last executing test programs: 3m38.919548442s ago: executing program 4 (id=953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r1}, 0x18) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 3m38.178511576s ago: executing program 4 (id=955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffe42}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000e80400048008000200010000000800010000000000040008801c000c800c000b80080009"], 0x48}}, 0x0) 3m37.800820427s ago: executing program 4 (id=960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) 3m37.479249345s ago: executing program 4 (id=965): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x1}, 0x10) close(r0) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) r2 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000004000010120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) 3m36.059280341s ago: executing program 4 (id=976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xb, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 3m35.73348377s ago: executing program 4 (id=980): creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m21.295363002s ago: executing program 32 (id=980): creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m9.229931997s ago: executing program 3 (id=1097): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='thermal_power_devfreq_get_power\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) read$FUSE(r5, &(0x7f00000076c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31000000006d2d6873760bb617112c520b8b249ec97e0da4f3c650665b62433b384df9e54b153f654f5d399fce390341a3493f2b074f28464b674a827c54f33e0116ef28f67983b63bdf4ec12365aeff67f18075bc039ec9da92cfd304eca5f99f3220625b31b7b7b14c"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3m8.178498627s ago: executing program 3 (id=1098): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r6, r5, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000000)=0x9, 0x4) sendto$inet6(r9, &(0x7f0000000180)="c412", 0xffe6, 0x40, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) 3m7.130057505s ago: executing program 3 (id=1100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r3}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) 3m5.368153196s ago: executing program 3 (id=1106): syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0xd144, 0x100, 0xffffffff, 0x289}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)=' ', 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000400)="98e3b400aa421906092623a0c2263931e83065df9d9c", 0x48, 0x0, 0x0, 0x0) 3m4.955953866s ago: executing program 3 (id=1109): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) 3m4.528061489s ago: executing program 3 (id=1112): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000001b00)=""/207, 0xcf) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_usb_connect$uac1(0x2, 0x71, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0xf, 0x40, 0x21, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xf7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0xf7, 0x9, {0x7, 0x25, 0x1, 0x1, 0x10, 0x35}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x9, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x0, 0x3}}}}}}}]}}, 0x0) 2m50.084353396s ago: executing program 33 (id=1112): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000001b00)=""/207, 0xcf) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_usb_connect$uac1(0x2, 0x71, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0xf, 0x40, 0x21, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xf7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0xf7, 0x9, {0x7, 0x25, 0x1, 0x1, 0x10, 0x35}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x9, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x0, 0x3}}}}}}}]}}, 0x0) 1m39.375532256s ago: executing program 0 (id=1550): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) fadvise64(0xffffffffffffffff, 0x1, 0x6, 0x2) 1m38.259177263s ago: executing program 0 (id=1555): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f800030000000000fb150705e837282efe0868327a31a705ec978547acdb994c534a5a730838f0555fb69fd6be235b7451ddaac5c5413b17895b1246abbbe2201cf85b57e71fd9c0b14e0f0f4fdc20f34187dc9dad09fe6bf48859452c5125410863a2e1fea448b13769e3d0943318cd5a"], 0x830600) 1m37.500401719s ago: executing program 0 (id=1563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0xee01, 0x0) 1m36.835732353s ago: executing program 0 (id=1569): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendto$inet6(r0, &(0x7f0000000540)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m36.083982347s ago: executing program 0 (id=1577): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r0, 0xe, 0x9, 0x9, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x64000600) 1m32.961516068s ago: executing program 0 (id=1595): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m18.470961642s ago: executing program 34 (id=1595): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 18.232409097s ago: executing program 7 (id=2002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 17.76339146s ago: executing program 7 (id=2007): socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r0}, 0x20) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/80, 0x50, 0x578) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000008000bb"], 0x48) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000004, 0x8, 0x1, 0xc05}) mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/107, 0x6b, 0x0, 0x0) 15.672762692s ago: executing program 7 (id=2015): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000005180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x10, 0x3000}], 0x1, 0x0) 15.468795642s ago: executing program 7 (id=2019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xd1e}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0xfff, 0x7, 0x0, 0x1, 0x6}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000180), 0x76, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000004b0000000000000000400000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 14.736348134s ago: executing program 1 (id=2020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 14.560031989s ago: executing program 7 (id=2022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0xf}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4087, 0xff7}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 14.325316995s ago: executing program 1 (id=2025): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16=0x0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4040400}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.679530842s ago: executing program 8 (id=2031): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) close(r2) lsm_get_self_attr(0x65, &(0x7f0000000500)={0x0, 0x0, 0xc5, 0xa5, ""/165}, 0x0, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 11.807008519s ago: executing program 8 (id=2033): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80800, 0x3) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x169397c458a634f0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x2404c8c0) 9.237532505s ago: executing program 8 (id=2042): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x9546, 0x10000, 0xfffffffe, 0x2d1}, &(0x7f0000000040), &(0x7f0000000400)) io_uring_enter(r1, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000000)=[0xffff, 0x3], 0x2) close(0xffffffffffffffff) creat(&(0x7f0000000000)='./file1\x00', 0x14c) 7.505424444s ago: executing program 2 (id=2047): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 7.258486947s ago: executing program 2 (id=2048): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20006, 0x8, 0x0, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 6.347926522s ago: executing program 8 (id=2049): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x8, 0x7, 0x9, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) 6.241501853s ago: executing program 8 (id=2050): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4006, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.049562318s ago: executing program 8 (id=2052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) 6.047788251s ago: executing program 1 (id=2053): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair(0x11, 0x3, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000000)={0x418, 0x1, 0x0, 0xfe, 0x7f, "fff903e7ff0072010000ffffffffffff00ad86", 0x8, 0x6}) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) 6.016316473s ago: executing program 7 (id=2054): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80800, 0x3) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x169397c458a634f0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x2404c8c0) 4.884150197s ago: executing program 2 (id=2057): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) getpgrp(0x0) setns(0xffffffffffffffff, 0x34020000) 4.753554089s ago: executing program 1 (id=2058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r0) 4.486993255s ago: executing program 1 (id=2061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 3.6605276s ago: executing program 2 (id=2062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) socket$inet6(0xa, 0x2, 0x3a) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000180)={'c', ' *:* ', 'rwm\x00'}, 0xa) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="62202a3a4cda8515"], 0xb) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") truncate(&(0x7f0000000900)='./file1\x00', 0x4000000000001121) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=r7], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 3.65606687s ago: executing program 6 (id=2063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=@delchain={0x614, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_u32={{0x8}, {0x5e0, 0x2, [@TCA_U32_SEL={0x5b4, 0x5, {0xd, 0xfb, 0x5, 0x4, 0x4, 0x2, 0x0, 0x7, [{0x1000, 0x7, 0xa, 0x40}, {0x0, 0xdbc, 0x6, 0x380}, {0x0, 0x1, 0x6, 0x8}, {0x2, 0x3, 0xffffffff, 0xeb1}, {0x100, 0x1000, 0x200, 0xc332}, {0x4, 0x7, 0x1c, 0x80}, {0x7f, 0x80000001, 0x0, 0x1ff}, {0x0, 0xfffffff8, 0x9, 0x9}, {0x8, 0xfffffff9, 0x73dd2260, 0x1}, {0x0, 0x0, 0x0, 0x7}, {0x5, 0x3, 0x1, 0xc8}, {0x8, 0xfffffff7, 0x7, 0x7}, {0xae, 0x1000, 0xe0000000, 0x3}, {0x6, 0xd54, 0x7174}, {0xfffffffe, 0xfffffffe, 0x562, 0x3}, {0x2, 0xa94b, 0x1, 0x6}, {0x8001, 0x9, 0x702a, 0xe33}, {0x7, 0x8, 0x7, 0x3}, {0x8, 0xd, 0x9, 0x3d5}, {0x6, 0x527, 0xfffffffd}, {0xfffffffb, 0xf0d8, 0x2, 0xf}, {0xe5, 0x3, 0x5, 0x10}, {0x8, 0xffffffff, 0x9, 0x4}, {0xff, 0x7ff, 0x52b}, {0x0, 0x13, 0x0, 0x1}, {0x15a57b82, 0x3, 0x9, 0xb7b}, {0x7, 0x6, 0x2, 0x7f}, {0xfffff70c, 0x0, 0x5, 0x5}, {0x7f, 0x0, 0xfffffff8, 0x8}, {0x32da994, 0x7, 0x3, 0x3c7}, {0x6, 0x9, 0x1, 0x5}, {0x8, 0x5, 0xd, 0x9}, {0xff, 0xefad, 0x7, 0x8}, {0x0, 0x5, 0x77fb, 0x400}, {0x7f, 0x8, 0xeae, 0x3}, {0xafe, 0x2, 0x9, 0xab}, {0x80, 0x10000, 0x3d, 0x4}, {0x6, 0x9, 0x1, 0x1}, {0x5, 0x80, 0x5, 0x400}, {0x81, 0x6, 0x8, 0x7fff}, {0x4, 0x8, 0xe, 0x2}, {0x7, 0x2, 0x2, 0xc}, {0x9, 0x7, 0x1ff, 0x7fffffff}, {0x3, 0xe, 0x4, 0x9}, {0x2, 0xfffffffc, 0x2, 0x2}, {0x7, 0x1, 0x400, 0xb05}, {0x1, 0x8, 0x8}, {0xb, 0x9, 0x4, 0xfffffff8}, {0x8, 0x5, 0x401, 0x7fffffff}, {0x9, 0x7ff, 0xbc8, 0x7}, {0xd6, 0x7d5, 0x7a27, 0x1}, {0x1, 0x1, 0x0, 0x20000000}, {0x7, 0xb, 0x5, 0x400}, {0xf, 0x7, 0x0, 0xd457}, {0x7, 0x8, 0x2, 0x9}, {0xa13, 0x0, 0x9, 0x200}, {0x6, 0x1, 0x884d, 0xd8d}, {0x3ff, 0x38, 0x1b, 0x6}, {0x8, 0x9, 0x1, 0x80}, {0xc, 0x7f, 0x1d, 0x4}, {0x0, 0x7f, 0x87c, 0x5}, {0x5, 0x7, 0x1, 0x2}, {0x97, 0x9, 0xa, 0x6}, {0x9, 0x9, 0x19, 0x114}, {0x7, 0x1, 0x1, 0x2}, {0x40000, 0x80000001, 0x21}, {0x5, 0x8, 0x0, 0x214f0}, {0x5, 0xb2aa, 0xe0, 0xfffffffa}, {0x73, 0x7, 0x4, 0x4}, {0x7, 0x7f, 0x9, 0xffffffff}, {0x4, 0x3, 0x0, 0x5}, {0x7fff, 0x3, 0x7fc, 0xf7}, {0xfd, 0x8000, 0x7, 0x1}, {0x2c, 0x80, 0x887, 0x2}, {0x800, 0xa, 0x7}, {0x6, 0x3, 0x10001, 0xb7}, {0x3, 0x7, 0x301d, 0x4}, {0xfffffff9, 0x7fff, 0x5, 0x4}, {0x6, 0xffffffff, 0x8000, 0x6}, {0xffffff36, 0x80000001, 0x9, 0xfffffffe}, {0x15b, 0x5, 0x40, 0x2}, {0x8, 0x1, 0x7fff, 0x3}, {0x3ff, 0x1, 0x7, 0x9}, {0x9a6, 0x7fff, 0xfd, 0xfffffffa}, {0x80, 0xfffffff9, 0x2, 0x4}, {0x1, 0x6, 0x7, 0x2}, {0x3, 0x4, 0x4, 0x54f}, {0x90d, 0x4, 0x9, 0x1}, {0x81, 0x0, 0x2, 0x6}, {0x2, 0xb, 0x8, 0x5}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xd1}, @TCA_U32_MARK={0x10, 0xa, {0xffa, 0x2}}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0x9c55}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.517209026s ago: executing program 5 (id=2064): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.435154961s ago: executing program 1 (id=2065): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x200000081}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES16], 0x48) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000000c0)={0x0, 0x2, 0x3ff2e233}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x102, 0x0) sendfile(r1, r1, 0x0, 0x4) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0), 0x12, 0x51a, &(0x7f0000001200)="$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") syz_usbip_server_init(0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000e80), 0x2, 0x8}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@remote, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa8fe50a5563b249e784feeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4006, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.31027471s ago: executing program 6 (id=2066): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16=0x0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4040400}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.24582085s ago: executing program 5 (id=2067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.711403714s ago: executing program 5 (id=2068): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='thermal_power_devfreq_get_power\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) read$FUSE(r5, &(0x7f00000076c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31000000006d2d6873760bb617112c520b8b249ec97e0da4f3c650665b62433b384df9e54b153f654f5d399fce390341a3493f2b074f28464b674a827c54f33e0116ef28f67983b63bdf4ec12365aeff67f18075bc039ec9da92cfd304eca5f99f3220625b31b7b7b14c"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.640389625s ago: executing program 6 (id=2069): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r0}, 0x18) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) 2.55932312s ago: executing program 2 (id=2070): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socketpair(0x11, 0x3, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0x418, 0x1, 0x0, 0xfe, 0x7f, "fff903e7ff0072010000ffffffffffff00ad86", 0x8, 0x6}) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) 1.587185014s ago: executing program 5 (id=2071): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x319, &(0x7f0000000a40)="$eJzs3M9LG1sUwPGTmMQY0cni8R7vwcPLe5t2M2i6Lw1FoTRQsab0B5SOZtKGTBPJBEtKqbrqpovSP6ILcelOaP0H3HTXVTfduSl0URelUzI/kqhJ1WhMrd8PyBxy75m5N2OGcwdmtm+/elzM23reqEo4riQkIrIjkpSwBEL+NuzGMWm1LBeHv3z49+adu9fTmczkjFJT6dlLKaXU6NjbJ8+G/G4bg7KVvL/9OfVp68+tv7e/zz4q2Kpgq1K5qgw1V/5YNeYsU+UKdlFXatoyDdtUhZJtVrx2Z0nEMlXeKi8s1JRRyo0kFiqmbSujVFPFYDA1ZTw0CiWl67oaSQgOkl2dmTHSXSbPn/Bg0COVStoYEJGhfS3Z1b4MCAAA9JVf/zeq/XC9pO+m/o+0rf/X/tusDt9aH/Xr/41Yvf4Xaan/HzT3ZapcuFH/x0WkWf+XvfVBh/rfrKlqWVUrR67/91dEZ9vL3SdHHKcRxtr1P1b9jzOiXv8n/N+va+Xe2rgbUP8DAAAAAAAAAAAAAAAAAAAAAHAW7DiO5jiO5m0H/E8dbVBE4u4TJF57n4eJHtl9/pt/nP/zofnijsioiPViMbuY9bZ+h00RscSUcdHkm/v/4KvHsWXldlJ1SXlnLfn5S4tZ71qSzkvBzZ8QTZJ78x1n6lpmckJ5dudHJdGanxJN/mifn9qbH61vY3Lh/5Z8XTR5Py9lsSTnPxkX5D+fUOrqjcye4w+5/QAAAAAA+B3oqqGxfh9sbdf3t3vrY6/dW19HpP39AW99Pd52fR+RfyL9mjUAAAAAAOeLXXtaNCzLrPQoWBGRHh+iQxDM8LBZwQtyO/QJSahT0wkEwcG7S6+P7cTGEz3UNxbuaqhjsSOelLZBcNuoUx+Z7mbPjiZy3O/wr9dvvv68j3dnTOQwO7y8Hj9gpt0GsYNmGu1wuYj35CIEAAAA4FQ0i/7gkyv9HRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQabyKr99zBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH4VPwIAAP//aAv9Yw==") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x143fc2, 0x1d8) 1.495080628s ago: executing program 6 (id=2072): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), 0x0}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 1.052814019s ago: executing program 6 (id=2073): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xda, 0xda, 0x3, [@volatile={0xd, 0x0, 0x0, 0x9, 0x5}, @datasec={0x6, 0x8, 0x0, 0xf, 0x2, [{0x4, 0x7f}, {0x1, 0x9, 0x8001}, {0x1, 0x4, 0xfffffffd}, {0x5, 0x3, 0x5}, {0x5, 0x2, 0x5}, {0x4, 0x100, 0x7}, {0x2, 0x3fa8, 0x7}, {0x2, 0x4, 0x800}], "f46f"}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x66, 0x1}, @fwd={0x4}, @fwd={0x5}, @union={0x1, 0x1, 0x0, 0x5, 0x1, 0x1, [{0x3, 0x2, 0x3a9}]}, @var={0x10, 0x0, 0x0, 0xe, 0x3}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x33, 0x0, 0x3c}]}, {0x0, [0x2e]}}, &(0x7f00000000c0)=""/33, 0xf7, 0x21, 0x0, 0x1, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) 997.499103ms ago: executing program 5 (id=2074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) getpgrp(0x0) setns(0xffffffffffffffff, 0x34020000) 364.03976ms ago: executing program 2 (id=2075): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x800, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 183.430395ms ago: executing program 5 (id=2076): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4011) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x4480, 0x8, 0xe1}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, 0x0, 0x0, 0x8, 0xffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) mkdir(0x0, 0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4a}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) 0s ago: executing program 6 (id=2077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = inotify_init1(0x0) read(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): udit(1766972847.451:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 285.621610][ T31] audit: type=1326 audit(1766972847.451:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 285.631338][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.914'. [ 285.659205][ T31] audit: type=1326 audit(1766972847.451:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 285.714504][ T6427] Bluetooth: hci6: Frame reassembly failed (-84) [ 285.724762][ T8777] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 285.844171][ T8802] wg1 speed is unknown, defaulting to 1000 [ 285.888454][ T8802] lo speed is unknown, defaulting to 1000 [ 285.935326][ T8815] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 285.976859][ T8813] netlink: 'syz.0.916': attribute type 13 has an invalid length. [ 286.680730][ T8827] netlink: 'syz.2.922': attribute type 13 has an invalid length. [ 286.790519][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.798157][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.324337][ T8827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.339253][ T8827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.660245][ T5846] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 287.666582][ T5837] Bluetooth: hci6: command 0x1003 tx timeout [ 287.847547][ T37] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.955702][ T37] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.964091][ T37] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.989391][ T37] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.352764][ T8850] syzkaller0: entered promiscuous mode [ 288.358477][ T8850] syzkaller0: entered allmulticast mode [ 288.414234][ T31] audit: type=1326 audit(1766972850.979:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 288.477659][ T31] audit: type=1326 audit(1766972850.979:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 289.005090][ T8869] netlink: 'syz.5.935': attribute type 3 has an invalid length. [ 289.358836][ T8879] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 289.886387][ T8881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.941'. [ 289.965973][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 290.027823][ T8883] hsr_slave_0: left promiscuous mode [ 290.048134][ T8883] hsr_slave_1: left promiscuous mode [ 290.109833][ T5973] kernel read not supported for file bpf-prog (pid: 5973 comm: kworker/0:7) [ 290.305073][ T8896] syzkaller0: entered promiscuous mode [ 290.318937][ T8896] syzkaller0: entered allmulticast mode [ 290.342453][ T8900] siw: device registration error -23 [ 290.646200][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 291.570952][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'. [ 291.889358][ T8923] loop1: detected capacity change from 0 to 128 [ 291.957254][ T8923] EXT4-fs: Ignoring removed nobh option [ 291.964619][ T8931] loop2: detected capacity change from 0 to 512 [ 291.987553][ T8931] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 292.039208][ T8923] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.051859][ T8923] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 292.069462][ T8931] EXT4-fs (loop2): 1 truncate cleaned up [ 292.121200][ T8931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.188045][ T5824] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.453579][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.735098][ T6072] kernel read not supported for file bpf-prog (pid: 6072 comm: kworker/0:9) [ 293.917665][ T8978] pim6reg: entered allmulticast mode [ 295.270360][ T6072] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 295.278304][ T6072] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 295.924372][ T6072] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 295.932196][ T6072] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 296.038902][ T6072] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 296.098758][ T6072] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 296.106173][ T6072] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 296.154958][ T6072] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 296.180534][ T6072] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 296.189450][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.993'. [ 296.226572][ T6072] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 296.273767][ T5973] kernel read not supported for file bpf-prog (pid: 5973 comm: kworker/0:7) [ 296.306404][ T6072] hid-generic 0003:0000:0000.0002: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 296.628049][ T9021] capability: warning: `syz.1.997' uses 32-bit capabilities (legacy support in use) [ 296.654487][ T9017] fido_id[9017]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 297.552363][ T9048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1008'. [ 298.767857][ T9057] netlink: 'syz.5.1011': attribute type 10 has an invalid length. [ 298.823575][ T9059] netlink: 'syz.5.1011': attribute type 10 has an invalid length. [ 298.867753][ T9057] bond0: (slave dummy0): Releasing backup interface [ 299.017656][ T9057] team0: Port device dummy0 added [ 302.560731][ T9108] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 302.644120][ T9100] loop1: detected capacity change from 0 to 512 [ 303.141090][ T9100] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 303.188833][ T9100] EXT4-fs (loop1): orphan cleanup on readonly fs [ 303.426893][ T9100] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 303.923690][ T9100] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 304.013908][ T9100] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #13: comm syz.1.1024: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 304.343569][ T9100] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1024: couldn't read orphan inode 13 (err -117) [ 304.411222][ T9100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 304.614943][ T9137] ALSA: seq fatal error: cannot create timer (-19) [ 304.656321][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'. [ 304.828480][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.475097][ T9164] tmpfs: Bad value for 'mpol' [ 307.786106][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.794530][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 309.463949][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 309.472449][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 309.479985][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 309.490470][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 309.498666][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 309.541090][ T9230] loop1: detected capacity change from 0 to 512 [ 309.644457][ T9234] wg1 speed is unknown, defaulting to 1000 [ 309.661288][ T9234] lo speed is unknown, defaulting to 1000 [ 309.722652][ T9230] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1058: EA inode hash validation failed [ 310.586340][ T9230] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1058: corrupted inode contents [ 310.611399][ T9230] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.1058: mark_inode_dirty error [ 310.687705][ T9230] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1058: corrupted inode contents [ 310.796073][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1062'. [ 310.824053][ T9230] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.1058: mark_inode_dirty error [ 310.885230][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1064'. [ 310.930664][ T9230] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.1058: mark inode dirty (error -117) [ 310.993588][ T9230] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 311.026773][ T9230] EXT4-fs (loop1): 1 orphan inode deleted [ 311.050569][ T9230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.132476][ T9230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.382476][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 311.394887][ T31] audit: type=1326 audit(1766972875.085:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 311.437351][ T5837] Bluetooth: hci6: command tx timeout [ 311.461975][ T31] audit: type=1326 audit(1766972875.085:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 311.512111][ T31] audit: type=1326 audit(1766972875.200:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 311.537416][ T31] audit: type=1326 audit(1766972875.200:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 311.600748][ T31] audit: type=1326 audit(1766972875.211:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 311.641246][ T31] audit: type=1326 audit(1766972875.211:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 311.672892][ T31] audit: type=1326 audit(1766972875.221:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 311.698908][ T31] audit: type=1326 audit(1766972875.221:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 311.738813][ T31] audit: type=1326 audit(1766972875.221:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 311.809349][ T31] audit: type=1326 audit(1766972875.221:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 311.833525][ T9275] loop5: detected capacity change from 0 to 512 [ 312.663700][ T9275] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1066: bg 0: block 248: padding at end of block bitmap is not set [ 312.754989][ T9275] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1066: Failed to acquire dquot type 1 [ 312.832565][ T9312] wg1 speed is unknown, defaulting to 1000 [ 312.840383][ T9312] lo speed is unknown, defaulting to 1000 [ 312.875498][ T9346] loop2: detected capacity change from 0 to 128 [ 312.889489][ T9275] EXT4-fs (loop5): 1 truncate cleaned up [ 312.952540][ T9275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.996228][ T9346] EXT4-fs: Ignoring removed nobh option [ 313.046415][ T9275] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.119917][ T9346] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 313.258851][ T9346] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 313.414410][ T5837] Bluetooth: hci6: command tx timeout [ 313.429117][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.727422][ T9234] chnl_net:caif_netlink_parms(): no params data found [ 314.938988][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.184626][ T9475] netlink: 'syz.3.1078': attribute type 10 has an invalid length. [ 315.215423][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.279465][ T6071] wg1 speed is unknown, defaulting to 1000 [ 315.296322][ T6071] syz0: Port: 1 Link DOWN [ 315.351460][ T9475] team0: Port device dummy0 added [ 315.396942][ T5837] Bluetooth: hci6: command tx timeout [ 315.640162][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.051871][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.095773][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.120630][ T9543] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1083'. [ 316.132728][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.157459][ T31] kauditd_printk_skb: 101 callbacks suppressed [ 316.157476][ T31] audit: type=1326 audit(1766972880.103:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7513b865e7 code=0x7ffc0000 [ 316.192450][ T9234] bridge_slave_0: entered allmulticast mode [ 316.213360][ T9234] bridge_slave_0: entered promiscuous mode [ 316.236312][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.250561][ T31] audit: type=1326 audit(1766972880.135:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7513b2b829 code=0x7ffc0000 [ 316.311501][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.327844][ T31] audit: type=1326 audit(1766972880.135:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7513b865e7 code=0x7ffc0000 [ 316.399601][ T31] audit: type=1326 audit(1766972880.135:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7513b2b829 code=0x7ffc0000 [ 316.463221][ T31] audit: type=1326 audit(1766972880.135:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 316.467809][ T9234] bridge_slave_1: entered allmulticast mode [ 316.585539][ T9234] bridge_slave_1: entered promiscuous mode [ 316.609403][ T31] audit: type=1326 audit(1766972880.145:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7513b865e7 code=0x7ffc0000 [ 316.690284][ T31] audit: type=1326 audit(1766972880.145:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7513b2b829 code=0x7ffc0000 [ 316.737426][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.785957][ T31] audit: type=1326 audit(1766972880.145:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 317.100776][ T31] audit: type=1326 audit(1766972880.156:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7513b865e7 code=0x7ffc0000 [ 317.124506][ T31] audit: type=1326 audit(1766972880.156:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7513b2b829 code=0x7ffc0000 [ 317.887121][ T5837] Bluetooth: hci6: command tx timeout [ 318.178507][ T9234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.232180][ T9234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.232212][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'. [ 318.667350][ T9630] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1091'. [ 318.677986][ T9629] netlink: 'syz.0.1092': attribute type 10 has an invalid length. [ 318.711795][ T9234] team0: Port device team_slave_0 added [ 318.845468][ T9234] team0: Port device team_slave_1 added [ 320.030215][ T9663] wg1 speed is unknown, defaulting to 1000 [ 320.037556][ T9663] lo speed is unknown, defaulting to 1000 [ 320.247598][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.289210][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.325560][ T9679] loop2: detected capacity change from 0 to 128 [ 320.342983][ T9679] EXT4-fs: Ignoring removed nobh option [ 320.360263][ T9234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.377305][ T12] bridge_slave_1: left allmulticast mode [ 320.386030][ T12] bridge_slave_1: left promiscuous mode [ 320.389802][ T9679] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 320.393060][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.427970][ T12] bridge_slave_0: left allmulticast mode [ 320.433975][ T12] bridge_slave_0: left promiscuous mode [ 320.439786][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.588350][ T9679] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 320.761703][ T9708] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 321.450185][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 322.642254][ T9721] loop2: detected capacity change from 0 to 2048 [ 322.725838][ T9721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 322.745088][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1102'. [ 322.761179][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 322.761198][ T31] audit: type=1326 audit(1766972887.033:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074078f749 code=0x7ffc0000 [ 322.828800][ T31] audit: type=1326 audit(1766972887.033:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f074078f749 code=0x7ffc0000 [ 322.867914][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.878515][ T31] audit: type=1326 audit(1766972887.033:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074078f749 code=0x7ffc0000 [ 322.902202][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.911818][ T31] audit: type=1326 audit(1766972887.033:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f074078f749 code=0x7ffc0000 [ 322.937447][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 322.951759][ T12] bond0 (unregistering): Released all slaves [ 322.960218][ T31] audit: type=1326 audit(1766972887.033:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074078f749 code=0x7ffc0000 [ 323.004675][ T31] audit: type=1326 audit(1766972887.033:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f074078f749 code=0x7ffc0000 [ 323.074821][ T31] audit: type=1326 audit(1766972887.033:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074078f749 code=0x7ffc0000 [ 323.105677][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.114612][ T31] audit: type=1326 audit(1766972887.033:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f074078f749 code=0x7ffc0000 [ 323.137218][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.151282][ T31] audit: type=1326 audit(1766972887.033:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074078f749 code=0x7ffc0000 [ 323.187155][ T31] audit: type=1326 audit(1766972887.033:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f074078f749 code=0x7ffc0000 [ 323.260341][ T9234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.419503][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 323.525167][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1102'. [ 324.530985][ T6033] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.559811][ T6033] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.711164][ T6033] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.811794][ T6033] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.939742][ T6072] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 328.159575][ T9234] hsr_slave_0: entered promiscuous mode [ 328.199297][ T6072] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 328.216379][ T9234] hsr_slave_1: entered promiscuous mode [ 328.252259][ T6072] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 328.274152][ T9234] debugfs: 'hsr0' already exists in 'hsr' [ 328.300961][ T9234] Cannot create hsr debugfs directory [ 328.317167][ T6072] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.419167][ T6072] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.448030][ T6072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.513335][ T6072] usb 4-1: Product: syz [ 328.529856][ T6072] usb 4-1: Manufacturer: syz [ 328.534473][ T6072] usb 4-1: SerialNumber: syz [ 328.613189][ T9868] loop5: detected capacity change from 0 to 2048 [ 328.682960][ T9868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 328.695963][ T12] hsr_slave_0: left promiscuous mode [ 328.909590][ T31] kauditd_printk_skb: 110 callbacks suppressed [ 328.917715][ T31] audit: type=1326 audit(1766972893.479:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 328.945753][ T12] hsr_slave_1: left promiscuous mode [ 329.796938][ T31] audit: type=1326 audit(1766972893.479:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 329.819307][ T31] audit: type=1326 audit(1766972893.479:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 329.872406][ T31] audit: type=1326 audit(1766972893.479:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 329.915661][ T31] audit: type=1326 audit(1766972893.479:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 329.937987][ T31] audit: type=1326 audit(1766972893.490:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 329.967788][ T9883] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 329.986998][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.015258][ T31] audit: type=1326 audit(1766972893.490:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 330.044157][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.074609][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.077343][ T31] audit: type=1326 audit(1766972893.490:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 330.143690][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.147962][ T31] audit: type=1326 audit(1766972893.490:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 330.186755][ T31] audit: type=1326 audit(1766972893.490:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 330.315425][ T12] veth1_macvtap: left promiscuous mode [ 330.327284][ T12] veth0_macvtap: left promiscuous mode [ 330.333756][ T12] veth1_vlan: left promiscuous mode [ 330.339476][ T12] veth0_vlan: left promiscuous mode [ 330.356054][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 330.576416][ T9813] infiniband syz!: set down [ 330.588015][ T9813] infiniband syz!: added team_slave_0 [ 330.665932][ T9903] loop5: detected capacity change from 0 to 512 [ 330.686456][ T9813] RDS/IB: syz!: added [ 330.703120][ T9903] ext2: Unknown parameter 'obj_user' [ 330.716840][ T9813] smc: adding ib device syz! with port count 1 [ 330.753904][ T9813] smc: ib device syz! port 1 has no pnetid [ 331.380389][ T12] team_slave_1 (unregistering): left promiscuous mode [ 331.393315][ T12] team0 (unregistering): Port device team_slave_1 removed [ 331.433260][ T12] team_slave_0 (unregistering): left promiscuous mode [ 331.444637][ T12] team0 (unregistering): Port device team_slave_0 removed [ 333.247758][ T9990] loop5: detected capacity change from 0 to 2048 [ 334.036722][ T9234] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 334.218059][ T9990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 334.232667][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 334.232684][ T31] audit: type=1326 audit(1766972899.075:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 334.283391][ T6072] usb 4-1: can't set config #1, error -110 [ 334.295852][ T31] audit: type=1326 audit(1766972899.107:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 334.459883][ T9234] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 334.484118][ T31] audit: type=1326 audit(1766972899.107:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 334.518877][ T31] audit: type=1326 audit(1766972899.107:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 334.561490][ T31] audit: type=1326 audit(1766972899.107:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 334.768431][ T9234] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 334.774808][ T31] audit: type=1326 audit(1766972899.107:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 334.835383][ T31] audit: type=1326 audit(1766972899.107:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 334.881651][ T31] audit: type=1326 audit(1766972899.107:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 334.960918][ T9234] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 335.006620][ T31] audit: type=1326 audit(1766972899.107:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 335.092530][ T31] audit: type=1326 audit(1766972899.107:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa84c391667 code=0x7ffc0000 [ 335.251347][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 335.492456][ T9234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.563536][T10054] serio: Serial port ptm0 [ 335.595774][ T9234] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.641389][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.648579][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.690744][T10054] serio: Serial port ptm0 [ 335.739103][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.746274][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.787472][ T9234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.716446][T10113] tmpfs: Bad value for 'mpol' [ 338.543968][ T9234] veth0_vlan: entered promiscuous mode [ 338.577864][ T9234] veth1_vlan: entered promiscuous mode [ 338.674623][ T9234] veth0_macvtap: entered promiscuous mode [ 338.705616][ T9234] veth1_macvtap: entered promiscuous mode [ 338.757280][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.797242][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.838655][ T3449] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.868617][ T3449] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.963173][ T3449] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.997707][ T31] kauditd_printk_skb: 198 callbacks suppressed [ 338.997725][ T31] audit: type=1326 audit(1766972904.083:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7513b865e7 code=0x7ffc0000 [ 339.038864][ T3449] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.099999][ T31] audit: type=1326 audit(1766972904.125:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7513b2b829 code=0x7ffc0000 [ 339.131282][T10135] serio: Serial port ptm0 [ 339.172381][ T31] audit: type=1326 audit(1766972904.125:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7513b865e7 code=0x7ffc0000 [ 339.200490][ T6807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.202258][ T31] audit: type=1326 audit(1766972904.125:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7513b2b829 code=0x7ffc0000 [ 339.227152][ T6807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.321963][ T31] audit: type=1326 audit(1766972904.125:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 339.374263][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.404219][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.416018][ T31] audit: type=1326 audit(1766972904.125:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7513b865e7 code=0x7ffc0000 [ 339.491502][ T31] audit: type=1326 audit(1766972904.125:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7513b2b829 code=0x7ffc0000 [ 339.578643][T10154] loop5: detected capacity change from 0 to 512 [ 339.586025][T10154] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 339.605005][T10154] EXT4-fs: error: could not find journal device path [ 339.605373][ T31] audit: type=1326 audit(1766972904.125:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 339.751410][ T31] audit: type=1326 audit(1766972904.146:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7513b865e7 code=0x7ffc0000 [ 339.851233][ T31] audit: type=1326 audit(1766972904.146:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7513b2b829 code=0x7ffc0000 [ 339.964230][T10169] netlink: 'syz.6.1055': attribute type 1 has an invalid length. [ 340.055652][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.072970][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.081224][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.090184][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.099387][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.459186][T10196] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1160'. [ 340.801224][T10214] netlink: 212 bytes leftover after parsing attributes in process `syz.6.1165'. [ 340.977778][T10220] serio: Serial port ptm0 [ 341.362696][T10154] lo speed is unknown, defaulting to 1000 [ 341.370146][T10033] lo speed is unknown, defaulting to 1000 [ 341.751301][T10171] lo speed is unknown, defaulting to 1000 [ 342.067567][ T5846] Bluetooth: hci5: command tx timeout [ 343.200967][ T5973] usb 4-1: USB disconnect, device number 2 [ 344.043398][ T31] kauditd_printk_skb: 216 callbacks suppressed [ 344.043419][ T31] audit: type=1326 audit(1766972909.375:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 344.074057][ T5846] Bluetooth: hci5: command tx timeout [ 344.140695][ T31] audit: type=1326 audit(1766972909.417:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 344.274937][ T31] audit: type=1326 audit(1766972909.417:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 344.434472][ T31] audit: type=1326 audit(1766972909.417:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7513b91667 code=0x7ffc0000 [ 344.522056][ T31] audit: type=1326 audit(1766972909.417:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7513b915dc code=0x7ffc0000 [ 344.646923][ T31] audit: type=1326 audit(1766972909.417:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7513b91514 code=0x7ffc0000 [ 344.977660][ T31] audit: type=1326 audit(1766972909.417:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7513b91514 code=0x7ffc0000 [ 345.008888][ T31] audit: type=1326 audit(1766972909.417:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7513b8e3aa code=0x7ffc0000 [ 345.034333][T10487] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 345.050241][T10450] macvtap1: entered promiscuous mode [ 345.080423][ T31] audit: type=1326 audit(1766972909.417:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 345.131948][T10450] bridge0: entered promiscuous mode [ 345.148475][T10450] macvtap1: entered allmulticast mode [ 345.171128][ T31] audit: type=1326 audit(1766972909.448:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 345.184978][T10450] bridge0: entered allmulticast mode [ 345.233487][T10492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1190'. [ 345.271459][T10450] bridge0: port 3(macvtap1) entered blocking state [ 345.288815][T10450] bridge0: port 3(macvtap1) entered disabled state [ 345.305695][T10450] bridge0: left allmulticast mode [ 345.311914][T10450] bridge0: left promiscuous mode [ 345.401129][T10397] syzkaller0: entered promiscuous mode [ 345.408432][T10397] syzkaller0: entered allmulticast mode [ 345.936216][T10516] futex_wake_op: syz.0.1199 tries to shift op by -1; fix this program [ 346.027080][ T5846] Bluetooth: hci5: command tx timeout [ 346.575121][T10171] chnl_net:caif_netlink_parms(): no params data found [ 346.638774][ T3832] bridge_slave_1: left allmulticast mode [ 346.657601][ T3832] bridge_slave_1: left promiscuous mode [ 346.668664][ T3832] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.708739][ T3832] bridge_slave_0: left allmulticast mode [ 346.726409][ T3832] bridge_slave_0: left promiscuous mode [ 346.762826][ T3832] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.018646][ T5837] Bluetooth: hci5: command tx timeout [ 348.497861][ T3832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.508320][T10578] loop2: detected capacity change from 0 to 128 [ 348.516207][T10578] EXT4-fs: Ignoring removed nobh option [ 348.545149][T10578] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.557708][T10578] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.569677][ T3832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.579669][ T3832] bond0 (unregistering): Released all slaves [ 348.661317][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.710089][T10560] lo speed is unknown, defaulting to 1000 [ 348.792511][T10574] team0: Port device dummy0 removed [ 349.163660][T10550] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 349.258256][T10550] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 349.291503][T10619] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 349.683556][T10550] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 349.705319][T10550] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 349.777891][T10550] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 349.798433][T10550] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 349.974909][T10550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 349.999040][T10550] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 350.039730][T10696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1214'. [ 350.086052][T10171] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.112668][T10171] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.137439][T10171] bridge_slave_0: entered allmulticast mode [ 350.159039][T10171] bridge_slave_0: entered promiscuous mode [ 350.237502][T10171] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.509451][T10171] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.533367][T10171] bridge_slave_1: entered allmulticast mode [ 350.568109][T10171] bridge_slave_1: entered promiscuous mode [ 351.108237][T10171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.162046][T10171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.469093][T10735] syzkaller0: entered promiscuous mode [ 351.494724][T10735] syzkaller0: entered allmulticast mode [ 351.716698][T10550] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 351.729826][T10550] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 351.742221][T10808] loop5: detected capacity change from 0 to 128 [ 351.754844][T10808] EXT4-fs: Ignoring removed nobh option [ 351.816118][T10808] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 351.879580][T10808] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 352.076950][ T5823] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.271530][T10831] sd 0:0:1:0: device reset [ 354.638800][T10171] team0: Port device team_slave_0 added [ 354.733180][T10550] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 354.739106][T10550] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 354.800271][T10829] wireguard0: entered promiscuous mode [ 354.808477][T10829] wireguard0: entered allmulticast mode [ 354.935896][T10171] team0: Port device team_slave_1 added [ 355.190928][T10847] lo speed is unknown, defaulting to 1000 [ 355.346380][T10925] tmpfs: Bad value for 'mpol' [ 355.408854][T10171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.424864][T10171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.493038][T10171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.910822][T10931] program syz.2.1244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.244622][T10171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.274984][T10171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.357371][T10171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.401635][T10975] loop2: detected capacity change from 0 to 128 [ 356.415994][T10975] EXT4-fs: Ignoring removed nobh option [ 356.501087][T10975] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 356.532393][T10975] ext4 filesystem being mounted at /190/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 357.146905][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 357.647002][T10171] hsr_slave_0: entered promiscuous mode [ 357.688567][T10171] hsr_slave_1: entered promiscuous mode [ 357.712694][T10171] debugfs: 'hsr0' already exists in 'hsr' [ 357.729561][T10171] Cannot create hsr debugfs directory [ 358.150990][ T3832] hsr_slave_0: left promiscuous mode [ 358.211753][ T3832] hsr_slave_1: left promiscuous mode [ 358.227472][ T3832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.776420][ T3832] team0 (unregistering): Port device team_slave_1 removed [ 360.388988][ T3832] team0 (unregistering): Port device team_slave_0 removed [ 360.400947][ T1134] smc: removing ib device syz! [ 361.315075][ T3832] team0 (unregistering): Port device dummy0 removed [ 362.805975][T11178] loop2: detected capacity change from 0 to 128 [ 362.857753][T11178] EXT4-fs: Ignoring removed nobh option [ 362.927116][T11178] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.042186][T11178] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 363.206580][T11216] loop5: detected capacity change from 0 to 512 [ 363.329515][T11216] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 363.366811][T11216] EXT4-fs (loop5): orphan cleanup on readonly fs [ 363.457780][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.513275][T11216] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm gtp: corrupted inode contents [ 363.599833][T11216] EXT4-fs (loop5): Remounting filesystem read-only [ 363.606687][T11216] EXT4-fs (loop5): 1 truncate cleaned up [ 363.619831][ T50] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 363.704309][ T50] __quota_error: 25 callbacks suppressed [ 363.704331][ T50] Quota error (device loop5): write_blk: dquota write failed [ 363.761197][ T50] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 363.819484][ T50] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 364.042226][ T50] Quota error (device loop5): write_blk: dquota write failed [ 364.056424][ T50] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 364.072231][ T50] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 364.082360][ T50] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 364.808789][ T50] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 364.817656][T10171] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 364.897298][T11216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.945656][T10171] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 365.035146][T10171] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 365.096622][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.152933][T10171] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 365.564079][T11277] syzkaller0: entered promiscuous mode [ 365.569577][T11277] syzkaller0: entered allmulticast mode [ 366.300056][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.306764][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 367.326505][T11321] loop5: detected capacity change from 0 to 128 [ 367.358765][T11321] EXT4-fs: Ignoring removed nobh option [ 367.422476][T11321] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.454363][T11321] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.610687][ T5823] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.889182][T11337] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 368.583115][T10171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.740114][T10171] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.777431][T11360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1296'. [ 368.832102][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.839279][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.920684][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.927862][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.196085][T11375] loop2: detected capacity change from 0 to 128 [ 369.243369][T11375] EXT4-fs: Ignoring removed nobh option [ 369.288262][T11375] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.319301][T11375] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 369.643629][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.899018][T10171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.642328][T11462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1312'. [ 372.832687][ T31] audit: type=1326 audit(1766972939.602:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 372.891336][T11472] loop5: detected capacity change from 0 to 128 [ 372.922828][T11472] EXT4-fs: Ignoring removed nobh option [ 372.925204][ T31] audit: type=1326 audit(1766972939.634:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 373.020874][T11472] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.058542][T11472] ext4 filesystem being mounted at /244/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 373.086031][ T31] audit: type=1326 audit(1766972939.634:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 373.187974][ T31] audit: type=1326 audit(1766972939.634:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 373.263929][T11484] netlink: 'syz.2.1316': attribute type 1 has an invalid length. [ 373.267252][ T31] audit: type=1326 audit(1766972939.644:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 373.334947][ T31] audit: type=1326 audit(1766972939.644:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 373.371729][ T5823] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.474654][T11484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.490350][ T31] audit: type=1326 audit(1766972939.644:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 373.595381][ T31] audit: type=1326 audit(1766972939.655:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 373.604227][T11492] bond1: (slave dummy0): making interface the new active one [ 373.662801][ T31] audit: type=1326 audit(1766972939.655:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 373.684100][T11492] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 373.731010][ T31] audit: type=1326 audit(1766972939.655:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7ffe38f783 code=0x7ffc0000 [ 373.836440][T11468] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 373.928494][T10171] veth0_vlan: entered promiscuous mode [ 374.014548][T10171] veth1_vlan: entered promiscuous mode [ 374.126089][T10171] veth0_macvtap: entered promiscuous mode [ 374.158685][T10171] veth1_macvtap: entered promiscuous mode [ 374.225997][T10171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.288164][T10171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.319151][T11538] syzkaller0: entered promiscuous mode [ 374.344247][T11538] syzkaller0: entered allmulticast mode [ 374.402503][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.437004][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.488654][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.526144][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.951773][ T568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.991944][ T568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.213498][ T568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.260364][ T568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.612373][T11600] loop2: detected capacity change from 0 to 512 [ 375.766944][T11605] loop5: detected capacity change from 0 to 1024 [ 375.795688][T11600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.866824][T11600] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.918056][T11605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.807838][T11617] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 377.145917][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.218258][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.617555][T11630] syzkaller0: entered promiscuous mode [ 377.647988][T11630] syzkaller0: entered allmulticast mode [ 378.087072][T11662] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 379.469926][T11685] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 379.553027][T11684] input: syz1 as /devices/virtual/input/input11 [ 380.488166][T11702] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1351'. [ 380.839568][T11374] syz.6.1299 (11374) used greatest stack depth: 17112 bytes left [ 382.136876][T11720] loop6: detected capacity change from 0 to 2048 [ 382.193230][T11720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.221005][T11720] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.276925][T11727] loop2: detected capacity change from 0 to 256 [ 382.287759][T11727] exfat: Deprecated parameter 'namecase' [ 382.293495][T11727] exfat: Deprecated parameter 'namecase' [ 382.329689][T11727] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 383.048827][T11720] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.056575][T11720] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.480139][T11749] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 383.704483][T11720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.756352][T11720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.044348][T11766] serio: Serial port ptm0 [ 384.251905][ T3449] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.297073][ T3449] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.331669][ T3449] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.363191][ T3449] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.385361][ T9234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.014493][T11801] loop2: detected capacity change from 0 to 256 [ 385.082947][ T31] kauditd_printk_skb: 110 callbacks suppressed [ 385.082967][ T31] audit: type=1326 audit(1766972952.463:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 385.091670][T11801] exfat: Deprecated parameter 'namecase' [ 385.202747][T11801] exfat: Deprecated parameter 'namecase' [ 385.274714][ T31] audit: type=1326 audit(1766972952.463:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 385.287408][T11801] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 385.368998][T11798] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.376395][T11798] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.429555][ T31] audit: type=1326 audit(1766972952.505:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 385.542687][ T31] audit: type=1326 audit(1766972952.505:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 385.829427][ T31] audit: type=1326 audit(1766972952.505:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 385.961366][ T31] audit: type=1326 audit(1766972952.505:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 386.044655][ T31] audit: type=1326 audit(1766972952.505:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 386.166369][ T31] audit: type=1326 audit(1766972952.505:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 386.300799][ T31] audit: type=1326 audit(1766972952.505:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 386.412926][ T31] audit: type=1326 audit(1766972952.558:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 386.843416][ T568] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.866497][ T568] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.888405][ T568] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.917337][ T568] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.070756][T11840] syzkaller0: entered promiscuous mode [ 387.076421][T11840] syzkaller0: entered allmulticast mode [ 387.305465][T11869] serio: Serial port ptm0 [ 387.492482][T11869] serio: Serial port ptm0 [ 387.856009][T11894] hub 2-0:1.0: USB hub found [ 387.868463][T11894] hub 2-0:1.0: 1 port detected [ 388.958070][ T568] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.968407][ T568] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.979036][ T568] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.000779][ T568] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.021758][T11887] syzkaller0: entered promiscuous mode [ 389.027230][T11887] syzkaller0: entered allmulticast mode [ 389.330975][T11923] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1401'. [ 389.715593][T11945] serio: Serial port ptm0 [ 389.980257][T11961] loop5: detected capacity change from 0 to 256 [ 390.005750][T11961] exfat: Deprecated parameter 'namecase' [ 390.017287][T11961] exfat: Deprecated parameter 'namecase' [ 390.066515][T11961] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 390.866437][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1414'. [ 390.912943][T12015] syzkaller0: entered promiscuous mode [ 390.935948][T12015] syzkaller0: entered allmulticast mode [ 390.944201][ T5973] IPVS: starting estimator thread 0... [ 391.030149][T12026] IPVS: using max 24 ests per chain, 57600 per kthread [ 391.137771][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1415'. [ 391.857054][T12056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 391.940325][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 391.940345][ T31] audit: type=1326 audit(1766972959.666:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 392.018710][ T31] audit: type=1326 audit(1766972959.697:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 392.058146][ T31] audit: type=1326 audit(1766972959.708:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 392.100598][ T31] audit: type=1326 audit(1766972959.708:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 392.123680][ T31] audit: type=1326 audit(1766972959.708:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 392.146846][ T31] audit: type=1326 audit(1766972959.708:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 392.170681][ T31] audit: type=1326 audit(1766972959.708:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 392.193600][ T31] audit: type=1326 audit(1766972959.708:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 392.218075][ T31] audit: type=1326 audit(1766972959.708:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 392.241087][ T31] audit: type=1326 audit(1766972959.708:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7513b8f749 code=0x7ffc0000 [ 393.464012][T12097] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1431'. [ 394.257576][T12131] syzkaller0: entered promiscuous mode [ 394.292318][T12131] syzkaller0: entered allmulticast mode [ 394.575524][T12156] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1446'. [ 395.045328][T12176] loop5: detected capacity change from 0 to 512 [ 395.099964][T12176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.126212][T12176] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.207092][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.429937][T12161] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 396.438775][T12161] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 396.449582][T12161] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 396.562279][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 396.895561][T12231] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1461'. [ 397.023778][T12236] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1462'. [ 397.542520][T12250] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 397.873820][T12250] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 398.209763][T12252] loop7: detected capacity change from 0 to 512 [ 398.217943][T12252] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 398.232854][T12252] EXT4-fs: error: could not find journal device path [ 398.240452][T12250] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 398.753289][T12264] ªªªªªª: renamed from vlan0 [ 399.212877][T12334] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1477'. [ 399.435333][T12346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1480'. [ 399.454887][T12347] loop6: detected capacity change from 0 to 256 [ 399.529186][T12347] exfat: Deprecated parameter 'namecase' [ 399.554000][T12351] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1483'. [ 399.592852][T12347] exfat: Deprecated parameter 'namecase' [ 399.640944][T12347] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 399.728426][T12357] loop7: detected capacity change from 0 to 512 [ 399.795685][T12357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.045300][T12357] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.471229][T12371] IPVS: Error connecting to the multicast addr [ 401.774191][T10171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.987612][T12389] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 402.099445][T12389] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 402.108735][T12389] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 402.766205][T12395] syzkaller0: entered promiscuous mode [ 402.771700][T12395] syzkaller0: entered allmulticast mode [ 402.978331][T12429] loop5: detected capacity change from 0 to 128 [ 403.031391][T12441] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1494'. [ 403.041420][T12429] bio_check_eod: 34 callbacks suppressed [ 403.041437][T12429] syz.5.1485: attempt to access beyond end of device [ 403.041437][T12429] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 403.121626][T12429] syz.5.1485: attempt to access beyond end of device [ 403.121626][T12429] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 403.189715][T12429] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 403.240883][T12429] syz.5.1485: attempt to access beyond end of device [ 403.240883][T12429] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 403.259728][T12429] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 403.321402][T12429] syz.5.1485: attempt to access beyond end of device [ 403.321402][T12429] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 403.384071][T12429] syz.5.1485: attempt to access beyond end of device [ 403.384071][T12429] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 403.512184][T12429] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 403.548388][T12429] syz.5.1485: attempt to access beyond end of device [ 403.548388][T12429] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 403.562398][T12465] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 403.563628][T12463] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1498'. [ 403.621544][T12429] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 403.730622][T12471] loop7: detected capacity change from 0 to 256 [ 403.835039][T12471] exfat: Deprecated parameter 'namecase' [ 403.876137][T12471] exfat: Deprecated parameter 'namecase' [ 403.941996][T12471] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 404.239962][T12493] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1507'. [ 404.686452][T12499] loop6: detected capacity change from 0 to 1024 [ 404.754922][T12499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 404.881905][T12499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.940327][T12502] loop2: detected capacity change from 0 to 512 [ 405.106691][T12502] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.1509: Parent and EA inode have the same ino 15 [ 405.184212][T12502] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.1509: Parent and EA inode have the same ino 15 [ 405.251505][T12502] EXT4-fs (loop2): 1 orphan inode deleted [ 405.263204][T12502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.397312][ T9234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.464232][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.560538][T12533] program syz.0.1514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.861807][T12547] loop2: detected capacity change from 0 to 1024 [ 405.931851][T12560] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1521'. [ 405.956169][T12547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.230230][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 406.326943][T12568] hsr_slave_0: left promiscuous mode [ 406.617324][T12568] hsr_slave_1: left promiscuous mode [ 407.001562][T12577] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 407.930685][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.378340][T12620] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1535'. [ 409.371113][T12646] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1541'. [ 409.559959][T12647] loop6: detected capacity change from 0 to 1024 [ 409.608290][T12647] EXT4-fs: inline encryption not supported [ 409.625973][T12656] loop7: detected capacity change from 0 to 256 [ 409.694841][T12647] EXT4-fs: Ignoring removed orlov option [ 409.738697][T12647] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 409.797782][T12647] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 409.797907][T12647] System zones: 0-1, 3-12 [ 409.810639][T12647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.305128][ T9234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.520382][T12693] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1552'. [ 411.432305][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 411.432326][ T31] audit: type=1326 audit(1766972980.139:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 411.511351][T12709] loop6: detected capacity change from 0 to 512 [ 411.568848][ T31] audit: type=1326 audit(1766972980.139:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 411.596339][T12709] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 411.669767][ T31] audit: type=1326 audit(1766972980.139:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 411.717670][T12709] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 411.822412][ T31] audit: type=1326 audit(1766972980.139:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 411.822861][T12709] EXT4-fs (loop6): 1 truncate cleaned up [ 411.905091][ T31] audit: type=1326 audit(1766972980.139:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 411.938454][T12709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.971463][T12675] loop2: detected capacity change from 0 to 1024 [ 411.990801][T12675] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 412.022467][ T31] audit: type=1326 audit(1766972980.139:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 412.070019][T12675] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 412.105747][ T31] audit: type=1326 audit(1766972980.139:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 412.183587][T12675] JBD2: no valid journal superblock found [ 412.205071][ T31] audit: type=1326 audit(1766972980.139:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 412.287768][T12675] EXT4-fs (loop2): Could not load journal inode [ 412.310055][ T31] audit: type=1326 audit(1766972980.160:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 412.404356][ T31] audit: type=1326 audit(1766972980.160:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 413.264978][T12772] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 413.368616][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'. [ 415.038346][T12811] loop7: detected capacity change from 0 to 1024 [ 415.090247][T12811] EXT4-fs: inline encryption not supported [ 415.096105][T12811] EXT4-fs: Ignoring removed orlov option [ 415.255257][T12811] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 415.565085][T12811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c018, mo2=0002] [ 415.634645][T12811] System zones: 0-1, 3-12 [ 415.652854][T12811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.808545][T12890] program syz.5.1588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.819594][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1589'. [ 416.302802][T10171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.411202][T12901] loop5: detected capacity change from 0 to 164 [ 416.478073][T12901] ISOFS: unable to read i-node block [ 416.537266][T12901] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 416.642796][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 416.642828][ T31] audit: type=1326 audit(1766972985.609:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12911 comm="syz.7.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 416.730627][ T31] audit: type=1326 audit(1766972985.641:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12911 comm="syz.7.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 416.868306][ T31] audit: type=1326 audit(1766972985.662:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12911 comm="syz.7.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 416.943115][ T31] audit: type=1326 audit(1766972985.662:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12911 comm="syz.7.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 417.063369][ T31] audit: type=1326 audit(1766972985.662:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12911 comm="syz.7.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 417.175962][ T31] audit: type=1326 audit(1766972985.662:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12911 comm="syz.7.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 417.257717][ T31] audit: type=1326 audit(1766972985.662:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12911 comm="syz.7.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 417.358916][ T31] audit: type=1326 audit(1766972985.662:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12911 comm="syz.7.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 417.421997][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1599'. [ 417.443623][ T31] audit: type=1326 audit(1766972985.662:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12911 comm="syz.7.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 417.545875][ T31] audit: type=1326 audit(1766972985.662:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12911 comm="syz.7.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 417.903424][ T9234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.754134][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 421.754154][ T31] audit: type=1326 audit(1766972990.964:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13058 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 421.836137][T13060] loop7: detected capacity change from 0 to 512 [ 421.926821][T13060] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 421.960039][ T31] audit: type=1326 audit(1766972990.964:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13058 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 422.029678][T13060] EXT4-fs (loop7): invalid journal inode [ 422.055141][T13060] EXT4-fs (loop7): can't get journal size [ 422.070520][ T31] audit: type=1326 audit(1766972990.964:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13058 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 422.147657][T13073] loop6: detected capacity change from 0 to 1024 [ 422.167942][T13060] EXT4-fs (loop7): 1 truncate cleaned up [ 422.189265][T13060] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.243506][T13073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.394899][ T31] audit: type=1326 audit(1766972990.964:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13058 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 423.242325][ T31] audit: type=1326 audit(1766972990.964:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13058 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 423.314017][ T31] audit: type=1326 audit(1766972990.964:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13058 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 423.397545][T10171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.427521][ T31] audit: type=1326 audit(1766972990.964:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13058 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 423.430454][ T9234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.460229][ T31] audit: type=1326 audit(1766972990.964:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13058 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 423.547349][ T31] audit: type=1326 audit(1766972990.995:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13058 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 423.673317][ T31] audit: type=1326 audit(1766972991.006:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13058 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 424.829128][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.835510][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 425.009402][T13187] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1635'. [ 425.076786][T13189] tmpfs: Unknown parameter 'nr_ýÿûÿÿÿÿÿ' [ 425.843259][T13197] loop6: detected capacity change from 0 to 512 [ 425.924466][T13197] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 425.959374][T13197] EXT4-fs (loop6): invalid journal inode [ 425.974725][T13187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.004596][T13197] EXT4-fs (loop6): can't get journal size [ 426.050135][T13197] EXT4-fs (loop6): 1 truncate cleaned up [ 426.102797][T13197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.201204][T13187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.340287][ T9234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.361102][T13187] bond0 (unregistering): Released all slaves [ 426.683981][T13229] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1639'. [ 426.989379][T13259] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 427.020626][T13259] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 427.043014][T13259] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 428.147278][ T31] kauditd_printk_skb: 95 callbacks suppressed [ 428.147299][ T31] audit: type=1326 audit(1766972997.683:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13311 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 428.255586][ T31] audit: type=1326 audit(1766972997.715:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13311 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 429.150063][ T31] audit: type=1326 audit(1766972997.715:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13311 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 429.172586][ T31] audit: type=1326 audit(1766972997.767:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13311 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 429.297053][ T31] audit: type=1326 audit(1766972997.767:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13311 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 429.366625][ T31] audit: type=1326 audit(1766972997.820:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13311 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 429.426347][ T31] audit: type=1326 audit(1766972997.820:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13311 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 429.463328][T13336] loop7: detected capacity change from 0 to 128 [ 429.491867][ T31] audit: type=1326 audit(1766972997.820:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13311 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 429.582534][T13342] loop5: detected capacity change from 0 to 128 [ 429.606103][ T31] audit: type=1326 audit(1766972997.820:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13311 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 429.718705][ T31] audit: type=1326 audit(1766972997.820:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13311 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 429.904765][T13352] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 430.061410][T13359] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 430.101878][T13359] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 430.138172][T13359] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 430.797515][T13395] pimreg: entered allmulticast mode [ 430.803705][T13395] pimreg: left allmulticast mode [ 431.529264][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 431.539286][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 431.557453][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 431.573956][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 431.598861][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 431.873271][T13433] 9pnet: p9_errstr2errno: server reported unknown error [ 432.701237][T13461] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 433.106810][T12915] Set syz1 is full, maxelem 65536 reached [ 433.426347][T13423] chnl_net:caif_netlink_parms(): no params data found [ 433.475395][T13559] bond0: entered promiscuous mode [ 433.480438][T13559] bond_slave_0: entered promiscuous mode [ 433.484380][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 433.484396][ T31] audit: type=1326 audit(1766973003.279:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 433.508768][T13559] bond_slave_1: entered promiscuous mode [ 433.546049][T13559] batadv0: entered promiscuous mode [ 433.564391][T13559] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 433.564857][ T31] audit: type=1326 audit(1766973003.321:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 433.602172][T13559] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 433.614561][ T5846] Bluetooth: hci4: command tx timeout [ 433.641099][T13559] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 433.674247][ T31] audit: type=1326 audit(1766973003.321:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 433.709617][T13559] bond0: left promiscuous mode [ 433.716590][T13559] bond_slave_0: left promiscuous mode [ 433.731595][T13559] bond_slave_1: left promiscuous mode [ 433.753620][T13559] batadv0: left promiscuous mode [ 433.766730][ T31] audit: type=1326 audit(1766973003.321:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 433.802303][ T31] audit: type=1326 audit(1766973003.321:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 433.854637][T13569] lo speed is unknown, defaulting to 1000 [ 433.889464][T13569] lo speed is unknown, defaulting to 1000 [ 433.899596][ T31] audit: type=1326 audit(1766973003.321:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 433.905408][T13569] lo speed is unknown, defaulting to 1000 [ 434.019924][ T31] audit: type=1326 audit(1766973003.321:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 434.172480][ T31] audit: type=1326 audit(1766973003.321:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 434.200884][ T31] audit: type=1326 audit(1766973003.321:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 434.328988][ T31] audit: type=1326 audit(1766973003.321:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffe38f749 code=0x7ffc0000 [ 434.429621][T13610] bridge1: entered promiscuous mode [ 434.481596][T13610] bridge1: entered allmulticast mode [ 434.501903][T13635] program syz.7.1689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.503543][T13610] team0: Port device bridge1 added [ 434.541619][T13620] bridge0: port 3(team0) entered blocking state [ 434.581048][T13620] bridge0: port 3(team0) entered disabled state [ 434.615064][T13620] team0: entered allmulticast mode [ 434.640107][T13620] team_slave_0: entered allmulticast mode [ 434.649406][T13642] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 434.659915][T13620] team_slave_1: entered allmulticast mode [ 434.683255][T13569] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 434.711831][T13620] team0: entered promiscuous mode [ 434.739340][T13620] team_slave_0: entered promiscuous mode [ 434.755213][T13620] team_slave_1: entered promiscuous mode [ 434.793680][T13620] bridge0: port 3(team0) entered blocking state [ 434.800301][T13620] bridge0: port 3(team0) entered forwarding state [ 434.930429][T13423] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.958633][T13423] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.989106][T13423] bridge_slave_0: entered allmulticast mode [ 435.030379][T13423] bridge_slave_0: entered promiscuous mode [ 435.073575][T13423] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.109226][T13423] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.517674][T13423] bridge_slave_1: entered allmulticast mode [ 435.566738][ T5846] Bluetooth: hci4: command tx timeout [ 435.692335][T13423] bridge_slave_1: entered promiscuous mode [ 435.884676][T13569] lo speed is unknown, defaulting to 1000 [ 436.205219][T13569] lo speed is unknown, defaulting to 1000 [ 436.394494][T13569] lo speed is unknown, defaulting to 1000 [ 436.447041][T13423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.485222][T13569] lo speed is unknown, defaulting to 1000 [ 436.569854][T13423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.602951][T13737] loop5: detected capacity change from 0 to 512 [ 436.654824][T13737] EXT4-fs: Ignoring removed bh option [ 436.693256][T13737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 436.731898][T13569] lo speed is unknown, defaulting to 1000 [ 436.761338][T13737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.799680][T13737] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 436.903822][T13569] lo speed is unknown, defaulting to 1000 [ 436.963050][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.058515][T13569] lo speed is unknown, defaulting to 1000 [ 437.104106][T13423] team0: Port device team_slave_0 added [ 437.113007][T13633] lo speed is unknown, defaulting to 1000 [ 437.134271][T13423] team0: Port device team_slave_1 added [ 437.148186][T13569] lo speed is unknown, defaulting to 1000 [ 437.548272][ T5846] Bluetooth: hci4: command tx timeout [ 438.347255][ T31] kauditd_printk_skb: 38 callbacks suppressed [ 438.347276][ T31] audit: type=1326 audit(1766973008.382:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1e98f749 code=0x7ffc0000 [ 438.558468][ T31] audit: type=1326 audit(1766973008.382:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1e98f749 code=0x7ffc0000 [ 438.630518][T13423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.638834][T13423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.690405][T13423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.829970][T13423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.846658][T13423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.905625][T13423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.998173][T13822] gtp0: entered promiscuous mode [ 439.003687][T13822] gtp0: entered allmulticast mode [ 439.011772][T13822] team0: Device gtp0 is of different type [ 439.501641][T13423] hsr_slave_0: entered promiscuous mode [ 439.516950][T13423] hsr_slave_1: entered promiscuous mode [ 439.530447][ T5846] Bluetooth: hci4: command tx timeout [ 440.267234][T13981] loop6: detected capacity change from 0 to 128 [ 440.867238][T13963] netlink: 'syz.6.1721': attribute type 10 has an invalid length. [ 441.140778][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1721'. [ 441.783073][T13974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.907833][T13963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.934245][T13963] team0: Port device bond0 added [ 442.240098][T13970] team0 (unregistering): Port device team_slave_0 removed [ 442.249039][T13970] team0 (unregistering): Port device team_slave_1 removed [ 442.260796][T13970] team0 (unregistering): Port device bond0 removed [ 442.291149][ T3449] bridge_slave_1: left allmulticast mode [ 442.297803][ T3449] bridge_slave_1: left promiscuous mode [ 442.309331][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.326768][ T3449] bridge_slave_0: left allmulticast mode [ 442.334282][ T3449] bridge_slave_0: left promiscuous mode [ 442.340859][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.781869][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.792996][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.802969][ T3449] bond0 (unregistering): Released all slaves [ 442.853604][T14030] lo speed is unknown, defaulting to 1000 [ 444.291947][ T3449] IPVS: stopping backup sync thread 7372 ... [ 445.197908][ T31] audit: type=1326 audit(1766973015.584:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14226 comm="syz.7.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 445.202391][T13423] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 445.275500][ T31] audit: type=1326 audit(1766973015.584:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14226 comm="syz.7.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 445.388339][ T31] audit: type=1326 audit(1766973015.584:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14226 comm="syz.7.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 445.391631][T13423] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 445.486624][T14252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1752'. [ 445.629492][T13423] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 445.700133][ T31] audit: type=1326 audit(1766973015.616:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14226 comm="syz.7.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 445.803128][T13423] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 446.407159][T14267] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1742'. [ 446.715839][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.787870][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.829186][ T31] audit: type=1326 audit(1766973017.296:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14284 comm="syz.5.1759" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa84c38f749 code=0x0 [ 446.951202][ T31] audit: type=1326 audit(1766973017.422:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14226 comm="syz.7.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 446.963510][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1759'. [ 447.009537][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1748'. [ 447.016723][ T31] audit: type=1326 audit(1766973017.422:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14226 comm="syz.7.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 447.025106][T14241] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1748'. [ 447.079287][ T31] audit: type=1326 audit(1766973017.485:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14226 comm="syz.7.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 447.156088][ T31] audit: type=1326 audit(1766973017.579:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14226 comm="syz.7.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 447.179670][ T31] audit: type=1326 audit(1766973017.579:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14226 comm="syz.7.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810cf8f749 code=0x7ffc0000 [ 447.944514][T13423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.043424][T13423] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.087678][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.094840][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.170777][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.177985][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.312894][T14322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1769'. [ 448.393871][T14322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1769'. [ 448.710551][T14343] loop5: detected capacity change from 0 to 1024 [ 448.748181][T14343] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 448.835097][T14343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.113928][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.244271][T13423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.883097][T14395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1773'. [ 450.616954][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 450.616975][ T31] audit: type=1326 audit(1766973021.275:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 450.733863][ T31] audit: type=1326 audit(1766973021.275:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 450.737012][T13423] veth0_vlan: entered promiscuous mode [ 450.847855][ T31] audit: type=1326 audit(1766973021.275:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 450.859949][T13423] veth1_vlan: entered promiscuous mode [ 450.920725][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 450.958947][ T31] audit: type=1326 audit(1766973021.275:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 450.987840][T14391] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1783'. [ 451.063737][ T31] audit: type=1326 audit(1766973021.275:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 451.069094][T13423] veth0_macvtap: entered promiscuous mode [ 451.135595][T13423] veth1_macvtap: entered promiscuous mode [ 451.185254][ T31] audit: type=1326 audit(1766973021.275:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 451.237763][T13423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.295617][ T31] audit: type=1326 audit(1766973021.275:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 451.313352][T13423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.373130][ T31] audit: type=1326 audit(1766973021.275:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 451.448675][ T4508] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.480001][ T4508] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.491821][T14435] loop5: detected capacity change from 0 to 1024 [ 451.496748][ T31] audit: type=1326 audit(1766973021.275:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 451.522346][T14435] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 451.556359][ T4508] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.588841][ T31] audit: type=1326 audit(1766973021.275:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 451.599884][ T4508] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.657653][T14435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.977845][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.179882][ T4085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.215951][ T4085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.436615][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.485747][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.561680][T14487] loop2: detected capacity change from 0 to 512 [ 452.569059][T14487] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 452.583895][T14487] EXT4-fs: error: could not find journal device path [ 452.860692][T14487] lo speed is unknown, defaulting to 1000 [ 453.074869][T14530] serio: Serial port ptm0 [ 453.123575][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1806'. [ 453.167666][T14532] netlink: 'syz.7.1806': attribute type 1 has an invalid length. [ 453.229119][T14532] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1806'. [ 453.432075][T14543] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1809'. [ 454.482480][T14579] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 455.688321][ T31] kauditd_printk_skb: 55 callbacks suppressed [ 455.688342][ T31] audit: type=1326 audit(1766973026.598:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.5.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 455.787955][ T31] audit: type=1326 audit(1766973026.619:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.5.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 455.814109][ T31] audit: type=1326 audit(1766973026.640:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.5.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 455.873328][ T31] audit: type=1326 audit(1766973026.640:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.5.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 455.875027][T14611] bridge0: port 3(gretap0) entered blocking state [ 455.961337][ T31] audit: type=1326 audit(1766973026.640:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.5.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 456.021314][T14611] bridge0: port 3(gretap0) entered disabled state [ 456.037848][T14611] gretap0: entered allmulticast mode [ 456.081872][ T31] audit: type=1326 audit(1766973026.640:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.5.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 456.126079][T14611] gretap0: entered promiscuous mode [ 456.162146][ T31] audit: type=1326 audit(1766973026.640:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.5.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 456.172342][T14611] bridge0: port 3(gretap0) entered blocking state [ 456.191195][T14611] bridge0: port 3(gretap0) entered forwarding state [ 456.272249][ T31] audit: type=1326 audit(1766973026.640:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.5.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 456.329230][T14626] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 456.392494][ T31] audit: type=1326 audit(1766973026.640:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.5.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 456.420885][T14626] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 456.494268][T14626] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 456.571007][ T31] audit: type=1326 audit(1766973026.640:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.5.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 456.841682][T14608] lo speed is unknown, defaulting to 1000 [ 457.947363][T14704] tipc: Started in network mode [ 458.128969][T14704] tipc: Node identity c684b03b1ed3, cluster identity 4711 [ 458.700540][T14704] tipc: Enabled bearer , priority 0 [ 459.105878][T14706] syzkaller0: entered promiscuous mode [ 459.150112][T14706] syzkaller0: entered allmulticast mode [ 459.185441][T14706] tipc: Resetting bearer [ 459.707045][T14757] loop2: detected capacity change from 0 to 512 [ 459.735328][T14758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1859'. [ 459.866039][T14757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 459.899751][T14692] tipc: Resetting bearer [ 459.922096][T14757] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.152661][T14743] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 460.159208][T14743] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 460.264499][T14743] vhci_hcd vhci_hcd.0: Device attached [ 460.426296][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 460.512691][ T24] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 460.896434][T14770] vhci_hcd: connection reset by peer [ 460.902149][ T37] vhci_hcd vhci_hcd.2: stop threads [ 460.907349][ T37] vhci_hcd vhci_hcd.2: release socket [ 460.922552][ T37] vhci_hcd vhci_hcd.2: disconnect device [ 462.383295][T14692] tipc: Disabling bearer [ 462.412603][ T6007] tipc: Node number set to 3629625403 [ 464.779762][T14735] lo speed is unknown, defaulting to 1000 [ 465.239785][T14860] loop8: detected capacity change from 0 to 128 [ 465.257288][T14875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.427134][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 465.510940][T14860] netlink: 'syz.8.1876': attribute type 10 has an invalid length. [ 465.559098][T14860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.638691][T14860] team0: Port device bond0 added [ 465.664873][T14920] loop5: detected capacity change from 0 to 128 [ 465.730579][T14920] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 465.780049][T14920] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.935502][ T31] kauditd_printk_skb: 44 callbacks suppressed [ 465.935523][ T31] audit: type=1326 audit(1766973037.349:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 466.055522][ T31] audit: type=1326 audit(1766973037.391:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 466.159708][ T31] audit: type=1326 audit(1766973037.391:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa84c38f783 code=0x7ffc0000 [ 466.259169][ T31] audit: type=1326 audit(1766973037.391:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa84c38f783 code=0x7ffc0000 [ 466.297170][ T31] audit: type=1326 audit(1766973037.391:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 466.319844][ T31] audit: type=1326 audit(1766973037.391:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 466.355119][ T31] audit: type=1326 audit(1766973037.391:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 466.441563][ T31] audit: type=1326 audit(1766973037.391:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 466.591199][ T31] audit: type=1326 audit(1766973037.580:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 467.103481][ T5823] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.500061][ T31] audit: type=1326 audit(1766973037.580:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 469.434664][T15003] syzkaller0: entered promiscuous mode [ 469.469216][T15003] syzkaller0: entered allmulticast mode [ 470.061730][T14991] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 471.108216][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 472.008068][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1902'. [ 472.042258][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1902'. [ 472.058107][T15045] netlink: 'syz.7.1903': attribute type 10 has an invalid length. [ 480.065913][T15118] netlink: 'syz.1.1923': attribute type 1 has an invalid length. [ 480.080442][T15122] syzkaller0: entered promiscuous mode [ 480.112206][T15122] syzkaller0: entered allmulticast mode [ 481.097846][T15160] loop6: detected capacity change from 0 to 256 [ 483.285507][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 483.351847][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1949'. [ 483.352406][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 483.367226][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 485.916912][T15280] loop7: detected capacity change from 0 to 1024 [ 485.924406][T15284] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1966'. [ 485.967484][T15280] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 486.135522][T15280] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.497407][T10171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.769996][T15329] loop7: detected capacity change from 0 to 512 [ 487.152627][T15329] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 487.454687][T15329] EXT4-fs (loop7): 1 truncate cleaned up [ 487.571105][T15329] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.965094][T15347] netlink: 'syz.5.1977': attribute type 13 has an invalid length. [ 488.703196][T10171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.794283][T15362] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1982'. [ 491.423409][T15438] loop8: detected capacity change from 0 to 1024 [ 491.473586][T15441] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1998'. [ 491.490546][T15438] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 491.630881][T15438] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.859103][T13423] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.084793][T15480] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2011'. [ 492.095641][T15480] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2011'. [ 494.115824][T15504] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2016'. [ 495.044744][T15525] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2020'. [ 495.121896][T15530] loop5: detected capacity change from 0 to 1024 [ 495.170461][T15530] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 495.266485][T15530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.481764][T15549] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2025'. [ 495.503804][T15534] syzkaller0: entered promiscuous mode [ 495.520773][T15534] syzkaller0: entered allmulticast mode [ 495.532281][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.564009][T15549] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2025'. [ 498.215653][T15590] loop2: detected capacity change from 0 to 512 [ 498.279696][T15590] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 498.343199][T15590] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.2035: inode has both inline data and extents flags [ 498.385237][T15590] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2035: couldn't read orphan inode 17 (err -117) [ 498.468889][T15590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.670633][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.171335][T15616] loop2: detected capacity change from 0 to 1024 [ 499.210501][T15616] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 499.271886][T15616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.419516][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.428640][T15655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2048'. [ 503.393412][T15603] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2037'. [ 503.649544][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2051'. [ 504.531344][T15670] hsr_slave_1 (unregistering): left promiscuous mode [ 506.263240][T15721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.338370][T15758] loop2: detected capacity change from 0 to 128 [ 506.537782][T15725] netlink: 'syz.2.2062': attribute type 10 has an invalid length. [ 506.597594][T15725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.608755][T15769] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2066'. [ 506.723346][T15725] team0: Port device bond0 added [ 506.749858][T15769] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2066'. [ 508.158742][T15787] loop5: detected capacity change from 0 to 128 [ 508.262948][T15788] loop2: detected capacity change from 0 to 1024 [ 508.597377][T15773] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 508.603930][T15773] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 508.620757][T15788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.746166][T15773] vhci_hcd vhci_hcd.0: Device attached [ 509.115838][ T1563] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 509.135415][T15811] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2073'. [ 509.218439][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.243811][ T1563] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 509.269826][T15801] vhci_hcd: connection closed [ 509.270880][ T6807] vhci_hcd vhci_hcd.1: stop threads [ 509.320777][ T6807] vhci_hcd vhci_hcd.1: release socket [ 509.393977][ T6807] vhci_hcd vhci_hcd.1: disconnect device [ 544.214516][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 544.220923][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.046037][ T1563] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 610.724466][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 610.731437][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6495/1:b..l P7449/1:b..l P15673/1:b..l P6427/1:b..l [ 610.743391][ C0] rcu: (detected by 0, t=10502 jiffies, g=55493, q=1208 ncpus=2) [ 610.751194][ C0] task:kworker/u8:20 state:R running task stack:23904 pid:6427 tgid:6427 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 610.765621][ C0] Workqueue: iou_exit io_ring_exit_work [ 610.771195][ C0] Call Trace: [ 610.774469][ C0] [ 610.777402][ C0] __schedule+0x149b/0x4fd0 [ 610.781930][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.787578][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.793231][ C0] ? __pfx___schedule+0x10/0x10 [ 610.798093][ C0] ? irqentry_exit+0x5dd/0x660 [ 610.802868][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.808508][ C0] ? irqentry_exit+0x5dd/0x660 [ 610.813275][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.818924][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 610.824047][ C0] preempt_schedule_notrace+0x57/0x90 [ 610.829427][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 610.835323][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 610.841496][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 610.846620][ C0] rcu_is_watching+0x7f/0xb0 [ 610.851217][ C0] ? ret_from_fork+0x510/0xa50 [ 610.856240][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 610.861356][ C0] unwind_next_frame+0xd4/0x23d0 [ 610.866312][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 610.871435][ C0] ? kthread+0x711/0x8a0 [ 610.875691][ C0] ? ret_from_fork+0x510/0xa50 [ 610.880456][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 610.886628][ C0] arch_stack_walk+0x11c/0x150 [ 610.891407][ C0] ? ret_from_fork+0x510/0xa50 [ 610.896437][ C0] stack_trace_save+0x9c/0xe0 [ 610.901131][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 610.906529][ C0] kasan_save_stack+0x3e/0x60 [ 610.911208][ C0] ? kasan_save_stack+0x3e/0x60 [ 610.916058][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 610.921441][ C0] ? call_rcu+0xee/0x890 [ 610.925691][ C0] ? kmem_cache_free+0x488/0x620 [ 610.930631][ C0] ? __io_req_caches_free+0x1c1/0x270 [ 610.936011][ C0] ? io_req_caches_free+0x21/0x60 [ 610.941042][ C0] ? io_ring_exit_work+0x3b3/0x8d0 [ 610.946160][ C0] ? process_scheduled_works+0xad1/0x1770 [ 610.951882][ C0] ? worker_thread+0x8a0/0xda0 [ 610.956649][ C0] ? kthread+0x711/0x8a0 [ 610.960900][ C0] ? ret_from_fork+0x510/0xa50 [ 610.965715][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 610.970928][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 610.977090][ C0] call_rcu+0xee/0x890 [ 610.981171][ C0] ? __phys_addr+0xd3/0x180 [ 610.985780][ C0] kmem_cache_free+0x488/0x620 [ 610.990549][ C0] ? __io_req_caches_free+0x1c1/0x270 [ 610.995937][ C0] __io_req_caches_free+0x1c1/0x270 [ 611.001153][ C0] io_req_caches_free+0x21/0x60 [ 611.006016][ C0] io_ring_exit_work+0x3b3/0x8d0 [ 611.010981][ C0] ? __pfx_io_ring_exit_work+0x10/0x10 [ 611.016464][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.022110][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 611.027916][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 611.033638][ C0] process_scheduled_works+0xad1/0x1770 [ 611.039221][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 611.045202][ C0] ? do_raw_spin_lock+0x121/0x290 [ 611.050245][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.055892][ C0] worker_thread+0x8a0/0xda0 [ 611.060491][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.066136][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.071779][ C0] ? __kthread_parkme+0x7b/0x200 [ 611.076738][ C0] kthread+0x711/0x8a0 [ 611.080825][ C0] ? __pfx_worker_thread+0x10/0x10 [ 611.085947][ C0] ? __pfx_kthread+0x10/0x10 [ 611.090544][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.096189][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.101577][ C0] ? __pfx_kthread+0x10/0x10 [ 611.106178][ C0] ret_from_fork+0x510/0xa50 [ 611.110779][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 611.115892][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.121537][ C0] ? __switch_to+0xc9e/0x1480 [ 611.126245][ C0] ? __pfx_kthread+0x10/0x10 [ 611.130850][ C0] ret_from_fork_asm+0x1a/0x30 [ 611.135647][ C0] [ 611.138661][ C0] task:syz.8.2052 state:R running task stack:26040 pid:15673 tgid:15672 ppid:13423 task_flags:0x400140 flags:0x00080003 [ 611.152173][ C0] Call Trace: [ 611.155446][ C0] [ 611.158378][ C0] __schedule+0x149b/0x4fd0 [ 611.162908][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 611.168127][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.173770][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 611.178989][ C0] ? kernel_text_address+0xa5/0xe0 [ 611.184116][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.189764][ C0] ? __kernel_text_address+0xd/0x40 [ 611.194971][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.200615][ C0] ? __pfx___schedule+0x10/0x10 [ 611.205482][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.211121][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 611.216076][ C0] preempt_schedule_irq+0x4d/0xa0 [ 611.221102][ C0] irqentry_exit+0x5d8/0x660 [ 611.225698][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.231341][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 611.237324][ C0] RIP: 0010:lock_acquire+0x222/0x340 [ 611.242616][ C0] Code: ff ff ff e8 00 a1 bb 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0a 00 e2 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 da 50 72 ff cc 48 8d 3d 37 76 e7 [ 611.262222][ C0] RSP: 0018:ffffc9000e5af8d0 EFLAGS: 00000282 [ 611.268294][ C0] RAX: b8a5d33f58dbba00 RBX: 0000000000000000 RCX: 0000000000000046 [ 611.276265][ C0] RDX: 00000000ceb914c6 RSI: ffffffff8d975e0c RDI: ffffffff8bc083e0 [ 611.284235][ C0] RBP: ffffffff8230e68e R08: ffffffff8230e68e R09: ffffffff8df41aa0 [ 611.292206][ C0] R10: 000000000000000c R11: ffffffff81acf3d0 R12: 0000000000000002 [ 611.300174][ C0] R13: ffffffff8df41aa0 R14: 0000000000000000 R15: 0000000000000246 [ 611.308148][ C0] ? __update_page_owner_free_handle+0x2e/0x470 [ 611.314399][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 611.320571][ C0] ? __update_page_owner_free_handle+0x2e/0x470 [ 611.326836][ C0] ? __update_page_owner_free_handle+0x2e/0x470 [ 611.333083][ C0] __update_page_owner_free_handle+0x4b/0x470 [ 611.339156][ C0] ? __update_page_owner_free_handle+0x2e/0x470 [ 611.345403][ C0] ? page_ext_put+0x97/0xc0 [ 611.349913][ C0] __reset_page_owner+0x85/0x1f0 [ 611.354863][ C0] __free_frozen_pages+0xbc8/0xd30 [ 611.359990][ C0] vfree+0x25a/0x400 [ 611.363907][ C0] xskq_destroy+0x40/0x60 [ 611.368249][ C0] xsk_release+0x42c/0x660 [ 611.372682][ C0] sock_close+0xc3/0x240 [ 611.376940][ C0] ? __pfx_sock_close+0x10/0x10 [ 611.381802][ C0] __fput+0x44c/0xa70 [ 611.385812][ C0] task_work_run+0x1d4/0x260 [ 611.390420][ C0] ? __pfx_task_work_run+0x10/0x10 [ 611.395556][ C0] get_signal+0x11ec/0x1340 [ 611.400075][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.405725][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.411374][ C0] ? kick_process+0xeb/0x160 [ 611.415986][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 611.421547][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 611.426410][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 611.432601][ C0] exit_to_user_mode_loop+0x87/0x4e0 [ 611.437896][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.443534][ C0] ? rcu_is_watching+0x15/0xb0 [ 611.448310][ C0] do_syscall_64+0x2b7/0xf80 [ 611.452906][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.458974][ C0] ? trace_irq_disable+0x37/0x100 [ 611.464022][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.469918][ C0] RIP: 0033:0x7f88f8b8f749 [ 611.474418][ C0] RSP: 002b:00007f88f9a53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 611.482838][ C0] RAX: 0000000000000000 RBX: 00007f88f8de5fa0 RCX: 00007f88f8b8f749 [ 611.490809][ C0] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 611.498783][ C0] RBP: 00007f88f8c13f91 R08: 0000000000000004 R09: 0000000000000000 [ 611.506762][ C0] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 611.514732][ C0] R13: 00007f88f8de6038 R14: 00007f88f8de5fa0 R15: 00007ffcd3c6ab08 [ 611.522728][ C0] [ 611.525747][ C0] task:kworker/u8:22 state:R running task stack:22264 pid:7449 tgid:7449 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 611.539345][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 611.547176][ C0] Call Trace: [ 611.550449][ C0] [ 611.553380][ C0] __schedule+0x149b/0x4fd0 [ 611.557910][ C0] ? batadv_tvlv_container_ogm_append+0x1d4/0x4f0 [ 611.564341][ C0] ? process_scheduled_works+0xad1/0x1770 [ 611.570063][ C0] ? worker_thread+0x8a0/0xda0 [ 611.574833][ C0] ? kthread+0x711/0x8a0 [ 611.579107][ C0] ? __pfx___schedule+0x10/0x10 [ 611.583978][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.589627][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 611.594579][ C0] preempt_schedule_irq+0x4d/0xa0 [ 611.599616][ C0] irqentry_exit+0x5d8/0x660 [ 611.604207][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.609864][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 611.615856][ C0] RIP: 0010:lock_acquire+0x222/0x340 [ 611.621144][ C0] Code: ff ff ff e8 00 a1 bb 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0a 00 e2 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 da 50 72 ff cc 48 8d 3d 37 76 e7 [ 611.640757][ C0] RSP: 0018:ffffc90004ecf840 EFLAGS: 00000282 [ 611.646832][ C0] RAX: 873de85ab6918100 RBX: 0000000000000000 RCX: 0000000000000046 [ 611.654807][ C0] RDX: 0000000027942e1b RSI: ffffffff8d975e0c RDI: ffffffff8bc083e0 [ 611.662783][ C0] RBP: ffffffff8b226de0 R08: ffffffff8b226de0 R09: ffffffff8df41aa0 [ 611.670756][ C0] R10: dffffc0000000000 R11: ffffed100ef35117 R12: 0000000000000002 [ 611.678728][ C0] R13: ffffffff8df41aa0 R14: 0000000000000000 R15: 0000000000000246 [ 611.686704][ C0] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 611.692274][ C0] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 611.697857][ C0] batadv_iv_ogm_schedule+0x454/0xf00 [ 611.703249][ C0] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 611.708828][ C0] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 611.714391][ C0] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 611.720302][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.725944][ C0] ? batadv_send_skb_packet+0x426/0x690 [ 611.731506][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 611.738559][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 611.744290][ C0] process_scheduled_works+0xad1/0x1770 [ 611.749871][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 611.755858][ C0] ? do_raw_spin_lock+0x121/0x290 [ 611.760907][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.766556][ C0] worker_thread+0x8a0/0xda0 [ 611.771159][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.776806][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.782445][ C0] ? __kthread_parkme+0x7b/0x200 [ 611.787400][ C0] kthread+0x711/0x8a0 [ 611.791482][ C0] ? __pfx_worker_thread+0x10/0x10 [ 611.796596][ C0] ? __pfx_kthread+0x10/0x10 [ 611.801197][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.806842][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.812059][ C0] ? __pfx_kthread+0x10/0x10 [ 611.816662][ C0] ret_from_fork+0x510/0xa50 [ 611.821260][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 611.826370][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.832006][ C0] ? __switch_to+0xc9e/0x1480 [ 611.836704][ C0] ? __pfx_kthread+0x10/0x10 [ 611.841304][ C0] ret_from_fork_asm+0x1a/0x30 [ 611.846099][ C0] [ 611.849113][ C0] task:udevd state:R running task stack:23288 pid:6495 tgid:6495 ppid:5194 task_flags:0x400140 flags:0x00080000 [ 611.862627][ C0] Call Trace: [ 611.865905][ C0] [ 611.868838][ C0] __schedule+0x149b/0x4fd0 [ 611.873377][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.879029][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.884673][ C0] ? __pfx___schedule+0x10/0x10 [ 611.889542][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.895205][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.900842][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 611.906054][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 611.911430][ C0] preempt_schedule_common+0x83/0xd0 [ 611.916723][ C0] preempt_schedule_thunk+0x16/0x30 [ 611.921936][ C0] _raw_spin_unlock_irqrestore+0x74/0x80 [ 611.927587][ C0] __wake_up_common_lock+0x190/0x1f0 [ 611.932904][ C0] sock_def_readable+0x1eb/0x530 [ 611.937866][ C0] ? sock_def_readable+0xae/0x530 [ 611.942913][ C0] unix_dgram_sendmsg+0xdfb/0x1840 [ 611.948065][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 611.953623][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.959271][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.964914][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.970550][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.976194][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 611.981745][ C0] __sock_sendmsg+0x21c/0x270 [ 611.986441][ C0] sock_write_iter+0x279/0x360 [ 611.991219][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 611.996528][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.002166][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.007808][ C0] ? security_file_permission+0x75/0x290 [ 612.013456][ C0] vfs_write+0x5c9/0xb30 [ 612.017709][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 612.023008][ C0] ? __pfx_vfs_write+0x10/0x10 [ 612.027776][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 612.032992][ C0] ? __x64_sys_sendmsg+0x1b4/0x260 [ 612.038117][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.043763][ C0] ksys_write+0x145/0x250 [ 612.048101][ C0] ? __pfx_ksys_write+0x10/0x10 [ 612.052951][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.058610][ C0] do_syscall_64+0xec/0xf80 [ 612.063118][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.069195][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.075092][ C0] RIP: 0033:0x7f8a860a7407 [ 612.079510][ C0] RSP: 002b:00007fffbd463750 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 612.087934][ C0] RAX: ffffffffffffffda RBX: 00007f8a86742880 RCX: 00007f8a860a7407 [ 612.095913][ C0] RDX: 0000000000000000 RSI: 00007fffbd4637f7 RDI: 000000000000000a [ 612.103890][ C0] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000 [ 612.111863][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f8a867426e8 [ 612.119839][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00005619b1fcf830 [ 612.127839][ C0] [ 612.130861][ C0] rcu: rcu_preempt kthread starved for 4548 jiffies! g55493 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 612.141967][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 612.151932][ C0] rcu: RCU grace-period kthread stack dump: [ 612.157817][ C0] task:rcu_preempt state:R running task stack:27480 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 612.171335][ C0] Call Trace: [ 612.174614][ C0] [ 612.177551][ C0] __schedule+0x149b/0x4fd0 [ 612.182090][ C0] ? do_raw_spin_lock+0x121/0x290 [ 612.187146][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.192793][ C0] ? __pfx___schedule+0x10/0x10 [ 612.197672][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.203317][ C0] ? schedule+0x91/0x360 [ 612.207584][ C0] schedule+0x165/0x360 [ 612.211769][ C0] schedule_timeout+0x12b/0x270 [ 612.216641][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 612.222030][ C0] ? __pfx_process_timeout+0x10/0x10 [ 612.227333][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.232971][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 612.238794][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.244432][ C0] ? prepare_to_swait_event+0x341/0x380 [ 612.250000][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 612.254868][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.260511][ C0] ? rcu_gp_init+0x11dc/0x1650 [ 612.265288][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 612.271450][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 612.276740][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 612.281977][ C0] rcu_gp_kthread+0x99/0x390 [ 612.286578][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 612.291788][ C0] ? __kthread_parkme+0x7b/0x200 [ 612.296739][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.302377][ C0] ? __kthread_parkme+0x1a1/0x200 [ 612.307415][ C0] kthread+0x711/0x8a0 [ 612.311502][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 612.316706][ C0] ? __pfx_kthread+0x10/0x10 [ 612.321302][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.326947][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.332161][ C0] ? __pfx_kthread+0x10/0x10 [ 612.336764][ C0] ret_from_fork+0x510/0xa50 [ 612.341362][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 612.346472][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.352114][ C0] ? __switch_to+0xc9e/0x1480 [ 612.356811][ C0] ? __pfx_kthread+0x10/0x10 [ 612.361414][ C0] ret_from_fork_asm+0x1a/0x30 [ 612.366209][ C0] [ 612.369225][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 612.375543][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 612.384478][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.394529][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 612.400254][ C0] Code: 3e b4 b6 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 13 b4 b6 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 612.419864][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c2 [ 612.425940][ C0] RAX: 00000000010b1e05 RBX: ffffffff819713ee RCX: 0000000080000001 [ 612.433911][ C0] RDX: 0000000000000001 RSI: ffffffff8d791ef3 RDI: ffffffff8bc083e0 [ 612.441882][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 612.449858][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822170 [ 612.457832][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 612.465806][ C0] FS: 0000000000000000(0000) GS:ffff888125e21000(0000) knlGS:0000000000000000 [ 612.474738][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.481321][ C0] CR2: 00007f8a86766e80 CR3: 000000003b0df000 CR4: 0000000000350ef0 [ 612.489295][ C0] Call Trace: [ 612.492569][ C0] [ 612.495496][ C0] default_idle+0x13/0x20 [ 612.499836][ C0] default_idle_call+0x73/0xb0 [ 612.504615][ C0] do_idle+0x1be/0x4d0 [ 612.508688][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.514328][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 612.519538][ C0] ? __pfx_do_idle+0x10/0x10 [ 612.524144][ C0] cpu_startup_entry+0x44/0x60 [ 612.528917][ C0] rest_init+0x2de/0x300 [ 612.533170][ C0] start_kernel+0x381/0x3d0 [ 612.537691][ C0] x86_64_start_reservations+0x24/0x30 [ 612.543158][ C0] x86_64_start_kernel+0x143/0x1c0 [ 612.548278][ C0] common_startup_64+0x13e/0x147 [ 612.553243][ C0]