last executing test programs: 9.90344936s ago: executing program 1 (id=1385): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x18) io_setup(0x3, &(0x7f0000000340)) 8.187569772s ago: executing program 3 (id=1391): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x282, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9}, 0x18) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000180)={0x3, 0x8}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x384, &(0x7f0000000cc0)="$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") r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400f1f83eab030000790000", @ANYRES16=r7, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r8, @ANYBLOB="18002f800c00020000000000000000000800010024000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001580)='kmem_cache_free\x00', r5, 0x0, 0x3}, 0x18) close$binfmt(r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000006000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="200000000000000000000000000000640d8946000000000000000000"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f00000000c0), &(0x7f0000000080)=@udp}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x4012831, 0xffffffffffffffff, 0x81362000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nobh}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@data_err_abort}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 7.525076339s ago: executing program 0 (id=1396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x5) fchdir(r3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x1400037e) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0, 0x12a) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.276511873s ago: executing program 1 (id=1397): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x810, 0xffffffffffffffff, 0x8000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r6, 0x0, 0x0, 0x0, 0x64040011, 0x1}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000008000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x5d, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0xc2ddb5edb7ba9069, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 7.276131101s ago: executing program 0 (id=1399): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_ethernet(0x32, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2}}, 0x20) 7.097014743s ago: executing program 0 (id=1401): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x70, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x78a33dc7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb0000002000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c20000000000100007800a0011"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7, 0x0}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) syz_pidfd_open(r6, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000640)={{0x3, 0x1, 0x1000, 0x2, 0x4a}, 0x3, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x8, 0x2, 0x2, 0x1}) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', &(0x7f00000004c0), 0x6000) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) socket$inet6_tcp(0xa, 0x1, 0x0) 5.970247919s ago: executing program 3 (id=1403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 5.741130562s ago: executing program 1 (id=1405): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200040000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 4.873226761s ago: executing program 3 (id=1406): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000b40)="a028a5af023ba092ae45cff08a070c6ecd1c1df98cbfaf3bf819242a7239f7a95bcd132ea1301dafb35d0ce453ceb2efdfbcb24c58d1f00f9359590f81a602fa8ee341d40f008de9ea085d0ae4e67500effd8d7369f7cd8a0bd88de6c6f15b7a8bdd67491128a4184d213d6b3e3921fd120bac4f512eb6aa64fda499a0adeb6effd43362f256069bf2018e4e3d0a8ac4d0a69e67c8f6c0f0782d0fa6cc1208815f2ab501c2f3964f4858b4ea26301cd103b9fb8748fc63aceea0c0bcb5fe1138b7d7b80ea0ee6dfaaa5dea9b196bf757bc2c68a60921547ae09dbe6df0ad73fb831d3c5cb377ca1712dea9ff689337dbab5724ff4a56332c0d070a5bae05dd9f3fc52df34e2194ffa9d966e00cf678f3ca0265f6330d9a22d0cb760d37ac70c8635708a325372f8074ed9273d11939de0d5e8dc194f641640f78922f910f81e5970b4976a6fe20d35a859da7f4e2243bcd9d62be54fa1a1579c325b0d2f586035ba085e4a9fcf77323e0ea65a424d5b2bae069379d39e60c04889f635dcf61a36f1c4997c16843337e0f1d3ac530c477545124b98acbf5fc08559610836d043ebbc3f12c1f62cf58e0afd4899d0094f35765e649a333a21e49523dc979fcae50b3fc82942ff9d95c3cf700eb44b3899299969e5b021011b5e681f5425152360c4bf152d336b649afa69d00d8df0f0aef61b1c14fb32ca4eb6ee4a15460bd3d695fb088d1352f6e5a8efa1217142f860e7331d2077f389fb5e3ad28cdc9cb36a7c825f4c6488677e827b010f0609fd6756c4245be1ddf744444b280f8297c24ec679c3b519685b3e19f89bce12b52c2a11d77908e18f9e1b9cf0c96a4ee1827c463724c64f9f58dc85a48b4afb8df64541f7999", 0x273}], 0x1}}], 0x1, 0xa010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000020c0)="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", 0x4ce, 0x4000, 0x0, 0x0) 4.81233695s ago: executing program 1 (id=1408): execve(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) chroot(0x0) 4.812198215s ago: executing program 4 (id=1409): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfff9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xc, 0x6, 0x7ffc1ff8}]}) time(0x0) 4.690238676s ago: executing program 3 (id=1410): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)="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", 0x13b}], 0x1}}], 0x2, 0x2010) close(0x3) 4.568494625s ago: executing program 4 (id=1412): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 3.79482626s ago: executing program 3 (id=1414): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_open_dev$loop(0x0, 0x2, 0x2401) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 3.175992752s ago: executing program 4 (id=1415): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0xffffffff80000000, 0x0, 0x3) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8005) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2f, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x3c000001}, 0xc0c4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@allocspi={0x104, 0x16, 0x0, 0x70bd28, 0x25dfdbfd, {{{@in=@broadcast, @in=@multicast2, 0x4e21, 0xfff7, 0x4e24, 0x0, 0x8, 0x80, 0x20, 0x2f, r1, r8}, {@in=@remote, 0x4d5, 0x33}, @in=@private=0xa010102, {0x5, 0x8, 0x6, 0x2, 0x0, 0x101, 0xb8, 0x3}, {0x6, 0x5, 0x0, 0x9}, {0x1, 0x3, 0x3}, 0x70bd2d, 0x3507, 0xa, 0x3, 0x4, 0xd}, 0x2, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x81}}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x4004040) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r9}, 0x18) signalfd(r14, 0x0, 0x0) 2.606674639s ago: executing program 3 (id=1416): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@struct={0xc, 0x0, 0x0, 0x4, 0x1, 0x8}, @enum64={0xd, 0x4, 0x0, 0x13, 0x1, 0x4, [{0x7, 0x100}, {0xa, 0x2, 0xcfb}, {0x9, 0x800}, {0x6, 0x6, 0x81}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x5998}}, @float={0x4, 0x0, 0x0, 0x10, 0x8}, @func={0xf1, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x61]}}, &(0x7f0000000b00)=""/4086, 0x9f, 0xff6, 0x1, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x4, 0x4, 0x2, 0xe002, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @value=r0}, 0x50) creat(&(0x7f0000000840)='./mnt\x00', 0x12) r1 = getpgid(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) syz_open_dev$vcsu(&(0x7f00000007c0), 0xd, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x26, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) r5 = syz_pidfd_open(r1, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000dc0)=0x1c, 0x4) setns(r6, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x4) r10 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3180c01, &(0x7f00000002c0), 0x1, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r10, 0x40e8662e, &(0x7f0000000000)={0x9, 0x4000009, 0x768, 0x3, 0xffffffff, 0xa}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0), 0x2000000}, 0x20) 2.418373773s ago: executing program 1 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c5fc8d3e63588056401261b11905fabd4af", 0x2c}], 0x2) 2.088484079s ago: executing program 1 (id=1420): socket(0x2b, 0x80801, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 2.059870315s ago: executing program 2 (id=1421): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.880116261s ago: executing program 2 (id=1422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.721979588s ago: executing program 2 (id=1423): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000003c0)="c1090a000000000000001d1e", 0xc}], 0x1}, 0x0) 1.604470287s ago: executing program 4 (id=1424): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 1.568892602s ago: executing program 2 (id=1425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0, @ANYRES8, @ANYBLOB="b49f1b91e5f483ac463963cbbadc7f9ccea34862d8a18563dcd6eb65bacb78b23001ce61c6bf4829695eef134d32d893a73f3af452f50b437aebfb66bb70e9a691dd8646e18e09b720997aa05409ee2ce86ea5736a6e1208f037acdb8a16ca2b0b92f9527b5535535df21eee4ddcb71b10857410b119b375f8e4413c3a98bc637295b34d048239d65db0a467", @ANYBLOB="a2336ffeb6aafdfc4a9fc5eabbe3c693f930d95859a41db25f1c3ff30f11ee57d8e948e221b40e0d7022c73ac43e814c4dae68cf76fe1dfc1b9455b3302d3d825c76"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x7, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req={0x4, 0x3ff, 0x6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.516950074s ago: executing program 0 (id=1426): syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaadf000040000008004d0000480000000000069064ac1e0001ac1414118907a2ffffffff44100503edffffff000000000000000086060000000100000000000000", @ANYRES8, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000021000000070000001812000055136f662565b5ffde3287611652cc4cccd43fb081e7fdb123745b9780aa49597bd3", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x800000000000000}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xfffffe10}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r4, 0x0, 0x0, 0xffffffffffffffff}]) 1.428197888s ago: executing program 4 (id=1427): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x140}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) listen(r3, 0x0) accept4$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, 0x0, 0x80000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x0, 0x4000000, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 1.343462478s ago: executing program 2 (id=1428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0xc005}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x8890) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r3) creat(&(0x7f0000000200)='./file0\x00', 0x109) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) kexec_load(0x7, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x101, 0x3}], 0x3e0000) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0xb0}}, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.185870861s ago: executing program 2 (id=1429): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x194, 0x0, &(0x7f0000000780)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r3, 0x0) socket$netlink(0x10, 0x3, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$pid(0x3, 0x0, 0x2007) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r4, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) 498.843065ms ago: executing program 4 (id=1430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x7, 0x4, 0x1000, 0x9, {0xd, 0x2, 0x4, 0x4, 0x7, 0x401}, {0x4, 0x2, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3ff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x1, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95f, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0xffffffff, 0x800, 0x3ff, 0x8, 0xa, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0xfffffffc, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x7, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x200, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0xc, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2, 0x10000, 0xd, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x5, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x4, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f79, 0x7, 0x4, 0xf, 0x1, 0x2, 0x6, 0x400, 0x5, 0x80, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xffc, 0x8, 0x8c, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x8, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x3, 0xdb2, 0x0, 0xe00, 0x4, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x8, 0x1, 0x7f, 0x8, 0x6, 0x4, 0x4, 0x0, 0x803, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x7e, 0x4, 0x4, 0xfeffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x3, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x7, 0x3, 0x8, 0x1, 0xfffffffb, 0xb839, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0x0, 0x5, 0xf0, 0x42490, 0xd, 0x1, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x7, 0x4, 0xffffff95, 0x5, 0x0, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x0, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x7, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x5, 0x7, 0x0, 0x7fff, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0x7fff, 0xffffffff, 0x4, 0x3, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x1, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) 380.676662ms ago: executing program 0 (id=1431): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r1, 0x1}, &(0x7f0000000540)=0x8) 0s ago: executing program 0 (id=1432): r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x5) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14400000", @ANYRES16=r7, @ANYBLOB="05a301000000000000000d000000"], 0x14}}, 0x10000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) kernel console output (not intermixed with test programs): 6.378769][ T5836] loop4: p5 start 4294970168 is beyond EOD, truncated [ 116.432763][ T6297] loop4: p1 p2 p3 < p5 p6 > [ 116.439326][ T6297] loop4: p2 size 16775168 extends beyond EOD, truncated [ 116.475222][ T6297] loop4: p5 start 4294970168 is beyond EOD, truncated [ 117.850157][ T6337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.137'. [ 118.789560][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 118.822648][ T6365] smc: net device bond0 applied user defined pnetid SYZ0 [ 118.832140][ T5829] udevd[5829]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 118.833440][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 118.857994][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 118.891727][ T6364] 9p: Bad value for 'rfdno' [ 118.932985][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 119.042357][ T5829] udevd[5829]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 119.044692][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 119.065795][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 119.262127][ T6380] loop2: detected capacity change from 0 to 164 [ 119.751028][ T6395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.160'. [ 120.159386][ T6407] netlink: 'syz.3.171': attribute type 29 has an invalid length. [ 120.180672][ T6407] netlink: 596 bytes leftover after parsing attributes in process `syz.3.171'. [ 120.562356][ T6410] loop2: detected capacity change from 0 to 8192 [ 120.600542][ T6410] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.761478][ T6419] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 120.811125][ T6419] team0: Device ipvlan2 is already an upper device of the team interface [ 121.017294][ T6425] loop2: detected capacity change from 0 to 512 [ 121.051969][ T6425] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.081985][ T6425] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.280341][ T6425] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.433067][ T6425] EXT4-fs (loop2): 1 truncate cleaned up [ 121.461574][ T30] audit: type=1326 audit(1762892770.057:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 121.509707][ T6425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.645249][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 121.657342][ T30] audit: type=1326 audit(1762892770.057:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 121.722736][ T30] audit: type=1326 audit(1762892770.117:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 121.822757][ T30] audit: type=1326 audit(1762892770.117:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 121.888240][ T30] audit: type=1326 audit(1762892770.147:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 121.944082][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.948283][ T30] audit: type=1326 audit(1762892770.147:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 122.082780][ T6447] loop1: detected capacity change from 0 to 1024 [ 122.106531][ T6447] EXT4-fs: Ignoring removed orlov option [ 122.184011][ T6451] veth2: entered promiscuous mode [ 122.191761][ T6447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.220126][ T6451] veth2: entered allmulticast mode [ 122.245510][ T6454] loop3: detected capacity change from 0 to 512 [ 122.344504][ T6454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.481156][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.527590][ T6463] syz.4.184 uses obsolete (PF_INET,SOCK_PACKET) [ 123.067296][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.250251][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.190'. [ 123.601294][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 123.638509][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 123.652427][ T6480] netlink: 'syz.0.196': attribute type 29 has an invalid length. [ 123.681066][ T6478] netlink: 'syz.1.195': attribute type 1 has an invalid length. [ 123.685189][ T6480] netlink: 'syz.0.196': attribute type 29 has an invalid length. [ 123.698064][ T6478] netlink: 224 bytes leftover after parsing attributes in process `syz.1.195'. [ 123.711711][ T6480] netlink: 500 bytes leftover after parsing attributes in process `syz.0.196'. [ 123.741295][ T6480] unsupported nla_type 58 [ 123.894311][ T30] audit: type=1326 audit(1762892772.488:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 124.061543][ T30] audit: type=1326 audit(1762892772.538:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 124.263195][ T30] audit: type=1326 audit(1762892772.548:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 124.322872][ T30] audit: type=1326 audit(1762892772.548:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 124.431600][ T6495] netlink: 204 bytes leftover after parsing attributes in process `syz.1.202'. [ 124.602402][ T6505] IPv6: Can't replace route, no match found [ 124.678370][ T6500] team0 (unregistering): Port device team_slave_0 removed [ 124.694253][ T6500] team0 (unregistering): Port device team_slave_1 removed [ 125.143296][ T6517] loop2: detected capacity change from 0 to 8192 [ 125.432301][ T6528] capability: warning: `syz.4.216' uses 32-bit capabilities (legacy support in use) [ 125.536275][ T6532] netlink: 204 bytes leftover after parsing attributes in process `syz.3.218'. [ 125.573784][ T6533] hub 2-0:1.0: USB hub found [ 125.589986][ T6533] hub 2-0:1.0: 1 port detected [ 125.921893][ T6537] team0 (unregistering): Port device team_slave_0 removed [ 126.033095][ T6537] team0 (unregistering): Port device team_slave_1 removed [ 126.891081][ T6562] loop2: detected capacity change from 0 to 512 [ 126.924834][ T6562] ext4: Unknown parameter 'obj_role' [ 126.981124][ T6562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.230'. [ 127.423587][ T6574] loop2: detected capacity change from 0 to 128 [ 128.295634][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 128.295652][ T30] audit: type=1326 audit(1762892776.888:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 128.359236][ T30] audit: type=1326 audit(1762892776.918:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 128.386710][ T30] audit: type=1326 audit(1762892776.928:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 128.410366][ T30] audit: type=1326 audit(1762892776.928:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 128.437191][ T30] audit: type=1326 audit(1762892776.928:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 128.460686][ T30] audit: type=1326 audit(1762892776.928:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 128.483357][ T30] audit: type=1326 audit(1762892776.928:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 128.515127][ T30] audit: type=1326 audit(1762892776.928:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 128.655722][ T30] audit: type=1326 audit(1762892776.928:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 128.717380][ T30] audit: type=1326 audit(1762892776.928:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 128.825958][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 128.863165][ T6606] loop1: detected capacity change from 0 to 164 [ 128.912030][ T6606] Unable to read rock-ridge attributes [ 129.031372][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 129.041309][ T6612] netlink: 248 bytes leftover after parsing attributes in process `syz.3.253'. [ 131.606024][ T6646] futex_wake_op: syz.4.265 tries to shift op by -1; fix this program [ 132.518368][ T6681] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.543021][ T6681] loop4: detected capacity change from 0 to 512 [ 132.557048][ T6681] EXT4-fs: Ignoring removed nobh option [ 132.599400][ T6681] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 132.657834][ T6681] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.680105][ T6687] tipc: Enabling of bearer rejected, failed to enable media [ 132.691562][ T6681] EXT4-fs error (device loop4): ext4_do_update_inode:5636: inode #3: comm syz.4.277: corrupted inode contents [ 132.744042][ T6681] EXT4-fs (loop4): Remounting filesystem read-only [ 132.761318][ T6681] EXT4-fs (loop4): 1 truncate cleaned up [ 132.775930][ T6681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.814004][ T6681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.852495][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.264288][ T6710] loop3: detected capacity change from 0 to 512 [ 133.305616][ T6710] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 133.364411][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 133.418191][ T6710] EXT4-fs (loop3): orphan cleanup on readonly fs [ 133.432033][ T6710] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 133.447725][ T6710] EXT4-fs error (device loop3): ext4_do_update_inode:5636: inode #11: comm syz.3.286: corrupted inode contents [ 133.474512][ T6710] EXT4-fs error (device loop3): ext4_dirty_inode:6521: inode #11: comm syz.3.286: mark_inode_dirty error [ 133.489401][ T6710] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.286: invalid indirect mapped block 327680 (level 0) [ 133.511059][ T6710] EXT4-fs error (device loop3): ext4_do_update_inode:5636: inode #11: comm syz.3.286: corrupted inode contents [ 133.525453][ T6710] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 133.540682][ T6710] EXT4-fs error (device loop3): ext4_do_update_inode:5636: inode #11: comm syz.3.286: corrupted inode contents [ 133.565586][ T6710] EXT4-fs error (device loop3): ext4_truncate:4641: inode #11: comm syz.3.286: mark_inode_dirty error [ 133.578541][ T6710] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 133.592235][ T6710] EXT4-fs (loop3): 1 truncate cleaned up [ 133.609782][ T6710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 134.027113][ T6702] netlink: 'syz.1.284': attribute type 1 has an invalid length. [ 134.047453][ T6702] netlink: 224 bytes leftover after parsing attributes in process `syz.1.284'. [ 134.060787][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.236892][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 135.263232][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 136.519011][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'. [ 136.878122][ T6774] IPv6: Can't replace route, no match found [ 136.978746][ T6776] loop2: detected capacity change from 0 to 1024 [ 137.036809][ T6776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.090415][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 137.090434][ T30] audit: type=1800 audit(1762892785.689:896): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.311" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 137.384455][ T30] audit: type=1326 audit(1762892785.979:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 137.545735][ T30] audit: type=1326 audit(1762892785.979:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 137.585352][ T6776] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.311: Allocating blocks 497-513 which overlap fs metadata [ 137.602501][ T30] audit: type=1326 audit(1762892786.069:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 137.626112][ T30] audit: type=1326 audit(1762892786.069:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 137.649844][ T30] audit: type=1326 audit(1762892786.069:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 137.672452][ T30] audit: type=1326 audit(1762892786.069:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 137.732470][ T30] audit: type=1326 audit(1762892786.069:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 137.808962][ T30] audit: type=1326 audit(1762892786.069:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 137.860272][ T6775] EXT4-fs (loop2): pa ffff88806e23c658: logic 32, phys. 161, len 22 [ 137.868543][ T6775] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 137.881361][ T30] audit: type=1326 audit(1762892786.069:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 138.718078][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.869791][ T6812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.320'. [ 142.826021][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 142.843681][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 142.926384][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 142.944658][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 142.980666][ T6858] netlink: 'syz.4.336': attribute type 29 has an invalid length. [ 142.996091][ T6858] netlink: 'syz.4.336': attribute type 29 has an invalid length. [ 143.054727][ T6862] netlink: 204 bytes leftover after parsing attributes in process `syz.0.338'. [ 143.154942][ T6867] loop2: detected capacity change from 0 to 1024 [ 143.172971][ T6867] EXT4-fs: Ignoring removed orlov option [ 143.196611][ T6867] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 143.239526][ T6867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.454484][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.454535][ T6875] loop4: detected capacity change from 0 to 2048 [ 143.546522][ T6875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.562480][ T6860] futex_wake_op: syz.3.337 tries to shift op by -1; fix this program [ 143.636084][ T6875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.643705][ T6875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.651969][ T5194] udevd[5194]: worker [5836] terminated by signal 33 (Unknown signal 33) [ 143.652022][ T5194] udevd[5194]: worker [5836] failed while handling '/devices/virtual/block/loop4' [ 143.722233][ T6875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.756949][ T6875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.031203][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.140910][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 144.233975][ T6901] veth1_to_bridge: entered allmulticast mode [ 144.255818][ T6905] netlink: 'syz.4.351': attribute type 29 has an invalid length. [ 144.264674][ T6905] netlink: 'syz.4.351': attribute type 29 has an invalid length. [ 144.379139][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.418314][ T6897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.787579][ T5194] udevd[5194]: worker [5844] terminated by signal 33 (Unknown signal 33) [ 144.806557][ T5194] udevd[5194]: worker [5844] failed while handling '/devices/virtual/block/loop4' [ 144.941787][ T6925] loop4: detected capacity change from 0 to 164 [ 144.981779][ T6925] rock: directory entry would overflow storage [ 145.006911][ T6925] rock: sig=0x66, size=4, remaining=3 [ 145.721418][ T6930] futex_wake_op: syz.1.362 tries to shift op by -1; fix this program [ 145.781354][ T6943] netlink: 'syz.3.365': attribute type 29 has an invalid length. [ 145.790402][ T6943] netlink: 'syz.3.365': attribute type 29 has an invalid length. [ 145.954119][ T6948] netlink: 128 bytes leftover after parsing attributes in process `syz.3.368'. [ 146.256951][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 146.256968][ T30] audit: type=1326 audit(1762892794.860:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 146.355997][ T30] audit: type=1326 audit(1762892794.930:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 146.378770][ T30] audit: type=1326 audit(1762892794.930:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 146.404371][ T6959] loop4: detected capacity change from 0 to 2048 [ 146.460338][ T6959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.479239][ T30] audit: type=1326 audit(1762892794.930:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 146.509891][ T30] audit: type=1326 audit(1762892794.930:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 146.533644][ T30] audit: type=1326 audit(1762892794.930:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 146.557471][ T30] audit: type=1326 audit(1762892794.930:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 146.581232][ T30] audit: type=1326 audit(1762892794.940:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 146.604008][ T30] audit: type=1326 audit(1762892794.940:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 146.669601][ T30] audit: type=1326 audit(1762892794.940:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 146.736052][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.762845][ T6964] loop1: detected capacity change from 0 to 1024 [ 146.852267][ T6964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.635145][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.022876][ T6985] netlink: 'syz.0.378': attribute type 29 has an invalid length. [ 148.044621][ T6985] netlink: 'syz.0.378': attribute type 29 has an invalid length. [ 148.213505][ T6987] IPv6: Can't replace route, no match found [ 148.710125][ T6983] futex_wake_op: syz.1.380 tries to shift op by -1; fix this program [ 149.088152][ T7003] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 149.138021][ T7005] netlink: 204 bytes leftover after parsing attributes in process `syz.2.387'. [ 149.369695][ T7007] netlink: 'syz.1.388': attribute type 4 has an invalid length. [ 149.383237][ T7007] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.388'. [ 149.430318][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.546046][ T7014] netlink: 'syz.1.391': attribute type 29 has an invalid length. [ 149.561895][ T7014] netlink: 'syz.1.391': attribute type 29 has an invalid length. [ 149.572883][ T7014] netlink: 76 bytes leftover after parsing attributes in process `syz.1.391'. [ 150.002818][ T7020] IPv6: Can't replace route, no match found [ 150.227018][ T7024] loop1: detected capacity change from 0 to 512 [ 150.298347][ T7024] EXT4-fs warning (device loop1): ext4_enable_quotas:7181: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 150.329254][ T7024] EXT4-fs (loop1): mount failed [ 150.471291][ T7031] loop2: detected capacity change from 0 to 512 [ 150.497423][ T7031] EXT4-fs: Ignoring removed nobh option [ 150.546953][ T7031] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 150.567578][ T7031] EXT4-fs (loop2): orphan cleanup on readonly fs [ 150.603685][ T7031] EXT4-fs error (device loop2): ext4_do_update_inode:5636: inode #3: comm syz.2.397: corrupted inode contents [ 150.617820][ T7037] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 150.645339][ T7031] EXT4-fs (loop2): Remounting filesystem read-only [ 150.695450][ T7031] EXT4-fs (loop2): 1 truncate cleaned up [ 150.768731][ T7031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.927629][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.168780][ T7036] futex_wake_op: syz.3.398 tries to shift op by -1; fix this program [ 151.250196][ T7047] netlink: 'syz.2.402': attribute type 29 has an invalid length. [ 151.275810][ T7047] netlink: 'syz.2.402': attribute type 29 has an invalid length. [ 151.305964][ T7047] netlink: 76 bytes leftover after parsing attributes in process `syz.2.402'. [ 151.777845][ T7058] loop2: detected capacity change from 0 to 128 [ 151.818406][ T7058] FAT-fs (loop2): Directory bread(block 414) failed [ 151.904619][ T7058] FAT-fs (loop2): Directory bread(block 415) failed [ 151.941568][ T7058] FAT-fs (loop2): Directory bread(block 416) failed [ 152.002631][ T7058] FAT-fs (loop2): Directory bread(block 417) failed [ 152.089737][ T7058] FAT-fs (loop2): Directory bread(block 418) failed [ 152.148701][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 152.160908][ T7058] FAT-fs (loop2): Directory bread(block 419) failed [ 152.180062][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 152.206142][ T7064] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 152.214498][ T7064] netlink: 224 bytes leftover after parsing attributes in process `syz.3.408'. [ 152.248176][ T7058] FAT-fs (loop2): Directory bread(block 420) failed [ 152.296516][ T7058] FAT-fs (loop2): Directory bread(block 421) failed [ 152.418993][ T7070] loop3: detected capacity change from 0 to 2048 [ 152.706795][ T7070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.787297][ T5827] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 152.897103][ T5827] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 152.942934][ T7074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.412'. [ 153.038242][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.205516][ T7078] loop2: detected capacity change from 0 to 512 [ 153.286828][ T7078] EXT4-fs (loop2): orphan cleanup on readonly fs [ 153.294077][ T7078] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.414: bad orphan inode 13 [ 153.380579][ T7078] ext4_test_bit(bit=12, block=18) = 1 [ 153.404472][ T7078] is_bad_inode(inode)=0 [ 153.408713][ T7078] NEXT_ORPHAN(inode)=2130706432 [ 153.413583][ T7078] max_ino=32 [ 153.471943][ T7078] i_nlink=1 [ 153.476999][ T7078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.539556][ T7078] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 153.618145][ T7078] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 153.721813][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.892961][ T7085] futex_wake_op: syz.3.416 tries to shift op by -1; fix this program [ 154.450318][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 154.460698][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 154.657524][ T7104] loop3: detected capacity change from 0 to 2048 [ 154.718694][ T7104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.808169][ T5827] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 154.825410][ T5827] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 154.895186][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.037628][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 155.262930][ T7116] loop3: detected capacity change from 0 to 512 [ 155.278147][ T7116] EXT4-fs: Ignoring removed nobh option [ 155.368040][ T7116] EXT4-fs error (device loop3): ext4_do_update_inode:5636: inode #3: comm syz.3.426: corrupted inode contents [ 155.415799][ T7116] EXT4-fs (loop3): Remounting filesystem read-only [ 155.441249][ T7116] __quota_error: 87 callbacks suppressed [ 155.441266][ T7116] Quota error (device loop3): write_blk: dquota write failed [ 155.477768][ T7116] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 155.500962][ T7122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.428'. [ 155.518665][ T7116] EXT4-fs (loop3): 1 truncate cleaned up [ 155.529630][ T7116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.571009][ T7116] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.702414][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.717804][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.045852][ T7136] loop2: detected capacity change from 0 to 128 [ 156.059237][ T7136] EXT4-fs: Ignoring removed nobh option [ 156.098228][ T7136] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.121161][ T7136] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.251440][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.604736][ T30] audit: type=1326 audit(1762892806.212:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 157.630010][ T30] audit: type=1326 audit(1762892806.232:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 157.653486][ T30] audit: type=1326 audit(1762892806.232:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 157.703662][ T30] audit: type=1326 audit(1762892806.232:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 157.880955][ T7167] loop2: detected capacity change from 0 to 256 [ 158.161529][ T7169] smc: net device bond0 applied user defined pnetid SYZ2 [ 158.184454][ T7169] netlink: 14 bytes leftover after parsing attributes in process `syz.3.446'. [ 158.538351][ T6997] Set syz1 is full, maxelem 65536 reached [ 158.607936][ T7169] smc: removing net device bond0 with user defined pnetid SYZ2 [ 158.664692][ T7169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.711748][ T7169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.736379][ T7169] bond0 (unregistering): Released all slaves [ 158.798535][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.067371][ T7188] netlink: 204 bytes leftover after parsing attributes in process `syz.1.455'. [ 159.302447][ T7196] netlink: 40 bytes leftover after parsing attributes in process `syz.2.457'. [ 159.328431][ T30] audit: type=1326 audit(1762892807.932:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 159.390546][ T30] audit: type=1326 audit(1762892807.932:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 159.454094][ T30] audit: type=1326 audit(1762892807.932:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 159.534179][ T30] audit: type=1326 audit(1762892807.932:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 159.637167][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 159.660548][ T7209] netlink: 76 bytes leftover after parsing attributes in process `syz.1.461'. [ 159.678576][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.692042][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 160.018285][ T7225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.470'. [ 160.054509][ T7227] netlink: 204 bytes leftover after parsing attributes in process `syz.2.472'. [ 160.220586][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 160.251540][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 160.293009][ T7238] loop2: detected capacity change from 0 to 128 [ 160.298427][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.305575][ T7238] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.350217][ T7238] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.392515][ T7237] team1: entered promiscuous mode [ 160.405107][ T7240] hugetlbfs: Bad value for 'nr_inodes' [ 160.420955][ T7237] team1: entered allmulticast mode [ 160.440133][ T7237] 8021q: adding VLAN 0 to HW filter on device team1 [ 160.510859][ T50] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.741618][ T7248] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.801822][ T7253] tipc: Enabling of bearer rejected, failed to enable media [ 160.899659][ T7248] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.035317][ T7248] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.225516][ T7248] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.387878][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.428317][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.536945][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.572490][ T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.901178][ T7315] lo speed is unknown, defaulting to 1000 [ 162.917972][ T7315] lo speed is unknown, defaulting to 1000 [ 162.978308][ T7315] lo speed is unknown, defaulting to 1000 [ 163.044340][ T7315] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.102046][ T7315] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 163.344156][ T7315] lo speed is unknown, defaulting to 1000 [ 163.433696][ T7315] lo speed is unknown, defaulting to 1000 [ 163.520397][ T7315] lo speed is unknown, defaulting to 1000 [ 163.638451][ T7315] lo speed is unknown, defaulting to 1000 [ 163.773608][ T7315] lo speed is unknown, defaulting to 1000 [ 163.781279][ T7328] loop3: detected capacity change from 0 to 2048 [ 163.810958][ T7330] __nla_validate_parse: 6 callbacks suppressed [ 163.810974][ T7330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.511'. [ 163.912052][ T5837] Alternate GPT is invalid, using primary GPT. [ 163.931695][ T5837] loop3: p1 p2 p3 [ 163.943316][ T5837] loop3: partition table partially beyond EOD, truncated [ 164.059783][ T7328] Alternate GPT is invalid, using primary GPT. [ 164.103198][ T7328] loop3: p1 p2 p3 [ 164.117298][ T7328] loop3: partition table partially beyond EOD, truncated [ 164.389463][ T6236] udevd[6236]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 164.392700][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 164.414320][ T5829] udevd[5829]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 164.522444][ T5829] udevd[5829]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 164.537600][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 164.539410][ T6236] udevd[6236]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 164.910275][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 165.001004][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 165.045374][ T7346] netlink: 'syz.2.515': attribute type 1 has an invalid length. [ 165.063045][ T7346] netlink: 224 bytes leftover after parsing attributes in process `syz.2.515'. [ 165.833708][ T7372] netlink: 'syz.4.527': attribute type 29 has an invalid length. [ 165.910561][ T7372] netlink: 'syz.4.527': attribute type 29 has an invalid length. [ 165.964815][ T7377] netlink: 500 bytes leftover after parsing attributes in process `syz.4.527'. [ 166.634173][ T7370] futex_wake_op: syz.2.526 tries to shift op by -1; fix this program [ 166.954212][ T7396] netlink: 44 bytes leftover after parsing attributes in process `syz.0.536'. [ 167.189957][ T7405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.540'. [ 167.244760][ T7408] netlink: 'syz.0.541': attribute type 29 has an invalid length. [ 167.261497][ T7408] netlink: 'syz.0.541': attribute type 29 has an invalid length. [ 167.290565][ T7408] netlink: 500 bytes leftover after parsing attributes in process `syz.0.541'. [ 167.418172][ T7410] loop2: detected capacity change from 0 to 1024 [ 167.439289][ T7410] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 167.465971][ T7410] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 167.500624][ T7410] EXT4-fs (loop2): orphan cleanup on readonly fs [ 167.509267][ T7410] EXT4-fs error (device loop2): ext4_map_blocks:819: inode #3: block 3: comm syz.2.542: lblock 3 mapped to illegal pblock 3 (length 1) [ 167.543762][ T7410] __quota_error: 42 callbacks suppressed [ 167.543778][ T7410] Quota error (device loop2): write_blk: dquota write failed [ 167.561930][ T7410] Quota error (device loop2): find_free_dqentry: Can't write quota data block 3 [ 167.571419][ T7410] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 167.585634][ T7410] EXT4-fs error (device loop2): ext4_acquire_dquot:6946: comm syz.2.542: Failed to acquire dquot type 0 [ 167.613888][ T7410] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 3: comm syz.2.542: lblock 3 mapped to illegal pblock 3 (length 1) [ 167.653825][ T7410] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 167.692314][ T7410] EXT4-fs error (device loop2): ext4_acquire_dquot:6946: comm syz.2.542: Failed to acquire dquot type 0 [ 167.737312][ T7410] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.542: Freeing blocks not in datazone - block = 0, count = 4096 [ 167.795644][ T7410] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 3: comm syz.2.542: lblock 3 mapped to illegal pblock 3 (length 1) [ 167.838983][ T7410] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 167.877142][ T7410] EXT4-fs error (device loop2): ext4_acquire_dquot:6946: comm syz.2.542: Failed to acquire dquot type 0 [ 167.896631][ T7410] EXT4-fs (loop2): 1 orphan inode deleted [ 167.905583][ T7426] binder: BINDER_SET_CONTEXT_MGR already set [ 167.912802][ T7426] binder: 7423:7426 ioctl 4018620d 200000004a80 returned -16 [ 167.925976][ T7410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.061825][ T7429] tipc: Started in network mode [ 168.071361][ T7429] tipc: Node identity a6326f08d7dc, cluster identity 4711 [ 168.090697][ T7429] tipc: Enabled bearer , priority 0 [ 168.136815][ T7428] tipc: Disabling bearer [ 168.231734][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.493889][ T7441] IPv6: Can't replace route, no match found [ 169.686342][ T7483] loop2: detected capacity change from 0 to 128 [ 169.740130][ T7459] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 170.007879][ T7489] binder: BINDER_SET_CONTEXT_MGR already set [ 170.014084][ T7489] binder: 7488:7489 ioctl 4018620d 200000004a80 returned -16 [ 170.771727][ T7508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.565'. [ 171.595070][ T7526] netlink: 44 bytes leftover after parsing attributes in process `syz.4.572'. [ 171.637255][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 171.695106][ T7526] netlink: 204 bytes leftover after parsing attributes in process `syz.4.572'. [ 171.993441][ T7539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.577'. [ 172.065128][ T30] audit: type=1326 audit(1762892820.664:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 172.084977][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 172.122504][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 172.144407][ T7541] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 172.170097][ T7541] netlink: 224 bytes leftover after parsing attributes in process `syz.2.578'. [ 172.180447][ T30] audit: type=1326 audit(1762892820.694:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 172.213874][ T30] audit: type=1326 audit(1762892820.694:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 172.238632][ T30] audit: type=1326 audit(1762892820.694:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 172.268141][ T7548] netlink: 'syz.4.581': attribute type 29 has an invalid length. [ 172.277043][ T7548] netlink: 'syz.4.581': attribute type 29 has an invalid length. [ 172.288742][ T7548] netlink: 500 bytes leftover after parsing attributes in process `syz.4.581'. [ 172.298576][ T30] audit: type=1326 audit(1762892820.694:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 172.316348][ T7550] IPv6: Can't replace route, no match found [ 172.963501][ T7572] loop4: detected capacity change from 0 to 1024 [ 173.019295][ T7572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.146457][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.213866][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 173.213883][ T30] audit: type=1326 audit(1762892821.814:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 173.359908][ T30] audit: type=1326 audit(1762892821.814:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 173.418978][ T30] audit: type=1326 audit(1762892821.854:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 173.596007][ T30] audit: type=1326 audit(1762892821.864:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 173.617705][ T7591] netlink: 'syz.3.595': attribute type 29 has an invalid length. [ 173.636569][ T7591] netlink: 'syz.3.595': attribute type 29 has an invalid length. [ 173.654997][ T7592] IPv6: Can't replace route, no match found [ 173.661819][ T7591] netlink: 500 bytes leftover after parsing attributes in process `syz.3.595'. [ 173.710461][ T30] audit: type=1326 audit(1762892821.864:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 173.758378][ T30] audit: type=1326 audit(1762892821.864:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 173.869306][ T30] audit: type=1326 audit(1762892821.864:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 173.979627][ T30] audit: type=1326 audit(1762892821.874:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 174.039120][ T30] audit: type=1326 audit(1762892821.874:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 174.216693][ T30] audit: type=1326 audit(1762892822.814:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 174.724057][ T7629] netlink: 'syz.4.610': attribute type 29 has an invalid length. [ 174.756548][ T7629] netlink: 'syz.4.610': attribute type 29 has an invalid length. [ 175.711574][ T7668] netlink: 'syz.0.625': attribute type 29 has an invalid length. [ 175.730265][ T7668] netlink: 'syz.0.625': attribute type 29 has an invalid length. [ 176.004958][ T7684] xt_hashlimit: max too large, truncated to 1048576 [ 176.023617][ T7684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.127729][ T7686] IPv6: Can't replace route, no match found [ 176.396458][ T7691] syzkaller0: entered promiscuous mode [ 176.413409][ T7691] syzkaller0: entered allmulticast mode [ 176.497499][ T7683] netlink: 'syz.4.631': attribute type 2 has an invalid length. [ 177.272511][ T7701] __nla_validate_parse: 8 callbacks suppressed [ 177.272529][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 177.290009][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 177.369200][ T7708] netlink: 'syz.3.639': attribute type 29 has an invalid length. [ 177.401032][ T7708] netlink: 'syz.3.639': attribute type 29 has an invalid length. [ 177.423813][ T7708] netlink: 500 bytes leftover after parsing attributes in process `syz.3.639'. [ 177.588608][ T7714] IPv6: Can't replace route, no match found [ 177.659859][ T7717] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 177.781925][ T7723] IPv6: Can't replace route, no match found [ 179.037254][ T7747] netlink: 'syz.0.654': attribute type 29 has an invalid length. [ 179.130434][ T7747] netlink: 'syz.0.654': attribute type 29 has an invalid length. [ 179.139141][ T7747] netlink: 500 bytes leftover after parsing attributes in process `syz.0.654'. [ 179.426004][ T7762] IPv6: Can't replace route, no match found [ 179.611476][ T7768] IPv6: Can't replace route, no match found [ 181.115737][ T7797] netlink: 44 bytes leftover after parsing attributes in process `syz.3.671'. [ 181.158052][ T7797] netlink: 204 bytes leftover after parsing attributes in process `syz.3.671'. [ 181.346760][ T7804] syzkaller0: entered promiscuous mode [ 181.359030][ T7804] syzkaller0: entered allmulticast mode [ 182.553029][ T7831] xt_hashlimit: max too large, truncated to 1048576 [ 182.582547][ T7831] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.170883][ T7844] netlink: 44 bytes leftover after parsing attributes in process `syz.3.684'. [ 183.196426][ T7844] netlink: 204 bytes leftover after parsing attributes in process `syz.3.684'. [ 183.469494][ T7848] syzkaller0: entered promiscuous mode [ 183.479456][ T7848] syzkaller0: entered allmulticast mode [ 183.485806][ T7851] IPv6: Can't replace route, no match found [ 183.545499][ T7852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'. [ 184.618289][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 184.618306][ T30] audit: type=1326 audit(1762892833.215:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 184.719052][ T7884] xt_hashlimit: max too large, truncated to 1048576 [ 184.727451][ T30] audit: type=1326 audit(1762892833.215:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 184.728956][ T7884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.800611][ T30] audit: type=1326 audit(1762892833.235:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 184.880652][ T30] audit: type=1326 audit(1762892833.235:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 184.950777][ T30] audit: type=1326 audit(1762892833.235:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 185.003391][ T30] audit: type=1326 audit(1762892833.235:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 185.060265][ T30] audit: type=1326 audit(1762892833.235:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 185.104772][ T30] audit: type=1326 audit(1762892833.235:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 185.141932][ T7890] IPv6: Can't replace route, no match found [ 185.154395][ T30] audit: type=1326 audit(1762892833.235:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 185.209286][ T30] audit: type=1326 audit(1762892833.235:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 185.601114][ T7887] futex_wake_op: syz.1.698 tries to shift op by -1; fix this program [ 185.951728][ T7911] netlink: 'syz.2.707': attribute type 29 has an invalid length. [ 185.971467][ T7911] netlink: 'syz.2.707': attribute type 29 has an invalid length. [ 185.997000][ T7911] netlink: 500 bytes leftover after parsing attributes in process `syz.2.707'. [ 186.021193][ T7913] 9p: Bad value for 'rfdno' [ 186.176832][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 186.189521][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 186.312491][ T7923] xt_hashlimit: max too large, truncated to 1048576 [ 186.328390][ T7923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.404657][ T7952] netlink: 'syz.0.721': attribute type 29 has an invalid length. [ 187.415273][ T7952] netlink: 'syz.0.721': attribute type 29 has an invalid length. [ 187.424101][ T7952] netlink: 500 bytes leftover after parsing attributes in process `syz.0.721'. [ 187.597066][ T7959] ip6t_srh: unknown srh match flags 4000 [ 187.598645][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 187.612899][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 187.644506][ T7953] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 187.661360][ T7953] netlink: 224 bytes leftover after parsing attributes in process `syz.4.722'. [ 188.263117][ T7984] IPv6: Can't replace route, no match found [ 188.369826][ T7987] __nla_validate_parse: 1 callbacks suppressed [ 188.369852][ T7987] netlink: 44 bytes leftover after parsing attributes in process `syz.2.735'. [ 188.400327][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'. [ 188.655176][ T793] kernel write not supported for file bpf-prog (pid: 793 comm: kworker/1:2) [ 189.848303][ T8021] netlink: 44 bytes leftover after parsing attributes in process `syz.0.747'. [ 189.894910][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 190.081995][ T8028] netlink: 'syz.2.750': attribute type 29 has an invalid length. [ 190.094253][ T8028] netlink: 'syz.2.750': attribute type 29 has an invalid length. [ 190.103638][ T8028] netlink: 500 bytes leftover after parsing attributes in process `syz.2.750'. [ 190.265695][ T8035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.753'. [ 190.474165][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 190.474181][ T30] audit: type=1326 audit(1762892839.076:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 190.558537][ T30] audit: type=1326 audit(1762892839.076:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 190.613817][ T30] audit: type=1326 audit(1762892839.116:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 190.667075][ T30] audit: type=1326 audit(1762892839.116:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 190.729655][ T30] audit: type=1326 audit(1762892839.116:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 190.791784][ T30] audit: type=1326 audit(1762892839.116:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 190.843606][ T30] audit: type=1326 audit(1762892839.116:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 190.959886][ T30] audit: type=1326 audit(1762892839.116:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 191.046436][ T30] audit: type=1326 audit(1762892839.126:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 191.109469][ T30] audit: type=1326 audit(1762892839.126:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fa98f6c9 code=0x7ffc0000 [ 191.508640][ T8067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.761'. [ 192.330434][ T8073] netlink: 36 bytes leftover after parsing attributes in process `syz.1.766'. [ 192.676545][ T8062] futex_wake_op: syz.2.762 tries to shift op by -1; fix this program [ 193.011093][ T8093] xt_hashlimit: max too large, truncated to 1048576 [ 193.018805][ T8093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.186419][ T8078] loop3: detected capacity change from 0 to 32768 [ 193.254236][ T8078] loop3: p1 p2 p3 < p5 p6 > [ 193.281196][ T8078] loop3: p2 size 16775168 extends beyond EOD, truncated [ 193.369860][ T8078] loop3: p5 start 4294970168 is beyond EOD, truncated [ 193.595955][ T8104] netlink: 36 bytes leftover after parsing attributes in process `syz.0.778'. [ 193.636609][ T8098] syzkaller0: entered promiscuous mode [ 193.676630][ T8098] syzkaller0: entered allmulticast mode [ 194.255821][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.687435][ T8119] futex_wake_op: syz.0.783 tries to shift op by -1; fix this program [ 195.925831][ T8150] xt_hashlimit: max too large, truncated to 1048576 [ 195.937454][ T8150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.660036][ T8168] futex_wake_op: syz.0.797 tries to shift op by -1; fix this program [ 197.697546][ T8163] loop4: detected capacity change from 0 to 32768 [ 197.772455][ T8163] loop4: p1 p2 p3 < p5 p6 > [ 197.807781][ T8163] loop4: p2 size 16775168 extends beyond EOD, truncated [ 197.846516][ T8163] loop4: p5 start 4294970168 is beyond EOD, truncated [ 199.633833][ T8204] xt_hashlimit: max too large, truncated to 1048576 [ 199.657318][ T8204] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.754656][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 199.754674][ T30] audit: type=1326 audit(1762892848.357:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 199.845654][ T30] audit: type=1326 audit(1762892848.357:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 199.895037][ T30] audit: type=1326 audit(1762892848.357:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 199.932069][ T8214] loop2: detected capacity change from 0 to 1024 [ 199.943650][ T30] audit: type=1326 audit(1762892848.357:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 199.950698][ T8214] EXT4-fs: Ignoring removed orlov option [ 200.010545][ T30] audit: type=1326 audit(1762892848.367:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 200.054564][ T8214] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 200.058520][ T30] audit: type=1326 audit(1762892848.367:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 200.073797][ T8216] binder: BINDER_SET_CONTEXT_MGR already set [ 200.130046][ T30] audit: type=1326 audit(1762892848.367:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 200.159006][ T8214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.176935][ T30] audit: type=1326 audit(1762892848.377:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 200.183549][ T8216] binder: 8211:8216 ioctl 4018620d 200000004a80 returned -16 [ 200.199510][ T30] audit: type=1326 audit(1762892848.397:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 200.230393][ T30] audit: type=1326 audit(1762892848.397:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 200.754898][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.766119][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.812'. [ 201.215342][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 201.369405][ T5938] IPVS: starting estimator thread 0... [ 201.469948][ T8255] IPVS: using max 26 ests per chain, 62400 per kthread [ 201.569212][ T8263] tipc: Enabling of bearer rejected, failed to enable media [ 201.782957][ T8271] netlink: 'syz.3.827': attribute type 1 has an invalid length. [ 203.079512][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 203.433313][ T8307] tipc: Enabling of bearer rejected, failed to enable media [ 203.775463][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.843'. [ 203.852926][ T8327] xt_hashlimit: max too large, truncated to 1048576 [ 203.911495][ T8327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.176951][ T8352] 9p: Bad value for 'wfdno' [ 205.434030][ T8356] tipc: Enabling of bearer rejected, failed to enable media [ 205.673548][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.859'. [ 206.413379][ T8403] xt_hashlimit: max too large, truncated to 1048576 [ 206.429509][ T8403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.373270][ T8410] 9p: Bad value for 'wfdno' [ 208.034384][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.879'. [ 208.131735][ T8443] loop4: detected capacity change from 0 to 1024 [ 208.167405][ T8443] EXT4-fs: Ignoring removed bh option [ 208.184449][ T8443] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 208.264910][ T8440] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.283795][ T8443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.314615][ T8449] 9p: Bad value for 'wfdno' [ 208.459674][ T8440] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.575797][ T5830] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /147/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 208.632029][ T5830] EXT4-fs (loop4): Remounting filesystem read-only [ 208.641496][ T8440] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.665978][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.791437][ T8440] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.898292][ T8461] netlink: 44 bytes leftover after parsing attributes in process `syz.0.884'. [ 208.918612][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 209.047430][ T5923] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.122836][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.167750][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.198888][ T50] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.437498][ T8469] netlink: 'syz.0.887': attribute type 2 has an invalid length. [ 209.785266][ T8488] tipc: Enabling of bearer rejected, failed to enable media [ 209.905339][ T8492] netlink: 'syz.4.893': attribute type 29 has an invalid length. [ 209.948274][ T8492] netlink: 'syz.4.893': attribute type 29 has an invalid length. [ 210.058111][ T8496] netlink: 44 bytes leftover after parsing attributes in process `syz.1.895'. [ 210.122694][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 210.162286][ T8504] loop4: detected capacity change from 0 to 128 [ 210.566449][ T8510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.866597][ T8510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.992577][ T8510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.070383][ T8526] tipc: Enabling of bearer rejected, failed to enable media [ 211.247645][ T8532] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 211.270679][ T8510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.345505][ T8535] loop4: detected capacity change from 0 to 512 [ 211.359469][ T8535] EXT4-fs: Ignoring removed nobh option [ 211.450628][ T8535] EXT4-fs error (device loop4): ext4_do_update_inode:5636: inode #3: comm syz.4.906: corrupted inode contents [ 211.499338][ T8535] EXT4-fs (loop4): Remounting filesystem read-only [ 211.548112][ T8535] __quota_error: 3 callbacks suppressed [ 211.548131][ T8535] Quota error (device loop4): write_blk: dquota write failed [ 211.608191][ T8535] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 211.618410][ T8535] EXT4-fs (loop4): 1 truncate cleaned up [ 211.625607][ T8535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.698074][ T8535] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.713945][ T5923] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.722646][ T5923] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.733253][ T8535] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.771784][ T8543] netlink: 'syz.0.908': attribute type 29 has an invalid length. [ 211.817494][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.836081][ T8544] netlink: 'syz.0.908': attribute type 29 has an invalid length. [ 211.905655][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.017939][ T30] audit: type=1326 audit(1762892860.618:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 212.112468][ T30] audit: type=1326 audit(1762892860.618:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 212.221453][ T30] audit: type=1326 audit(1762892860.618:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 212.285728][ T8563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.914'. [ 212.316052][ T30] audit: type=1326 audit(1762892860.618:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 212.369535][ T30] audit: type=1326 audit(1762892860.618:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 212.458570][ T30] audit: type=1326 audit(1762892860.648:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 212.577650][ T30] audit: type=1326 audit(1762892860.648:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 212.602430][ T8571] tipc: Started in network mode [ 212.610445][ T8571] tipc: Node identity 763b5a8962e8, cluster identity 4711 [ 212.659453][ T8571] tipc: Enabled bearer , priority 0 [ 212.663254][ T30] audit: type=1326 audit(1762892860.648:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 212.764007][ T8570] tipc: Disabling bearer [ 213.018490][ T8585] 9p: Bad value for 'wfdno' [ 213.079008][ T8588] netlink: 'syz.1.922': attribute type 29 has an invalid length. [ 213.158150][ T8588] netlink: 'syz.1.922': attribute type 29 has an invalid length. [ 213.484000][ T8594] netlink: 44 bytes leftover after parsing attributes in process `syz.2.925'. [ 213.494454][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 213.730119][ T8600] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.805804][ T8600] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.895923][ T8603] netlink: 40 bytes leftover after parsing attributes in process `syz.4.927'. [ 213.913631][ T8600] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.964872][ T8600] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.115823][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.166133][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.223233][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.282499][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.408433][ T8611] tipc: Enabling of bearer rejected, failed to enable media [ 214.659043][ T8620] 9p: Bad value for 'wfdno' [ 214.838419][ T8625] netlink: 44 bytes leftover after parsing attributes in process `syz.2.936'. [ 214.872001][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 214.895081][ T8628] netlink: 'syz.1.937': attribute type 4 has an invalid length. [ 214.927275][ T8628] netlink: 152 bytes leftover after parsing attributes in process `syz.1.937'. [ 214.986505][ T8628] .`: renamed from bond0 (while UP) [ 216.430523][ T8666] netlink: 44 bytes leftover after parsing attributes in process `syz.1.949'. [ 216.440169][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 216.510437][ T8662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.818224][ T8621] Bluetooth: hci1: command 0x0406 tx timeout [ 216.828813][ T8621] Bluetooth: hci2: command 0x0406 tx timeout [ 216.834954][ T8621] Bluetooth: hci3: command 0x0406 tx timeout [ 216.841177][ T8621] Bluetooth: hci4: command 0x0406 tx timeout [ 216.886645][ T8662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.024100][ T8675] netlink: 'syz.0.952': attribute type 29 has an invalid length. [ 217.033063][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 217.044417][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 217.077147][ T8676] netlink: 'syz.0.952': attribute type 29 has an invalid length. [ 217.337638][ T8662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.438961][ T8662] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.596098][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.635211][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.665880][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.692237][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.031546][ T8502] Set syz1 is full, maxelem 65536 reached [ 218.235722][ T8708] netlink: 'syz.3.964': attribute type 29 has an invalid length. [ 218.257179][ T8708] netlink: 'syz.3.964': attribute type 29 has an invalid length. [ 218.356123][ T8710] netlink: 'syz.0.963': attribute type 2 has an invalid length. [ 218.658699][ T8734] 9p: Bad value for 'rfdno' [ 218.899035][ T8745] __nla_validate_parse: 2 callbacks suppressed [ 218.899054][ T8745] netlink: 44 bytes leftover after parsing attributes in process `syz.3.975'. [ 218.922495][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 218.955603][ T8747] netlink: 'syz.4.976': attribute type 29 has an invalid length. [ 218.976829][ T8747] netlink: 'syz.4.976': attribute type 29 has an invalid length. [ 218.998288][ T8747] netlink: 500 bytes leftover after parsing attributes in process `syz.4.976'. [ 219.249571][ T8761] xt_hashlimit: max too large, truncated to 1048576 [ 219.367155][ T8761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.880564][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 219.880581][ T30] audit: type=1326 audit(1762892868.489:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 219.910064][ T30] audit: type=1326 audit(1762892868.489:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 219.933637][ T30] audit: type=1326 audit(1762892868.489:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 219.956223][ T30] audit: type=1326 audit(1762892868.489:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 220.012639][ T30] audit: type=1326 audit(1762892868.489:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 220.085641][ T30] audit: type=1326 audit(1762892868.489:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 220.189161][ T30] audit: type=1326 audit(1762892868.489:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 220.287731][ T30] audit: type=1326 audit(1762892868.489:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 220.330156][ T30] audit: type=1326 audit(1762892868.489:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 220.353009][ T30] audit: type=1326 audit(1762892868.489:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 220.398392][ T8778] netlink: 44 bytes leftover after parsing attributes in process `syz.0.988'. [ 220.408084][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 220.727592][ T8792] netlink: 268 bytes leftover after parsing attributes in process `syz.4.991'. [ 220.989478][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 221.009184][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 223.009769][ T8821] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1000'. [ 223.018973][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 223.098703][ T8818] binder: 8799:8818 ioctl 4018620d 0 returned -22 [ 223.143622][ T8818] binder: 8799:8818 ioctl c0306201 0 returned -14 [ 224.336424][ T8844] tipc: New replicast peer: 255.255.255.255 [ 224.343290][ T8844] tipc: Enabled bearer , priority 10 [ 224.984611][ T8860] __nla_validate_parse: 2 callbacks suppressed [ 224.984634][ T8860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1010'. [ 225.751490][ T5903] tipc: Node number set to 1911451400 [ 225.786465][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 226.847817][ T30] kauditd_printk_skb: 273 callbacks suppressed [ 226.847836][ T30] audit: type=1326 audit(1762892875.450:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 226.893535][ T8875] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.951988][ T30] audit: type=1326 audit(1762892875.450:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 227.043014][ T30] audit: type=1326 audit(1762892875.450:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 227.098743][ T8875] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.128168][ T30] audit: type=1326 audit(1762892875.450:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 227.152611][ T8888] xt_TCPMSS: Only works on TCP SYN packets [ 227.213092][ T30] audit: type=1326 audit(1762892875.450:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 227.278117][ T30] audit: type=1326 audit(1762892875.450:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 227.336337][ T8875] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.621908][ T8875] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.677589][ T30] audit: type=1326 audit(1762892876.290:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 227.713138][ T8878] netlink: 'syz.0.1018': attribute type 2 has an invalid length. [ 227.727215][ T30] audit: type=1326 audit(1762892876.310:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 227.752207][ T30] audit: type=1326 audit(1762892876.320:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 227.833046][ T30] audit: type=1326 audit(1762892876.320:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 227.872566][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.918724][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.962011][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.011599][ T8906] 9p: Bad value for 'wfdno' [ 228.065578][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.222841][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 228.232271][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 228.526080][ T8923] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1032'. [ 229.159574][ T8939] 9p: Bad value for 'wfdno' [ 231.869180][ T8973] netlink: 'syz.3.1047': attribute type 5 has an invalid length. [ 231.892716][ T8974] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 231.893278][ T8969] IPVS: stopping master sync thread 8974 ... [ 231.917815][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 232.015426][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'. [ 232.035045][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'. [ 232.356414][ T8995] 9p: Bad value for 'wfdno' [ 232.829225][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1055'. [ 233.840967][ T9013] tipc: Enabling of bearer rejected, failed to enable media [ 234.299328][ T9027] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1065'. [ 234.321153][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 234.344725][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 234.357182][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 234.381374][ T9030] netlink: 'syz.1.1066': attribute type 29 has an invalid length. [ 234.391045][ T9030] netlink: 'syz.1.1066': attribute type 29 has an invalid length. [ 234.401323][ T9030] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1066'. [ 234.420728][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 234.431675][ T9031] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 234.827988][ T9047] tipc: Enabling of bearer rejected, failed to enable media [ 235.224032][ T9065] netlink: 'syz.1.1078': attribute type 29 has an invalid length. [ 235.246858][ T9065] netlink: 'syz.1.1078': attribute type 29 has an invalid length. [ 235.576865][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 235.576884][ T30] audit: type=1326 audit(1762892884.191:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 235.684587][ T30] audit: type=1326 audit(1762892884.191:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 235.745669][ T30] audit: type=1326 audit(1762892884.231:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 235.784934][ T9079] tipc: Enabling of bearer rejected, failed to enable media [ 235.853482][ T30] audit: type=1326 audit(1762892884.231:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 235.897227][ T30] audit: type=1326 audit(1762892884.231:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 235.951903][ T30] audit: type=1326 audit(1762892884.241:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 235.991984][ T30] audit: type=1326 audit(1762892884.241:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 236.045297][ T30] audit: type=1326 audit(1762892884.241:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 236.111552][ T30] audit: type=1326 audit(1762892884.241:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 236.214495][ T30] audit: type=1326 audit(1762892884.241:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 236.470751][ T9102] netlink: 'syz.2.1092': attribute type 29 has an invalid length. [ 236.492470][ T9102] netlink: 'syz.2.1092': attribute type 29 has an invalid length. [ 236.517306][ T9107] tmpfs: Bad value for 'mpol' [ 236.702671][ T9114] tipc: Enabling of bearer rejected, failed to enable media [ 237.410892][ T9130] binder: 9128:9130 ioctl 4018620d 0 returned -22 [ 237.547581][ T9149] __nla_validate_parse: 9 callbacks suppressed [ 237.547620][ T9149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1106'. [ 238.235223][ T9154] netlink: 'syz.0.1109': attribute type 29 has an invalid length. [ 238.265251][ T9154] netlink: 'syz.0.1109': attribute type 29 has an invalid length. [ 238.293138][ T9154] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1109'. [ 238.474071][ T9163] tipc: Enabling of bearer rejected, failed to enable media [ 238.753503][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 238.782224][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 239.317937][ T9184] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1120'. [ 239.343158][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'. [ 239.374836][ T9184] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1120'. [ 239.415409][ T9189] netlink: 'syz.1.1122': attribute type 6 has an invalid length. [ 239.889481][ T9199] tipc: Started in network mode [ 239.907393][ T9199] tipc: Node identity 7208de687085, cluster identity 4711 [ 239.914835][ T9199] tipc: Enabled bearer , priority 0 [ 239.935668][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'. [ 239.984520][ T9187] netlink: 'syz.0.1121': attribute type 2 has an invalid length. [ 240.845785][ T9197] tipc: Resetting bearer [ 240.994914][ T5888] tipc: Node number set to 42851944 [ 242.986975][ T9197] tipc: Disabling bearer [ 243.216578][ T9236] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1135'. [ 243.246184][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'. [ 243.257516][ T9238] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1136'. [ 243.277019][ T9236] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1135'. [ 243.888855][ T9260] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.996343][ T9260] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.086850][ T9260] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.162006][ T9260] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.363264][ T6220] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.516939][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.529864][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.546542][ T9266] xt_hashlimit: max too large, truncated to 1048576 [ 244.565211][ T9266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.605893][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.028622][ T9273] 9p: Bad value for 'wfdno' [ 245.315879][ T9282] netlink: 'syz.1.1150': attribute type 29 has an invalid length. [ 245.364775][ T9282] netlink: 'syz.1.1150': attribute type 29 has an invalid length. [ 245.493126][ T9289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1151'. [ 245.681597][ T9282] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1150'. [ 246.290648][ T9296] binder: 9294:9296 ioctl 4018620d 0 returned -22 [ 246.651607][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 246.651625][ T30] audit: type=1326 audit(1762892895.262:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 246.775472][ T30] audit: type=1326 audit(1762892895.302:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 246.851016][ T30] audit: type=1326 audit(1762892895.302:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 246.936593][ T30] audit: type=1326 audit(1762892895.302:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 247.183997][ T9317] 9p: Bad value for 'wfdno' [ 247.281875][ T30] audit: type=1326 audit(1762892895.883:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 247.352582][ T30] audit: type=1326 audit(1762892895.923:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 247.386445][ T9311] netlink: 'syz.0.1158': attribute type 2 has an invalid length. [ 247.434945][ T30] audit: type=1326 audit(1762892895.943:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 247.507626][ T30] audit: type=1326 audit(1762892895.943:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 247.626632][ T30] audit: type=1326 audit(1762892895.943:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 247.695233][ T30] audit: type=1326 audit(1762892895.963:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 247.781513][ T9333] netlink: 'syz.2.1166': attribute type 29 has an invalid length. [ 247.796293][ T9334] xt_hashlimit: max too large, truncated to 1048576 [ 247.804672][ T9334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.821557][ T9333] netlink: 'syz.2.1166': attribute type 29 has an invalid length. [ 247.848345][ T9333] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1166'. [ 248.264762][ T9343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1167'. [ 248.885487][ T9342] tipc: Enabling of bearer rejected, failed to enable media [ 249.123787][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1170'. [ 250.154516][ T9362] 9p: Bad value for 'wfdno' [ 250.536534][ T9373] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.683495][ T9376] netlink: 'syz.1.1179': attribute type 29 has an invalid length. [ 250.724648][ T9376] netlink: 'syz.1.1179': attribute type 29 has an invalid length. [ 250.750908][ T9376] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1179'. [ 250.776234][ T9373] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.879238][ T9373] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.977608][ T9373] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.057990][ T9379] xt_hashlimit: max too large, truncated to 1048576 [ 251.083256][ T9379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.181557][ T1099] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.252946][ T1099] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.305580][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.348193][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.663460][ T9384] tipc: Enabled bearer , priority 0 [ 251.694691][ T9382] tipc: Resetting bearer [ 252.062738][ T9390] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1184'. [ 252.084612][ T9381] futex_wake_op: syz.2.1181 tries to shift op by -1; fix this program [ 252.104256][ T793] IPVS: starting estimator thread 0... [ 252.211377][ T9391] IPVS: using max 24 ests per chain, 57600 per kthread [ 253.739865][ T9406] 9p: Bad value for 'wfdno' [ 253.794066][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 253.794083][ T30] audit: type=1326 audit(1762892902.403:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 253.905087][ T30] audit: type=1326 audit(1762892902.403:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 253.962484][ T30] audit: type=1326 audit(1762892902.403:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 254.036072][ T30] audit: type=1326 audit(1762892902.403:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 254.105805][ T30] audit: type=1326 audit(1762892902.403:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 254.186294][ T30] audit: type=1326 audit(1762892902.403:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 254.210209][ T9417] xt_hashlimit: max too large, truncated to 1048576 [ 254.217603][ T9417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.280198][ T30] audit: type=1326 audit(1762892902.403:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 254.332942][ T30] audit: type=1326 audit(1762892902.403:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 254.382425][ T30] audit: type=1326 audit(1762892902.403:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 254.436676][ T30] audit: type=1326 audit(1762892902.403:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200ef8f6c9 code=0x7ffc0000 [ 255.689550][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.399308][ T9428] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1197'. [ 256.425755][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 256.446231][ T9428] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1197'. [ 256.653819][ T9382] tipc: Disabling bearer [ 256.691808][ T9421] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.773217][ T9421] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.922473][ T9438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1202'. [ 257.004129][ T9421] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.374939][ T9443] 9p: Bad value for 'wfdno' [ 257.780819][ T9421] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.913294][ T9452] xt_hashlimit: max too large, truncated to 1048576 [ 257.935759][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.942312][ T9452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.998877][ T5923] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.018490][ T5923] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.070950][ T5923] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.091614][ T9455] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1208'. [ 258.124331][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'. [ 258.154859][ T9455] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1208'. [ 258.337545][ T9464] tipc: Enabling of bearer rejected, failed to enable media [ 258.547868][ T9470] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1214'. [ 258.797942][ T9477] 9p: Bad value for 'wfdno' [ 259.873789][ T9492] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1222'. [ 259.883104][ T9494] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1221'. [ 260.045041][ T9496] tipc: Enabled bearer , priority 0 [ 260.110821][ T9489] tipc: Resetting bearer [ 261.067821][ T9511] xt_hashlimit: max too large, truncated to 1048576 [ 261.117544][ T9511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.203919][ T9518] 9p: Bad value for 'wfdno' [ 262.564686][ T9530] __nla_validate_parse: 3 callbacks suppressed [ 262.564705][ T9530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1235'. [ 262.611461][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 262.651890][ T9530] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1235'. [ 262.807820][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 262.807837][ T30] audit: type=1326 audit(1762892911.414:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 262.881460][ T30] audit: type=1326 audit(1762892911.414:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 262.923039][ T30] audit: type=1326 audit(1762892911.414:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 262.968446][ T30] audit: type=1326 audit(1762892911.414:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 263.043506][ T30] audit: type=1326 audit(1762892911.414:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 263.110239][ T30] audit: type=1326 audit(1762892911.414:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 263.163603][ T30] audit: type=1326 audit(1762892911.414:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 263.209484][ T30] audit: type=1326 audit(1762892911.414:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 263.287903][ T30] audit: type=1326 audit(1762892911.414:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 263.361682][ T30] audit: type=1326 audit(1762892911.414:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0278f6c9 code=0x7ffc0000 [ 264.492816][ T9489] tipc: Disabling bearer [ 264.716693][ T9551] 9p: Bad value for 'wfdno' [ 264.955303][ T9561] xt_hashlimit: max too large, truncated to 1048576 [ 264.963075][ T9561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.773200][ T9558] infiniband !yz!: set active [ 265.795768][ T9558] infiniband !yz!: added team_slave_0 [ 266.026625][ T9558] RDS/IB: !yz!: added [ 266.059022][ T9558] smc: adding ib device !yz! with port count 1 [ 266.093633][ T9558] smc: ib device !yz! port 1 has no pnetid [ 266.389394][ T9583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1252'. [ 267.000838][ T9587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.018387][ T9587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.061503][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'. [ 267.132594][ T9587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.162926][ T9587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.185139][ T9594] 9p: Bad value for 'wfdno' [ 267.540448][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 267.790337][ T9603] loop4: detected capacity change from 0 to 8192 [ 267.803992][ T9610] xt_hashlimit: max too large, truncated to 1048576 [ 267.832692][ T9610] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.851717][ T9552] loop4: p1 p4 [ 267.857833][ T9552] loop4: p1 size 196608 extends beyond EOD, truncated [ 267.895162][ T9552] loop4: p4 size 50331648 extends beyond EOD, truncated [ 267.921630][ T9603] loop4: p1 p4 [ 267.931303][ T9603] loop4: p1 size 196608 extends beyond EOD, truncated [ 267.945300][ T9603] loop4: p4 size 50331648 extends beyond EOD, truncated [ 268.288865][ T9552] udevd[9552]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 268.292259][ T9581] udevd[9581]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 268.378481][ T9623] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 268.397569][ T9552] udevd[9552]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 268.409365][ T9622] Illegal XDP return value 2428875994 on prog (id 417) dev N/A, expect packet loss! [ 268.413570][ T9581] udevd[9581]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 268.628115][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'. [ 269.000189][ T30] kauditd_printk_skb: 199 callbacks suppressed [ 269.000206][ T30] audit: type=1326 audit(1762892917.605:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 269.047994][ T30] audit: type=1326 audit(1762892917.645:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 269.071018][ T30] audit: type=1326 audit(1762892917.645:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 269.095671][ T30] audit: type=1326 audit(1762892917.645:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 269.134384][ T30] audit: type=1326 audit(1762892917.645:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 269.160986][ T30] audit: type=1326 audit(1762892917.645:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 269.239371][ T30] audit: type=1326 audit(1762892917.645:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 269.257146][ T9659] xt_hashlimit: max too large, truncated to 1048576 [ 269.277300][ T9659] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.302387][ T30] audit: type=1326 audit(1762892917.645:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 269.305577][ T980] kernel write not supported for file bpf-prog (pid: 980 comm: kworker/0:3) [ 269.336021][ T30] audit: type=1326 audit(1762892917.645:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 269.360297][ T30] audit: type=1326 audit(1762892917.645:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb65e38f6c9 code=0x7ffc0000 [ 269.583932][ T9667] xt_hashlimit: max too large, truncated to 1048576 [ 269.591836][ T9667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.904466][ T9677] ip6t_srh: unknown srh match flags 4000 [ 270.512525][ T9701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1300'. [ 270.731361][ T9716] xt_hashlimit: max too large, truncated to 1048576 [ 270.744076][ T9716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.880088][ T9726] mmap: syz.4.1310 (9726) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 271.276740][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1316'. [ 271.484828][ T9743] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1318'. [ 271.918491][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 271.940374][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 271.991588][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 272.032733][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 272.183531][ T9743] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 272.350753][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 272.378759][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 272.805930][ T9779] loop4: detected capacity change from 0 to 128 [ 273.695258][ T50] bio_check_eod: 101 callbacks suppressed [ 273.695280][ T50] kworker/u8:3: attempt to access beyond end of device [ 273.695280][ T50] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 273.738304][ T50] kworker/u8:3: attempt to access beyond end of device [ 273.738304][ T50] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 273.755548][ T50] kworker/u8:3: attempt to access beyond end of device [ 273.755548][ T50] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 273.769223][ T50] kworker/u8:3: attempt to access beyond end of device [ 273.769223][ T50] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 273.791430][ T50] kworker/u8:3: attempt to access beyond end of device [ 273.791430][ T50] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 273.828079][ T50] kworker/u8:3: attempt to access beyond end of device [ 273.828079][ T50] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 273.860150][ T50] kworker/u8:3: attempt to access beyond end of device [ 273.860150][ T50] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 273.899196][ T50] kworker/u8:3: attempt to access beyond end of device [ 273.899196][ T50] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 273.918969][ T50] kworker/u8:3: attempt to access beyond end of device [ 273.918969][ T50] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 273.945248][ T50] kworker/u8:3: attempt to access beyond end of device [ 273.945248][ T50] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 274.040607][ T9803] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.142774][ T9803] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.264641][ T9803] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.398642][ T9803] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.614325][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.688648][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.822818][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.842817][ T50] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.023434][ T9837] __nla_validate_parse: 2 callbacks suppressed [ 275.023476][ T9837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1347'. [ 275.608131][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'. [ 275.647417][ T9841] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1350'. [ 275.989777][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 275.989797][ T30] audit: type=1326 audit(1762892924.596:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 276.719799][ T30] audit: type=1326 audit(1762892924.646:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 276.819352][ T30] audit: type=1326 audit(1762892924.656:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 276.842988][ T30] audit: type=1326 audit(1762892924.656:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 276.865928][ T30] audit: type=1326 audit(1762892924.656:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 276.889408][ T30] audit: type=1326 audit(1762892924.656:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 276.943176][ T30] audit: type=1326 audit(1762892924.656:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 276.974374][ T30] audit: type=1326 audit(1762892924.666:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 276.997909][ T30] audit: type=1326 audit(1762892924.666:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 277.029016][ T30] audit: type=1326 audit(1762892924.666:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 277.110932][ T9877] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.1364'. [ 277.122925][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'. [ 277.131942][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 277.154995][ T9869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.336512][ T9884] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1367'. [ 277.405660][ T9869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.516932][ T9890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1366'. [ 277.999022][ T9869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.350775][ T9869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.375786][ T9919] xt_hashlimit: max too large, truncated to 1048576 [ 279.427046][ T9923] loop4: detected capacity change from 0 to 512 [ 279.432609][ T9919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.465952][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.540459][ T9923] EXT4-fs error (device loop4): ext4_acquire_dquot:6946: comm syz.4.1379: Failed to acquire dquot type 1 [ 279.561978][ T1099] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.587428][ T1099] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.619905][ T9923] EXT4-fs (loop4): 1 truncate cleaned up [ 279.629826][ T1099] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.650965][ T9923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.739857][ T9923] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.923985][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.163513][ T9946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1384'. [ 281.712143][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 281.712162][ T30] audit: type=1326 audit(1762892930.327:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 281.821894][ T30] audit: type=1326 audit(1762892930.357:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 281.900752][ T30] audit: type=1326 audit(1762892930.367:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 281.989197][ T30] audit: type=1326 audit(1762892930.367:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 282.031816][ T30] audit: type=1326 audit(1762892930.367:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 282.056142][ T30] audit: type=1326 audit(1762892930.387:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 282.099324][ T30] audit: type=1326 audit(1762892930.387:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 282.149094][ T30] audit: type=1326 audit(1762892930.387:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 282.197148][ T30] audit: type=1326 audit(1762892930.387:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 282.236109][ T30] audit: type=1326 audit(1762892930.387:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 282.392576][ T9980] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.500631][ T9980] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.551483][ T9980] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.606227][ T9980] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.817496][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.865416][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.955653][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1402'. [ 283.579009][ T6221] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.621867][ T6221] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.918873][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 286.277560][T10038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1414'. [ 286.989919][T10046] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1415'. [ 287.027816][ T5903] IPVS: starting estimator thread 0... [ 287.072511][T10049] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 287.142707][T10047] IPVS: using max 24 ests per chain, 57600 per kthread [ 287.211190][T10053] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1417'. [ 287.220488][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 287.231344][T10053] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1417'. [ 287.305247][T10055] tipc: Enabling of bearer rejected, failed to enable media [ 287.793545][T10065] 9p: Bad value for 'wfdno' [ 288.036219][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 288.301163][T10078] xt_hashlimit: max too large, truncated to 1048576 [ 288.322189][T10078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.463470][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 288.463489][ T30] audit: type=1326 audit(1762892937.077:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 288.507499][ T30] audit: type=1326 audit(1762892937.107:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 288.531709][ T30] audit: type=1326 audit(1762892937.107:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 288.554769][ T30] audit: type=1326 audit(1762892937.107:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 288.618431][ T30] audit: type=1326 audit(1762892937.107:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 288.678253][ T30] audit: type=1326 audit(1762892937.107:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 289.104324][ T30] audit: type=1326 audit(1762892937.717:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 289.154649][T10082] netlink: 'syz.2.1429': attribute type 2 has an invalid length. [ 289.168805][ T30] audit: type=1326 audit(1762892937.717:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 289.252607][ T30] audit: type=1326 audit(1762892937.767:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 289.326854][ T30] audit: type=1326 audit(1762892937.767:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f8f6c9 code=0x7ffc0000 [ 289.500122][T10092] sctp: [Deprecated]: syz.0.1431 (pid 10092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.500122][T10092] Use struct sctp_sack_info instead [ 289.620264][ C0] ------------[ cut here ]------------ [ 289.626124][ C0] WARNING: ./include/linux/ns_common.h:255 at put_cred_rcu+0x2c5/0x340, CPU#0: ksoftirqd/0/15 [ 289.636449][ C0] Modules linked in: [ 289.640567][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 289.649814][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.659928][ C0] RIP: 0010:put_cred_rcu+0x2c5/0x340 [ 289.665252][ C0] Code: 5c 41 5d 41 5e 41 5f 5d e9 d8 e3 8d 00 e8 23 8e 32 00 4c 89 e7 be 03 00 00 00 e8 76 5a 00 03 e9 b8 fe ff ff e8 0c 8e 32 00 90 <0f> 0b 90 eb 9f e8 01 8e 32 00 4c 89 ff be 03 00 00 00 e8 54 5a 00 [ 289.684915][ C0] RSP: 0018:ffffc90000147888 EFLAGS: 00010246 [ 289.691071][ C0] RAX: ffffffff818e9174 RBX: ffff88802c6113a0 RCX: ffff88801cea3d00 [ 289.699102][ C0] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000 [ 289.707097][ C0] RBP: 0000000000000004 R08: ffff888045c5c193 R09: 1ffff11008b8b832 [ 289.715122][ C0] R10: dffffc0000000000 R11: ffffed1008b8b833 R12: dffffc0000000000 [ 289.723243][ C0] R13: ffff88802c611300 R14: ffff888045c5c000 R15: ffff888045c5c190 [ 289.731287][ C0] FS: 0000000000000000(0000) GS:ffff888125ecc000(0000) knlGS:0000000000000000 [ 289.740277][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.746893][ C0] CR2: 00007f8b035156c0 CR3: 0000000062f66000 CR4: 00000000003526f0 [ 289.754927][ C0] Call Trace: [ 289.758264][ C0] [ 289.761260][ C0] ? __pfx_put_cred_rcu+0x10/0x10 [ 289.766348][ C0] ? rcu_core+0xc37/0x1770 [ 289.770843][ C0] rcu_core+0xcab/0x1770 [ 289.775155][ C0] ? __pfx_rcu_core+0x10/0x10 [ 289.779903][ C0] ? rcu_qs+0xc4/0x170 [ 289.784025][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 289.788596][ C0] ? sched_clock_cpu+0x74/0x430 [ 289.793505][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 289.798344][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 289.803608][ C0] handle_softirqs+0x27d/0x880 [ 289.808456][ C0] ? run_ksoftirqd+0x9b/0x100 [ 289.813187][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 289.818540][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 289.823611][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 289.828700][ C0] run_ksoftirqd+0x9b/0x100 [ 289.833247][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 289.838435][ C0] smpboot_thread_fn+0x542/0xa60 [ 289.843421][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 289.848523][ C0] kthread+0x711/0x8a0 [ 289.852629][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 289.858164][ C0] ? __pfx_kthread+0x10/0x10 [ 289.862792][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.868068][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.873312][ C0] ? __pfx_kthread+0x10/0x10 [ 289.877941][ C0] ret_from_fork+0x599/0xb30 [ 289.882623][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 289.887789][ C0] ? __switch_to_asm+0x39/0x70 [ 289.892625][ C0] ? __switch_to_asm+0x33/0x70 [ 289.897421][ C0] ? __pfx_kthread+0x10/0x10 [ 289.902070][ C0] ret_from_fork_asm+0x1a/0x30 [ 289.906883][ C0] [ 289.909977][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 289.917284][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 289.926502][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.936590][ C0] Call Trace: [ 289.939895][ C0] [ 289.942864][ C0] dump_stack_lvl+0x99/0x250 [ 289.947510][ C0] ? __asan_memcpy+0x40/0x70 [ 289.952149][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.957399][ C0] ? __pfx__printk+0x10/0x10 [ 289.962034][ C0] vpanic+0x237/0x6d0 [ 289.966042][ C0] ? __pfx_vpanic+0x10/0x10 [ 289.970570][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 289.975892][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 289.981160][ C0] panic+0xb9/0xc0 [ 289.984909][ C0] ? __pfx_panic+0x10/0x10 [ 289.989364][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 289.994335][ C0] __warn+0x318/0x4d0 [ 289.998365][ C0] ? put_cred_rcu+0x2c5/0x340 [ 290.003082][ C0] ? put_cred_rcu+0x2c5/0x340 [ 290.007783][ C0] report_bug+0x2be/0x4f0 [ 290.012156][ C0] ? put_cred_rcu+0x2c5/0x340 [ 290.016855][ C0] ? put_cred_rcu+0x2c5/0x340 [ 290.021562][ C0] ? put_cred_rcu+0x2c7/0x340 [ 290.026269][ C0] handle_bug+0x84/0x160 [ 290.030541][ C0] exc_invalid_op+0x1a/0x50 [ 290.035072][ C0] asm_exc_invalid_op+0x1a/0x20 [ 290.039956][ C0] RIP: 0010:put_cred_rcu+0x2c5/0x340 [ 290.045269][ C0] Code: 5c 41 5d 41 5e 41 5f 5d e9 d8 e3 8d 00 e8 23 8e 32 00 4c 89 e7 be 03 00 00 00 e8 76 5a 00 03 e9 b8 fe ff ff e8 0c 8e 32 00 90 <0f> 0b 90 eb 9f e8 01 8e 32 00 4c 89 ff be 03 00 00 00 e8 54 5a 00 [ 290.064910][ C0] RSP: 0018:ffffc90000147888 EFLAGS: 00010246 [ 290.071046][ C0] RAX: ffffffff818e9174 RBX: ffff88802c6113a0 RCX: ffff88801cea3d00 [ 290.079048][ C0] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000 [ 290.087050][ C0] RBP: 0000000000000004 R08: ffff888045c5c193 R09: 1ffff11008b8b832 [ 290.095051][ C0] R10: dffffc0000000000 R11: ffffed1008b8b833 R12: dffffc0000000000 [ 290.103054][ C0] R13: ffff88802c611300 R14: ffff888045c5c000 R15: ffff888045c5c190 [ 290.111078][ C0] ? put_cred_rcu+0x2c4/0x340 [ 290.115789][ C0] ? put_cred_rcu+0x2c4/0x340 [ 290.120494][ C0] ? __pfx_put_cred_rcu+0x10/0x10 [ 290.125552][ C0] ? rcu_core+0xc37/0x1770 [ 290.130010][ C0] rcu_core+0xcab/0x1770 [ 290.134311][ C0] ? __pfx_rcu_core+0x10/0x10 [ 290.139031][ C0] ? rcu_qs+0xc4/0x170 [ 290.143137][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 290.147674][ C0] ? sched_clock_cpu+0x74/0x430 [ 290.152574][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 290.157377][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 290.162627][ C0] handle_softirqs+0x27d/0x880 [ 290.167440][ C0] ? run_ksoftirqd+0x9b/0x100 [ 290.172167][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 290.177668][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 290.182738][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 290.187799][ C0] run_ksoftirqd+0x9b/0x100 [ 290.192341][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 290.197495][ C0] smpboot_thread_fn+0x542/0xa60 [ 290.202492][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 290.207560][ C0] kthread+0x711/0x8a0 [ 290.211663][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 290.217178][ C0] ? __pfx_kthread+0x10/0x10 [ 290.221798][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.227040][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.232272][ C0] ? __pfx_kthread+0x10/0x10 [ 290.236883][ C0] ret_from_fork+0x599/0xb30 [ 290.241515][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 290.246678][ C0] ? __switch_to_asm+0x39/0x70 [ 290.251465][ C0] ? __switch_to_asm+0x33/0x70 [ 290.256247][ C0] ? __pfx_kthread+0x10/0x10 [ 290.260873][ C0] ret_from_fork_asm+0x1a/0x30 [ 290.265686][ C0] [ 290.269124][ C0] Kernel Offset: disabled [ 290.273455][ C0] Rebooting in 86400 seconds..