'. [ 331.771388][T20244] lo speed is unknown, defaulting to 1000 [ 331.952613][T20244] lo speed is unknown, defaulting to 1000 [ 331.961288][T20244] lo speed is unknown, defaulting to 1000 [ 331.967668][T20250] siw: device registration error -23 [ 332.115390][T20261] 9pnet_fd: Insufficient options for proto=fd [ 332.406361][T20270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5726'. [ 332.467278][T20270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5726'. [ 332.620172][T20277] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 332.739942][T20287] siw: device registration error -23 [ 332.801769][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 332.801789][ T29] audit: type=1326 audit(332.778:15069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20289 comm="syz.1.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 332.834141][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5734'. [ 332.834526][ T29] audit: type=1326 audit(332.778:15070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20289 comm="syz.1.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 332.866918][ T29] audit: type=1326 audit(332.778:15071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20289 comm="syz.1.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 332.890308][ T29] audit: type=1326 audit(332.778:15072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20289 comm="syz.1.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 332.913797][ T29] audit: type=1326 audit(332.778:15073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20289 comm="syz.1.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 332.937255][ T29] audit: type=1326 audit(332.778:15074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20289 comm="syz.1.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 332.961088][ T29] audit: type=1326 audit(332.778:15075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20289 comm="syz.1.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 332.984381][ T29] audit: type=1326 audit(332.778:15076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20289 comm="syz.1.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 333.007856][ T29] audit: type=1326 audit(332.778:15077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20289 comm="syz.1.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 333.030892][ T29] audit: type=1326 audit(332.778:15078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20289 comm="syz.1.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 333.194114][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5737'. [ 333.470058][T20312] siw: device registration error -23 [ 333.514468][T20313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5739'. [ 334.096613][T20313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=20313 comm=syz.3.5739 [ 334.109981][T20313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=20313 comm=syz.3.5739 [ 334.123406][T20313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=20313 comm=syz.3.5739 [ 334.136836][T20313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=20313 comm=syz.3.5739 [ 334.165363][T20313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5739'. [ 334.762040][T20313] lo speed is unknown, defaulting to 1000 [ 334.795441][T20323] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 334.830170][T20313] lo speed is unknown, defaulting to 1000 [ 334.836539][T20313] lo speed is unknown, defaulting to 1000 [ 336.673091][T20357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5752'. [ 336.835044][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5754'. [ 337.312290][T16174] team0: Port device syz_tun removed [ 337.649970][T20376] netlink: 'syz.1.5759': attribute type 10 has an invalid length. [ 337.819238][T20377] lo speed is unknown, defaulting to 1000 [ 337.918974][T20377] lo speed is unknown, defaulting to 1000 [ 337.926535][T20377] lo speed is unknown, defaulting to 1000 [ 338.110930][T20377] chnl_net:caif_netlink_parms(): no params data found [ 338.268183][T20377] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.275710][T20377] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.283724][T20377] bridge_slave_0: entered allmulticast mode [ 338.291311][T20377] bridge_slave_0: entered promiscuous mode [ 338.302046][T20377] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.309723][T20377] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.318027][T20377] bridge_slave_1: entered allmulticast mode [ 338.325541][T20377] bridge_slave_1: entered promiscuous mode [ 338.350255][T20377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.365440][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5767'. [ 338.367820][T20377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.379689][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 338.379712][ T29] audit: type=1326 audit(338.338:15117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20421 comm="syz.1.5768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 338.415106][ T29] audit: type=1326 audit(338.368:15118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20421 comm="syz.1.5768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 338.438869][ T29] audit: type=1326 audit(338.368:15119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20421 comm="syz.1.5768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 338.463476][ T29] audit: type=1326 audit(338.368:15120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20421 comm="syz.1.5768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 338.504815][T20377] team0: Port device team_slave_0 added [ 338.516451][T20377] team0: Port device team_slave_1 added [ 338.539474][T20377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.546816][T20377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.573339][T20377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.585315][T20377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.592989][T20377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.622051][T20377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.664015][T20377] hsr_slave_0: entered promiscuous mode [ 338.670586][T20377] hsr_slave_1: entered promiscuous mode [ 338.677124][T20377] debugfs: 'hsr0' already exists in 'hsr' [ 338.682932][T20377] Cannot create hsr debugfs directory [ 338.693007][T20429] netlink: 'syz.1.5769': attribute type 21 has an invalid length. [ 338.736725][ T29] audit: type=1326 audit(338.708:15121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20434 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 338.761591][ T29] audit: type=1326 audit(338.708:15122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20434 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 338.785396][ T29] audit: type=1326 audit(338.708:15123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20434 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 338.809974][ T29] audit: type=1326 audit(338.708:15124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20434 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 338.833249][ T29] audit: type=1326 audit(338.708:15125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20434 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 338.859022][ T29] audit: type=1326 audit(338.708:15126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20434 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 338.900362][T20377] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.931013][T20440] siw: device registration error -23 [ 338.951510][T20377] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.051596][T20377] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.111394][T20377] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.220241][T20377] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.262764][T20377] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.283491][T20377] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.323279][T20377] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.582627][T20464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5779'. [ 339.833610][T20377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.854554][T20377] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.876174][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.883605][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.894430][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.901923][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.146965][T20377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.346184][T20377] veth0_vlan: entered promiscuous mode [ 340.387762][T20490] lo speed is unknown, defaulting to 1000 [ 340.397171][T20377] veth1_vlan: entered promiscuous mode [ 340.466589][T20377] veth0_macvtap: entered promiscuous mode [ 340.501019][T20377] veth1_macvtap: entered promiscuous mode [ 340.525522][T20377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.563850][T20377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.575190][T20490] lo speed is unknown, defaulting to 1000 [ 340.593394][T20490] lo speed is unknown, defaulting to 1000 [ 340.612384][ T4244] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.632599][ T4244] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.677207][ T4244] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.730510][ T4244] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.780579][T20506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5755'. [ 340.795387][T20506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=20506 comm=syz.2.5755 [ 340.809366][T20506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=20506 comm=syz.2.5755 [ 340.822685][T20506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=20506 comm=syz.2.5755 [ 340.835834][T20506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=20506 comm=syz.2.5755 [ 340.854392][T20509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5755'. [ 340.925338][T20506] lo speed is unknown, defaulting to 1000 [ 340.964118][T20506] lo speed is unknown, defaulting to 1000 [ 340.970785][T20506] lo speed is unknown, defaulting to 1000 [ 340.977397][T20516] netlink: 'syz.1.5787': attribute type 21 has an invalid length. [ 341.371830][T20529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5793'. [ 341.422919][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5793'. [ 341.711696][T20551] netlink: 'syz.3.5795': attribute type 21 has an invalid length. [ 341.960145][T20561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5802'. [ 341.987139][T20561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5802'. [ 342.074173][T20569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5806'. [ 342.093641][T20569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5806'. [ 342.275458][T20584] netlink: 'syz.4.5808': attribute type 21 has an invalid length. [ 342.534571][T20599] loop2: detected capacity change from 0 to 128 [ 342.552988][T20599] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.591279][T20599] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.620106][T20609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5820'. [ 342.641280][T20609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5820'. [ 343.043256][T20639] siw: device registration error -23 [ 343.221523][T20654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5838'. [ 343.658368][T20672] netlink: 'syz.1.5839': attribute type 21 has an invalid length. [ 343.706447][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5846'. [ 343.823237][T20686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=20686 comm=syz.5.5849 [ 343.836543][T20686] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5849'. [ 344.427225][T20717] lo speed is unknown, defaulting to 1000 [ 344.878317][T20749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5871'. [ 344.959857][T20749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=20749 comm=syz.3.5871 [ 344.973215][T20749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=20749 comm=syz.3.5871 [ 344.986191][T20749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=20749 comm=syz.3.5871 [ 344.999128][T20749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=20749 comm=syz.3.5871 [ 345.328062][T20717] lo speed is unknown, defaulting to 1000 [ 345.343603][T20717] lo speed is unknown, defaulting to 1000 [ 345.803713][T20741] siw: device registration error -23 [ 345.824345][T20749] lo speed is unknown, defaulting to 1000 [ 346.012827][T20749] lo speed is unknown, defaulting to 1000 [ 346.114225][T20749] lo speed is unknown, defaulting to 1000 [ 346.300566][T20764] netlink: 'syz.5.5873': attribute type 21 has an invalid length. [ 346.792599][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 346.792619][ T29] audit: type=1326 audit(346.768:15279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.1.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 346.835567][ T29] audit: type=1326 audit(346.798:15280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.1.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 346.859028][ T29] audit: type=1326 audit(346.798:15281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.1.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 346.882662][ T29] audit: type=1326 audit(346.798:15282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.1.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 346.906569][ T29] audit: type=1326 audit(346.798:15283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.1.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 346.930568][ T29] audit: type=1326 audit(346.798:15284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.1.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 346.955676][ T29] audit: type=1326 audit(346.798:15285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.1.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 346.973442][T20780] __nla_validate_parse: 1 callbacks suppressed [ 346.973470][T20780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5879'. [ 346.979641][ T29] audit: type=1326 audit(346.798:15286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.1.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 347.019137][ T29] audit: type=1326 audit(346.798:15287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.1.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 347.043222][ T29] audit: type=1326 audit(346.798:15288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.1.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f2d3c5befc9 code=0x7ffc0000 [ 347.086888][T20780] lo speed is unknown, defaulting to 1000 [ 347.137831][T20782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5879'. [ 347.182778][T20780] lo speed is unknown, defaulting to 1000 [ 347.191948][T20780] lo speed is unknown, defaulting to 1000 [ 347.198749][T20791] ref_ctr_offset mismatch. inode: 0x1ed offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 347.213716][T20793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5885'. [ 347.249881][T20793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5885'. [ 347.312535][T20798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5887'. [ 347.362779][T20798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=20798 comm=syz.5.5887 [ 347.376580][T20798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=20798 comm=syz.5.5887 [ 347.390403][T20798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=20798 comm=syz.5.5887 [ 347.403643][T20798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=20798 comm=syz.5.5887 [ 347.469760][T20798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5887'. [ 347.487656][T20814] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 347.553013][T20798] lo speed is unknown, defaulting to 1000 [ 347.692273][T20798] lo speed is unknown, defaulting to 1000 [ 347.718429][T20798] lo speed is unknown, defaulting to 1000 [ 347.724498][T20834] siw: device registration error -23 [ 347.748122][T20847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5902'. [ 347.769618][T20847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5902'. [ 347.788741][T20827] lo speed is unknown, defaulting to 1000 [ 347.869988][T20827] lo speed is unknown, defaulting to 1000 [ 347.879813][T20827] lo speed is unknown, defaulting to 1000 [ 348.055579][T20827] chnl_net:caif_netlink_parms(): no params data found [ 348.214723][T20827] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.222321][T20827] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.231231][T20827] bridge_slave_0: entered allmulticast mode [ 348.260686][T20827] bridge_slave_0: entered promiscuous mode [ 348.332203][T20827] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.339451][T20827] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.369712][T20827] bridge_slave_1: entered allmulticast mode [ 348.384075][T20827] bridge_slave_1: entered promiscuous mode [ 348.422129][T20827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.439167][T20827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.494973][T20827] team0: Port device team_slave_0 added [ 348.510971][T20827] team0: Port device team_slave_1 added [ 348.568013][T20827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.575258][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.601684][T20827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.655447][T20827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.663094][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.690335][T20827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.890942][T20827] hsr_slave_0: entered promiscuous mode [ 348.897988][T20827] hsr_slave_1: entered promiscuous mode [ 348.905967][T20827] debugfs: 'hsr0' already exists in 'hsr' [ 348.912084][T20827] Cannot create hsr debugfs directory [ 348.940317][T20884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5910'. [ 349.112830][T20827] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.123052][T20827] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.221375][T20827] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.231736][T20827] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.306344][T20901] siw: device registration error -23 [ 349.352820][T20827] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.363033][T20827] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.548884][T20827] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.559094][T20827] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.666505][T20827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.679646][T20827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.691559][T20827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.702938][T20827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 350.097089][T20827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.125447][T20827] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.269787][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.277400][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.320906][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.328339][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.535515][T20827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.717026][T20939] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 350.745062][T20942] siw: device registration error -23 [ 350.764746][T20827] veth0_vlan: entered promiscuous mode [ 350.783863][T20827] veth1_vlan: entered promiscuous mode [ 350.845583][T20827] veth0_macvtap: entered promiscuous mode [ 350.883300][T20827] veth1_macvtap: entered promiscuous mode [ 350.926953][T20827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.959923][T20827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.984903][ T4245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.026147][ T4245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.069421][ T4245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.079081][ T4245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.621640][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5933'. [ 351.913480][T20997] netlink: 'syz.4.5937': attribute type 21 has an invalid length. [ 351.982565][T20978] lo speed is unknown, defaulting to 1000 [ 352.116483][T20978] lo speed is unknown, defaulting to 1000 [ 352.204393][T20978] lo speed is unknown, defaulting to 1000 [ 352.463245][T20978] chnl_net:caif_netlink_parms(): no params data found [ 352.568056][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 352.568072][ T29] audit: type=1326 audit(352.538:15335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21014 comm="syz.5.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 352.608457][T21019] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5944'. [ 352.619801][ T29] audit: type=1326 audit(352.578:15336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21014 comm="syz.5.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 352.643337][ T29] audit: type=1326 audit(352.578:15337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21014 comm="syz.5.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 352.666921][ T29] audit: type=1326 audit(352.578:15338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21014 comm="syz.5.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 352.690893][ T29] audit: type=1326 audit(352.578:15339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21014 comm="syz.5.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 352.715180][ T29] audit: type=1326 audit(352.578:15340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21014 comm="syz.5.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 352.738613][ T29] audit: type=1326 audit(352.578:15341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21014 comm="syz.5.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 352.762389][ T29] audit: type=1326 audit(352.578:15342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21014 comm="syz.5.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 352.786026][ T29] audit: type=1326 audit(352.578:15343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21014 comm="syz.5.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 352.810090][ T29] audit: type=1326 audit(352.578:15344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21014 comm="syz.5.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad7e7efc9 code=0x7ffc0000 [ 352.839500][T20978] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.847001][T20978] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.879888][T20978] bridge_slave_0: entered allmulticast mode [ 352.892706][T20978] bridge_slave_0: entered promiscuous mode [ 352.921936][T20978] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.922260][T21021] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 352.929601][T20978] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.937721][T20978] bridge_slave_1: entered allmulticast mode [ 352.961300][T20978] bridge_slave_1: entered promiscuous mode [ 352.969185][T21028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5947'. [ 352.991497][T21033] siw: device registration error -23 [ 353.014688][T20978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.031833][T20978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.077269][T20978] team0: Port device team_slave_0 added [ 353.092955][T20978] team0: Port device team_slave_1 added [ 353.133561][T20978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.140788][T20978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.167175][T20978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.224012][T20978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.231732][T20978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.258799][T20978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.336293][T20978] hsr_slave_0: entered promiscuous mode [ 353.345730][T20978] hsr_slave_1: entered promiscuous mode [ 353.360151][T20978] debugfs: 'hsr0' already exists in 'hsr' [ 353.366089][T20978] Cannot create hsr debugfs directory [ 353.827472][T20978] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.891059][T20978] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.902263][T20978] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.920744][T20978] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 354.278368][T20978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.300955][T21088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5964'. [ 354.345341][T20978] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.377871][T21088] hsr_slave_1 (unregistering): left promiscuous mode [ 354.431630][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.438938][ T4243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.451856][T21102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5969'. [ 354.564891][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.572059][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.597031][T21104] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 354.670606][T21109] netlink: 836 bytes leftover after parsing attributes in process `syz.4.5972'. [ 354.788365][T20978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.880696][T21135] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5980'. [ 354.928540][T21138] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5975'. [ 354.961843][T20978] veth0_vlan: entered promiscuous mode [ 354.983371][T20978] veth1_vlan: entered promiscuous mode [ 355.038677][T20978] veth0_macvtap: entered promiscuous mode [ 355.051600][T20978] veth1_macvtap: entered promiscuous mode [ 355.059017][T21153] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5986'. [ 355.083991][T20978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.102618][T20978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.125204][ T4243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.155414][ T4243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.167518][ T4243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.178050][ T4243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.269462][T21173] loop3: detected capacity change from 0 to 512 [ 355.291978][T21173] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 355.411668][T21173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 355.420094][T21173] System zones: 1-12 [ 355.429654][T21173] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 355.827786][T21173] EXT4-fs (loop3): 1 truncate cleaned up [ 355.873380][T21173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.921539][T21212] netlink: 548 bytes leftover after parsing attributes in process `syz.4.5996'. [ 356.001323][T20978] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.038480][T21165] cgroup: fork rejected by pids controller in /syz5 [ 356.271211][T21224] siw: device registration error -23 [ 356.484527][T21233] siw: device registration error -23 [ 356.537591][T21218] bond1: invalid ARP target 0.0.0.0 specified for addition [ 356.545953][T21218] bond1: option arp_ip_target: invalid value (0) [ 356.588450][T21218] bond1 (unregistering): Released all slaves [ 358.266231][T21273] loop3: detected capacity change from 0 to 512 [ 358.312223][T21272] lo speed is unknown, defaulting to 1000 [ 358.448220][T21272] lo speed is unknown, defaulting to 1000 [ 358.462039][T21273] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.6014: error while reading EA inode 32 err=-116 [ 358.519824][T21283] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6017'. [ 358.537150][T21272] lo speed is unknown, defaulting to 1000 [ 358.545351][T21273] EXT4-fs (loop3): Remounting filesystem read-only [ 358.599752][T21273] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 358.656245][T21273] EXT4-fs (loop3): 1 orphan inode deleted [ 358.668516][T21289] veth0_to_team: left promiscuous mode [ 358.669930][T21273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.674894][T21289] veth0_to_team: left allmulticast mode [ 358.745696][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 358.745713][ T29] audit: type=1326 audit(358.718:15624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 358.776873][ T29] audit: type=1326 audit(358.718:15625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 358.800686][ T29] audit: type=1326 audit(358.718:15626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 358.824177][ T29] audit: type=1326 audit(358.718:15627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 358.847988][ T29] audit: type=1326 audit(358.718:15628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 358.872516][ T29] audit: type=1326 audit(358.718:15629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 358.896585][ T29] audit: type=1326 audit(358.718:15630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 358.920858][ T29] audit: type=1326 audit(358.718:15631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 358.944467][ T29] audit: type=1326 audit(358.718:15632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 358.968396][ T29] audit: type=1326 audit(358.718:15633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2d8a2efc9 code=0x7ffc0000 [ 359.015716][T20978] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.028137][T21283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6017'. [ 359.225700][T21304] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 359.522101][T21316] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6030'. [ 359.548999][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6030'. [ 359.625022][T21323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6033'. [ 359.670115][T21323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6033'. [ 359.694135][T21329] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 359.746309][T21334] loop3: detected capacity change from 0 to 128 [ 359.753239][T21334] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 359.769336][T21334] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 359.898064][T21341] siw: device registration error -23 [ 359.969371][T21347] loop3: detected capacity change from 0 to 128 [ 359.988356][T21347] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 360.344663][T21347] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.602256][ T3401] ================================================================== [ 360.610535][ T3401] BUG: KCSAN: data-race in delete_from_page_cache_batch / nr_blockdev_pages [ 360.619598][ T3401] [ 360.621979][ T3401] read-write to 0xffff888100480bb8 of 8 bytes by task 21347 on cpu 0: [ 360.630331][ T3401] delete_from_page_cache_batch+0x4f1/0x6f0 [ 360.636510][ T3401] truncate_inode_pages_range+0x1ba/0x780 [ 360.642254][ T3401] truncate_inode_pages+0x24/0x30 [ 360.647408][ T3401] blkdev_flush_mapping+0xa4/0x1a0 [ 360.652741][ T3401] bdev_release+0x2bf/0x3d0 [ 360.657668][ T3401] blkdev_release+0x15/0x20 [ 360.662309][ T3401] __fput+0x29b/0x650 [ 360.666557][ T3401] ____fput+0x1c/0x30 [ 360.671031][ T3401] task_work_run+0x131/0x1a0 [ 360.675930][ T3401] exit_to_user_mode_loop+0xed/0x110 [ 360.681353][ T3401] do_syscall_64+0x1d6/0x200 [ 360.686141][ T3401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.692231][ T3401] [ 360.694578][ T3401] read to 0xffff888100480bb8 of 8 bytes by task 3401 on cpu 1: [ 360.702484][ T3401] nr_blockdev_pages+0x7e/0xd0 [ 360.707389][ T3401] si_meminfo+0x87/0xd0 [ 360.711809][ T3401] update_defense_level+0x47/0x5c0 [ 360.717241][ T3401] defense_work_handler+0x1f/0x80 [ 360.722457][ T3401] process_scheduled_works+0x4ce/0x9d0 [ 360.728121][ T3401] worker_thread+0x582/0x770 [ 360.732818][ T3401] kthread+0x489/0x510 [ 360.737060][ T3401] ret_from_fork+0x122/0x1b0 [ 360.741943][ T3401] ret_from_fork_asm+0x1a/0x30 [ 360.746759][ T3401] [ 360.749109][ T3401] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 360.756498][ T3401] [ 360.758941][ T3401] Reported by Kernel Concurrency Sanitizer on: [ 360.765558][ T3401] CPU: 1 UID: 0 PID: 3401 Comm: kworker/1:3 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 360.777198][ T3401] Tainted: [W]=WARN [ 360.781103][ T3401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 360.791639][ T3401] Workqueue: events_long defense_work_handler [ 360.798196][ T3401] ================================================================== [ 360.872972][T21363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6046'. [ 360.950782][T21363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6046'.