last executing test programs: 5.342929504s ago: executing program 1 (id=1216): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0xf8000000, 0x10000}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$key(0xf, 0x3, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0xdd3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) lseek(0xffffffffffffffff, 0x9, 0x0) unshare(0x64000600) 3.659583389s ago: executing program 3 (id=1232): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfc, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) mknod$loop(0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000018c0)=@newtfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xb}}}, 0x24}}, 0x50) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000046608000000000001180000002000200000000000000000009500000000000000360a020000000007180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000d000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, 0x0, &(0x7f00000017c0)='%-010d \x00'}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@broadcast, 0x3, 0x0, 0x4e24, 0xfffc, 0x2}, {0x0, 0xfffffffffffffff8, 0x6, 0xfffffffffffffffe, 0x4000000000000000, 0x80000000000}, {0xfffffffffffffffc, 0x0, 0x0, 0x7}, 0x40000, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@empty, 0x2, 0x3c}, 0xa, @in6=@private1, 0x8000, 0x4, 0x0, 0x0, 0x7, 0xfffffffc, 0x1002}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1f, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="6112a000000000006113880000000000bf2000000000000062000000180000003d030100000000009500f000000000006926b40000000000bf67000000000000560602000fff07007706000020000000620200000ee60000bf250000000000003d350000000000006507000002080000070700004c0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 3.51281198s ago: executing program 3 (id=1235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x4000) 3.315708786s ago: executing program 3 (id=1239): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0376aa3c8fdf6894db4df1e714b437a35850a3282750ee733655910717264304cb3330"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_NAME(0xf, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 3.240172032s ago: executing program 1 (id=1240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 2.568192426s ago: executing program 3 (id=1242): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c000000180001801400020074756e6c30"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) 2.369424051s ago: executing program 1 (id=1244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) 2.323891895s ago: executing program 3 (id=1246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 2.232360962s ago: executing program 3 (id=1248): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0xf8000000, 0x10000}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$key(0xf, 0x3, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0xdd3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) lseek(0xffffffffffffffff, 0x9, 0x0) unshare(0x64000600) 2.226367223s ago: executing program 1 (id=1250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0376aa3c8fdf6894db4df1e714b437a35850a3282750ee733655910717264304cb3330"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f0000013c292f8c9e8c292aa4064b4e75d401369d4ea21aaecc5b76db7d1aa66b7c793f3af66615d71660a41127e8ead9ffdda820a0b22d48a5c9d567c832533364cd5bcc0b882b0eed823cb215bb88f5408219485f92e039fd8042ba21d943a10c76b37ddc7dc94f1152715a44426df2e59cae23f27adf28f7e08e68539e6539ab5657d19f34aa1337da387a8319940b268fb4980935d1524a8a994693a5ee2a4b950e0501256f0a557189d0b9d28f6631c3a08628ccba63778fd95611fe6c12e7aa2c33faa0a169967e70e874c5ba163082"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_NAME(0xf, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1.920577107s ago: executing program 1 (id=1254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) unshare(0x62000000) 833.020564ms ago: executing program 0 (id=1260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) 776.082208ms ago: executing program 0 (id=1261): syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000"/52], 0x0) 730.998552ms ago: executing program 0 (id=1263): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 671.532947ms ago: executing program 0 (id=1264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 583.290623ms ago: executing program 2 (id=1265): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 439.038505ms ago: executing program 2 (id=1266): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfc, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) mknod$loop(0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000018c0)=@newtfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xb}}}, 0x24}}, 0x50) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000046608000000000001180000002000200000000000000000009500000000000000360a020000000007180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000d000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, 0x0, &(0x7f00000017c0)='%-010d \x00'}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@broadcast, 0x3, 0x0, 0x4e24, 0xfffc, 0x2}, {0x0, 0xfffffffffffffff8, 0x6, 0xfffffffffffffffe, 0x4000000000000000, 0x80000000000}, {0xfffffffffffffffc, 0x0, 0x0, 0x7}, 0x40000, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@empty, 0x2, 0x3c}, 0xa, @in6=@private1, 0x8000, 0x4, 0x0, 0x0, 0x7, 0xfffffffc, 0x1002}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1f, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="6112a000000000006113880000000000bf2000000000000062000000180000003d030100000000009500f000000000006926b40000000000bf67000000000000560602000fff07007706000020000000620200000ee60000bf250000000000003d350000000000006507000002080000070700004c0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 438.870395ms ago: executing program 0 (id=1267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00') 384.82065ms ago: executing program 0 (id=1268): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) close(r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") open(0x0, 0x0, 0x1b5) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d31352c7561736b3d303030303030303030303030ba303030303030303030332c6e616d65636173653d312c7569643d00", @ANYRESHEX, @ANYBLOB=',fmask=00040000000000000000253,discard,dmask=00000000000000000000002,utf8,iocharset=macinuit,allow_utime=00000000000000000147070,\x00'], 0x41, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) creat(0x0, 0x83) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) r4 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) ftruncate(r4, 0x2007ffb) sendfile(r2, r4, 0x0, 0x1000000201001) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000300000000000086dd63269fe000283a1721"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 329.316834ms ago: executing program 2 (id=1269): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c000000180001801400020074756e6c30"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) 246.52107ms ago: executing program 2 (id=1270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x40030000000000}, 0x4000) 76.699394ms ago: executing program 2 (id=1271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) 1.41947ms ago: executing program 1 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=1273): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 9] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 107.210899][ T9] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 107.234440][ T9] sierra 4-1:15.5: Sierra USB modem converter detected [ 107.250707][ T9] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 107.268751][ T9] usb 4-1: USB disconnect, device number 4 [ 107.287399][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 107.315131][ T9] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 107.333116][ T9] sierra 4-1:15.174: device disconnected [ 107.353254][ T9] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 107.382324][ T9] sierra 4-1:15.5: device disconnected [ 107.545010][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 108.638927][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 108.654515][ T968] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 108.668603][ T6584] netlink: 268 bytes leftover after parsing attributes in process `syz.1.273'. [ 108.677681][ T968] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 108.685572][ T968] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 108.718036][ T968] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 109.910194][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 109.915730][ T6601] loop1: detected capacity change from 0 to 2048 [ 109.957306][ T6605] syz.0.283 (6605) used greatest stack depth: 17960 bytes left [ 110.038041][ T6610] netlink: 268 bytes leftover after parsing attributes in process `syz.2.285'. [ 110.059969][ T6601] loop1: p2 p3 p7 [ 110.085601][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'. [ 110.270573][ T5821] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 110.279193][ T5821] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 110.286934][ T5821] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 110.308689][ T787] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.317756][ T5821] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 110.344671][ T6627] loop0: detected capacity change from 0 to 164 [ 110.363008][ T6627] Unable to read rock-ridge attributes [ 110.372132][ T6627] Unable to read rock-ridge attributes [ 110.387260][ T6627] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 110.483891][ T6633] loop0: detected capacity change from 0 to 128 [ 110.491719][ T6633] EXT4-fs: Ignoring removed nobh option [ 110.504520][ T6633] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.518775][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 110.534551][ T6633] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.540505][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 110.551440][ T28] audit: type=1326 audit(1755299861.652:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 110.569491][ T787] usb 4-1: config 15 has an invalid interface number: 174 but max is 1 [ 110.583955][ T787] usb 4-1: config 15 has an invalid interface number: 5 but max is 1 [ 110.592160][ T787] usb 4-1: config 15 has an invalid interface descriptor of length 2, skipping [ 110.601914][ T787] usb 4-1: config 15 has no interface number 0 [ 110.608175][ T787] usb 4-1: config 15 has no interface number 1 [ 110.614066][ T6636] 9pnet_fd: Insufficient options for proto=fd [ 110.614655][ T787] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.630677][ T787] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.640910][ T787] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 110.651861][ T787] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 110.658558][ T28] audit: type=1326 audit(1755299861.652:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 110.662685][ T787] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 110.696741][ T787] usb 4-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 110.708736][ T787] usb 4-1: config 15 interface 5 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 110.722012][ T787] usb 4-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 110.733248][ T28] audit: type=1326 audit(1755299861.682:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 110.740055][ T5780] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.763307][ T787] usb 4-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 110.788421][ T787] usb 4-1: config 15 interface 174 has no altsetting 0 [ 110.795333][ T787] usb 4-1: config 15 interface 5 has no altsetting 0 [ 110.806555][ T28] audit: type=1326 audit(1755299861.682:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 110.855879][ T787] usb 4-1: language id specifier not provided by device, defaulting to English [ 110.882616][ T28] audit: type=1326 audit(1755299861.682:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 110.906493][ T28] audit: type=1326 audit(1755299861.682:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 110.930650][ T787] usb 4-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 110.940786][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.946035][ T28] audit: type=1326 audit(1755299861.692:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 110.958964][ T6640] netlink: 268 bytes leftover after parsing attributes in process `syz.0.296'. [ 110.983685][ T787] usb 4-1: Product: syz [ 110.987877][ T787] usb 4-1: Manufacturer: syz [ 111.001840][ T28] audit: type=1326 audit(1755299861.692:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 111.035036][ T787] usb 4-1: SerialNumber: syz [ 111.108634][ T28] audit: type=1326 audit(1755299861.692:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 111.147101][ T28] audit: type=1326 audit(1755299861.692:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 111.276978][ T787] sierra 4-1:15.174: Sierra USB modem converter detected [ 111.385180][ T6648] lo: entered promiscuous mode [ 111.390552][ T6648] lo: entered allmulticast mode [ 111.400977][ T6648] tunl0: entered promiscuous mode [ 111.406213][ T6648] tunl0: entered allmulticast mode [ 111.416049][ T6648] gre0: entered promiscuous mode [ 111.422064][ T6648] gre0: entered allmulticast mode [ 111.431058][ T6648] gretap0: entered promiscuous mode [ 111.436401][ T6648] gretap0: entered allmulticast mode [ 111.446047][ T6648] erspan0: entered promiscuous mode [ 111.451486][ T6648] erspan0: entered allmulticast mode [ 111.459332][ T6648] ip_vti0: entered promiscuous mode [ 111.464631][ T6648] ip_vti0: entered allmulticast mode [ 111.473316][ T6648] ip6_vti0: entered promiscuous mode [ 111.478910][ T6648] ip6_vti0: entered allmulticast mode [ 111.488501][ T6648] sit0: entered promiscuous mode [ 111.493519][ T6648] sit0: entered allmulticast mode [ 111.503623][ T6648] ip6tnl0: entered promiscuous mode [ 111.508991][ T6648] ip6tnl0: entered allmulticast mode [ 111.518073][ T6648] ip6gre0: entered promiscuous mode [ 111.524414][ T6648] ip6gre0: entered allmulticast mode [ 111.533531][ T6648] syz_tun: entered promiscuous mode [ 111.538931][ T6648] syz_tun: entered allmulticast mode [ 111.547534][ T6648] ip6gretap0: entered promiscuous mode [ 111.553699][ T6648] ip6gretap0: entered allmulticast mode [ 111.562181][ T6648] bridge0: entered promiscuous mode [ 111.567571][ T6648] bridge0: entered allmulticast mode [ 111.576060][ T6648] vcan0: entered promiscuous mode [ 111.581290][ T6648] vcan0: entered allmulticast mode [ 111.590420][ T6648] : entered promiscuous mode [ 111.595295][ T6648] bond_slave_0: entered promiscuous mode [ 111.602283][ T6648] bond_slave_1: entered promiscuous mode [ 111.608569][ T6648] : entered allmulticast mode [ 111.613513][ T6648] bond_slave_0: entered allmulticast mode [ 111.619425][ T6648] bond_slave_1: entered allmulticast mode [ 111.629212][ T6648] team0: entered promiscuous mode [ 111.634357][ T6648] team_slave_0: entered promiscuous mode [ 111.641438][ T6648] team_slave_1: entered promiscuous mode [ 111.648262][ T6648] team0: entered allmulticast mode [ 111.653613][ T6648] team_slave_0: entered allmulticast mode [ 111.659505][ T6648] team_slave_1: entered allmulticast mode [ 111.669735][ T6648] dummy0: entered promiscuous mode [ 111.674967][ T6648] dummy0: entered allmulticast mode [ 111.683767][ T6648] nlmon0: entered promiscuous mode [ 111.689133][ T6648] nlmon0: entered allmulticast mode [ 111.720575][ T6648] caif0: entered promiscuous mode [ 111.727236][ T6648] caif0: entered allmulticast mode [ 111.733153][ T6648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.673208][ T787] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 112.801551][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.300'. [ 113.072199][ T6658] loop3: detected capacity change from 0 to 164 [ 113.126406][ T6658] Unable to read rock-ridge attributes [ 113.169119][ T6658] Unable to read rock-ridge attributes [ 113.200214][ T6658] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 113.416109][ T6662] netlink: 268 bytes leftover after parsing attributes in process `syz.2.305'. [ 113.600116][ T787] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 113.630164][ T787] sierra 4-1:15.5: Sierra USB modem converter detected [ 113.645937][ T787] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 113.661882][ T787] usb 4-1: USB disconnect, device number 5 [ 113.674187][ T787] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 113.685510][ T787] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 113.695132][ T787] sierra 4-1:15.174: device disconnected [ 113.711238][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 113.737382][ T787] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 113.749158][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.309'. [ 113.759220][ T787] sierra 4-1:15.5: device disconnected [ 113.768787][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 113.877837][ T6677] loop1: detected capacity change from 0 to 1024 [ 113.907961][ T6677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.987777][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.037247][ T6687] netlink: 268 bytes leftover after parsing attributes in process `syz.0.317'. [ 114.287291][ T6703] loop1: detected capacity change from 0 to 128 [ 114.304628][ T6703] EXT4-fs: Ignoring removed nobh option [ 114.322251][ T6703] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.355818][ T6703] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.372989][ T6708] loop0: detected capacity change from 0 to 2048 [ 114.382077][ T6708] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.392893][ T6708] NILFS (loop0): mounting unchecked fs [ 114.419802][ T6708] NILFS (loop0): recovery complete [ 114.443436][ T5794] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.457782][ T6709] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.148813][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 116.088835][ T6716] loop3: detected capacity change from 0 to 1024 [ 116.357785][ T6716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.462416][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.473181][ T6734] loop0: detected capacity change from 0 to 164 [ 118.486319][ T6734] Unable to read rock-ridge attributes [ 118.503503][ T6734] Unable to read rock-ridge attributes [ 118.513102][ T6734] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 118.627486][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 118.627499][ T28] audit: type=1326 audit(1755299869.722:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 118.669911][ T28] audit: type=1326 audit(1755299869.772:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 118.766606][ T28] audit: type=1326 audit(1755299869.792:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 118.790855][ T28] audit: type=1326 audit(1755299869.792:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 118.816289][ T28] audit: type=1326 audit(1755299869.792:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 118.839991][ T28] audit: type=1326 audit(1755299869.792:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 118.896663][ T28] audit: type=1326 audit(1755299869.792:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 118.931151][ T6751] loop0: detected capacity change from 0 to 512 [ 118.938886][ T28] audit: type=1326 audit(1755299869.792:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 118.962726][ T28] audit: type=1326 audit(1755299869.792:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 118.986352][ T28] audit: type=1326 audit(1755299869.792:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 119.534230][ T6751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.604956][ T6751] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.789090][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.860655][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 119.980427][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 120.000530][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 120.015887][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 120.139783][ T6774] netlink: 32 bytes leftover after parsing attributes in process `syz.0.349'. [ 120.224319][ T6776] syz.1.350[6776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.224444][ T6776] syz.1.350[6776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.256034][ T6778] loop3: detected capacity change from 0 to 512 [ 120.311033][ T6778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.327235][ T6778] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.445676][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.732607][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 120.738233][ T6790] netlink: '+}[@': attribute type 1 has an invalid length. [ 120.754191][ T6790] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 120.772046][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 120.798631][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 120.817892][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 120.975914][ T6804] loop0: detected capacity change from 0 to 512 [ 121.075035][ T6804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.101030][ T6804] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.306607][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.727229][ T6889] bond1: entered promiscuous mode [ 122.735068][ T6889] bond1: entered allmulticast mode [ 122.742320][ T6889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.967506][ T6889] bond1 (unregistering): Released all slaves [ 124.572319][ T28] kauditd_printk_skb: 169 callbacks suppressed [ 124.572333][ T28] audit: type=1326 audit(1755299875.662:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7fc00000 [ 124.644253][ T28] audit: type=1326 audit(1755299875.672:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab9198ebe9 code=0x7fc00000 [ 124.760436][ T28] audit: type=1326 audit(1755299875.672:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7fc00000 [ 124.793788][ T28] audit: type=1326 audit(1755299875.672:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7fc00000 [ 124.835609][ T28] audit: type=1326 audit(1755299875.672:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7fc00000 [ 124.840300][ T6924] loop3: detected capacity change from 0 to 512 [ 124.858506][ T28] audit: type=1326 audit(1755299875.672:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7fc00000 [ 124.936694][ T6924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.949917][ T6924] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.051707][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.865336][ T6958] loop3: detected capacity change from 0 to 512 [ 126.927560][ T6958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.958750][ T6958] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.074974][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.457832][ T6952] syz.0.425: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 127.496449][ T6952] CPU: 0 PID: 6952 Comm: syz.0.425 Not tainted 6.6.102-syzkaller #0 [ 127.504535][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.514633][ T6952] Call Trace: [ 127.517928][ T6952] [ 127.520889][ T6952] dump_stack_lvl+0x16c/0x230 [ 127.525597][ T6952] ? show_regs_print_info+0x20/0x20 [ 127.530808][ T6952] ? load_image+0x3b0/0x3b0 [ 127.535334][ T6952] ? __rcu_read_unlock+0x7c/0xd0 [ 127.539801][ T6979] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 127.540433][ T6952] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 127.554707][ T6952] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 127.561491][ T6952] warn_alloc+0x210/0x300 [ 127.565856][ T6952] ? zone_watermark_ok_safe+0x230/0x230 [ 127.571426][ T6952] ? _raw_spin_unlock+0x28/0x40 [ 127.576283][ T6952] __vmalloc_node_range+0x662/0x1320 [ 127.581592][ T6952] ? free_vm_area+0x50/0x50 [ 127.586113][ T6952] ? _raw_spin_unlock+0x28/0x40 [ 127.591251][ T6952] ? __kasan_kmalloc+0x8f/0xa0 [ 127.596078][ T6952] __vmalloc_node_range+0x568/0x1320 [ 127.601401][ T6952] ? hash_netiface_create+0x361/0xff0 [ 127.606787][ T6952] ? __asan_memset+0x22/0x40 [ 127.611441][ T6952] ? free_vm_area+0x50/0x50 [ 127.615946][ T6952] ? kvmalloc_node+0x70/0x180 [ 127.620626][ T6952] ? rcu_is_watching+0x15/0xb0 [ 127.625383][ T6952] ? kvmalloc_node+0x70/0x180 [ 127.630144][ T6952] ? trace_kmalloc+0x1f/0xa0 [ 127.634737][ T6952] kvmalloc_node+0x13f/0x180 [ 127.639341][ T6952] ? hash_netiface_create+0x361/0xff0 [ 127.644723][ T6952] hash_netiface_create+0x361/0xff0 [ 127.649911][ T6952] ? __lock_acquire+0x7c80/0x7c80 [ 127.654930][ T6952] ? __nla_parse+0x40/0x50 [ 127.659385][ T6952] ? hash_netport6_gc+0x570/0x570 [ 127.664406][ T6952] ip_set_create+0xa87/0x18e0 [ 127.669081][ T6952] ? ip_set_create+0x4b2/0x18e0 [ 127.673962][ T6952] ? ip_set_protocol+0x5d0/0x5d0 [ 127.678922][ T6952] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 127.684933][ T6952] ? nfnetlink_rcv_msg+0xb26/0x1130 [ 127.690142][ T6952] nfnetlink_rcv_msg+0xb49/0x1130 [ 127.695375][ T6952] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.701513][ T6952] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 127.706732][ T6952] ? nfnetlink_unbind+0x160/0x160 [ 127.711771][ T6952] ? __dev_queue_xmit+0x1a64/0x35a0 [ 127.716965][ T6952] ? __netlink_deliver_tap+0x5ab/0x830 [ 127.722428][ T6952] ? netlink_deliver_tap+0x19c/0x1b0 [ 127.727745][ T6952] ? netlink_unicast+0x72c/0x8d0 [ 127.732673][ T6952] ? netlink_sendmsg+0x8c1/0xbe0 [ 127.737693][ T6952] ? ____sys_sendmsg+0x5bf/0x950 [ 127.742710][ T6952] ? ___sys_sendmsg+0x220/0x290 [ 127.747579][ T6952] ? __se_sys_sendmsg+0x1a5/0x270 [ 127.752794][ T6952] ? do_syscall_64+0x55/0xb0 [ 127.757387][ T6952] netlink_rcv_skb+0x216/0x480 [ 127.762154][ T6952] ? nfnetlink_unbind+0x160/0x160 [ 127.767185][ T6952] ? netlink_ack+0x1110/0x1110 [ 127.772211][ T6952] ? apparmor_capable+0x137/0x1a0 [ 127.777331][ T6952] ? bpf_lsm_capable+0x9/0x10 [ 127.782009][ T6952] ? security_capable+0x89/0xb0 [ 127.786863][ T6952] nfnetlink_rcv+0x274/0x2180 [ 127.791562][ T6952] ? __local_bh_enable_ip+0x12e/0x1c0 [ 127.796926][ T6952] ? lockdep_hardirqs_on+0x98/0x150 [ 127.802136][ T6952] ? __local_bh_enable_ip+0x12e/0x1c0 [ 127.807589][ T6952] ? _local_bh_enable+0xa0/0xa0 [ 127.812489][ T6952] ? __dev_queue_xmit+0x245/0x35a0 [ 127.817595][ T6952] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 127.823150][ T6952] ? __dev_queue_xmit+0x245/0x35a0 [ 127.828261][ T6952] ? ref_tracker_free+0x634/0x7d0 [ 127.833371][ T6952] ? __copy_skb_header+0xa7/0x550 [ 127.838412][ T6952] ? refcount_inc+0x70/0x70 [ 127.842915][ T6952] ? __skb_clone+0x63/0x790 [ 127.847415][ T6952] ? __skb_clone+0x480/0x790 [ 127.852011][ T6952] ? __netlink_deliver_tap+0x7e8/0x830 [ 127.857463][ T6952] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.862657][ T6952] ? __lock_acquire+0x7c80/0x7c80 [ 127.867680][ T6952] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.872873][ T6952] netlink_unicast+0x751/0x8d0 [ 127.877814][ T6952] netlink_sendmsg+0x8c1/0xbe0 [ 127.882578][ T6952] ? netlink_getsockopt+0x580/0x580 [ 127.887773][ T6952] ? aa_sock_msg_perm+0x94/0x150 [ 127.892745][ T6952] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 127.898118][ T6952] ? security_socket_sendmsg+0x80/0xa0 [ 127.903674][ T6952] ? netlink_getsockopt+0x580/0x580 [ 127.908886][ T6952] ____sys_sendmsg+0x5bf/0x950 [ 127.913658][ T6952] ? __asan_memset+0x22/0x40 [ 127.918336][ T6952] ? __sys_sendmsg_sock+0x30/0x30 [ 127.923370][ T6952] ? __import_iovec+0x5f2/0x860 [ 127.928231][ T6952] ? import_iovec+0x73/0xa0 [ 127.932743][ T6952] ___sys_sendmsg+0x220/0x290 [ 127.937424][ T6952] ? __sys_sendmsg+0x270/0x270 [ 127.942216][ T6952] __se_sys_sendmsg+0x1a5/0x270 [ 127.947150][ T6952] ? __x64_sys_sendmsg+0x80/0x80 [ 127.952093][ T6952] ? lockdep_hardirqs_on+0x98/0x150 [ 127.957302][ T6952] do_syscall_64+0x55/0xb0 [ 127.961729][ T6952] ? clear_bhb_loop+0x40/0x90 [ 127.966447][ T6952] ? clear_bhb_loop+0x40/0x90 [ 127.971124][ T6952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.977045][ T6952] RIP: 0033:0x7f1f0d98ebe9 [ 127.981465][ T6952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.001080][ T6952] RSP: 002b:00007f1f0e8dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.009498][ T6952] RAX: ffffffffffffffda RBX: 00007f1f0dbb5fa0 RCX: 00007f1f0d98ebe9 [ 128.017469][ T6952] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 128.025643][ T6952] RBP: 00007f1f0da11e19 R08: 0000000000000000 R09: 0000000000000000 [ 128.033700][ T6952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.041751][ T6952] R13: 00007f1f0dbb6038 R14: 00007f1f0dbb5fa0 R15: 00007ffe30881618 [ 128.049729][ T6952] [ 128.099416][ T6952] Mem-Info: [ 128.100075][ T6979] team0: Port device dummy0 added [ 128.102876][ T6952] active_anon:6935 inactive_anon:0 isolated_anon:0 [ 128.102876][ T6952] active_file:1196 inactive_file:39865 isolated_file:0 [ 128.102876][ T6952] unevictable:768 dirty:26 writeback:0 [ 128.102876][ T6952] slab_reclaimable:10564 slab_unreclaimable:94574 [ 128.102876][ T6952] mapped:26970 shmem:4231 pagetables:485 [ 128.102876][ T6952] sec_pagetables:0 bounce:0 [ 128.102876][ T6952] kernel_misc_reclaimable:0 [ 128.102876][ T6952] free:1324877 free_pcp:10844 free_cma:0 [ 128.155405][ T6952] Node 0 active_anon:27740kB inactive_anon:0kB active_file:4784kB inactive_file:159260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107880kB dirty:104kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11296kB pagetables:1940kB sec_pagetables:0kB all_unreclaimable? no [ 128.198693][ T6979] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 128.207298][ T6952] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 128.239335][ T6952] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 128.266839][ T6952] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 128.268776][ T6979] team0: Port device dummy0 removed [ 128.272872][ T6952] Node 0 DMA32 free:1399688kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:27712kB inactive_anon:0kB active_file:4784kB inactive_file:157944kB unevictable:1536kB writepending:172kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:18236kB local_pcp:3004kB free_cma:0kB [ 128.287902][ T6979] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.308752][ T6952] lowmem_reserve[]: 0 0 1 1 1 [ 128.308800][ T6952] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 128.308849][ T6952] lowmem_reserve[]: 0 0 0 0 0 [ 128.308886][ T6952] Node 1 Normal free:3884192kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25440kB local_pcp:13344kB free_cma:0kB [ 128.308933][ T6952] lowmem_reserve[]: 0 0 0 0 0 [ 128.308971][ T6952] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 128.423054][ T6952] Node 0 DMA32: 15*4kB (UME) 16*8kB (UE) 1*16kB (U) 1*32kB (M) 36*64kB (M) 26*128kB (ME) 15*256kB (UM) 7*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 337*4096kB (M) = 1398764kB [ 128.441329][ T6952] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 128.455458][ T6952] Node 1 Normal: 268*4kB (UME) 56*8kB (UME) 31*16kB (UME) 52*32kB (UME) 19*64kB (U) 5*128kB (UME) 1*256kB (U) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 945*4096kB (M) = 3884192kB [ 128.485077][ T6952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.508947][ T6952] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.543147][ T6952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.555693][ T6952] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.571841][ T6952] 45278 total pagecache pages [ 128.576654][ T6952] 0 pages in swap cache [ 128.581526][ T6952] Free swap = 124996kB [ 128.585777][ T6952] Total swap = 124996kB [ 128.590284][ T6952] 2097051 pages RAM [ 128.594095][ T6952] 0 pages HighMem/MovableOnly [ 128.601962][ T6952] 416138 pages reserved [ 128.606321][ T6952] 0 pages cma reserved [ 129.477535][ T6988] __nla_validate_parse: 2 callbacks suppressed [ 129.477547][ T6988] netlink: 268 bytes leftover after parsing attributes in process `syz.2.439'. [ 131.088611][ T7010] netlink: 268 bytes leftover after parsing attributes in process `syz.0.450'. [ 132.064835][ T28] audit: type=1326 audit(1755299883.162:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 132.093598][ T28] audit: type=1326 audit(1755299883.192:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 132.147670][ T7029] loop1: detected capacity change from 0 to 1024 [ 132.156190][ T7029] EXT4-fs: Ignoring removed orlov option [ 132.162055][ T28] audit: type=1326 audit(1755299883.232:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 132.213816][ T28] audit: type=1326 audit(1755299883.232:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2cdd58ec23 code=0x7ffc0000 [ 132.236249][ T28] audit: type=1326 audit(1755299883.232:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2cdd58d69f code=0x7ffc0000 [ 132.264213][ T28] audit: type=1326 audit(1755299883.242:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2cdd58ec77 code=0x7ffc0000 [ 132.317584][ T28] audit: type=1326 audit(1755299883.242:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2cdd58d550 code=0x7ffc0000 [ 132.374065][ T7029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.386254][ T28] audit: type=1326 audit(1755299883.242:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2cdd58e7eb code=0x7ffc0000 [ 132.562589][ T28] audit: type=1326 audit(1755299883.262:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2cdd58d84a code=0x7ffc0000 [ 132.602641][ T28] audit: type=1326 audit(1755299883.262:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2cdd58d84a code=0x7ffc0000 [ 132.751435][ T7038] syz.1.455[7038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.751926][ T7038] syz.1.455[7038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.083738][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.102189][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.324211][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.736751][ T7053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.465'. [ 133.937333][ T7064] loop1: detected capacity change from 0 to 1024 [ 133.954826][ T7064] EXT4-fs: Ignoring removed orlov option [ 133.983849][ T7064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.330416][ T7071] syz.1.470[7071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.330893][ T7071] syz.1.470[7071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.030938][ T7074] loop0: detected capacity change from 0 to 512 [ 135.065559][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.172425][ T7074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.199519][ T7074] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.400978][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.681746][ T7097] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.880359][ T7101] loop1: detected capacity change from 0 to 1024 [ 135.900576][ T7101] EXT4-fs: Ignoring removed orlov option [ 135.927994][ T7101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.318385][ T7109] syz.1.482[7109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.318845][ T7109] syz.1.482[7109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.874143][ T7111] loop0: detected capacity change from 0 to 512 [ 136.945724][ T7111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.968757][ T7111] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.107520][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.288207][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.437426][ T7118] IPv6: Can't replace route, no match found [ 137.446408][ T6975] Set syz1 is full, maxelem 65536 reached [ 137.610499][ T7126] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 137.618195][ T7126] netlink: 124 bytes leftover after parsing attributes in process `syz.3.491'. [ 137.704164][ T28] kauditd_printk_skb: 124 callbacks suppressed [ 137.704177][ T28] audit: type=1326 audit(1755299888.802:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 137.767771][ T28] audit: type=1326 audit(1755299888.842:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 137.803771][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 137.833957][ T28] audit: type=1326 audit(1755299888.842:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 137.887173][ T28] audit: type=1326 audit(1755299888.842:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 137.903643][ T7134] loop3: detected capacity change from 0 to 512 [ 137.916970][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 137.948273][ T28] audit: type=1326 audit(1755299888.842:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 138.004997][ T7134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.034396][ T7134] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.057954][ T7136] smc: net device bond0 applied user defined pnetid SYZ0 [ 138.074702][ T7139] smc: net device bond0 erased user defined pnetid SYZ0 [ 138.297062][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.523679][ T7150] lo: left promiscuous mode [ 138.528246][ T7150] lo: left allmulticast mode [ 138.567553][ T7150] tunl0: left promiscuous mode [ 138.572809][ T7150] tunl0: left allmulticast mode [ 139.241122][ T7150] gre0: left promiscuous mode [ 139.245862][ T7150] gre0: left allmulticast mode [ 139.330827][ T7150] gretap0: left promiscuous mode [ 139.335840][ T7150] gretap0: left allmulticast mode [ 139.365288][ T7150] erspan0: left promiscuous mode [ 139.370344][ T7150] erspan0: left allmulticast mode [ 139.398735][ T7150] ip_vti0: left promiscuous mode [ 139.403759][ T7150] ip_vti0: left allmulticast mode [ 139.429268][ T7150] ip6_vti0: left promiscuous mode [ 139.434351][ T7150] ip6_vti0: left allmulticast mode [ 139.468964][ T7150] sit0: left promiscuous mode [ 139.474557][ T7150] sit0: left allmulticast mode [ 139.508254][ T7150] ip6tnl0: left promiscuous mode [ 139.513519][ T7150] ip6tnl0: left allmulticast mode [ 139.550425][ T7150] ip6gre0: left promiscuous mode [ 139.555431][ T7150] ip6gre0: left allmulticast mode [ 139.599445][ T7150] syz_tun: left promiscuous mode [ 139.604673][ T7150] syz_tun: left allmulticast mode [ 139.628946][ T7150] ip6gretap0: left promiscuous mode [ 139.634198][ T7150] ip6gretap0: left allmulticast mode [ 139.652915][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.661129][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.670191][ T7150] bridge0: left promiscuous mode [ 139.675180][ T7150] bridge0: left allmulticast mode [ 139.710670][ T7150] vcan0: left promiscuous mode [ 139.715460][ T7150] vcan0: left allmulticast mode [ 139.750421][ T7150] : left promiscuous mode [ 139.754962][ T7150] bond_slave_0: left promiscuous mode [ 139.761404][ T7150] bond_slave_1: left promiscuous mode [ 139.766958][ T7150] : left allmulticast mode [ 139.771706][ T7150] bond_slave_0: left allmulticast mode [ 139.777162][ T7150] bond_slave_1: left allmulticast mode [ 139.799642][ T7150] team0: left promiscuous mode [ 139.804463][ T7150] team_slave_0: left promiscuous mode [ 139.810077][ T7150] team_slave_1: left promiscuous mode [ 139.815701][ T7150] team0: left allmulticast mode [ 139.820659][ T7150] team_slave_0: left allmulticast mode [ 139.826124][ T7150] team_slave_1: left allmulticast mode [ 139.869250][ T7150] dummy0: left promiscuous mode [ 139.874149][ T7150] dummy0: left allmulticast mode [ 139.908533][ T7150] nlmon0: left promiscuous mode [ 139.913428][ T7150] nlmon0: left allmulticast mode [ 139.920834][ T7150] caif0: left promiscuous mode [ 139.925631][ T7150] caif0: left allmulticast mode [ 140.185804][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.220907][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.452378][ T7150] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.461503][ T7150] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.470673][ T7150] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.479581][ T7150] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.648720][ T7164] smc: net device bond0 applied user defined pnetid SYZ0 [ 140.673664][ T7165] smc: net device bond0 erased user defined pnetid SYZ0 [ 140.845277][ T28] audit: type=1326 audit(1755299891.942:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 140.910677][ T28] audit: type=1326 audit(1755299891.942:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 140.939132][ T28] audit: type=1326 audit(1755299891.942:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 140.965847][ T28] audit: type=1326 audit(1755299891.942:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 140.993373][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.008373][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.020300][ T28] audit: type=1326 audit(1755299891.942:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 141.031602][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.074655][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.091322][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.103431][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.122520][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.134872][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'. [ 141.144513][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.152953][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.161683][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.178773][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.194558][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.212593][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.231885][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.249365][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'. [ 141.265273][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.275504][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.287736][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.296397][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.311043][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.322776][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.331385][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.339500][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.347376][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.355331][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.363854][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.376100][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.384275][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.397974][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.421970][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.433333][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.441410][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.455230][ T5848] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 141.468081][ T5848] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 141.547663][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'. [ 141.609518][ T7193] smc: net device bond0 applied user defined pnetid SYZ0 [ 141.628114][ T7193] smc: net device bond0 erased user defined pnetid SYZ0 [ 142.302393][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.526'. [ 142.352865][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 142.381254][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 142.408820][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 142.422808][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 142.434662][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 142.481377][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 142.492179][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 142.501665][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.252360][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.260576][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.268966][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.276755][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.284688][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.294491][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.302604][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.311425][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.323424][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.331318][ T7225] smc: net device bond0 applied user defined pnetid SYZ0 [ 143.339989][ T7225] smc: net device bond0 erased user defined pnetid SYZ0 [ 143.347289][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.355891][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.376456][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.398611][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.416692][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.433212][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.458416][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.486335][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.502793][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.526941][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.537065][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.557340][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.574971][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.638438][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.656633][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 143.703658][ T23] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 143.883019][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 143.883032][ T28] audit: type=1326 audit(1755299894.982:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 144.001814][ T28] audit: type=1326 audit(1755299894.982:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 144.073464][ T28] audit: type=1326 audit(1755299895.022:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 144.107191][ T28] audit: type=1326 audit(1755299895.022:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 144.120023][ T7255] smc: net device bond0 applied user defined pnetid SYZ0 [ 144.585800][ T28] audit: type=1326 audit(1755299895.022:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 144.663252][ T7255] smc: net device bond0 erased user defined pnetid SYZ0 [ 144.874716][ T28] audit: type=1326 audit(1755299895.022:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f186438d550 code=0x7ffc0000 [ 144.897476][ T28] audit: type=1326 audit(1755299895.022:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 144.921482][ T28] audit: type=1326 audit(1755299895.022:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 144.943746][ T28] audit: type=1326 audit(1755299895.022:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 144.966632][ T28] audit: type=1326 audit(1755299895.022:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 144.997059][ T7259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.542'. [ 145.064341][ T7266] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 145.225425][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.233710][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.244350][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.252099][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.263455][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.281554][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.296856][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.304914][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.321941][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.331768][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.341691][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.349652][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.357466][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.374008][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.381903][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.390554][ T7278] syz_tun: entered allmulticast mode [ 145.394230][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.407273][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.420218][ T7278] dvmrp1: entered allmulticast mode [ 145.426762][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.434789][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.443646][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.451930][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.476748][ T7277] syz_tun: left allmulticast mode [ 145.478441][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.503818][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.528582][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.539652][ T7281] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 145.549690][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.557472][ T7281] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 145.570194][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.582252][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.590162][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.611369][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.622576][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.630738][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.641806][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 145.652181][ T7286] smc: net device bond0 applied user defined pnetid SYZ0 [ 145.659992][ T9] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 145.683996][ T7286] smc: net device bond0 erased user defined pnetid SYZ0 [ 147.496338][ T7301] netlink: 268 bytes leftover after parsing attributes in process `syz.2.557'. [ 147.993480][ T7325] netlink: 268 bytes leftover after parsing attributes in process `syz.2.567'. [ 150.310281][ T7349] loop3: detected capacity change from 0 to 164 [ 150.338195][ T7349] Unable to read rock-ridge attributes [ 150.453943][ T7355] smc: net device bond0 applied user defined pnetid SYZ0 [ 150.473197][ T7355] smc: net device bond0 erased user defined pnetid SYZ0 [ 150.664779][ T7362] netlink: 268 bytes leftover after parsing attributes in process `syz.1.578'. [ 150.676559][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'. [ 152.807805][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 152.818241][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 152.835101][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.844395][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.855577][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.864709][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.877516][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.886527][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.901193][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.913706][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.931465][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.941765][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.951716][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.962231][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.973997][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.984113][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 152.995896][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 153.014324][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 153.024809][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 153.037678][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 153.046576][ T5848] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 153.067772][ T5848] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 153.201788][ T7387] loop1: detected capacity change from 0 to 164 [ 153.219874][ T7387] Unable to read rock-ridge attributes [ 153.563217][ T7394] smc: net device bond0 applied user defined pnetid SYZ0 [ 153.571293][ T7394] smc: net device bond0 erased user defined pnetid SYZ0 [ 153.875951][ T7400] netlink: 268 bytes leftover after parsing attributes in process `syz.3.590'. [ 154.005184][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 154.017898][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 154.041049][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 154.051537][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 154.061773][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 154.073285][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 154.087968][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 154.098265][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 154.123107][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 154.134816][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 154.172387][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 154.188637][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 154.216859][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 154.236616][ T5866] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 154.254442][ T5866] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 154.566379][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 154.566393][ T28] audit: type=1326 audit(1755299905.662:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 154.598065][ T28] audit: type=1326 audit(1755299905.702:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 154.647416][ T7420] loop3: detected capacity change from 0 to 2048 [ 154.654869][ T28] audit: type=1326 audit(1755299905.702:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 154.677402][ T28] audit: type=1326 audit(1755299905.702:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 154.700299][ T28] audit: type=1326 audit(1755299905.702:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 154.722870][ T28] audit: type=1326 audit(1755299905.702:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 154.746222][ T28] audit: type=1326 audit(1755299905.702:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 154.775612][ T28] audit: type=1326 audit(1755299905.702:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 154.801347][ T7420] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 154.806624][ T7420] loop3: partition table partially beyond EOD, truncated [ 154.814578][ T7420] loop3: p1 start 4278190080 is beyond EOD, truncated [ 154.821463][ T7420] loop3: p2 start 16908800 is beyond EOD, truncated [ 154.824528][ T28] audit: type=1326 audit(1755299905.702:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 154.900692][ T28] audit: type=1326 audit(1755299905.702:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 154.929952][ T7420] loop3: p5 start 16908800 is beyond EOD, truncated [ 156.901968][ T7438] netlink: 268 bytes leftover after parsing attributes in process `syz.3.601'. [ 157.007071][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 157.024943][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 157.032874][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 157.045073][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 157.054278][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 157.066478][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 157.074284][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 157.086340][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 157.096187][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 157.117728][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 157.126818][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 157.138384][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 157.146225][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 157.159746][ T9] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 157.172742][ T9] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 157.275875][ T7447] loop3: detected capacity change from 0 to 164 [ 157.302275][ T7447] Unable to read rock-ridge attributes [ 157.320066][ T7447] Unable to read rock-ridge attributes [ 157.432213][ T7339] Set syz1 is full, maxelem 65536 reached [ 157.823197][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 157.833527][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 157.849333][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 157.866384][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 157.874834][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 158.365867][ T7467] netlink: 268 bytes leftover after parsing attributes in process `syz.2.611'. [ 158.385828][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 158.561400][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 158.569173][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 158.577043][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 158.585070][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 158.592828][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 158.600590][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 158.609616][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 158.617289][ T9] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 158.627250][ T9] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 160.022902][ T7499] netlink: 268 bytes leftover after parsing attributes in process `syz.2.623'. [ 161.268078][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 161.268091][ T28] audit: type=1326 audit(1755299912.362:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 161.324780][ T7523] loop3: detected capacity change from 0 to 1024 [ 161.348519][ T28] audit: type=1326 audit(1755299912.362:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 161.379742][ T7523] EXT4-fs: Ignoring removed orlov option [ 161.409527][ T28] audit: type=1326 audit(1755299912.392:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 161.438774][ T7527] netlink: 268 bytes leftover after parsing attributes in process `syz.2.633'. [ 161.458402][ T28] audit: type=1326 audit(1755299912.402:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fab9198ec23 code=0x7ffc0000 [ 161.491402][ T7523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.640126][ T28] audit: type=1326 audit(1755299912.402:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab9198d69f code=0x7ffc0000 [ 161.722372][ T28] audit: type=1326 audit(1755299912.402:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fab9198ec77 code=0x7ffc0000 [ 161.745439][ T28] audit: type=1326 audit(1755299912.422:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab9198d550 code=0x7ffc0000 [ 161.768793][ T28] audit: type=1326 audit(1755299912.422:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab9198e7eb code=0x7ffc0000 [ 161.792528][ T28] audit: type=1326 audit(1755299912.482:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fab9198d84a code=0x7ffc0000 [ 161.880406][ T7532] syz.3.632[7532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.880955][ T7532] syz.3.632[7532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.938789][ T28] audit: type=1326 audit(1755299912.482:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fab9198d84a code=0x7ffc0000 [ 162.575326][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.584596][ T7537] smc: net device bond0 applied user defined pnetid SYZ0 [ 162.593339][ T7538] smc: net device bond0 erased user defined pnetid SYZ0 [ 163.725476][ T7557] netlink: 268 bytes leftover after parsing attributes in process `syz.1.644'. [ 164.144443][ T7568] loop1: detected capacity change from 0 to 1024 [ 164.172212][ T7568] EXT4-fs: Ignoring removed orlov option [ 164.229116][ T7568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.593832][ T7574] syz.1.647[7574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.594367][ T7574] syz.1.647[7574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.245601][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.619084][ T7582] netlink: 268 bytes leftover after parsing attributes in process `syz.2.653'. [ 166.904020][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 167.211599][ T7480] Set syz1 is full, maxelem 65536 reached [ 167.350402][ T7609] netlink: 268 bytes leftover after parsing attributes in process `syz.3.663'. [ 168.362113][ T7626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.667'. [ 168.538862][ T7630] smc: net device bond0 applied user defined pnetid SYZ0 [ 168.558426][ T7630] smc: net device bond0 erased user defined pnetid SYZ0 [ 170.271058][ T7667] smc: net device bond0 applied user defined pnetid SYZ0 [ 170.278967][ T7667] smc: net device bond0 erased user defined pnetid SYZ0 [ 172.787361][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.701'. [ 173.756878][ T7719] smc: net device bond0 applied user defined pnetid SYZ0 [ 173.778503][ T7723] smc: net device bond0 erased user defined pnetid SYZ0 [ 173.844081][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 173.844095][ T28] audit: type=1326 audit(1755299924.942:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 174.076523][ T28] audit: type=1326 audit(1755299924.942:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 174.129724][ T28] audit: type=1326 audit(1755299924.982:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 174.221281][ T7736] syz.2.704[7736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.221804][ T7736] syz.2.704[7736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.524149][ T28] audit: type=1326 audit(1755299924.982:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f186438ec23 code=0x7ffc0000 [ 174.726158][ T28] audit: type=1326 audit(1755299924.982:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f186438d69f code=0x7ffc0000 [ 174.799681][ T28] audit: type=1326 audit(1755299924.992:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f186438ec77 code=0x7ffc0000 [ 174.913140][ T28] audit: type=1326 audit(1755299924.992:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f186438d550 code=0x7ffc0000 [ 174.972761][ T28] audit: type=1326 audit(1755299924.992:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f186438d84a code=0x7ffc0000 [ 175.026682][ T28] audit: type=1326 audit(1755299925.012:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 175.089303][ T28] audit: type=1326 audit(1755299925.012:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 175.124698][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 175.253808][ T7753] smc: net device bond0 applied user defined pnetid SYZ0 [ 175.291347][ T7753] smc: net device bond0 erased user defined pnetid SYZ0 [ 176.744355][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.722'. [ 176.861039][ T7779] smc: net device bond0 applied user defined pnetid SYZ0 [ 176.869262][ T7779] smc: net device bond0 erased user defined pnetid SYZ0 [ 178.265903][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 178.778489][ T7808] loop0: detected capacity change from 0 to 1024 [ 178.799713][ T7808] EXT4-fs: Ignoring removed orlov option [ 178.853177][ T7808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.888966][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 178.888990][ T28] audit: type=1326 audit(1755299929.992:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f0d98d550 code=0x7ffc0000 [ 179.046527][ T28] audit: type=1326 audit(1755299930.012:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f1f0d98d937 code=0x7ffc0000 [ 179.122855][ T28] audit: type=1326 audit(1755299930.022:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f0d98d550 code=0x7ffc0000 [ 179.155544][ T28] audit: type=1326 audit(1755299930.022:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f0d98e7eb code=0x7ffc0000 [ 179.183065][ T28] audit: type=1326 audit(1755299930.022:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1f0d98d84a code=0x7ffc0000 [ 179.285106][ T7823] syz.0.734[7823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.285611][ T7823] syz.0.734[7823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.595071][ T28] audit: type=1326 audit(1755299930.022:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 179.764780][ T28] audit: type=1326 audit(1755299930.022:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 179.855402][ T28] audit: type=1326 audit(1755299930.052:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 179.883071][ T28] audit: type=1326 audit(1755299930.052:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 179.905732][ T28] audit: type=1326 audit(1755299930.052:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 179.917534][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.016488][ T7830] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 180.040298][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.740'. [ 180.053812][ T7830] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0/file1 [ 181.022494][ T7852] netlink: 268 bytes leftover after parsing attributes in process `syz.3.747'. [ 181.264681][ T7855] syz.2.748[7855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.264807][ T7855] syz.2.748[7855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.680563][ T7877] 9pnet_fd: Insufficient options for proto=fd [ 183.269550][ T7884] netlink: 268 bytes leftover after parsing attributes in process `syz.3.759'. [ 183.393591][ T7878] loop0: detected capacity change from 0 to 32768 [ 183.451099][ T7878] loop0: p1 p3 < > p4 < p5 > [ 183.455951][ T7878] loop0: partition table partially beyond EOD, truncated [ 183.511215][ T7878] loop0: p1 start 196608 is beyond EOD, truncated [ 183.535781][ T7892] loop1: detected capacity change from 0 to 1024 [ 183.542659][ T7878] loop0: p3 start 50727936 is beyond EOD, truncated [ 183.558637][ T7892] EXT4-fs: Ignoring removed orlov option [ 183.565900][ T7878] loop0: p5 start 196608 is beyond EOD, truncated [ 183.589154][ T7892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.888485][ T7901] syz.1.762[7901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.888597][ T7901] syz.1.762[7901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.910981][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 183.910997][ T28] audit: type=1800 audit(1755299935.002:1024): pid=7901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.762" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 184.417632][ T28] audit: type=1326 audit(1755299935.402:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 184.467958][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.481484][ T28] audit: type=1326 audit(1755299935.402:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 184.600738][ T7912] loop0: detected capacity change from 0 to 164 [ 184.616788][ T7912] ISOFS: unable to read i-node block [ 184.652612][ T7912] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 184.858749][ T7918] netlink: 268 bytes leftover after parsing attributes in process `syz.2.771'. [ 185.292259][ T7932] syz.0.774[7932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.292383][ T7932] syz.0.774[7932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.645351][ T28] audit: type=1326 audit(1755299936.742:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 185.699593][ T7941] loop0: detected capacity change from 0 to 1024 [ 185.720616][ T7941] EXT4-fs: Ignoring removed orlov option [ 185.726639][ T28] audit: type=1326 audit(1755299936.742:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 185.768414][ T28] audit: type=1326 audit(1755299936.742:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 185.775251][ T7941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.808568][ T28] audit: type=1326 audit(1755299936.742:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f0d98ec23 code=0x7ffc0000 [ 185.848363][ T28] audit: type=1326 audit(1755299936.742:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1f0d98d69f code=0x7ffc0000 [ 185.873904][ T28] audit: type=1326 audit(1755299936.772:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1f0d98ec77 code=0x7ffc0000 [ 185.988664][ T28] audit: type=1326 audit(1755299936.802:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f0d98d550 code=0x7ffc0000 [ 186.186465][ T7950] syz.0.778[7950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.186585][ T7950] syz.0.778[7950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.318195][ T7953] netlink: 268 bytes leftover after parsing attributes in process `syz.3.782'. [ 186.559572][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 186.565805][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 186.572348][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 186.579900][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 186.700919][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.860895][ T7962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.784'. [ 187.019728][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 187.239719][ T7982] netlink: 268 bytes leftover after parsing attributes in process `syz.3.791'. [ 187.464311][ T7985] syz.2.793[7985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.464437][ T7985] syz.2.793[7985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.576644][ T7989] lo speed is unknown, defaulting to 1000 [ 187.611069][ T7989] lo speed is unknown, defaulting to 1000 [ 187.661666][ T7989] lo speed is unknown, defaulting to 1000 [ 187.686498][ T7989] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 187.826841][ T7989] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 187.891889][ T7992] lo speed is unknown, defaulting to 1000 [ 188.141068][ T7995] lo speed is unknown, defaulting to 1000 [ 188.410361][ T7989] lo speed is unknown, defaulting to 1000 [ 188.417903][ T7989] lo speed is unknown, defaulting to 1000 [ 188.473940][ T7989] lo speed is unknown, defaulting to 1000 [ 188.483788][ T7989] lo speed is unknown, defaulting to 1000 [ 188.503978][ T7989] lo speed is unknown, defaulting to 1000 [ 188.626972][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.801'. [ 188.647488][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 188.650421][ T8010] netlink: 268 bytes leftover after parsing attributes in process `syz.2.803'. [ 188.813855][ T8017] loop0: detected capacity change from 0 to 1024 [ 188.822394][ T8017] EXT4-fs: Ignoring removed orlov option [ 188.867356][ T8017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.107068][ T28] kauditd_printk_skb: 127 callbacks suppressed [ 189.107085][ T28] audit: type=1326 audit(1755299940.192:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 189.156486][ T8026] syz.0.805[8026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.156604][ T8026] syz.0.805[8026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.172457][ T28] audit: type=1326 audit(1755299940.192:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 189.224064][ T28] audit: type=1326 audit(1755299940.202:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 189.247311][ T28] audit: type=1326 audit(1755299940.202:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 189.409916][ T28] audit: type=1326 audit(1755299940.202:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 189.493887][ T28] audit: type=1326 audit(1755299940.202:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1f0d98ebe9 code=0x7ffc0000 [ 189.576128][ T28] audit: type=1800 audit(1755299940.472:1167): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.805" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 189.751903][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.771784][ T8031] lo speed is unknown, defaulting to 1000 [ 190.081502][ T8039] lo speed is unknown, defaulting to 1000 [ 190.229240][ T8045] netlink: 268 bytes leftover after parsing attributes in process `syz.1.814'. [ 190.353213][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 190.464891][ T28] audit: type=1326 audit(1755299941.552:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.1.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 190.538567][ T8055] loop1: detected capacity change from 0 to 1024 [ 190.548646][ T28] audit: type=1326 audit(1755299941.552:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.1.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 190.559050][ T8055] EXT4-fs: Ignoring removed orlov option [ 190.587722][ T28] audit: type=1326 audit(1755299941.592:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.1.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 190.643711][ T8055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.917338][ T8062] syz.1.818[8062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.917447][ T8062] syz.1.818[8062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.938245][ T8064] loop0: detected capacity change from 0 to 512 [ 190.960557][ T8064] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 190.988189][ T8064] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.821: invalid indirect mapped block 4294967295 (level 0) [ 191.013848][ T8064] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.821: invalid indirect mapped block 4294967295 (level 1) [ 191.035084][ T8064] EXT4-fs (loop0): 1 orphan inode deleted [ 191.041187][ T8064] EXT4-fs (loop0): 1 truncate cleaned up [ 191.048210][ T8064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.073566][ T8064] EXT4-fs warning (device loop0): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 191.126621][ T8071] netlink: 'syz.2.824': attribute type 10 has an invalid length. [ 191.134769][ T8071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.824'. [ 191.137582][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.180742][ T8071] team0: Port device geneve0 added [ 191.313790][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 191.377731][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.079523][ T8108] syz.2.836[8108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.079638][ T8108] syz.2.836[8108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.954027][ T8130] lo speed is unknown, defaulting to 1000 [ 193.521137][ T8149] syz.2.854[8149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.521249][ T8149] syz.2.854[8149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.117342][ T8151] lo speed is unknown, defaulting to 1000 [ 194.884549][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.891342][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.287100][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 196.287114][ T28] audit: type=1326 audit(1755299947.382:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 196.323151][ T28] audit: type=1326 audit(1755299947.422:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 196.388387][ T28] audit: type=1326 audit(1755299947.452:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 196.418188][ T28] audit: type=1326 audit(1755299947.462:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 196.462134][ T28] audit: type=1326 audit(1755299947.462:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 196.521673][ T28] audit: type=1326 audit(1755299947.462:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 196.544666][ T28] audit: type=1326 audit(1755299947.462:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 196.567767][ T28] audit: type=1326 audit(1755299947.462:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 196.597650][ T28] audit: type=1326 audit(1755299947.472:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 196.644639][ T28] audit: type=1326 audit(1755299947.472:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 196.805740][ T8197] lo speed is unknown, defaulting to 1000 [ 197.010057][ T8208] netlink: 268 bytes leftover after parsing attributes in process `syz.0.877'. [ 197.071042][ T8211] loop1: detected capacity change from 0 to 512 [ 197.096366][ T8211] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 197.140207][ T8211] EXT4-fs (loop1): 1 truncate cleaned up [ 197.169644][ T8211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.294332][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.625035][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'. [ 197.847643][ T8244] loop1: detected capacity change from 0 to 512 [ 198.010798][ T8244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.023857][ T8244] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.266674][ T8253] lo speed is unknown, defaulting to 1000 [ 198.817011][ T8257] netlink: 'syz.0.894': attribute type 10 has an invalid length. [ 198.834563][ T8257] team0: Port device dummy0 added [ 198.867286][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.884602][ T8257] netlink: 'syz.0.894': attribute type 10 has an invalid length. [ 198.895811][ T8257] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 198.933056][ T8257] team0: Failed to send options change via netlink (err -105) [ 198.942657][ T8257] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 198.956909][ T8257] team0: Port device dummy0 removed [ 198.966913][ T8257] : (slave dummy0): Enslaving as an active interface with an up link [ 199.100124][ T8266] netlink: 68 bytes leftover after parsing attributes in process `syz.3.897'. [ 199.238108][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'. [ 199.410927][ T8283] loop1: detected capacity change from 0 to 8192 [ 199.713564][ T8287] lo speed is unknown, defaulting to 1000 [ 200.496587][ T8297] netlink: 268 bytes leftover after parsing attributes in process `syz.2.910'. [ 201.631833][ T8311] netlink: 'syz.3.913': attribute type 10 has an invalid length. [ 201.715686][ T8311] team0: Port device dummy0 added [ 201.808027][ T8311] netlink: 'syz.3.913': attribute type 10 has an invalid length. [ 201.833277][ T8311] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 201.885006][ T8311] team0: Failed to send options change via netlink (err -105) [ 201.894936][ T8311] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 201.922548][ T8311] team0: Port device dummy0 removed [ 201.939134][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 201.939148][ T28] audit: type=1326 audit(1755299953.042:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 201.977228][ T8311] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 201.987180][ T28] audit: type=1326 audit(1755299953.062:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 202.028568][ T8326] netlink: 268 bytes leftover after parsing attributes in process `syz.0.919'. [ 202.059429][ T28] audit: type=1326 audit(1755299953.072:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 202.128170][ T28] audit: type=1326 audit(1755299953.072:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f186438ec23 code=0x7ffc0000 [ 202.193730][ T28] audit: type=1326 audit(1755299953.072:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f186438d69f code=0x7ffc0000 [ 202.240238][ T8324] syz.2.918[8324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.240348][ T8324] syz.2.918[8324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.310067][ T28] audit: type=1326 audit(1755299953.102:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f186438ec77 code=0x7ffc0000 [ 202.374412][ T28] audit: type=1326 audit(1755299953.102:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f186438d550 code=0x7ffc0000 [ 202.405601][ T28] audit: type=1326 audit(1755299953.102:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f186438d84a code=0x7ffc0000 [ 202.541173][ T28] audit: type=1326 audit(1755299953.112:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 202.645332][ T28] audit: type=1326 audit(1755299953.122:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f186438ebe9 code=0x7ffc0000 [ 203.180242][ T5821] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 203.679044][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 203.713227][ T5821] usb 2-1: config 0 has no interfaces? [ 203.743598][ T5821] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 203.756251][ T5821] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 203.757359][ T8348] lo speed is unknown, defaulting to 1000 [ 203.775391][ T5821] usb 2-1: Product: syz [ 203.799939][ T5821] usb 2-1: Manufacturer: syz [ 203.812021][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 203.827345][ T5821] usb 2-1: SerialNumber: syz [ 203.930868][ T5821] usb 2-1: config 0 descriptor?? [ 204.013626][ T8359] netlink: 268 bytes leftover after parsing attributes in process `syz.0.931'. [ 204.220219][ T8363] syz.3.933[8363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.220342][ T8363] syz.3.933[8363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.223822][ T8] usb 2-1: USB disconnect, device number 6 [ 204.951424][ T8391] netlink: 268 bytes leftover after parsing attributes in process `syz.1.942'. [ 205.012741][ T8389] lo speed is unknown, defaulting to 1000 [ 205.206106][ T8395] loop1: detected capacity change from 0 to 1024 [ 205.219321][ T8395] EXT4-fs: Ignoring removed orlov option [ 205.265345][ T8395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.372799][ T8405] syz.1.944[8405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.372909][ T8405] syz.1.944[8405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.008049][ T8416] lo speed is unknown, defaulting to 1000 [ 206.597951][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.666111][ T8419] netlink: 'syz.2.950': attribute type 10 has an invalid length. [ 206.741901][ T8419] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.756284][ T8419] bond0: (slave team0): Enslaving as an active interface with an up link [ 206.803748][ T8425] netlink: 268 bytes leftover after parsing attributes in process `syz.3.952'. [ 206.858560][ T8419] netlink: 'syz.2.950': attribute type 10 has an invalid length. [ 206.904892][ T8419] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 206.957987][ T8419] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 207.013547][ T8423] lo speed is unknown, defaulting to 1000 [ 207.200937][ T8434] netlink: 52 bytes leftover after parsing attributes in process `syz.3.957'. [ 207.282348][ T8438] loop0: detected capacity change from 0 to 512 [ 207.366782][ T8448] netlink: 268 bytes leftover after parsing attributes in process `syz.3.962'. [ 207.378506][ T28] kauditd_printk_skb: 194 callbacks suppressed [ 207.378521][ T28] audit: type=1326 audit(1755299958.472:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 207.451620][ T8444] loop1: detected capacity change from 0 to 1024 [ 207.475146][ T8444] EXT4-fs: Ignoring removed orlov option [ 207.482777][ T28] audit: type=1326 audit(1755299958.472:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 207.507391][ T8438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.537906][ T8438] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.563552][ T28] audit: type=1326 audit(1755299958.512:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 207.565977][ T8459] syz.2.966[8459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.587564][ T28] audit: type=1326 audit(1755299958.512:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2cdd58ec23 code=0x7ffc0000 [ 207.591362][ T8444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.603202][ T28] audit: type=1326 audit(1755299958.512:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2cdd58d69f code=0x7ffc0000 [ 207.656669][ T28] audit: type=1326 audit(1755299958.552:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2cdd58ec77 code=0x7ffc0000 [ 207.687830][ T8459] syz.2.966[8459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.777107][ T28] audit: type=1326 audit(1755299958.552:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2cdd58d550 code=0x7ffc0000 [ 207.848388][ T28] audit: type=1326 audit(1755299958.552:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2cdd58e7eb code=0x7ffc0000 [ 207.900097][ T28] audit: type=1326 audit(1755299958.572:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2cdd58d84a code=0x7ffc0000 [ 207.922607][ T28] audit: type=1326 audit(1755299958.572:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2cdd58d84a code=0x7ffc0000 [ 207.968064][ T8463] syz.1.960[8463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.968185][ T8463] syz.1.960[8463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.384522][ T8466] lo speed is unknown, defaulting to 1000 [ 209.224885][ T8468] lo speed is unknown, defaulting to 1000 [ 209.310104][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.347954][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.515150][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'. [ 209.573129][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'. [ 209.764438][ T8485] netlink: 268 bytes leftover after parsing attributes in process `syz.1.974'. [ 210.042456][ T8491] netlink: 68 bytes leftover after parsing attributes in process `syz.2.976'. [ 210.102649][ T8493] atomic_op ffff88807b5db198 conn xmit_atomic 0000000000000000 [ 210.445914][ T8497] lo speed is unknown, defaulting to 1000 [ 211.094938][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.982'. [ 211.119529][ T8508] netlink: 268 bytes leftover after parsing attributes in process `syz.2.983'. [ 211.372159][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 211.478549][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 212.232472][ T8531] lo speed is unknown, defaulting to 1000 [ 212.723352][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'. [ 213.359712][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 213.359727][ T28] audit: type=1326 audit(1755299964.462:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 213.418410][ T28] audit: type=1326 audit(1755299964.492:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 213.463124][ T28] audit: type=1326 audit(1755299964.492:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 213.498069][ T8563] lo speed is unknown, defaulting to 1000 [ 213.559462][ T28] audit: type=1326 audit(1755299964.492:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 213.587385][ T28] audit: type=1326 audit(1755299964.492:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 213.602494][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1007'. [ 213.623419][ T28] audit: type=1326 audit(1755299964.492:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab9198d550 code=0x7ffc0000 [ 213.665765][ T28] audit: type=1326 audit(1755299964.492:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 213.699118][ T28] audit: type=1326 audit(1755299964.502:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 213.723457][ T28] audit: type=1326 audit(1755299964.502:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 213.747845][ T28] audit: type=1326 audit(1755299964.502:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 214.059352][ T8590] lo speed is unknown, defaulting to 1000 [ 214.066810][ T8590] lo speed is unknown, defaulting to 1000 [ 214.106236][ T8590] lo speed is unknown, defaulting to 1000 [ 214.146370][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 214.164319][ T8590] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 214.213391][ T8590] lo speed is unknown, defaulting to 1000 [ 214.220068][ T8590] lo speed is unknown, defaulting to 1000 [ 214.227606][ T8590] lo speed is unknown, defaulting to 1000 [ 214.249801][ T8590] lo speed is unknown, defaulting to 1000 [ 214.256941][ T8590] lo speed is unknown, defaulting to 1000 [ 214.275450][ T8590] lo speed is unknown, defaulting to 1000 [ 214.809730][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1028'. [ 215.091232][ T8640] bond0: (slave dummy0): Releasing backup interface [ 215.106223][ T8640] batman_adv: batadv0: Adding interface: dummy0 [ 215.122750][ T8640] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.170155][ T8640] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 215.706076][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.714830][ T8646] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.125152][ T8646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.159439][ T8646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.416311][ T8646] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.425699][ T8646] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.434720][ T8646] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.443707][ T8646] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.555229][ T787] lo speed is unknown, defaulting to 1000 [ 216.576642][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1041'. [ 216.593003][ T8664] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 216.936918][ T8688] siw: device registration error -23 [ 217.231288][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1056'. [ 217.662458][ T8722] loop0: detected capacity change from 0 to 1024 [ 217.696973][ T8722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.727132][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1069'. [ 217.877105][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.878515][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 219.204803][ T8762] lo speed is unknown, defaulting to 1000 [ 219.213302][ T8762] lo speed is unknown, defaulting to 1000 [ 219.436847][ T8773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1083'. [ 219.565700][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1084'. [ 219.654453][ T8781] tipc: Started in network mode [ 219.659941][ T8781] tipc: Node identity 2, cluster identity 4711 [ 219.666238][ T8781] tipc: Node number set to 2 [ 220.089571][ T8796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1093'. [ 220.186671][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1096'. [ 220.502484][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 220.502498][ T28] audit: type=1326 audit(1755299971.602:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.1.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 220.562557][ T8810] lo speed is unknown, defaulting to 1000 [ 220.571007][ T8810] lo speed is unknown, defaulting to 1000 [ 220.622369][ T28] audit: type=1326 audit(1755299971.722:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.1.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 220.736611][ T28] audit: type=1326 audit(1755299971.722:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.1.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 220.751137][ T8822] serio: Serial port ttyS3 [ 220.761455][ T28] audit: type=1326 audit(1755299971.722:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.1.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd58ebe9 code=0x7ffc0000 [ 220.806551][ T8824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1104'. [ 221.457578][ T28] audit: type=1326 audit(1755299972.552:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 221.518624][ T28] audit: type=1326 audit(1755299972.552:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 221.560673][ T28] audit: type=1326 audit(1755299972.552:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 221.593997][ T8846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1114'. [ 221.614759][ T28] audit: type=1326 audit(1755299972.552:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 221.657621][ T28] audit: type=1326 audit(1755299972.552:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 221.714086][ T28] audit: type=1326 audit(1755299972.552:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 223.284431][ T8858] lo speed is unknown, defaulting to 1000 [ 223.294387][ T8858] lo speed is unknown, defaulting to 1000 [ 223.760634][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1124'. [ 223.954624][ T8884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1128'. [ 224.132221][ T8891] lo speed is unknown, defaulting to 1000 [ 224.143428][ T8891] lo speed is unknown, defaulting to 1000 [ 224.193984][ T8892] netlink: 'syz.2.1131': attribute type 27 has an invalid length. [ 224.547722][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.555434][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.217315][ T8892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.271647][ T8892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.649869][ T8892] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.663815][ T8892] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.674961][ T8892] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.688452][ T8892] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.716056][ T8892] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 225.975612][ T5848] lo speed is unknown, defaulting to 1000 [ 226.390140][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 226.390155][ T28] audit: type=1326 audit(1755299977.492:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 226.453417][ T8921] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1141'. [ 226.458338][ T28] audit: type=1326 audit(1755299977.532:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 226.522469][ T28] audit: type=1326 audit(1755299977.532:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 226.568371][ T28] audit: type=1326 audit(1755299977.532:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 226.587473][ T8925] syz.3.1140 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 226.616581][ T28] audit: type=1326 audit(1755299977.532:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 226.643660][ T8925] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1140'. [ 226.665298][ T28] audit: type=1326 audit(1755299977.542:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 226.693346][ T28] audit: type=1326 audit(1755299977.542:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 226.738458][ T28] audit: type=1326 audit(1755299977.542:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 226.762831][ T28] audit: type=1326 audit(1755299977.542:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 226.788923][ T28] audit: type=1326 audit(1755299977.542:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9198ebe9 code=0x7ffc0000 [ 226.900445][ T8852] Set syz1 is full, maxelem 65536 reached [ 226.916067][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 227.149606][ T8941] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1150'. [ 227.262872][ T8946] loop9: detected capacity change from 0 to 7 [ 227.283917][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.293413][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.310475][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.319736][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.327852][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.337086][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.349252][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.358568][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.368587][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.377877][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.386120][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.395373][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.407335][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.416577][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.425730][ T8946] ldm_validate_partition_table(): Disk read failed. [ 227.441018][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 227.468403][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.477701][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.486126][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.495482][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.509054][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.518323][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.526481][ T8946] Dev loop9: unable to read RDB block 0 [ 227.542483][ T8946] loop9: unable to read partition table [ 227.568583][ T8946] loop9: partition table beyond EOD, truncated [ 227.574815][ T8946] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 227.574815][ T8946] ) failed (rc=-5) [ 227.744991][ T8950] tipc: Enabling of bearer rejected, failed to enable media [ 227.926673][ T8976] syz_tun: entered allmulticast mode [ 227.941816][ T8976] process 'syz.1.1164' launched './file1' with NULL argv: empty string added [ 227.956271][ T8974] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1163'. [ 228.037399][ T8976] syz.1.1164[8976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.037524][ T8976] syz.1.1164[8976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.136966][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'. [ 228.466390][ T9008] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1177'. [ 229.949711][ T9042] __nla_validate_parse: 1 callbacks suppressed [ 229.949729][ T9042] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1189'. [ 230.328080][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 230.486063][ T9067] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1200'. [ 230.550236][ T9068] lo speed is unknown, defaulting to 1000 [ 230.558673][ T9068] lo speed is unknown, defaulting to 1000 [ 230.898939][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 231.219421][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 231.939928][ T9093] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1210'. [ 232.806024][ T9127] lo speed is unknown, defaulting to 1000 [ 232.815663][ T9127] lo speed is unknown, defaulting to 1000 [ 233.086587][ T9129] lo speed is unknown, defaulting to 1000 [ 233.106961][ T9129] lo speed is unknown, defaulting to 1000 [ 233.504423][ T9135] smc: net device bond0 applied user defined pnetid SYZ0 [ 234.618143][ T9169] lo speed is unknown, defaulting to 1000 [ 234.637745][ T9169] lo speed is unknown, defaulting to 1000 [ 236.591582][ T9211] lo speed is unknown, defaulting to 1000 [ 236.612184][ T9211] lo speed is unknown, defaulting to 1000 [ 236.780958][ T9203] lo speed is unknown, defaulting to 1000 [ 236.851012][ T9203] lo speed is unknown, defaulting to 1000 [ 237.314049][ T9232] loop0: detected capacity change from 0 to 2048 [ 237.340787][ T9232] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 237.370191][ T9232] NILFS (loop0): mounting unchecked fs [ 237.404992][ T9232] NILFS (loop0): recovery complete [ 237.433463][ T9237] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.463386][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 237.463401][ T28] audit: type=1800 audit(1755299988.562:1780): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1268" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 237.640244][ T28] audit: type=1800 audit(1755299988.732:1781): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1268" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 430.038232][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 192s! [ 430.047863][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 192s! [ 430.056992][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 186s! [ 430.066533][ C0] Showing busy workqueues and worker pools: [ 430.072649][ C0] workqueue events: flags=0x0 [ 430.077511][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=12/256 refcnt=13 [ 430.077552][ C0] pending: 3*nsim_dev_hwstats_traffic_work, 3*psi_avgs_work, 4*ovs_dp_masks_rebalance, kfree_rcu_monitor, ima_keys_handler [ 430.077661][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=9/256 refcnt=10 [ 430.077694][ C0] pending: nsim_dev_hwstats_traffic_work, vmstat_shepherd, ovs_dp_masks_rebalance, 2*psi_avgs_work, xfrm_state_gc_task, kfree_rcu_monitor, switchdev_deferred_process_work, rht_deferred_worker [ 430.077822][ C0] workqueue events_highpri: flags=0x10 [ 430.132460][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 430.132501][ C0] in-flight: 95:snd_vmidi_output_work snd_vmidi_output_work [ 430.132547][ C0] workqueue events_long: flags=0x0 [ 430.153768][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 430.153811][ C0] pending: 3*defense_work_handler, br_fdb_cleanup [ 430.153865][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 430.153912][ C0] pending: 3*defense_work_handler, br_multicast_gc_work [ 430.153952][ C0] workqueue events_unbound: flags=0x2 [ 430.189250][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=11/512 refcnt=12 [ 430.189288][ C0] pending: toggle_allocation_gate, 4*nsim_dev_trap_report_work, cfg80211_wiphy_work, flush_memcg_stats_dwork, crng_reseed, macvlan_process_broadcast, 2*idle_cull_fn [ 430.189421][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/512 refcnt=4 [ 430.189450][ C0] pending: cfg80211_wiphy_work, 2*idle_cull_fn [ 430.189491][ C0] workqueue events_freezable: flags=0x4 [ 430.233596][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.233637][ C0] pending: update_balloon_stats_func [ 430.233674][ C0] workqueue events_power_efficient: flags=0x80 [ 430.253442][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 430.253483][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, do_cache_clean, gc_worker, check_lifetime [ 430.253592][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 430.253626][ C0] pending: neigh_managed_work, neigh_periodic_work [ 430.253662][ C0] workqueue rcu_gp: flags=0x8 [ 430.294288][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.294327][ C0] in-flight: 786:wait_rcu_exp_gp [ 430.294358][ C0] workqueue netns: flags=0xe000a [ 430.312715][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 [ 430.312751][ C0] in-flight: 3475:cleanup_net [ 430.312786][ C0] workqueue mm_percpu_wq: flags=0x8 [ 430.330378][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.330420][ C0] pending: vmstat_update [ 430.330455][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.330488][ C0] pending: vmstat_update [ 430.330519][ C0] workqueue writeback: flags=0x4a [ 430.360661][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=4 [ 430.360702][ C0] pending: wb_update_bandwidth_workfn, 2*wb_workfn [ 430.360754][ C0] workqueue kblockd: flags=0x18 [ 430.380234][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 430.380276][ C0] pending: blk_mq_timeout_work [ 430.380804][ C0] workqueue dm_bufio_cache: flags=0x8 [ 430.399590][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.399634][ C0] pending: work_fn [ 430.399866][ C0] workqueue ipv6_addrconf: flags=0xe000a [ 430.417514][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=8 [ 430.417552][ C0] pending: addrconf_verify_work [ 430.417579][ C0] inactive: 4*addrconf_verify_work [ 430.417605][ C0] workqueue krxrpcd: flags=0xa001a [ 430.440894][ C0] pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=8 [ 430.440935][ C0] pending: rxrpc_peer_keepalive_worker [ 430.440957][ C0] inactive: 4*rxrpc_peer_keepalive_worker [ 430.440983][ C0] workqueue bat_events: flags=0xe000a [ 430.466551][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=41 [ 430.466589][ C0] in-flight: 1124:batadv_nc_worker [ 430.466624][ C0] inactive: 3*batadv_purge_orig, batadv_nc_worker, 4*batadv_mcast_mla_update, 2*batadv_nc_worker, 13*batadv_iv_send_outstanding_bat_ogm_packet, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_tt_purge [ 430.467095][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 430.523359][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.523439][ C0] pending: wg_packet_encrypt_worker [ 430.523471][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.523509][ C0] pending: wg_packet_encrypt_worker [ 430.523534][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 430.556282][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.556326][ C0] pending: wg_packet_encrypt_worker [ 430.556358][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.556396][ C0] pending: wg_packet_encrypt_worker [ 430.556421][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 430.588936][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.588981][ C0] pending: wg_packet_encrypt_worker [ 430.589011][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.589046][ C0] pending: wg_packet_encrypt_worker [ 430.589096][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=192s workers=7 idle: 8 9 5866 968 5865 5847 [ 430.589194][ C0] pool 1: cpus=0 node=0 flags=0x0 nice=-20 hung=0s workers=3 idle: 10 6313 [ 430.589240][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=192s workers=10 idle: 11 48 1142 63 42 2902 3444 12 [ 430.589312][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: [ 430.654485][ C0] pool 0: [ 430.654505][ C0] task:kworker/0:2 state:R running task stack:25096 pid:786 ppid:2 flags:0x00004000 [ 430.654553][ C0] Workqueue: rcu_gp wait_rcu_exp_gp [ 430.654579][ C0] Call Trace: [ 430.654586][ C0] [ 430.654600][ C0] __schedule+0x14d2/0x44d0 [ 430.654647][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 430.654669][ C0] ? asan.module_dtor+0x20/0x20 [ 430.654695][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 430.654729][ C0] ? preempt_schedule+0xab/0xc0 [ 430.654753][ C0] preempt_schedule_common+0x82/0xc0 [ 430.654777][ C0] preempt_schedule+0xab/0xc0 [ 430.654805][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 430.654826][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 430.654850][ C0] ? lock_chain_count+0x20/0x20 [ 430.654870][ C0] ? kick_pool+0x320/0x420 [ 430.654888][ C0] preempt_schedule_thunk+0x1a/0x30 [ 430.654921][ C0] _raw_spin_unlock_irq+0x40/0x50 [ 430.654947][ C0] schedule+0x6b/0x170 [ 430.654969][ C0] schedule_timeout+0x160/0x280 [ 430.654994][ C0] ? console_conditional_schedule+0x40/0x40 [ 430.655021][ C0] ? update_process_times+0x1b0/0x1b0 [ 430.655064][ C0] rcu_exp_sel_wait_wake+0x7f0/0x2070 [ 430.655112][ C0] ? rcu_check_gp_start_stall+0x460/0x460 [ 430.655150][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.655177][ C0] ? process_scheduled_works+0x957/0x15b0 [ 430.655200][ C0] ? process_scheduled_works+0x957/0x15b0 [ 430.655222][ C0] process_scheduled_works+0xa45/0x15b0 [ 430.655273][ C0] ? assign_work+0x400/0x400 [ 430.655301][ C0] ? assign_work+0x39e/0x400 [ 430.655328][ C0] worker_thread+0xa55/0xfc0 [ 430.655351][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 430.655378][ C0] ? _raw_spin_unlock+0x40/0x40 [ 430.655401][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 430.655448][ C0] kthread+0x2fa/0x390 [ 430.655464][ C0] ? pr_cont_work+0x560/0x560 [ 430.655486][ C0] ? kthread_blkcg+0xd0/0xd0 [ 430.655503][ C0] ret_from_fork+0x48/0x80 [ 430.655523][ C0] ? kthread_blkcg+0xd0/0xd0 [ 430.655541][ C0] ret_from_fork_asm+0x11/0x20 [ 430.655580][ C0] [ 430.867864][ C0] hrtimer: interrupt took 209719430 ns