last executing test programs: 4m57.383919428s ago: executing program 4 (id=173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 4m56.754885036s ago: executing program 4 (id=177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 4m55.68843638s ago: executing program 4 (id=182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4m55.438988223s ago: executing program 4 (id=186): recvmmsg(0xffffffffffffffff, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000001e00)=""/161, 0xa1}], 0x1}, 0x74c}], 0x1, 0x40012040, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f00000001c0)=[0xee01, 0x0]) keyctl$chown(0x4, r6, 0xee01, r7) keyctl$setperm(0x5, r6, 0x30925) keyctl$get_security(0x11, r6, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="0c1874268c0000bd3f4c2ee4c3e4fdfea05e8e04a1a42a60557fb65e7388442bcb546079b365311561bb95fb1aff7128184ea4ca0f437142f62b8f3200e2eb47d44e67968ef5a2b24506d380fd62fac61aa99133d75de2774168ed1224dee2e650791e490c7c3f514a1b39c61d40894d45c2205a1d988b31cd6dc9ba0908fb6e4cd35d064b5085cd470e8282240c64159ba4b6b084446629f37ec8700db7d6dea32c10c93f7f19f2de78816ca02e67b7ab59f59fdf2bea3156f5938df17892e404e8ae", 0x6e}], 0x1, 0x0, 0x0, 0x2000000}}], 0x800000000000369, 0x44000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 4m51.505466176s ago: executing program 4 (id=203): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 4m51.245315798s ago: executing program 4 (id=206): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000300000008000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000007c0)={@local, @link_local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x0, 0x38, 0x65, 0x0, 0xdc, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010101}, @payload_direct={{{{0x24, 0x0, 0x0, 0x1, 0x1, 0x8, 0x1, 0x2, 0x6, 0x0, 0x3, 0x4, 0x4, 0x3, 0x400, 0x9, 0x1, 0x4e22, 0x4e24}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4m35.964548719s ago: executing program 32 (id=206): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000300000008000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000007c0)={@local, @link_local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x0, 0x38, 0x65, 0x0, 0xdc, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010101}, @payload_direct={{{{0x24, 0x0, 0x0, 0x1, 0x1, 0x8, 0x1, 0x2, 0x6, 0x0, 0x3, 0x4, 0x4, 0x3, 0x400, 0x9, 0x1, 0x4e22, 0x4e24}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 8.82917842s ago: executing program 5 (id=1795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x8001, 0x7, 0x9223, 0x3}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0x2, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.070140622s ago: executing program 5 (id=1802): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x0) 7.804760937s ago: executing program 5 (id=1805): bpf$TOKEN_CREATE(0x24, &(0x7f0000001680), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x15, 0x7fffffff, 0x1000, 0x9, 0x46810, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r1 = socket(0xa, 0x3, 0x3a) syz_open_dev$rtc(0x0, 0x8, 0x402) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.284692424s ago: executing program 5 (id=1808): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001440)=ANY=[], 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r2, &(0x7f0000000040)="01c54f9f5fdeea81b41d9eb1a0cbdeaa89a8217cdbd6df044d3f6d53d0dd4988ae1f4f5b5110c82ca3b6c5b561c6758a2cccaf201d7ea0e86885ca9869b0887770f68fb2d7f01189c74c30093c9e5640317a097fa0139da6c3fb64420057c5dab736b4aa3925e3c3694b458c8b474f", 0x6f, 0x20040004, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read(r3, &(0x7f0000000300)=""/244, 0xf4) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xd2, 0xe, 0x5, 0xff, 0x27}, 0x12, &(0x7f0000000400)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x23, 0x7}]}, 0x6, [{0x6c, &(0x7f0000000480)=@string={0x6c, 0x3, "841b111b331bc7a5438c7f2d28b9ab1eefb3f49392d59ca87f618d11f235a8fc00a278597bbccb7bd93b4cfd49477aaa9d2cf3fbd8eddc124c83198a6d95072142fbb63b9f326d502a0018caac2cc96cbb8216e7c07147e824529c22e9d4c1e449a85b5de61a500b0841"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0xb0, &(0x7f0000000540)=@string={0xb0, 0x3, "af1d8200881a44b765899ef530a89f5e8e1a1cdb2c8b67f9b371ab2b3ea9ec55f3e09a2224453a75ef95633004fc549efdded1c4844672968878cbe8a5bc0a03776bddb35e4a54f6c9e2f061243840e25b40f733038b60107c819aefe32b80299ba6362c6f34a65ac9188efd2d4c631e838c1a3f80200b91238aa47362610bcdf7149a7654f658a203f7451b1bccf4ec222d076cf671885f573d3ed97c49106360eb2a5949d5cbf07e28855c3cfa"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2409}}, {0xa6, &(0x7f0000000a00)=@string={0xa6, 0x3, "ece611438e294823caa55ab6a711381a4d6d071628ac0c63cf4c541f9f762f1deebe214a200d567198bd314422553ddb6825d45294e851911423017b75c78559a1be7cf7b21275ded164a0398fdefea0b5f890f9d55f84512e247f37bc3fbdc50fb0f2a363ec3b181c27d2eedcc970a697daa129c04a10ae602ae2ae4090d055017f3f650bb34d22d3ffea1874dc3153baf9da4da8d5613e1daf7b11d895643245dc628b"}}, {0x45, &(0x7f0000000800)=ANY=[@ANYBLOB="45030dfe6b8237f458644b2f8569bac20ae4aef2f6a96038d5f8fa80415699d2ee82c3c05337bf02a8ea91b0dc02fa0021025168ef74e1374625ae298b1fdeace2"]}]}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000600), 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x111}}, 0x20) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.060278332s ago: executing program 5 (id=1818): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x771c, &(0x7f0000000040)={0x0, 0xef48, 0x48, 0x2, 0x10e}, &(0x7f0000000380), &(0x7f00000003c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000004000000070000000c000180060001000a0000004c9c374061fb6f5827e3df26e1fce08d1481a79e2a618fd85c87be61522470bb5ba7675d36f0e1f6475017728fc4beb43c7fbf50496ce632658bf3e72b9a491232e7f3633205673685ace43b927bde2d484c01c211896fc4eca725a07de3a7c195bad903f10fa5dc0c3a49872532d03d2d0b17e24271a0f05992a734b4af91fb4032968d4e974ff32157859babb6b25a1a3f68e6c38777b3157c6b44bb790a147f41bf26be43e19a0d55e0c66ca58a1919dd4133b3d2e9c7ba39dc2627668bd8112d25242e59799e1e92c52a82fb51a2", @ANYBLOB="3f57e2538cc2735c835ba989534dadf419e1494f881564520347fcbba9ae28f366b201e76fea28c7fa4bdd63013058b5f1a6e5f67cf2a9545c0f21a5e62cbdd3a403cd1f351a036ebad34d8ecd54d8c2ad4c70233019fe8d877bca57fac538bf4efb87fb5a7fe9bd504c39da77745b89f657bcb3b39079135fd7795372a2355f00dbdfe5634cc0113125409f82ab730d431c3a397f589a8e6c8bced8ddaa25fea3fed0187b3ad8744a11e9fa5d902a828beebc017716390bb75b989da306002339a4c43d426e7fa7d9ada94563"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1000f) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r9) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r10, 0x8943, &(0x7f0000000000)) 5.722465565s ago: executing program 5 (id=1822): r0 = socket(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000000)=0x80) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x7, 0xfffffffd}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) creat(0x0, 0x5) write(r0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r4}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x7, 0x9) setpriority(0x0, 0x0, 0xacf0165) read(r8, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r9, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x4}}, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 4.534008263s ago: executing program 1 (id=1833): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) 4.297540691s ago: executing program 1 (id=1837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x8001, 0x7, 0x9223, 0x3}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0x2, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.611345823s ago: executing program 1 (id=1846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 2.464638224s ago: executing program 1 (id=1851): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 2.32540768s ago: executing program 3 (id=1853): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 2.325185289s ago: executing program 6 (id=1854): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180), &(0x7f0000000240)=@tcp6, 0x1}, 0x20) 2.323852034s ago: executing program 2 (id=1855): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000009440)) bind$nfc_llcp(r1, 0x0, 0x0) 2.166120479s ago: executing program 1 (id=1856): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028"], 0x120}}, 0x0) 2.165223495s ago: executing program 6 (id=1857): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000180)={0x80000000, 0x1, {0x0, 0x0, 0x8, 0x0, 0x5b}, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) syz_emit_ethernet(0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700282c00fe800000000000000000000000000000ff020000000000000000000000000001890090780000000020010000000000000000000000000001fc0100000000"], 0x0) 2.065273905s ago: executing program 1 (id=1858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xf5, &(0x7f0000000140)=""/245, 0x40f00, 0x19}, 0x94) 1.902145779s ago: executing program 6 (id=1860): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x13, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r2, 0x400}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 1.866354003s ago: executing program 2 (id=1861): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x3, 0x0, 0x0, r0}) 1.817770172s ago: executing program 0 (id=1862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 1.734436152s ago: executing program 3 (id=1863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000001c0)="92fc2d", &(0x7f00000002c0)=""/220}, 0x20) 1.484635482s ago: executing program 6 (id=1864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1.358268687s ago: executing program 0 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0}}, 0x0) 1.357927927s ago: executing program 2 (id=1866): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x6, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x1, 0x0, 0x4, 0x0, 0x0, 0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) close(r0) 1.35765256s ago: executing program 3 (id=1867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb3ce948140ba8a07, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) 1.148371313s ago: executing program 0 (id=1868): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x771c, &(0x7f0000000040)={0x0, 0xef48, 0x48, 0x2, 0x10e}, &(0x7f0000000380), &(0x7f00000003c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000004000000070000000c000180060001000a0000004c9c374061fb6f5827e3df26e1fce08d1481a79e2a618fd85c87be61522470bb5ba7675d36f0e1f6475017728fc4beb43c7fbf50496ce632658bf3e72b9a491232e7f3633205673685ace43b927bde2d484c01c211896fc4eca725a07de3a7c195bad903f10fa5dc0c3a49872532d03d2d0b17e24271a0f05992a734b4af91fb4032968d4e974ff32157859babb6b25a1a3f68e6c38777b3157c6b44bb790a147f41bf26be43e19a0d55e0c66ca58a1919dd4133b3d2e9c7ba39dc2627668bd8112d25242e59799e1e92c52a82fb51a2", @ANYBLOB="3f57e2538cc2735c835ba989534dadf419e1494f881564520347fcbba9ae28f366b201e76fea28c7fa4bdd63013058b5f1a6e5f67cf2a9545c0f21a5e62cbdd3a403cd1f351a036ebad34d8ecd54d8c2ad4c70233019fe8d877bca57fac538bf4efb87fb5a7fe9bd504c39da77745b89f657bcb3b39079135fd7795372a2355f00dbdfe5634cc0113125409f82ab730d431c3a397f589a8e6c8bced8ddaa25fea3fed0187b3ad8744a11e9fa5d902a828beebc017716390bb75b989da306002339a4c43d426e7fa7d9ada94563"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1000f) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r9, 0x8943, &(0x7f0000000000)) 1.027220972s ago: executing program 3 (id=1869): r0 = socket$pptp(0x18, 0x1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 970.100058ms ago: executing program 2 (id=1870): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x12c, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000180)) 623.320943ms ago: executing program 2 (id=1871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) fcntl$notify(r2, 0x402, 0x8000003d) 580.290714ms ago: executing program 0 (id=1872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000400000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c00008008000340000000021400000011"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 534.106849ms ago: executing program 3 (id=1873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000002000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 372.690936ms ago: executing program 6 (id=1874): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075e, 0x80}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x0) 261.450524ms ago: executing program 2 (id=1875): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000411, &(0x7f0000000f40)={[{@grpid}, {@grpquota}, {@test_dummy_encryption}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x19, 0x22, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0xe, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4}, @jmp={0x5, 0x0, 0xc, 0x3, 0x7, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdf}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x800}, @ldst={0x1, 0x1, 0x4, 0x5, 0x3, 0x6}]}, &(0x7f0000000200)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x9, 0x6, 0x685a0e7b}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000dc0)=[r0], &(0x7f0000000e00)=[{0x3, 0x3, 0x4, 0x1}, {0x5, 0x5, 0x10, 0xb}, {0x3, 0x1, 0x9, 0x3}, {0x2, 0x4, 0x5, 0x1}, {0x3, 0x3, 0x3, 0x4}, {0x5, 0x1, 0x7, 0xa}, {0x1, 0x3, 0x7, 0xc}], 0x10, 0x99a}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f00000004c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@resgid}, {@barrier}, {@nombcache}]}, 0x0, 0x47c, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) msync(&(0x7f00007f9000/0x1000)=nil, 0x1000, 0x4) 222.977944ms ago: executing program 0 (id=1876): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 82.139188ms ago: executing program 6 (id=1877): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') stat(&(0x7f0000002240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 14.691866ms ago: executing program 0 (id=1878): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000800850000006d000000850000000800000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 0s ago: executing program 3 (id=1879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000008000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x8}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/34, 0x22}], 0x1}, 0x96d}], 0x1, 0x40, 0x0) kernel console output (not intermixed with test programs): etlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 263.698714][ T8313] syzkaller0: entered promiscuous mode [ 263.705824][ T8313] syzkaller0: entered allmulticast mode [ 263.712179][ T8313] tipc: Resetting bearer [ 263.719776][ T8227] lo speed is unknown, defaulting to 1000 [ 263.765026][ T8308] tipc: Resetting bearer [ 264.748906][ T8308] tipc: Disabling bearer [ 264.778772][ T8318] tipc: Enabled bearer , priority 0 [ 264.849149][ T8322] syzkaller0: entered promiscuous mode [ 264.865346][ T8322] syzkaller0: entered allmulticast mode [ 264.874612][ T8322] tipc: Resetting bearer [ 264.957285][ T4993] tipc: Resetting bearer [ 264.969315][ T8227] lo speed is unknown, defaulting to 1000 [ 264.980864][ T8317] tipc: Resetting bearer [ 264.993332][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 265.347440][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.353951][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.446850][ T8350] binfmt_misc: register: failed to install interpreter file ./file0 [ 266.592131][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 266.705378][ T8360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.748'. [ 267.138472][ T8317] tipc: Disabling bearer [ 267.148739][ T8227] lo speed is unknown, defaulting to 1000 [ 267.150760][ T8332] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 267.172222][ T8332] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 267.186348][ T8332] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 268.499843][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 268.499866][ T30] audit: type=1326 audit(1760032105.736:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 268.573229][ T30] audit: type=1326 audit(1760032105.776:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 268.599365][ T30] audit: type=1326 audit(1760032105.776:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 268.641947][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.757'. [ 268.651177][ T30] audit: type=1326 audit(1760032105.776:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 268.671619][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.757'. [ 268.673699][ T30] audit: type=1326 audit(1760032105.776:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 268.704634][ T30] audit: type=1326 audit(1760032105.776:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 268.726985][ T30] audit: type=1326 audit(1760032105.776:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 268.749835][ T30] audit: type=1326 audit(1760032105.776:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 268.774060][ T30] audit: type=1326 audit(1760032105.776:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 268.796485][ T30] audit: type=1326 audit(1760032105.776:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 269.749044][ T8379] tipc: Enabling of bearer rejected, failed to enable media [ 269.768729][ T8404] tipc: Enabling of bearer rejected, failed to enable media [ 269.787915][ T8227] lo speed is unknown, defaulting to 1000 [ 270.331423][ T8417] bridge_slave_0: left allmulticast mode [ 270.352158][ T8417] bridge_slave_0: left promiscuous mode [ 270.365648][ T8417] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.055598][ T8426] netlink: 'syz.6.769': attribute type 10 has an invalid length. [ 271.063389][ T8426] netlink: 40 bytes leftover after parsing attributes in process `syz.6.769'. [ 271.152179][ T8417] bridge_slave_1: left allmulticast mode [ 271.170880][ T8417] bridge_slave_1: left promiscuous mode [ 271.199110][ T8417] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.251804][ T8417] bond0: (slave bond_slave_0): Releasing backup interface [ 271.266959][ T8417] bond0: (slave bond_slave_1): Releasing backup interface [ 271.292387][ T8417] team0: Port device team_slave_0 removed [ 271.317386][ T8417] team0: Port device team_slave_1 removed [ 271.324084][ T8417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.325477][ T8417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.342109][ T8417] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 271.377774][ T8426] batman_adv: batadv0: Adding interface: virt_wifi0 [ 271.385066][ T8426] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.411678][ T8426] batman_adv: batadv0: Interface activated: virt_wifi0 [ 271.424984][ T8227] lo speed is unknown, defaulting to 1000 [ 271.623185][ T8438] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 271.623185][ T8438] program syz.1.776 not setting count and/or reply_len properly [ 272.553778][ T8458] loop2: detected capacity change from 0 to 128 [ 272.580481][ T8458] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.633651][ T8458] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 272.897844][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.115159][ T8449] tipc: Enabled bearer , priority 0 [ 274.243273][ T8453] syzkaller0: entered promiscuous mode [ 274.270784][ T8453] syzkaller0: entered allmulticast mode [ 274.287100][ T8453] tipc: Resetting bearer [ 274.300174][ T8481] loop3: detected capacity change from 0 to 128 [ 274.347574][ T8481] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.394961][ T8481] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 274.424840][ T8483] loop5: detected capacity change from 0 to 512 [ 274.432933][ T8483] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.503206][ T13] tipc: Resetting bearer [ 274.515779][ T8448] tipc: Resetting bearer [ 274.573781][ T5837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.976974][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz.5.796'. [ 275.394490][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 275.394516][ T30] audit: type=1326 audit(1760032112.626:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 275.454029][ T30] audit: type=1326 audit(1760032112.626:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 275.509798][ T30] audit: type=1326 audit(1760032112.626:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 275.559202][ T30] audit: type=1326 audit(1760032112.626:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 275.596819][ T30] audit: type=1326 audit(1760032112.626:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 275.619530][ T30] audit: type=1326 audit(1760032112.666:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 275.642839][ T30] audit: type=1326 audit(1760032112.666:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 275.665339][ T30] audit: type=1326 audit(1760032112.666:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 275.687710][ T30] audit: type=1326 audit(1760032112.666:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 275.710185][ T30] audit: type=1326 audit(1760032112.666:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 276.249771][ T8448] tipc: Disabling bearer [ 276.260934][ T8509] tipc: Enabling of bearer rejected, failed to enable media [ 276.637199][ T8523] random: crng reseeded on system resumption [ 276.795095][ T8531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.810'. [ 279.730893][ T8589] loop5: detected capacity change from 0 to 2048 [ 279.733514][ T8552] tipc: Enabled bearer , priority 0 [ 279.863576][ T8556] syzkaller0: entered promiscuous mode [ 279.914551][ T8556] syzkaller0: entered allmulticast mode [ 279.915828][ T8597] rdma_rxe: rxe_newlink: failed to add lo [ 279.920786][ T8556] tipc: Resetting bearer [ 279.933733][ T8589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.032362][ T8565] syzkaller0: entered promiscuous mode [ 280.038524][ T8565] syzkaller0: entered allmulticast mode [ 280.046354][ T8550] tipc: Resetting bearer [ 280.067436][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.117348][ T8623] loop1: detected capacity change from 0 to 128 [ 281.235757][ T8625] syz.1.837: attempt to access beyond end of device [ 281.235757][ T8625] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 281.272979][ T8625] syz.1.837: attempt to access beyond end of device [ 281.272979][ T8625] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 281.298203][ T8625] syz.1.837: attempt to access beyond end of device [ 281.298203][ T8625] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 281.330346][ T8625] syz.1.837: attempt to access beyond end of device [ 281.330346][ T8625] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 281.348381][ T8625] syz.1.837: attempt to access beyond end of device [ 281.348381][ T8625] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 281.377492][ T8625] syz.1.837: attempt to access beyond end of device [ 281.377492][ T8625] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 281.906406][ T8550] tipc: Disabling bearer [ 282.178309][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 282.178334][ T30] audit: type=1326 audit(1760032119.416:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 282.209102][ T30] audit: type=1326 audit(1760032119.416:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 282.231465][ T30] audit: type=1326 audit(1760032119.416:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 282.254489][ T30] audit: type=1326 audit(1760032119.416:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 282.315101][ T30] audit: type=1326 audit(1760032119.416:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 282.350454][ T30] audit: type=1326 audit(1760032119.416:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 282.372982][ T30] audit: type=1326 audit(1760032119.426:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 282.395750][ T30] audit: type=1326 audit(1760032119.446:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 282.418396][ T30] audit: type=1326 audit(1760032119.446:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 282.440877][ T30] audit: type=1326 audit(1760032119.446:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 283.828226][ T8597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.838770][ T8597] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.853129][ T8597] 0ªX¹¦À: left allmulticast mode [ 283.858334][ T8597] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 283.904510][ T8604] tipc: Enabling of bearer rejected, failed to enable media [ 284.171737][ T8659] netlink: 52 bytes leftover after parsing attributes in process `syz.0.848'. [ 284.404526][ T8666] tipc: Enabled bearer , priority 0 [ 284.434653][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.5.856'. [ 284.493439][ T8666] syzkaller0: entered promiscuous mode [ 284.499114][ T8666] syzkaller0: entered allmulticast mode [ 284.505508][ T8666] tipc: Resetting bearer [ 284.613704][ T8665] tipc: Resetting bearer [ 287.230588][ T8665] tipc: Disabling bearer [ 287.240955][ T8677] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 287.317048][ T8693] tipc: Enabling of bearer rejected, failed to enable media [ 287.551923][ T8711] tipc: Enabled bearer , priority 0 [ 287.560849][ T8711] syzkaller0: entered promiscuous mode [ 287.566394][ T8711] syzkaller0: entered allmulticast mode [ 287.672299][ T8716] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 287.733874][ T8710] tipc: Resetting bearer [ 287.884609][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 287.884634][ T30] audit: type=1326 audit(1760032125.116:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2854d8eec9 code=0x7ffc0000 [ 287.951653][ T30] audit: type=1326 audit(1760032125.156:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2854d8eec9 code=0x7ffc0000 [ 287.975145][ T30] audit: type=1326 audit(1760032125.156:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2854d8eec9 code=0x7ffc0000 [ 287.997737][ T30] audit: type=1326 audit(1760032125.156:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2854d8eec9 code=0x7ffc0000 [ 288.032337][ T8710] tipc: Disabling bearer [ 288.320099][ T30] audit: type=1326 audit(1760032125.156:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2854d8eec9 code=0x7ffc0000 [ 288.350991][ T30] audit: type=1326 audit(1760032125.156:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2854d8eec9 code=0x7ffc0000 [ 288.402186][ T30] audit: type=1326 audit(1760032125.156:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2854d8eec9 code=0x7ffc0000 [ 288.431789][ T30] audit: type=1326 audit(1760032125.156:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2854d8eec9 code=0x7ffc0000 [ 288.459626][ T30] audit: type=1326 audit(1760032125.156:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2854d8eec9 code=0x7ffc0000 [ 288.520315][ T8731] IPv6: NLM_F_CREATE should be specified when creating new route [ 288.529462][ T30] audit: type=1326 audit(1760032125.156:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2854d8eec9 code=0x7ffc0000 [ 288.903388][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.878'. [ 288.970454][ T8747] netlink: 60 bytes leftover after parsing attributes in process `syz.0.881'. [ 289.033601][ T8747] IPVS: Unknown mcast interface: vet [ 289.524829][ T8760] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 291.579523][ T8774] loop5: detected capacity change from 0 to 128 [ 291.640162][ T8774] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 291.694974][ T8774] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 292.049560][ T8783] netlink: 'syz.3.893': attribute type 39 has an invalid length. [ 292.092990][ T5836] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.230688][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.894'. [ 293.927521][ T8786] tipc: Enabling of bearer rejected, failed to enable media [ 293.947534][ T8808] netlink: 96 bytes leftover after parsing attributes in process `syz.1.898'. [ 294.347924][ T8830] loop6: detected capacity change from 0 to 128 [ 294.353700][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 295.353208][ T8830] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.390359][ T8830] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 296.576654][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 296.576680][ T30] audit: type=1326 audit(1760032133.816:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 296.635478][ T30] audit: type=1326 audit(1760032133.816:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 296.667650][ T30] audit: type=1326 audit(1760032133.816:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 297.277756][ T6833] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.565566][ T8855] lo speed is unknown, defaulting to 1000 [ 297.575473][ T8855] lo speed is unknown, defaulting to 1000 [ 297.641646][ T30] audit: type=1326 audit(1760032133.816:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 297.664064][ T30] audit: type=1326 audit(1760032133.816:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 298.404478][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 298.804534][ T30] audit: type=1326 audit(1760032133.846:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 298.827033][ T30] audit: type=1326 audit(1760032133.846:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 299.356336][ T30] audit: type=1326 audit(1760032133.846:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 299.393381][ T30] audit: type=1326 audit(1760032133.846:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 299.419447][ T8858] netlink: 420 bytes leftover after parsing attributes in process `syz.5.912'. [ 300.010995][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 300.264862][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 300.289615][ T8867] tipc: Enabled bearer , priority 0 [ 300.365959][ T30] audit: type=1326 audit(1760032133.846:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 300.554833][ T8872] syzkaller0: entered promiscuous mode [ 300.584415][ T8872] syzkaller0: entered allmulticast mode [ 300.623768][ T8872] tipc: Resetting bearer [ 300.740442][ T8864] tipc: Resetting bearer [ 302.701124][ T8910] loop1: detected capacity change from 0 to 128 [ 302.717236][ T8910] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.730657][ T8910] ext4 filesystem being mounted at /168/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 302.831540][ T5839] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.922776][ T8864] tipc: Disabling bearer [ 302.981584][ T8896] tipc: Enabled bearer , priority 0 [ 303.997287][ T8897] syzkaller0: entered promiscuous mode [ 304.002816][ T8897] syzkaller0: entered allmulticast mode [ 304.009305][ T8897] tipc: Resetting bearer [ 304.017304][ T8891] tipc: Resetting bearer [ 304.616144][ T8939] netlink: 24 bytes leftover after parsing attributes in process `syz.6.939'. [ 304.633326][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 304.633351][ T30] audit: type=1326 audit(1760032141.856:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 304.662871][ T30] audit: type=1326 audit(1760032141.856:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 304.685934][ T30] audit: type=1326 audit(1760032141.856:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 304.797711][ T30] audit: type=1326 audit(1760032141.856:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 304.821570][ T30] audit: type=1326 audit(1760032141.866:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 304.997123][ T30] audit: type=1326 audit(1760032141.866:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 305.229981][ T30] audit: type=1326 audit(1760032141.866:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 305.301512][ T30] audit: type=1326 audit(1760032141.866:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 305.380620][ T30] audit: type=1326 audit(1760032141.866:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 305.413289][ T30] audit: type=1326 audit(1760032141.866:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 305.482925][ T8946] loop5: detected capacity change from 0 to 128 [ 305.520223][ T8946] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.543667][ T8946] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 305.645386][ T5836] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.757434][ T8891] tipc: Disabling bearer [ 306.768040][ T8917] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 306.788914][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.933'. [ 306.799345][ T8939] IPVS: Unknown mcast interface: vetN1_macvtap [ 306.840626][ T8949] lo speed is unknown, defaulting to 1000 [ 306.848602][ T8949] lo speed is unknown, defaulting to 1000 [ 307.139172][ T8955] syzkaller0: entered promiscuous mode [ 307.144945][ T8955] syzkaller0: entered allmulticast mode [ 307.256186][ T8968] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 308.079806][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 308.141443][ T8977] netlink: 52 bytes leftover after parsing attributes in process `syz.2.947'. [ 308.362370][ T8982] loop6: detected capacity change from 0 to 2048 [ 308.411985][ T8982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.493558][ T8991] loop1: detected capacity change from 0 to 128 [ 308.533195][ T8991] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.556482][ T8991] ext4 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 308.560396][ T6833] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.802854][ T5839] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.929155][ T8999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.957'. [ 309.844517][ T8999] IPVS: Unknown mcast interface: vetN1_macvtap [ 309.940269][ T9002] tipc: Enabled bearer , priority 0 [ 310.036840][ T9004] netlink: 'syz.6.959': attribute type 39 has an invalid length. [ 310.108417][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 310.108442][ T30] audit: type=1326 audit(1760032147.346:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.6.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 310.153616][ T9002] syzkaller0: entered promiscuous mode [ 310.159272][ T9002] syzkaller0: entered allmulticast mode [ 310.165365][ T30] audit: type=1326 audit(1760032147.376:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.6.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 310.188757][ T9002] tipc: Resetting bearer [ 310.470132][ T30] audit: type=1326 audit(1760032147.386:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.6.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 311.102822][ T30] audit: type=1326 audit(1760032147.386:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.6.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 311.125388][ T30] audit: type=1326 audit(1760032147.386:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.6.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 311.164475][ T30] audit: type=1326 audit(1760032147.386:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.6.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 311.251660][ T30] audit: type=1326 audit(1760032147.386:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.6.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 311.294968][ T9001] tipc: Resetting bearer [ 311.301415][ T30] audit: type=1326 audit(1760032147.386:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.6.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 311.323806][ T30] audit: type=1326 audit(1760032147.386:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.6.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 311.363584][ T30] audit: type=1326 audit(1760032147.386:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.6.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 311.520113][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.5.966'. [ 313.129728][ T9001] tipc: Disabling bearer [ 313.197022][ T9059] tipc: Enabling of bearer rejected, failed to enable media [ 314.436461][ T9077] tipc: Enabled bearer , priority 0 [ 314.477007][ T9077] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 314.538372][ T9081] tipc: Resetting bearer [ 314.558673][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.5.982'. [ 314.625069][ T9074] tipc: Disabling bearer [ 314.781051][ T9092] syz.5.984 uses obsolete (PF_INET,SOCK_PACKET) [ 314.816083][ T9092] syzkaller1: entered promiscuous mode [ 314.864555][ T9092] syzkaller1: entered allmulticast mode [ 314.959021][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 314.970552][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.986'. [ 315.041459][ T9096] netlink: 52 bytes leftover after parsing attributes in process `syz.6.986'. [ 315.231056][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 315.231080][ T30] audit: type=1326 audit(1760032152.466:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 315.260617][ T30] audit: type=1326 audit(1760032152.466:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 315.272001][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 315.283419][ T30] audit: type=1326 audit(1760032152.466:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 315.315822][ T30] audit: type=1326 audit(1760032152.466:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 315.339017][ T30] audit: type=1326 audit(1760032152.466:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 315.361627][ T30] audit: type=1326 audit(1760032152.466:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 315.394322][ T9100] IPVS: Unknown mcast interface: ip [ 315.399764][ T30] audit: type=1326 audit(1760032152.466:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 315.427151][ T9102] tipc: Enabled bearer , priority 0 [ 315.463253][ T30] audit: type=1326 audit(1760032152.466:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 315.536530][ T30] audit: type=1326 audit(1760032152.476:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 315.574922][ T9102] syzkaller0: entered promiscuous mode [ 315.600921][ T9102] syzkaller0: entered allmulticast mode [ 315.604554][ T30] audit: type=1326 audit(1760032152.476:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 315.629753][ T9102] tipc: Resetting bearer [ 315.710492][ T9101] tipc: Resetting bearer [ 318.528833][ T9101] tipc: Disabling bearer [ 318.577673][ T9116] tipc: Enabled bearer , priority 0 [ 318.631586][ T9118] syzkaller0: entered promiscuous mode [ 318.637736][ T9118] syzkaller0: entered allmulticast mode [ 318.644893][ T9118] tipc: Resetting bearer [ 318.699391][ T9141] tipc: Enabled bearer , priority 0 [ 318.709084][ T9141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 318.719970][ T9141] tipc: Resetting bearer [ 318.750427][ T9140] tipc: Disabling bearer [ 318.931002][ T9145] netlink: 'syz.3.1000': attribute type 39 has an invalid length. [ 319.630959][ T4993] tipc: Resetting bearer [ 319.638795][ T9110] tipc: Resetting bearer [ 319.737270][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1002'. [ 319.790360][ T9153] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1002'. [ 319.888772][ T9155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1003'. [ 320.499277][ T9110] tipc: Disabling bearer [ 320.568810][ T9155] IPVS: Unknown mcast interface: ip [ 320.770021][ T9161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1006'. [ 320.850217][ T9163] tipc: Enabling of bearer rejected, failed to enable media [ 321.125825][ T9180] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1015'. [ 322.217604][ T9194] netlink: 'syz.5.1019': attribute type 39 has an invalid length. [ 322.241809][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'. [ 322.256691][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 322.256714][ T30] audit: type=1326 audit(1760032159.496:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9193 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 322.296593][ T9198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1021'. [ 322.308341][ T9196] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1020'. [ 322.314581][ T9198] IPVS: Unknown mcast interface: ip [ 322.345061][ T30] audit: type=1326 audit(1760032159.496:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9193 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 322.419912][ T30] audit: type=1326 audit(1760032159.496:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9193 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 322.513980][ T30] audit: type=1326 audit(1760032159.496:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9193 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 322.565096][ T30] audit: type=1326 audit(1760032159.496:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9193 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 322.634506][ T30] audit: type=1326 audit(1760032159.496:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9193 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 322.710271][ T30] audit: type=1326 audit(1760032159.496:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9193 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 322.741940][ T9207] tipc: Enabled bearer , priority 0 [ 322.750338][ T9209] loop1: detected capacity change from 0 to 1764 [ 322.775464][ T9209] iso9660: Unknown parameter 'no' [ 322.784486][ T30] audit: type=1326 audit(1760032159.496:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9193 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 322.845594][ T9207] syzkaller0: entered promiscuous mode [ 322.852395][ T9207] syzkaller0: entered allmulticast mode [ 322.858711][ T9207] tipc: Resetting bearer [ 322.895748][ T30] audit: type=1326 audit(1760032159.496:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9193 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 322.948579][ T30] audit: type=1326 audit(1760032159.496:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9193 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 322.972650][ T9206] tipc: Resetting bearer [ 324.501237][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1036'. [ 325.203794][ T9206] tipc: Disabling bearer [ 325.364489][ T9248] IPVS: Unknown mcast interface: ipvla [ 325.461574][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1038'. [ 325.525028][ T9255] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1038'. [ 325.699960][ T9266] program syz.1.1043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.803106][ T9270] SET target dimension over the limit! [ 325.846794][ T9275] siw: device registration error -23 [ 326.067423][ T9283] tipc: Enabled bearer , priority 0 [ 326.568729][ T9290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1052'. [ 326.765671][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.772272][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.973399][ T9283] syzkaller0: entered promiscuous mode [ 326.992917][ T9283] syzkaller0: entered allmulticast mode [ 327.012927][ T9283] tipc: Resetting bearer [ 327.157085][ T1139] tipc: Resetting bearer [ 327.163175][ T9290] IPVS: Unknown mcast interface: ipvla [ 327.188584][ T9281] tipc: Resetting bearer [ 327.725198][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1059'. [ 327.792636][ T9315] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1059'. [ 328.245241][ T9281] tipc: Disabling bearer [ 328.255265][ T9300] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1055'. [ 328.556293][ T9321] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1061'. [ 329.845251][ T9352] syzkaller0: entered promiscuous mode [ 329.865510][ T9352] syzkaller0: entered allmulticast mode [ 329.891964][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1077'. [ 329.934950][ T9352] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 329.953578][ T9361] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1077'. [ 330.100210][ T9368] loop5: detected capacity change from 0 to 256 [ 330.132488][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 330.132514][ T30] audit: type=1800 audit(1760032167.366:1356): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1081" name="file1" dev="loop5" ino=1048620 res=0 errno=0 [ 330.135127][ T9368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 330.142687][ T30] audit: type=1800 audit(1760032167.366:1357): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1081" name="file1" dev="loop5" ino=1048620 res=0 errno=0 [ 330.165472][ T9368] FAT-fs (loop5): Filesystem has been set read-only [ 330.214904][ T9368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 330.284483][ T9368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 330.325317][ T9368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 330.358417][ T9368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 330.384649][ T9368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 330.407580][ T9368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 330.564899][ T9368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 330.575639][ T9368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 330.589203][ T9368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 331.470515][ T9371] tipc: Enabling of bearer rejected, failed to enable media [ 331.545150][ T9374] team_slave_0: entered promiscuous mode [ 331.564928][ T9374] team_slave_0: left promiscuous mode [ 331.662910][ T30] audit: type=1326 audit(1760032168.896:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 331.755845][ T30] audit: type=1326 audit(1760032168.926:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e71f8d710 code=0x7ffc0000 [ 331.778370][ T30] audit: type=1326 audit(1760032168.926:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5e71f906f7 code=0x7ffc0000 [ 331.805560][ T30] audit: type=1326 audit(1760032168.926:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 331.846473][ T30] audit: type=1326 audit(1760032168.926:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5e71f906f7 code=0x7ffc0000 [ 331.899670][ T30] audit: type=1326 audit(1760032168.926:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5e71f8db2a code=0x7ffc0000 [ 331.922829][ T30] audit: type=1326 audit(1760032168.926:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 331.945360][ T30] audit: type=1326 audit(1760032168.926:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5e71f8db2a code=0x7ffc0000 [ 332.032050][ T9396] loop3: detected capacity change from 0 to 2048 [ 332.139811][ T9396] loop3: p1 < > p4 [ 332.161640][ T9396] loop3: p4 size 8388608 extends beyond EOD, truncated [ 332.232804][ T9396] syzkaller0: entered promiscuous mode [ 332.240866][ T9396] syzkaller0: entered allmulticast mode [ 332.292749][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1095'. [ 332.351318][ T9410] netlink: 'syz.6.1096': attribute type 39 has an invalid length. [ 332.351936][ T9407] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1095'. [ 334.220857][ T9427] tipc: Enabled bearer , priority 0 [ 334.369194][ T9428] syzkaller0: entered promiscuous mode [ 334.374939][ T9428] syzkaller0: entered allmulticast mode [ 334.381471][ T9428] tipc: Resetting bearer [ 334.538094][ T9424] tipc: Resetting bearer [ 334.690413][ T9450] loop5: detected capacity change from 0 to 1024 [ 334.706028][ T9450] EXT4-fs: Ignoring removed orlov option [ 334.784156][ T9450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.852452][ T9458] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.218181][ T9424] tipc: Disabling bearer [ 337.279861][ T9453] lo speed is unknown, defaulting to 1000 [ 337.311625][ T9453] lo speed is unknown, defaulting to 1000 [ 337.348188][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.539345][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1116'. [ 337.579413][ T9479] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1116'. [ 337.615263][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 337.635811][ T9480] netlink: 'syz.1.1115': attribute type 39 has an invalid length. [ 337.644873][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 337.696824][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 337.696847][ T30] audit: type=1326 audit(1760032174.936:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 337.781677][ T30] audit: type=1326 audit(1760032174.936:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 337.839067][ T30] audit: type=1326 audit(1760032174.936:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 337.890287][ T30] audit: type=1326 audit(1760032174.936:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 337.966837][ T30] audit: type=1326 audit(1760032174.936:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 338.025924][ T30] audit: type=1326 audit(1760032174.936:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 338.082940][ T30] audit: type=1326 audit(1760032174.936:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 338.139220][ T30] audit: type=1326 audit(1760032174.936:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 338.193401][ T30] audit: type=1326 audit(1760032174.936:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 338.218057][ T30] audit: type=1326 audit(1760032174.936:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 340.535065][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'. [ 340.625931][ T9526] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1130'. [ 340.641018][ T9525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1131'. [ 341.230584][ T9534] netlink: 'syz.0.1135': attribute type 39 has an invalid length. [ 341.631414][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 341.881088][ T9542] IPv6: NLM_F_CREATE should be specified when creating new route [ 342.493126][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 344.924957][ T9590] netlink: 'syz.1.1157': attribute type 39 has an invalid length. [ 344.988268][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 344.988294][ T30] audit: type=1326 audit(1760032182.226:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9589 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 345.314920][ T30] audit: type=1326 audit(1760032182.226:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9589 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 345.364478][ T30] audit: type=1326 audit(1760032182.226:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9589 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 345.412737][ T30] audit: type=1326 audit(1760032182.226:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9589 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 345.483061][ T30] audit: type=1326 audit(1760032182.226:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9589 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 345.584512][ T30] audit: type=1326 audit(1760032182.226:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9589 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 345.634526][ T30] audit: type=1326 audit(1760032182.236:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9589 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 345.704513][ T30] audit: type=1326 audit(1760032182.236:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9589 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 345.759565][ T9608] ieee802154 phy0 wpan0: encryption failed: -22 [ 345.766133][ T30] audit: type=1326 audit(1760032182.236:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9589 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 345.831559][ T30] audit: type=1326 audit(1760032182.236:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9589 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 346.256539][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1161'. [ 346.297317][ T9610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1161'. [ 348.997900][ T9641] netlink: 'syz.1.1170': attribute type 5 has an invalid length. [ 349.012453][ T9617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.126656][ T9617] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.236293][ T9617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.373365][ T9607] lo speed is unknown, defaulting to 1000 [ 349.439101][ T9607] lo speed is unknown, defaulting to 1000 [ 350.277354][ T5935] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 350.454470][ T5935] usb 7-1: Using ep0 maxpacket: 32 [ 350.464515][ T5935] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.485048][ T5935] usb 7-1: config 1 interface 0 has no altsetting 0 [ 350.501106][ T5935] usb 7-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 350.544468][ T5935] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.552531][ T5935] usb 7-1: Product: ᶯ‚᪈ë„襥꠰废᪎謬不熳⮫ꤾ嗬⊚䔤町闯ã£ï°„鹔쓑䚄陲碈벥̊歷ë䩞懰㠤ä›ã·è¬ƒá è…¼î¾šâ¯£â¦€êš›â°¶ã‘¯åª¦á£‰ï¶Žä°­á¹£è²ƒã¼šâ‚€é„‹è¨£çŽ¤æ…¢ì´‹á“·çššï™”ê‰˜ïœƒá­…ì°›î³´â´¢æ°‡ç‡¶å¾ˆãµ—ä¥¼æŒî­ å¤ªí•‰ïƒ‹â¡¾å²…屮 [ 351.344289][ T5935] usb 7-1: SerialNumber: 䌑⦎âˆê—Šë™šá†§á¨¸æµá˜‡ê°¨æŒŒä³á½”皟ᴯ뻮䨡ഠ煖붘ä±å”¢â•¨å‹”酑⌔ç¬ìµå¦…뺡ï¼áŠ²æ“‘ã¦ êƒ¾ï¢µï¦å¿•冄â®ã¿ã¾¼ì–½ë€ê²î±£á »âœœî»’짜꙰⦡䫀ê¸â© ê»¢é€å—ç¼æ”¿ëŒ‹â‰ï¿“ᣪ匱了䷚햨㹡ê¼á…»é—˜ã‰¤è­¢ [ 351.566268][ T9674] netlink: 'syz.5.1182': attribute type 39 has an invalid length. [ 351.575393][ T9675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1183'. [ 351.597343][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 351.597368][ T30] audit: type=1326 audit(1760032188.836:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 351.719876][ T30] audit: type=1326 audit(1760032188.866:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 351.788204][ T9677] loop2: detected capacity change from 0 to 4096 [ 351.834327][ T30] audit: type=1326 audit(1760032188.866:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 351.884631][ T5935] usbhid 7-1:1.0: can't add hid device: -71 [ 351.900951][ T5935] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 351.944056][ T30] audit: type=1326 audit(1760032188.866:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 351.944245][ T9677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.966678][ T30] audit: type=1326 audit(1760032188.866:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 351.966760][ T30] audit: type=1326 audit(1760032188.866:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 352.034687][ T5935] usb 7-1: USB disconnect, device number 2 [ 352.039157][ T30] audit: type=1326 audit(1760032188.866:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 352.077278][ T30] audit: type=1326 audit(1760032188.866:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 352.112138][ T30] audit: type=1326 audit(1760032188.866:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 352.173934][ T30] audit: type=1326 audit(1760032188.866:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.5.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 353.179980][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.980463][ T9724] loop3: detected capacity change from 0 to 512 [ 354.049286][ T9724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.154644][ T9724] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.351374][ T9737] ieee802154 phy0 wpan0: encryption failed: -22 [ 355.230416][ T9728] lo speed is unknown, defaulting to 1000 [ 355.238766][ T9728] lo speed is unknown, defaulting to 1000 [ 357.101002][ T9759] loop2: detected capacity change from 0 to 256 [ 357.158379][ T9759] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 357.427634][ T9765] loop6: detected capacity change from 0 to 4096 [ 357.440509][ T9765] EXT4-fs: Ignoring removed nomblk_io_submit option [ 357.448184][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.482314][ T9765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.016613][ T6833] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.499117][ T9774] loop3: detected capacity change from 0 to 136 [ 358.515349][ T9774] Attempt to read inode for relocated directory [ 358.735803][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 358.735829][ T30] audit: type=1326 audit(1760032195.976:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 358.781414][ T30] audit: type=1326 audit(1760032196.006:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 358.804983][ T30] audit: type=1326 audit(1760032196.006:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 358.894489][ T30] audit: type=1326 audit(1760032196.006:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 358.938325][ T9794] loop3: detected capacity change from 0 to 256 [ 358.941143][ T30] audit: type=1326 audit(1760032196.016:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 358.977522][ T30] audit: type=1326 audit(1760032196.016:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 359.003593][ T30] audit: type=1326 audit(1760032196.016:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 359.027730][ T30] audit: type=1326 audit(1760032196.016:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 359.051231][ T30] audit: type=1326 audit(1760032196.016:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 359.093184][ T30] audit: type=1326 audit(1760032196.016:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5e71f8eec9 code=0x7ffc0000 [ 360.414033][ T9816] netlink: 'syz.3.1231': attribute type 39 has an invalid length. [ 360.471263][ T9810] lo speed is unknown, defaulting to 1000 [ 360.506564][ T9810] lo speed is unknown, defaulting to 1000 [ 361.348355][ T9813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 361.564839][ T9813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.570992][ T9813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.618097][ T9813] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 361.655772][ T9813] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 361.701037][ T9813] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 361.764719][ T9813] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 361.841440][ T9834] loop5: detected capacity change from 0 to 256 [ 362.449556][ T9842] lo speed is unknown, defaulting to 1000 [ 362.474500][ T9842] lo speed is unknown, defaulting to 1000 [ 363.654696][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 363.661236][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 363.667662][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 363.714661][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 363.721572][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 365.613176][ T30] kauditd_printk_skb: 387 callbacks suppressed [ 365.613201][ T30] audit: type=1326 audit(1760032202.846:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 365.683105][ T30] audit: type=1326 audit(1760032202.846:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 365.709901][ T30] audit: type=1326 audit(1760032202.846:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 365.754589][ T30] audit: type=1326 audit(1760032202.886:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 365.796291][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 365.842627][ T30] audit: type=1326 audit(1760032202.886:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 365.866966][ T9865] tipc: Enabled bearer , priority 0 [ 365.879393][ T9870] netlink: 'syz.6.1249': attribute type 39 has an invalid length. [ 365.887814][ T30] audit: type=1326 audit(1760032202.886:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 365.911114][ T30] audit: type=1326 audit(1760032202.886:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 365.934062][ T30] audit: type=1326 audit(1760032202.916:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 365.961810][ T30] audit: type=1326 audit(1760032202.916:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 365.985178][ T30] audit: type=1326 audit(1760032202.916:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 366.060514][ T9873] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.069886][ T9859] tipc: Resetting bearer [ 366.261611][ T9877] serio: Serial port ttyS3 [ 367.607504][ T9889] loop2: detected capacity change from 0 to 136 [ 367.641806][ T9889] Attempt to read inode for relocated directory [ 367.882360][ T9892] loop2: detected capacity change from 0 to 512 [ 367.936949][ T9892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.954669][ T9892] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.892779][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.303375][ T9859] tipc: Disabling bearer [ 369.330178][ T9899] tipc: Enabled bearer , priority 0 [ 369.376490][ T9908] tipc: Resetting bearer [ 369.413445][ T9871] lo speed is unknown, defaulting to 1000 [ 369.443038][ T9897] tipc: Disabling bearer [ 369.476660][ T9871] lo speed is unknown, defaulting to 1000 [ 369.795755][ T9926] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1266'. [ 370.983249][ T30] kauditd_printk_skb: 537 callbacks suppressed [ 370.983277][ T30] audit: type=1326 audit(1760032207.426:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98d09c1785 code=0x7ffc0000 [ 371.012860][ T30] audit: type=1326 audit(1760032207.426:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98d09c1785 code=0x7ffc0000 [ 371.035358][ T30] audit: type=1326 audit(1760032207.426:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98d09c1785 code=0x7ffc0000 [ 371.057944][ T30] audit: type=1326 audit(1760032207.426:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98d09c1785 code=0x7ffc0000 [ 371.108188][ T30] audit: type=1326 audit(1760032207.436:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98d09c1785 code=0x7ffc0000 [ 371.167893][ T9939] loop5: detected capacity change from 0 to 136 [ 371.187073][ T9939] Attempt to read inode for relocated directory [ 371.194859][ T30] audit: type=1326 audit(1760032207.436:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98d09c1785 code=0x7ffc0000 [ 371.255770][ T30] audit: type=1326 audit(1760032207.456:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98d09c1785 code=0x7ffc0000 [ 371.286527][ T30] audit: type=1326 audit(1760032207.466:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98d09c1785 code=0x7ffc0000 [ 371.309446][ T30] audit: type=1326 audit(1760032207.466:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98d09c1785 code=0x7ffc0000 [ 371.347207][ T30] audit: type=1326 audit(1760032207.656:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98d09c1785 code=0x7ffc0000 [ 372.104971][ T9942] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 372.137428][ T9942] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 372.159491][ T9942] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 372.180618][ T9942] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 372.219422][ T9942] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 372.257676][ T9942] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 373.482811][ T9969] veth2: entered promiscuous mode [ 373.512451][ T9969] veth2: entered allmulticast mode [ 374.194944][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 374.201206][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 374.207316][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 374.376634][ T5142] Bluetooth: hci6: command 0x0406 tx timeout [ 374.383212][ T5142] Bluetooth: hci5: command 0x0c1a tx timeout [ 374.780956][ T9992] loop3: detected capacity change from 0 to 512 [ 374.831135][ T9992] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 376.079865][T10013] loop5: detected capacity change from 0 to 2048 [ 377.171958][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 377.171984][ T30] audit: type=1326 audit(1760032214.406:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 377.223558][ T30] audit: type=1326 audit(1760032214.406:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 377.227097][T10013] loop5: unable to read partition table [ 377.246796][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1302'. [ 377.271876][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1302'. [ 377.294692][ T30] audit: type=1326 audit(1760032214.406:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 377.324891][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1302'. [ 377.326157][T10013] loop5: partition table beyond EOD, truncated [ 377.363078][T10013] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 377.421200][ T30] audit: type=1326 audit(1760032214.406:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 377.505930][ T30] audit: type=1326 audit(1760032214.406:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 377.580142][ T30] audit: type=1326 audit(1760032214.416:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 377.641491][ T30] audit: type=1326 audit(1760032214.416:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 377.720621][ T30] audit: type=1326 audit(1760032214.416:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 377.732486][T10038] tipc: Enabled bearer , priority 0 [ 377.792038][T10038] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 377.801834][ T30] audit: type=1326 audit(1760032214.416:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 377.847246][ T30] audit: type=1326 audit(1760032214.416:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29e178eec9 code=0x7ffc0000 [ 377.849234][T10045] tipc: Resetting bearer [ 377.967283][T10037] tipc: Disabling bearer [ 377.993637][ T6508] IPVS: starting estimator thread 0... [ 378.264573][T10051] IPVS: using max 21 ests per chain, 50400 per kthread [ 379.321573][T10072] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1322'. [ 380.365609][T10086] 9pnet_fd: Insufficient options for proto=fd [ 380.576279][T10096] tipc: Enabled bearer , priority 0 [ 380.604026][T10096] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 380.638663][T10098] tipc: Enabled bearer , priority 0 [ 380.647265][T10096] tipc: Resetting bearer [ 380.771175][T10098] syzkaller0: entered promiscuous mode [ 380.779484][T10098] syzkaller0: entered allmulticast mode [ 380.805139][T10098] tipc: Resetting bearer [ 380.878484][T10094] tipc: Disabling bearer [ 380.901496][T10097] tipc: Resetting bearer [ 381.007248][T10117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1340'. [ 382.956703][T10097] tipc: Disabling bearer [ 383.348764][T10156] loop5: detected capacity change from 0 to 512 [ 383.352913][T10159] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1356'. [ 383.368619][T10156] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 383.495693][T10161] netlink: 'syz.3.1357': attribute type 39 has an invalid length. [ 383.526515][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 383.526540][ T30] audit: type=1326 audit(1760032220.766:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 383.598275][ T30] audit: type=1326 audit(1760032220.796:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 383.623206][T10165] loop6: detected capacity change from 0 to 128 [ 383.650346][ T30] audit: type=1326 audit(1760032220.796:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 383.703496][ T30] audit: type=1326 audit(1760032220.796:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 383.944771][ T30] audit: type=1326 audit(1760032220.796:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 383.989628][ T30] audit: type=1326 audit(1760032220.796:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 384.443083][T10131] team0: Port device netdevsim0 removed [ 384.602298][ T30] audit: type=1326 audit(1760032220.796:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 384.870876][ T30] audit: type=1326 audit(1760032220.796:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 385.034572][ T30] audit: type=1326 audit(1760032220.796:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 385.108426][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 385.176084][ T30] audit: type=1326 audit(1760032220.826:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 385.549350][T10191] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1368'. [ 386.260279][T10195] loop2: detected capacity change from 0 to 512 [ 386.452595][T10195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.487502][T10198] tipc: Enabled bearer , priority 0 [ 386.524623][T10195] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.554850][T10198] syzkaller0: entered promiscuous mode [ 386.561293][T10198] syzkaller0: entered allmulticast mode [ 386.568736][T10198] tipc: Resetting bearer [ 386.591144][T10205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1373'. [ 386.631130][T10195] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1370: corrupted xattr block 33: e_value out of bounds [ 386.674921][T10197] tipc: Resetting bearer [ 386.789209][T10201] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 386.903860][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.105099][T10233] IPv6: NLM_F_CREATE should be specified when creating new route [ 388.164573][T10236] loop6: detected capacity change from 0 to 164 [ 388.201309][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.288226][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.395711][T10236] ISOFS: unable to read i-node block [ 388.420774][T10236] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 389.986820][T10253] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1393'. [ 390.455626][T10197] tipc: Disabling bearer [ 390.979592][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 390.979616][ T30] audit: type=1326 audit(1760032228.216:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 391.037513][ T30] audit: type=1326 audit(1760032228.256:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 391.083122][T10285] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1402'. [ 391.095105][ T30] audit: type=1326 audit(1760032228.256:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 391.157165][ T30] audit: type=1326 audit(1760032228.256:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 391.257326][ T30] audit: type=1326 audit(1760032228.256:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 391.305398][T10270] loop2: detected capacity change from 0 to 1024 [ 391.335123][ T30] audit: type=1326 audit(1760032228.256:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 391.379862][T10264] lo speed is unknown, defaulting to 1000 [ 391.411947][ T30] audit: type=1326 audit(1760032228.256:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 391.434085][T10264] lo speed is unknown, defaulting to 1000 [ 391.434423][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.029056][ T30] audit: type=1326 audit(1760032228.256:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 392.051734][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.199932][ T30] audit: type=1326 audit(1760032228.256:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 392.325958][T10270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.335052][ T30] audit: type=1326 audit(1760032228.256:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 392.622879][T10308] loop6: detected capacity change from 0 to 2048 [ 392.711432][T10313] loop3: detected capacity change from 0 to 512 [ 392.719516][T10313] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 392.929684][T10318] loop5: detected capacity change from 0 to 164 [ 392.947779][T10318] ISOFS: unable to read i-node block [ 392.965422][T10318] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 393.115173][T10308] loop6: unable to read partition table [ 393.137108][T10308] loop6: partition table beyond EOD, truncated [ 393.154883][T10308] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 393.555916][T10337] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1421'. [ 393.900456][T10348] loop1: detected capacity change from 0 to 256 [ 393.997158][T10348] FAT-fs (loop1): Directory bread(block 64) failed [ 394.003750][T10348] FAT-fs (loop1): Directory bread(block 65) failed [ 394.013804][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.036291][T10348] FAT-fs (loop1): Directory bread(block 66) failed [ 394.044615][T10348] FAT-fs (loop1): Directory bread(block 67) failed [ 394.083020][T10348] FAT-fs (loop1): Directory bread(block 68) failed [ 394.126467][T10348] FAT-fs (loop1): Directory bread(block 69) failed [ 394.133173][T10348] FAT-fs (loop1): Directory bread(block 70) failed [ 394.168804][T10348] FAT-fs (loop1): Directory bread(block 71) failed [ 394.184722][T10348] FAT-fs (loop1): Directory bread(block 72) failed [ 394.200876][T10348] FAT-fs (loop1): Directory bread(block 73) failed [ 394.327877][T10363] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1432'. [ 395.146848][T10397] loop6: detected capacity change from 0 to 512 [ 395.154222][T10397] EXT4-fs: Ignoring removed mblk_io_submit option [ 395.204598][T10397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 395.225455][T10397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 395.233946][T10397] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 395.298169][T10397] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4192: comm syz.6.1445: Allocating blocks 41-42 which overlap fs metadata [ 395.322712][T10405] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1447'. [ 395.333829][T10397] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4192: comm syz.6.1445: Allocating blocks 41-42 which overlap fs metadata [ 395.415901][T10397] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.1445: Failed to acquire dquot type 1 [ 395.480837][T10397] EXT4-fs error (device loop6): mb_free_blocks:2014: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 395.527691][T10397] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.1445: corrupted inode contents [ 395.547339][T10397] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #12: comm syz.6.1445: mark_inode_dirty error [ 395.570117][T10414] loop2: detected capacity change from 0 to 164 [ 395.592804][T10414] ISOFS: unable to read i-node block [ 395.603931][T10414] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 395.615086][T10397] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.1445: corrupted inode contents [ 395.644305][T10397] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.1445: mark_inode_dirty error [ 395.675967][T10397] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.1445: corrupted inode contents [ 395.688730][T10417] tipc: Enabling of bearer rejected, failed to enable media [ 395.715515][T10397] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 395.737081][T10421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1453'. [ 395.748800][T10397] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.1445: corrupted inode contents [ 395.782200][T10397] EXT4-fs error (device loop6): ext4_truncate:4637: inode #12: comm syz.6.1445: mark_inode_dirty error [ 395.830704][T10397] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 395.857375][T10397] EXT4-fs (loop6): 1 truncate cleaned up [ 395.887727][T10397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.006907][T10397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 396.162357][T10397] __quota_error: 50 callbacks suppressed [ 396.162385][T10397] Quota error (device loop6): write_blk: dquota write failed [ 396.254674][T10397] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 396.334627][T10397] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.1445: Failed to acquire dquot type 1 [ 396.459262][T10444] Driver unsupported XDP return value 0 on prog (id 682) dev N/A, expect packet loss! [ 396.487082][ T30] audit: type=1326 audit(1760032233.726:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 396.487104][ T6833] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.561030][ T30] audit: type=1326 audit(1760032233.766:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 396.627071][ T30] audit: type=1326 audit(1760032233.766:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 396.709077][ T30] audit: type=1326 audit(1760032233.766:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 397.229790][T10473] tipc: Enabling of bearer rejected, failed to enable media [ 398.123722][T10504] netlink: 'syz.5.1486': attribute type 39 has an invalid length. [ 398.262838][ T30] audit: type=1326 audit(1760032235.496:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10507 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 398.320571][ T30] audit: type=1326 audit(1760032235.526:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10507 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 398.414511][ T30] audit: type=1326 audit(1760032235.526:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10507 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 398.505544][ T30] audit: type=1326 audit(1760032235.586:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10507 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 398.664692][T10522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1492'. [ 398.683865][T10524] netlink: 'syz.2.1491': attribute type 12 has an invalid length. [ 398.739148][T10524] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1491'. [ 398.765609][T10524] ksmbd: Unknown IPC event: 4, ignore. [ 399.360241][T10545] loop6: detected capacity change from 0 to 512 [ 399.376883][T10541] netlink: 'syz.5.1501': attribute type 39 has an invalid length. [ 399.410465][T10545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.435062][T10545] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.806274][T10561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1509'. [ 400.083206][T10568] loop1: detected capacity change from 0 to 164 [ 400.107985][T10568] ISOFS: unable to read i-node block [ 400.133828][T10568] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 400.253724][ T6833] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.273963][T10597] lo speed is unknown, defaulting to 1000 [ 401.281901][T10597] lo speed is unknown, defaulting to 1000 [ 401.785842][T10605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1526'. [ 401.913273][T10610] loop6: detected capacity change from 0 to 164 [ 401.925155][T10608] loop1: detected capacity change from 0 to 128 [ 402.001100][T10610] ISOFS: unable to read i-node block [ 402.018201][T10610] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 402.038208][T10608] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 402.138143][T10608] ext4 filesystem being mounted at /264/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 402.360341][ T5839] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 402.860779][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 402.860805][ T30] audit: type=1326 audit(1760032240.096:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 402.959185][T10638] tipc: Enabled bearer , priority 0 [ 402.961846][ T30] audit: type=1326 audit(1760032240.106:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 403.007796][T10644] loop5: detected capacity change from 0 to 164 [ 403.019016][T10644] ISOFS: unable to read i-node block [ 403.024805][ T30] audit: type=1326 audit(1760032240.106:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 403.047688][T10644] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 403.071276][ T30] audit: type=1326 audit(1760032240.106:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 403.122324][T10638] syzkaller0: entered promiscuous mode [ 403.132267][T10638] syzkaller0: entered allmulticast mode [ 403.140066][T10638] tipc: Resetting bearer [ 403.147616][T10643] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1539'. [ 403.161523][ T30] audit: type=1326 audit(1760032240.106:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 403.240308][T10650] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1545'. [ 403.241137][T10637] tipc: Resetting bearer [ 403.263509][ T30] audit: type=1326 audit(1760032240.106:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 403.335461][ T30] audit: type=1326 audit(1760032240.106:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 403.404493][ T30] audit: type=1326 audit(1760032240.106:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 403.477562][ T30] audit: type=1326 audit(1760032240.106:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 403.538865][ T30] audit: type=1326 audit(1760032240.106:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 404.280029][T10682] loop5: detected capacity change from 0 to 512 [ 404.306288][T10682] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 404.345638][T10682] EXT4-fs (loop5): 1 truncate cleaned up [ 404.365047][T10682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.461331][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.580697][T10687] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.828597][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1557'. [ 405.361627][T10637] tipc: Disabling bearer [ 405.447858][T10686] lo speed is unknown, defaulting to 1000 [ 405.471483][T10686] lo speed is unknown, defaulting to 1000 [ 405.664673][T10697] loop5: detected capacity change from 0 to 164 [ 405.676726][T10697] ISOFS: unable to read i-node block [ 405.704785][T10697] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 406.204693][T10711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.260095][T10713] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 406.368687][T10718] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1566'. [ 406.585873][T10723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1569'. [ 406.682162][T10729] netlink: 'syz.3.1570': attribute type 39 has an invalid length. [ 407.229104][T10736] tipc: Enabled bearer , priority 0 [ 407.389695][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'. [ 407.424324][T10736] syzkaller0: entered promiscuous mode [ 407.493041][T10736] syzkaller0: entered allmulticast mode [ 407.509652][T10736] tipc: Resetting bearer [ 407.574116][T10745] loop5: detected capacity change from 0 to 164 [ 407.627957][T10745] ISOFS: unable to read i-node block [ 407.648199][T10745] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 407.740834][ T50] tipc: Resetting bearer [ 407.789651][T10735] tipc: Resetting bearer [ 408.005327][T10748] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 409.555579][T10767] netlink: 'syz.3.1584': attribute type 39 has an invalid length. [ 409.775604][T10771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1585'. [ 409.776169][T10735] tipc: Disabling bearer [ 409.800001][T10748] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1579'. [ 410.067143][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 410.067169][ T30] audit: type=1326 audit(1760032247.306:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 410.188376][ T30] audit: type=1326 audit(1760032247.346:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 410.257400][T10786] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1588'. [ 410.284541][ T30] audit: type=1326 audit(1760032247.346:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 410.400205][ T30] audit: type=1326 audit(1760032247.356:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 410.426353][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 410.482585][T10792] tipc: Enabling of bearer rejected, failed to enable media [ 410.512391][ T30] audit: type=1326 audit(1760032247.356:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 410.628488][ T30] audit: type=1326 audit(1760032247.356:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 410.753907][ T30] audit: type=1326 audit(1760032247.356:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 410.874492][ T30] audit: type=1326 audit(1760032247.356:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 411.004506][ T30] audit: type=1326 audit(1760032247.356:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 411.134501][ T30] audit: type=1326 audit(1760032247.366:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 411.435357][T10816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1599'. [ 411.555735][T10819] loop5: detected capacity change from 0 to 512 [ 411.598784][T10819] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 411.646944][T10823] netlink: 'syz.2.1602': attribute type 39 has an invalid length. [ 412.213233][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1606'. [ 412.831178][T10856] tipc: Enabling of bearer rejected, failed to enable media [ 413.401899][T10868] loop3: detected capacity change from 0 to 1024 [ 413.423857][T10868] EXT4-fs: quotafile must be on filesystem root [ 413.505152][T10870] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1615'. [ 413.729234][T10874] netlink: 'syz.2.1618': attribute type 39 has an invalid length. [ 413.809867][T10877] loop3: detected capacity change from 0 to 512 [ 413.848156][T10877] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 414.192900][T10894] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.289444][T10886] lo speed is unknown, defaulting to 1000 [ 414.309822][T10886] lo speed is unknown, defaulting to 1000 [ 414.942611][T10903] tipc: Enabling of bearer rejected, failed to enable media [ 415.530531][T10918] team_slave_0: entered promiscuous mode [ 415.591697][T10918] team_slave_0: left promiscuous mode [ 415.967685][T10924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1632'. [ 416.874438][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 416.874463][ T30] audit: type=1326 audit(1760032254.106:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 416.918117][T10939] netlink: 'syz.5.1636': attribute type 39 has an invalid length. [ 416.968151][ T30] audit: type=1326 audit(1760032254.106:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 417.070553][ T30] audit: type=1326 audit(1760032254.116:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 417.144668][T10946] loop2: detected capacity change from 0 to 512 [ 417.177554][T10946] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 417.464522][ T30] audit: type=1326 audit(1760032254.116:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 417.544606][ T30] audit: type=1326 audit(1760032254.116:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 417.631617][ T30] audit: type=1326 audit(1760032254.116:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 417.715221][ T30] audit: type=1326 audit(1760032254.116:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 417.803256][ T30] audit: type=1326 audit(1760032254.116:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 417.862308][ T30] audit: type=1326 audit(1760032254.116:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 417.935049][ T30] audit: type=1326 audit(1760032254.146:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d098eec9 code=0x7ffc0000 [ 418.137112][T10967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1645'. [ 418.178895][T10967] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1645'. [ 418.406647][T10970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1647'. [ 421.081027][T11013] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1663'. [ 421.137298][T11013] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1663'. [ 422.726746][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 422.726806][ T30] audit: type=1326 audit(1760032259.936:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2854d8eec9 code=0x7ffc0000 [ 423.024431][T11035] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 423.064467][ T30] audit: type=1326 audit(1760032260.016:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2854d8eec9 code=0x7ffc0000 [ 423.149070][T11035] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1672'. [ 423.280733][T11038] loop2: detected capacity change from 0 to 2048 [ 423.380828][ T30] audit: type=1326 audit(1760032260.616:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 423.444971][T11038] loop2: p1 < > p4 [ 423.460942][T11038] loop2: p4 size 8388608 extends beyond EOD, truncated [ 423.498788][ T30] audit: type=1326 audit(1760032260.616:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 423.570342][T11048] ieee802154 phy0 wpan0: encryption failed: -22 [ 423.844516][ T30] audit: type=1326 audit(1760032260.646:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 423.916040][ T30] audit: type=1326 audit(1760032260.646:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 424.004937][ T30] audit: type=1326 audit(1760032260.646:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 424.133212][ T30] audit: type=1326 audit(1760032260.646:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 424.162926][T11038] syzkaller0: entered promiscuous mode [ 424.244451][T11038] syzkaller0: entered allmulticast mode [ 424.266618][ T30] audit: type=1326 audit(1760032260.646:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 424.345514][T11057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1680'. [ 424.380109][ T30] audit: type=1326 audit(1760032260.656:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 424.411425][T11062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1680'. [ 424.504920][T11058] lo speed is unknown, defaulting to 1000 [ 424.512780][T11058] lo speed is unknown, defaulting to 1000 [ 425.244125][T11072] xt_connbytes: Forcing CT accounting to be enabled [ 428.259154][T11105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1696'. [ 428.330759][T11105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1696'. [ 428.607040][T11118] random: crng reseeded on system resumption [ 428.689623][T11120] xt_connbytes: Forcing CT accounting to be enabled [ 429.406382][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 429.406407][ T30] audit: type=1326 audit(1760032266.646:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 429.468754][ T30] audit: type=1326 audit(1760032266.676:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 429.564886][ T30] audit: type=1326 audit(1760032266.696:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 429.627033][ T30] audit: type=1326 audit(1760032266.696:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 429.721288][ T30] audit: type=1326 audit(1760032266.696:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 429.807906][ T30] audit: type=1326 audit(1760032266.706:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 429.906888][ T30] audit: type=1326 audit(1760032266.706:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 430.030681][ T30] audit: type=1326 audit(1760032266.706:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 430.157637][T11146] rdma_op ffff8880788761f0 conn xmit_rdma 0000000000000000 [ 430.287028][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1714'. [ 430.304530][ T30] audit: type=1326 audit(1760032266.706:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 430.328988][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1714'. [ 430.399757][ T30] audit: type=1326 audit(1760032266.726:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fbf8eec9 code=0x7ffc0000 [ 430.424284][T11156] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1714'. [ 430.534712][T11155] syzkaller0: entered promiscuous mode [ 430.540260][T11155] syzkaller0: entered allmulticast mode [ 430.694943][T11159] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 430.762536][T11162] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1717'. [ 431.100938][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1722'. [ 431.165916][T11176] xt_connbytes: Forcing CT accounting to be enabled [ 431.520477][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1725'. [ 432.445657][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1732'. [ 432.474892][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1732'. [ 433.528993][T11239] __nla_validate_parse: 4 callbacks suppressed [ 433.529019][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'. [ 433.546476][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'. [ 433.569117][T11239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1750'. [ 434.275307][T11263] syzkaller0: entered promiscuous mode [ 434.293145][T11263] syzkaller0: entered allmulticast mode [ 434.369510][T11263] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 434.971290][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 434.971317][ T30] audit: type=1326 audit(1760032272.206:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 435.005200][T11280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1767'. [ 435.027944][T11279] capability: warning: `syz.3.1766' uses deprecated v2 capabilities in a way that may be insecure [ 435.074879][T11283] 9pnet_fd: Insufficient options for proto=fd [ 435.077557][ T30] audit: type=1326 audit(1760032272.206:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 435.184489][ T30] audit: type=1326 audit(1760032272.236:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 435.233023][ T30] audit: type=1326 audit(1760032272.236:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 435.512192][ T30] audit: type=1326 audit(1760032272.246:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 435.535647][ T30] audit: type=1326 audit(1760032272.266:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 435.558687][ T30] audit: type=1326 audit(1760032272.316:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 435.581265][ T30] audit: type=1326 audit(1760032272.316:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 435.624481][ T30] audit: type=1326 audit(1760032272.336:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbeccb90d5c code=0x7ffc0000 [ 435.726746][ T30] audit: type=1326 audit(1760032272.346:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbeccb90c94 code=0x7ffc0000 [ 435.819596][T11298] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1772'. [ 436.198325][T11267] pimreg: entered allmulticast mode [ 438.403364][T11344] netlink: 'syz.6.1787': attribute type 39 has an invalid length. [ 438.608452][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 438.736153][T11355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1794'. [ 439.062355][T11370] loop6: detected capacity change from 0 to 512 [ 439.365967][T11370] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 439.448008][T11370] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 439.483780][T11378] loop2: detected capacity change from 0 to 1024 [ 439.516907][T11370] EXT4-fs (loop6): 1 truncate cleaned up [ 439.529126][T11378] EXT4-fs: Ignoring removed orlov option [ 439.539594][T11370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.565689][T11378] EXT4-fs: Invalid want_extra_isize 32768 [ 439.846897][ T6833] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.899991][T11390] netlink: 'syz.5.1805': attribute type 39 has an invalid length. [ 440.487735][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1809'. [ 440.699778][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 440.699804][ T30] audit: type=1326 audit(1760032277.936:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11400 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 440.834526][ T30] audit: type=1326 audit(1760032277.936:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11400 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 440.924471][ T30] audit: type=1326 audit(1760032277.986:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11400 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 440.969443][T11404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1811'. [ 441.010013][ T30] audit: type=1326 audit(1760032277.986:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11400 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 441.124514][ T30] audit: type=1326 audit(1760032277.986:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11400 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 441.199151][ T30] audit: type=1326 audit(1760032277.996:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11400 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 441.294546][ T30] audit: type=1326 audit(1760032277.996:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11400 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 441.317810][ T30] audit: type=1326 audit(1760032277.996:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11400 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 441.347468][ T30] audit: type=1326 audit(1760032278.006:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11400 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 441.372138][ T30] audit: type=1326 audit(1760032278.006:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11400 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeccb8eec9 code=0x7ffc0000 [ 441.391856][T11410] syzkaller0: entered promiscuous mode [ 441.422801][T11410] syzkaller0: entered allmulticast mode [ 441.542113][T11414] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 441.815519][T11425] netlink: 'syz.6.1820': attribute type 39 has an invalid length. [ 442.048612][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 443.263788][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1836'. [ 443.273796][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1836'. [ 443.461055][T11466] syzkaller0: entered promiscuous mode [ 443.467340][T11466] syzkaller0: entered allmulticast mode [ 443.488919][T11433] infiniband syz!: set down [ 443.501376][T11433] infiniband syz!: added team_slave_0 [ 443.508523][T11433] syz!: rxe_create_cq: returned err = -12 [ 443.522483][T11433] infiniband syz!: Couldn't create ib_mad CQ [ 443.528897][T11433] infiniband syz!: Couldn't open port 1 [ 443.592123][T11465] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 443.602862][T11433] RDS/IB: syz!: added [ 443.607078][T11433] smc: adding ib device syz! with port count 1 [ 443.619541][T11433] smc: ib device syz! port 1 has no pnetid [ 443.738159][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 443.837274][T11477] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1841'. [ 445.308609][T11505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1852'. [ 447.126918][T11558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1872'. [ 447.378332][T11565] loop2: detected capacity change from 0 to 512 [ 447.415912][T11565] EXT4-fs: test_dummy_encryption requires encrypt feature [ 447.544717][T11565] wireguard0: entered promiscuous mode [ 447.550263][T11565] wireguard0: entered allmulticast mode [ 447.564329][T11569] loop6: detected capacity change from 0 to 512 [ 447.615645][T11569] EXT4-fs: Ignoring removed oldalloc option [ 447.634874][T11572] loop2: detected capacity change from 0 to 512 [ 447.729676][T11569] EXT4-fs (loop6): 1 truncate cleaned up [ 447.776693][T11572] [ 447.779082][T11572] ====================================================== [ 447.786108][T11572] WARNING: possible circular locking dependency detected [ 447.793133][T11572] syzkaller #0 Not tainted [ 447.797555][T11572] ------------------------------------------------------ [ 447.804586][T11572] syz.2.1875/11572 is trying to acquire lock: [ 447.810659][T11572] ffff88804a976b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 447.820557][T11572] [ 447.820557][T11572] but task is already holding lock: [ 447.828022][T11572] ffff888079ab6610 (sb_internal){.+.+}-{0:0}, at: evict+0x3e6/0x920 [ 447.836097][T11572] [ 447.836097][T11572] which lock already depends on the new lock. [ 447.836097][T11572] [ 447.846516][T11572] [ 447.846516][T11572] the existing dependency chain (in reverse order) is: [ 447.855568][T11572] [ 447.855568][T11572] -> #1 (sb_internal){.+.+}-{0:0}: [ 447.862917][T11572] ext4_evict_inode+0xe3e/0x18e0 [ 447.868416][T11572] evict+0x3e6/0x920 [ 447.872862][T11572] iput.part.0+0x6a9/0xb00 [ 447.877821][T11572] iput+0x35/0x40 [ 447.881985][T11572] ext4_ext_migrate+0xc6f/0x1ee0 [ 447.887455][T11572] __ext4_ioctl+0x3178/0x4410 [ 447.892672][T11572] __x64_sys_ioctl+0x18e/0x210 [ 447.897968][T11572] do_syscall_64+0xcd/0xfa0 [ 447.903008][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.909430][T11572] [ 447.909430][T11572] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 447.917882][T11572] __lock_acquire+0x12a6/0x1ce0 [ 447.923285][T11572] lock_acquire+0x179/0x350 [ 447.928312][T11572] ext4_writepages+0x224/0x7d0 [ 447.933615][T11572] do_writepages+0x27a/0x600 [ 447.938753][T11572] __writeback_single_inode+0x160/0xfb0 [ 447.944838][T11572] writeback_single_inode+0x2bc/0x550 [ 447.950749][T11572] write_inode_now+0x170/0x1e0 [ 447.956046][T11572] iput.part.0+0x487/0xb00 [ 447.960989][T11572] iput+0x35/0x40 [ 447.965145][T11572] ext4_xattr_block_set+0x67c/0x3650 [ 447.970990][T11572] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 447.977439][T11572] __ext4_expand_extra_isize+0x346/0x480 [ 447.983629][T11572] __ext4_mark_inode_dirty+0x544/0x870 [ 447.989627][T11572] ext4_evict_inode+0x74e/0x18e0 [ 447.995110][T11572] evict+0x3e6/0x920 [ 447.999534][T11572] iput.part.0+0x6a9/0xb00 [ 448.004472][T11572] iput+0x35/0x40 [ 448.008635][T11572] ext4_orphan_cleanup+0x731/0x11e0 [ 448.014370][T11572] ext4_fill_super+0x8db7/0xaf70 [ 448.019849][T11572] get_tree_bdev_flags+0x38c/0x620 [ 448.025503][T11572] vfs_get_tree+0x8e/0x340 [ 448.030458][T11572] path_mount+0x7b9/0x23a0 [ 448.035392][T11572] __x64_sys_mount+0x293/0x310 [ 448.040681][T11572] do_syscall_64+0xcd/0xfa0 [ 448.045716][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.052134][T11572] [ 448.052134][T11572] other info that might help us debug this: [ 448.052134][T11572] [ 448.062443][T11572] Possible unsafe locking scenario: [ 448.062443][T11572] [ 448.069889][T11572] CPU0 CPU1 [ 448.075247][T11572] ---- ---- [ 448.080601][T11572] rlock(sb_internal); [ 448.084759][T11572] lock(&sbi->s_writepages_rwsem); [ 448.092480][T11572] lock(sb_internal); [ 448.099071][T11572] rlock(&sbi->s_writepages_rwsem); [ 448.104367][T11572] [ 448.104367][T11572] *** DEADLOCK *** [ 448.104367][T11572] [ 448.112550][T11572] 3 locks held by syz.2.1875/11572: [ 448.117748][T11572] #0: ffff888079ab60e0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 448.127924][T11572] #1: ffff888079ab6610 (sb_internal){.+.+}-{0:0}, at: evict+0x3e6/0x920 [ 448.136409][T11572] #2: ffff888057d3f388 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 448.146732][T11572] [ 448.146732][T11572] stack backtrace: [ 448.152628][T11572] CPU: 1 UID: 0 PID: 11572 Comm: syz.2.1875 Not tainted syzkaller #0 PREEMPT(full) [ 448.152669][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 448.152690][T11572] Call Trace: [ 448.152702][T11572] [ 448.152715][T11572] dump_stack_lvl+0x116/0x1f0 [ 448.152756][T11572] print_circular_bug+0x275/0x350 [ 448.152810][T11572] check_noncircular+0x14c/0x170 [ 448.152867][T11572] __lock_acquire+0x12a6/0x1ce0 [ 448.152928][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.152973][T11572] lock_acquire+0x179/0x350 [ 448.153001][T11572] ? do_writepages+0x27a/0x600 [ 448.153034][T11572] ? __pfx___might_resched+0x10/0x10 [ 448.153080][T11572] ext4_writepages+0x224/0x7d0 [ 448.153119][T11572] ? do_writepages+0x27a/0x600 [ 448.153149][T11572] ? __pfx_ext4_writepages+0x10/0x10 [ 448.153198][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.153239][T11572] ? __pfx_ext4_writepages+0x10/0x10 [ 448.153280][T11572] do_writepages+0x27a/0x600 [ 448.153313][T11572] ? __pfx_do_writepages+0x10/0x10 [ 448.153348][T11572] __writeback_single_inode+0x160/0xfb0 [ 448.153390][T11572] ? __pfx___writeback_single_inode+0x10/0x10 [ 448.153429][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.153468][T11572] ? do_raw_spin_unlock+0x172/0x230 [ 448.153504][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.153546][T11572] writeback_single_inode+0x2bc/0x550 [ 448.153598][T11572] write_inode_now+0x170/0x1e0 [ 448.153638][T11572] ? __pfx_write_inode_now+0x10/0x10 [ 448.153676][T11572] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 448.153742][T11572] ? find_held_lock+0x2b/0x80 [ 448.153783][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.153823][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.153865][T11572] iput.part.0+0x487/0xb00 [ 448.153903][T11572] iput+0x35/0x40 [ 448.153933][T11572] ext4_xattr_block_set+0x67c/0x3650 [ 448.153997][T11572] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 448.154052][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.154091][T11572] ? xattr_find_entry+0x289/0x330 [ 448.154143][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.154181][T11572] ? ext4_xattr_block_find+0x59/0x430 [ 448.154235][T11572] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 448.154283][T11572] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 448.154324][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.154363][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.154403][T11572] ? dquot_initialize_needed+0x183/0x2a0 [ 448.154442][T11572] __ext4_expand_extra_isize+0x346/0x480 [ 448.154497][T11572] __ext4_mark_inode_dirty+0x544/0x870 [ 448.154540][T11572] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 448.154587][T11572] ? __pfx___might_resched+0x10/0x10 [ 448.154634][T11572] ? ext4_journal_check_start+0x22b/0x340 [ 448.154671][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.154710][T11572] ? __ext4_journal_start_sb+0x19e/0x690 [ 448.154745][T11572] ? ext4_evict_inode+0x5cf/0x18e0 [ 448.154788][T11572] ext4_evict_inode+0x74e/0x18e0 [ 448.154832][T11572] ? __pfx_ext4_evict_inode+0x10/0x10 [ 448.154873][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.154916][T11572] ? __pfx_ext4_evict_inode+0x10/0x10 [ 448.154956][T11572] evict+0x3e6/0x920 [ 448.154989][T11572] ? __pfx_evict+0x10/0x10 [ 448.155019][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.155063][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.155108][T11572] iput.part.0+0x6a9/0xb00 [ 448.155139][T11572] ? __pfx_ext4_drop_inode+0x10/0x10 [ 448.155174][T11572] iput+0x35/0x40 [ 448.155203][T11572] ext4_orphan_cleanup+0x731/0x11e0 [ 448.155252][T11572] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 448.155297][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.155335][T11572] ? ext4_register_li_request+0xec/0x9b0 [ 448.155384][T11572] ext4_fill_super+0x8db7/0xaf70 [ 448.155445][T11572] ? __pfx_ext4_fill_super+0x10/0x10 [ 448.155489][T11572] ? do_raw_spin_lock+0x12c/0x2b0 [ 448.155523][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.155567][T11572] ? find_held_lock+0x2b/0x80 [ 448.155611][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.155649][T11572] ? sb_set_blocksize+0x176/0x1d0 [ 448.155699][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.155737][T11572] ? setup_bdev_super+0x369/0x730 [ 448.155780][T11572] get_tree_bdev_flags+0x38c/0x620 [ 448.155825][T11572] ? __pfx_ext4_fill_super+0x10/0x10 [ 448.155871][T11572] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 448.155919][T11572] ? apparmor_capable+0x114/0x1d0 [ 448.155965][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.156003][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.156042][T11572] ? security_capable+0x7e/0x260 [ 448.156083][T11572] vfs_get_tree+0x8e/0x340 [ 448.156120][T11572] path_mount+0x7b9/0x23a0 [ 448.156154][T11572] ? __pfx_path_mount+0x10/0x10 [ 448.156185][T11572] ? putname+0x154/0x1a0 [ 448.156219][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.156257][T11572] ? putname+0x154/0x1a0 [ 448.156289][T11572] ? __x64_sys_mount+0x293/0x310 [ 448.156318][T11572] __x64_sys_mount+0x293/0x310 [ 448.156348][T11572] ? __pfx___x64_sys_mount+0x10/0x10 [ 448.156385][T11572] do_syscall_64+0xcd/0xfa0 [ 448.156425][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.156457][T11572] RIP: 0033:0x7f2854d9066a [ 448.156483][T11572] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.156515][T11572] RSP: 002b:00007f2855bf3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 448.156546][T11572] RAX: ffffffffffffffda RBX: 00007f2855bf3ef0 RCX: 00007f2854d9066a [ 448.156572][T11572] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f2855bf3eb0 [ 448.156593][T11572] RBP: 0000200000000180 R08: 00007f2855bf3ef0 R09: 0000000001800700 [ 448.156614][T11572] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 448.156635][T11572] R13: 00007f2855bf3eb0 R14: 000000000000047c R15: 00002000000004c0 [ 448.156669][T11572] [ 448.736314][T11569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.751010][T11572] ------------[ cut here ]------------ [ 448.756841][T11572] EA inode 11 i_nlink=2 [ 448.757496][T11572] WARNING: CPU: 1 PID: 11572 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 448.771976][T11572] Modules linked in: [ 448.775927][T11572] CPU: 1 UID: 0 PID: 11572 Comm: syz.2.1875 Not tainted syzkaller #0 PREEMPT(full) [ 448.785395][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 448.795648][T11572] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 448.802298][T11572] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 c0 4c a8 8b e8 55 17 ed fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 56 de 2e ff 44 0f b6 2d 01 59 de 0d [ 448.822066][T11572] RSP: 0018:ffffc90002f27178 EFLAGS: 00010282 [ 448.828194][T11572] RAX: 0000000000000000 RBX: ffff888057d3ebc8 RCX: ffffc9000e4d2000 [ 448.836344][T11572] RDX: 0000000000080000 RSI: ffffffff817a9ef5 RDI: 0000000000000001 [ 448.844346][T11572] RBP: ffffc90002f27240 R08: 0000000000000001 R09: 0000000000000000 [ 448.852410][T11572] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 448.860463][T11572] R13: 0000000000000000 R14: 1ffff920005e4e32 R15: ffff888057d3edb8 [ 448.868501][T11572] FS: 00007f2855bf46c0(0000) GS:ffff888124ae0000(0000) knlGS:0000000000000000 [ 448.877519][T11572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.884136][T11572] CR2: 0000200000001740 CR3: 00000000543d1000 CR4: 0000000000350ef0 [ 448.892179][T11572] Call Trace: [ 448.895529][T11572] [ 448.898484][T11572] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 448.904961][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.910654][T11572] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 448.916738][T11572] ext4_xattr_set_entry+0x158f/0x1f00 [ 448.922190][T11572] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 448.928010][T11572] ? xattr_find_entry+0x289/0x330 [ 448.933087][T11572] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 448.938407][T11572] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 448.944351][T11572] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 448.950697][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.956406][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.962074][T11572] ? dquot_initialize_needed+0x183/0x2a0 [ 448.967789][T11572] __ext4_expand_extra_isize+0x346/0x480 [ 448.973916][T11572] __ext4_mark_inode_dirty+0x544/0x870 [ 448.979447][T11572] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 448.985499][T11572] ? __pfx___might_resched+0x10/0x10 [ 448.990837][T11572] ? ext4_journal_check_start+0x22b/0x340 [ 448.996682][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.002454][T11572] ? __ext4_journal_start_sb+0x19e/0x690 [ 449.008166][T11572] ? ext4_evict_inode+0x5cf/0x18e0 [ 449.013329][T11572] ext4_evict_inode+0x74e/0x18e0 [ 449.018344][T11572] ? __pfx_ext4_evict_inode+0x10/0x10 [ 449.023768][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.029511][T11572] ? __pfx_ext4_evict_inode+0x10/0x10 [ 449.034962][T11572] evict+0x3e6/0x920 [ 449.038902][T11572] ? __pfx_evict+0x10/0x10 [ 449.043351][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.049097][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.054861][T11572] iput.part.0+0x6a9/0xb00 [ 449.059315][T11572] ? __pfx_ext4_drop_inode+0x10/0x10 [ 449.064693][T11572] iput+0x35/0x40 [ 449.068359][T11572] ext4_orphan_cleanup+0x731/0x11e0 [ 449.073603][T11572] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 449.079316][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.085023][T11572] ? ext4_register_li_request+0xec/0x9b0 [ 449.090707][T11572] ext4_fill_super+0x8db7/0xaf70 [ 449.095733][T11572] ? __pfx_ext4_fill_super+0x10/0x10 [ 449.101066][T11572] ? do_raw_spin_lock+0x12c/0x2b0 [ 449.106159][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.111827][T11572] ? find_held_lock+0x2b/0x80 [ 449.116628][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.122300][T11572] ? sb_set_blocksize+0x176/0x1d0 [ 449.127411][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.133083][T11572] ? setup_bdev_super+0x369/0x730 [ 449.138194][T11572] get_tree_bdev_flags+0x38c/0x620 [ 449.143355][T11572] ? __pfx_ext4_fill_super+0x10/0x10 [ 449.148754][T11572] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 449.154477][T11572] ? apparmor_capable+0x114/0x1d0 [ 449.159556][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.165304][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.170994][T11572] ? security_capable+0x7e/0x260 [ 449.176051][T11572] vfs_get_tree+0x8e/0x340 [ 449.180505][T11572] path_mount+0x7b9/0x23a0 [ 449.184992][T11572] ? __pfx_path_mount+0x10/0x10 [ 449.189869][T11572] ? putname+0x154/0x1a0 [ 449.194141][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.199850][T11572] ? putname+0x154/0x1a0 [ 449.204122][T11572] ? __x64_sys_mount+0x293/0x310 [ 449.209139][T11572] __x64_sys_mount+0x293/0x310 [ 449.213933][T11572] ? __pfx___x64_sys_mount+0x10/0x10 [ 449.219311][T11572] do_syscall_64+0xcd/0xfa0 [ 449.223868][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.229825][T11572] RIP: 0033:0x7f2854d9066a [ 449.234256][T11572] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.254034][T11572] RSP: 002b:00007f2855bf3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 449.262516][T11572] RAX: ffffffffffffffda RBX: 00007f2855bf3ef0 RCX: 00007f2854d9066a [ 449.270576][T11572] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f2855bf3eb0 [ 449.278640][T11572] RBP: 0000200000000180 R08: 00007f2855bf3ef0 R09: 0000000001800700 [ 449.286687][T11572] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 449.294747][T11572] R13: 00007f2855bf3eb0 R14: 000000000000047c R15: 00002000000004c0 [ 449.302774][T11572] [ 449.305857][T11572] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 449.313149][T11572] CPU: 1 UID: 0 PID: 11572 Comm: syz.2.1875 Not tainted syzkaller #0 PREEMPT(full) [ 449.322535][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 449.332611][T11572] Call Trace: [ 449.335892][T11572] [ 449.338822][T11572] dump_stack_lvl+0x3d/0x1f0 [ 449.343429][T11572] vpanic+0x640/0x6f0 [ 449.347443][T11572] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 449.353454][T11572] panic+0xca/0xd0 [ 449.357207][T11572] ? __pfx_panic+0x10/0x10 [ 449.361665][T11572] check_panic_on_warn+0xab/0xb0 [ 449.366638][T11572] __warn+0xf6/0x3c0 [ 449.370539][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.376185][T11572] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 449.382197][T11572] report_bug+0x3c3/0x580 [ 449.386535][T11572] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 449.392547][T11572] handle_bug+0x184/0x210 [ 449.396897][T11572] exc_invalid_op+0x17/0x50 [ 449.401422][T11572] asm_exc_invalid_op+0x1a/0x20 [ 449.406299][T11572] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 449.412921][T11572] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 c0 4c a8 8b e8 55 17 ed fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 56 de 2e ff 44 0f b6 2d 01 59 de 0d [ 449.432545][T11572] RSP: 0018:ffffc90002f27178 EFLAGS: 00010282 [ 449.438626][T11572] RAX: 0000000000000000 RBX: ffff888057d3ebc8 RCX: ffffc9000e4d2000 [ 449.446606][T11572] RDX: 0000000000080000 RSI: ffffffff817a9ef5 RDI: 0000000000000001 [ 449.454594][T11572] RBP: ffffc90002f27240 R08: 0000000000000001 R09: 0000000000000000 [ 449.462583][T11572] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 449.470588][T11572] R13: 0000000000000000 R14: 1ffff920005e4e32 R15: ffff888057d3edb8 [ 449.478583][T11572] ? __warn_printk+0x1a5/0x350 [ 449.483388][T11572] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 449.489403][T11572] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 449.495769][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.501420][T11572] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 449.507028][T11572] ext4_xattr_set_entry+0x158f/0x1f00 [ 449.512438][T11572] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 449.518191][T11572] ? xattr_find_entry+0x289/0x330 [ 449.523251][T11572] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 449.528463][T11572] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 449.534393][T11572] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 449.540758][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.546423][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.552078][T11572] ? dquot_initialize_needed+0x183/0x2a0 [ 449.557745][T11572] __ext4_expand_extra_isize+0x346/0x480 [ 449.563422][T11572] __ext4_mark_inode_dirty+0x544/0x870 [ 449.568903][T11572] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 449.574910][T11572] ? __pfx___might_resched+0x10/0x10 [ 449.580222][T11572] ? ext4_journal_check_start+0x22b/0x340 [ 449.585957][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.591609][T11572] ? __ext4_journal_start_sb+0x19e/0x690 [ 449.597255][T11572] ? ext4_evict_inode+0x5cf/0x18e0 [ 449.602386][T11572] ext4_evict_inode+0x74e/0x18e0 [ 449.607343][T11572] ? __pfx_ext4_evict_inode+0x10/0x10 [ 449.612728][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.618381][T11572] ? __pfx_ext4_evict_inode+0x10/0x10 [ 449.623779][T11572] evict+0x3e6/0x920 [ 449.627774][T11572] ? __pfx_evict+0x10/0x10 [ 449.632204][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.637857][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.643515][T11572] iput.part.0+0x6a9/0xb00 [ 449.647940][T11572] ? __pfx_ext4_drop_inode+0x10/0x10 [ 449.653237][T11572] iput+0x35/0x40 [ 449.656879][T11572] ext4_orphan_cleanup+0x731/0x11e0 [ 449.662114][T11572] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 449.667766][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.673439][T11572] ? ext4_register_li_request+0xec/0x9b0 [ 449.679101][T11572] ext4_fill_super+0x8db7/0xaf70 [ 449.684079][T11572] ? __pfx_ext4_fill_super+0x10/0x10 [ 449.689383][T11572] ? do_raw_spin_lock+0x12c/0x2b0 [ 449.694418][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.700068][T11572] ? find_held_lock+0x2b/0x80 [ 449.704766][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.710412][T11572] ? sb_set_blocksize+0x176/0x1d0 [ 449.715462][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.721180][T11572] ? setup_bdev_super+0x369/0x730 [ 449.726241][T11572] get_tree_bdev_flags+0x38c/0x620 [ 449.731378][T11572] ? __pfx_ext4_fill_super+0x10/0x10 [ 449.736687][T11572] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 449.742345][T11572] ? apparmor_capable+0x114/0x1d0 [ 449.747393][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.753043][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.758692][T11572] ? security_capable+0x7e/0x260 [ 449.763652][T11572] vfs_get_tree+0x8e/0x340 [ 449.768085][T11572] path_mount+0x7b9/0x23a0 [ 449.772566][T11572] ? __pfx_path_mount+0x10/0x10 [ 449.777428][T11572] ? putname+0x154/0x1a0 [ 449.781685][T11572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.787328][T11572] ? putname+0x154/0x1a0 [ 449.791585][T11572] ? __x64_sys_mount+0x293/0x310 [ 449.796524][T11572] __x64_sys_mount+0x293/0x310 [ 449.801296][T11572] ? __pfx___x64_sys_mount+0x10/0x10 [ 449.806600][T11572] do_syscall_64+0xcd/0xfa0 [ 449.811117][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.817017][T11572] RIP: 0033:0x7f2854d9066a [ 449.821439][T11572] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.841091][T11572] RSP: 002b:00007f2855bf3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 449.849615][T11572] RAX: ffffffffffffffda RBX: 00007f2855bf3ef0 RCX: 00007f2854d9066a [ 449.857944][T11572] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f2855bf3eb0 [ 449.865924][T11572] RBP: 0000200000000180 R08: 00007f2855bf3ef0 R09: 0000000001800700 [ 449.873901][T11572] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 449.881888][T11572] R13: 00007f2855bf3eb0 R14: 000000000000047c R15: 00002000000004c0 [ 449.889930][T11572] [ 449.893237][T11572] Kernel Offset: disabled [ 449.897564][T11572] Rebooting in 86400 seconds..