last executing test programs: 3.431127792s ago: executing program 1 (id=3446): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000500), 0x5fc}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000800000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.167255155s ago: executing program 1 (id=3495): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x20, 0x7ffc0002}]}) process_mrelease(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c80140001"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYBLOB="ff83050000"], 0x4}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f00000012c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r4, 0x0, 0x8040) sendmsg$NL80211_CMD_GET_STATION(r3, 0x0, 0x20000000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.125816608s ago: executing program 2 (id=3496): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x40) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000200)=0x4) r3 = socket(0x400000000010, 0x3, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macsec0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'tunl0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r2) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x40, 0x7, 0x2, 0xf00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x0, 0x0, 0x0, 0x5, 0x800000007, 0x0, 0x5, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.072460713s ago: executing program 1 (id=3499): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) r2 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000088) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) syz_io_uring_setup(0xe4c, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x0, 0x40002bc}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x7f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="00000000000000000004100000000000"], 0x50) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000440), &(0x7f00000004c0)=0x4) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000300)={'\x00', 0x1f, 0x401, 0x500000, 0x7fff, 0x4, 0xffffffffffffffff}) ptrace$poke(0x5, r8, &(0x7f0000000200), 0x6) close(r5) 1.025782907s ago: executing program 2 (id=3510): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000005}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x5, &(0x7f0000000180)=@framed={{}, [@cb_func={0x18, 0xd, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) fallocate(r3, 0xb, 0x77, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10000006) accept4(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240909acd3a2120000002000010000000000000000000200000000000002000000000500130004000000"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f}}, 0x20) 983.23149ms ago: executing program 2 (id=3502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0x3, 0x80000000, 0x8a, 0x3ff, 0x3, 0x6}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797ab000"], 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf252c000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 939.942243ms ago: executing program 2 (id=3503): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x418142) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f0000000000)='./file0\x00', 0x5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x401, 0x2, {0x1, 0x1, 0x6, 0x0, 0x64f}, 0xffffff80}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x15, 0x115, 0x70bd26, 0x25dfdbfc, {0x2, 0x8, 0x80, 0xff, r10}, [@IFA_ADDRESS={0x8, 0x1, @private=0xa010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4d884) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40095505, 0x0) 832.681762ms ago: executing program 3 (id=3506): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 686.417484ms ago: executing program 3 (id=3513): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="91103b000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(&(0x7f0000000000)='./file0\x00', 0x104) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = dup2(r2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80000001, 0x4}, 0x100b28, 0x3, 0x0, 0x1, 0x8, 0x20005, 0x101, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r5 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x28, 0x8, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 544.315005ms ago: executing program 3 (id=3515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x88, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}]}, 0x88}}, 0x20000000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) r10 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r10, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r10, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) 544.010036ms ago: executing program 4 (id=3516): socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x4445, &(0x7f0000000080)={0x0, 0xb1c9, 0x20, 0x1, 0x183}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x10000, 0x10) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000240)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa199, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x6) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) socket$nl_netfilter(0x10, 0x3, 0xc) 543.364936ms ago: executing program 0 (id=3525): connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x13) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x4, 0x400122a0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r7) tkill(r4, 0x12) wait4(r4, 0x0, 0x4000000a, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/168, 0xa8, 0x40012000, 0x0, 0x0) close_range(r1, r3, 0x0) 452.655943ms ago: executing program 3 (id=3517): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r1, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r1, 0x30, 0x1, @ib={0x1b, 0x8000, 0xfff, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0x5}}}, 0xa0) 355.443121ms ago: executing program 0 (id=3520): openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x202040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "6550c01b21986c5a", "9af8773dad5de4d5dcbd2727fc5b8a076499f3ffffffffffffff00", "0810186b", "fbd1e2072ea0edb6"}, 0x38) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0xe3, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 354.626261ms ago: executing program 4 (id=3521): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', 0x0}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd"], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00'}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYRES16], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r5 = signalfd(r0, &(0x7f0000000180)={[0x24000000000005]}, 0x8) name_to_handle_at(r5, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 306.027415ms ago: executing program 0 (id=3522): openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x202040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffe, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6a69600026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf057bb711116e53eb0b55667f1a28c2d6506cf26422d389b") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "6550c01b21986c5a", "9af8773dad5de4d5dcbd2727fc5b8a076499f3ffffffffffffff00", "0810186b", "fbd1e2072ea0edb6"}, 0x38) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0xe3, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 304.939935ms ago: executing program 3 (id=3523): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x300, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) read(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000004", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d0001"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x61}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2401c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) flock(0xffffffffffffffff, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 222.628602ms ago: executing program 0 (id=3524): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x72) r3 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) r6 = msgget$private(0x0, 0x620) msgsnd(r6, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x401, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r8, 0x8947, &(0x7f0000000000)="a6cc04e2d8f1c38afbf14b29b86e3a") sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r9, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r10, 0x0, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_emit_ethernet(0xfed7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00"], 0x0) 222.393012ms ago: executing program 4 (id=3526): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0xfffffffffffffe3c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x2, 0x2}, 0x830, 0x80000003bda, 0xfffffffc, 0x7, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x1, 0x89, 0x100000}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) read(r7, &(0x7f0000000000)=""/149, 0xaa) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r3, 0x0, 0x709, 0xe) splice(r2, 0x0, r1, 0x0, 0x100000004, 0x0) write(r0, 0x0, 0x0) 221.659842ms ago: executing program 1 (id=3527): openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x202040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0xe3, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, 0x1c) 214.115923ms ago: executing program 2 (id=3528): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x20, 0xfffffffffdffffff}) 136.323569ms ago: executing program 1 (id=3529): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf56}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000f40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000008000000100000000000000905000000003000302e00610032ec4dbc34411152205dc70c9089cde9ea9f762540c62c45628736e49435091b64bec3bb235f17d7b9324a949d9ee2e152245488bf511eb031e39571d352752f9d3118f74998bb85e29729e10c5ed72dd451b9bc62fdb2eda13076b1a37dcd6ddec4f89de8bd73c08a7e2dc753fbda426b6e20c6725eb796124dad3a1bbbe9317a2a5024103921b2c5c6b1b5720994bc8c4eaba3f79dc5802879953e8eb35236a0abf84a3b83d0"], &(0x7f0000000c80)=""/193, 0x2c, 0xc1, 0x0, 0x2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200000000000000050000009c328d0408000000186b0000000000040000000f83fcff0085a23a85000000ab0000001812050000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x80000000, 0xc5, &(0x7f0000000b80)=""/197, 0x40f00, 0x10, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000600)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000d80)={0x0, 0xa, 0x7fffffff, 0xa}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x0, 0x3, 0x5, 0x5}, {0x2, 0x1, 0x6}, {0x5, 0x5, 0x4, 0xc}, {0x5, 0x1, 0x2}], 0x10, 0xe}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB='\a\x00', @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000100080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 131.846609ms ago: executing program 3 (id=3530): socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x4445, &(0x7f0000000080)={0x0, 0xb1c9, 0x20, 0x1, 0x183}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x10000, 0x10) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000240)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa199, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x6) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) socket$nl_netfilter(0x10, 0x3, 0xc) 129.59596ms ago: executing program 1 (id=3531): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x20, 0xfffffffffdffffff}) 110.291811ms ago: executing program 4 (id=3532): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r1, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r1, 0x30, 0x1, @ib={0x1b, 0x8000, 0xfff, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0x5}}}, 0xa0) 92.229202ms ago: executing program 0 (id=3533): add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000480)="1080", 0x2, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) msgget$private(0x0, 0x408) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000006, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x8c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000480)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x20040000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) fallocate(r0, 0x0, 0x6, 0x10001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r7, 0x20, 0x10000, 0x8000) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000300)='dvmrp0\x00') 328.41µs ago: executing program 2 (id=3534): r0 = io_uring_setup(0x4a86, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000500)={&(0x7f00000004c0)=""/3, 0x3, 0x1, 0xcc3c}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(r7, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r3, r4, &(0x7f00000001c0), 0x8) fcntl$addseals(r4, 0x409, 0x8) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x6) fallocate(r4, 0x3, 0x9100, 0x3) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, r2, 0x0) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=3535): openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x202040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffe, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6a69600026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf057bb711116e53eb0b55667f1a28c2d6506cf26422d389b") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "6550c01b21986c5a", "9af8773dad5de4d5dcbd2727fc5b8a076499f3ffffffffffffff00", "0810186b", "fbd1e2072ea0edb6"}, 0x38) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0xe3, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) kernel console output (not intermixed with test programs): 94967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 168.086188][ T29] audit: type=1326 audit(167.964:20515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 168.109408][ T29] audit: type=1326 audit(167.964:20516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 168.132974][T11337] hsr_slave_0: left promiscuous mode [ 168.133212][ T29] audit: type=1326 audit(167.984:20517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 168.352406][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1467'. [ 168.523316][T11652] vlan2: entered allmulticast mode [ 168.559517][T11652] bridge1: port 1(vlan2) entered blocking state [ 168.566597][T11652] bridge1: port 1(vlan2) entered disabled state [ 168.685966][T11652] vlan2: entered promiscuous mode [ 168.691740][T11652] bridge0: entered promiscuous mode [ 169.138124][T11998] netlink: 'syz.1.1486': attribute type 10 has an invalid length. [ 169.933216][T12003] __nla_validate_parse: 4 callbacks suppressed [ 169.933232][T12003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1489'. [ 169.982048][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1488'. [ 170.068393][T12030] vlan0: entered allmulticast mode [ 170.073705][T12030] bridge0: entered allmulticast mode [ 170.079417][T12030] bridge0: port 1(vlan0) entered blocking state [ 170.085809][T12030] bridge0: port 1(vlan0) entered disabled state [ 170.213064][T12265] lo speed is unknown, defaulting to 1000 [ 170.284661][T12265] lo speed is unknown, defaulting to 1000 [ 170.291470][T12265] lo speed is unknown, defaulting to 1000 [ 170.562113][T12225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1499'. [ 170.572195][T12225] netem: change failed [ 170.595740][T12293] veth0: entered promiscuous mode [ 170.602578][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 170.615393][T12293] veth0 (unregistering): left promiscuous mode [ 170.714946][T12539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1504'. [ 170.820710][ T10] Process accounting resumed [ 170.852873][T12653] lo speed is unknown, defaulting to 1000 [ 170.894060][T12653] lo speed is unknown, defaulting to 1000 [ 170.914221][T12653] lo speed is unknown, defaulting to 1000 [ 170.962992][T12854] loop3: detected capacity change from 0 to 1024 [ 170.973227][T12854] EXT4-fs: Ignoring removed nobh option [ 170.995854][T12854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.061177][T12966] netlink: 1343 bytes leftover after parsing attributes in process `syz.4.1514'. [ 171.223675][T13078] lo speed is unknown, defaulting to 1000 [ 171.347782][T13282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1522'. [ 171.348537][T13078] lo speed is unknown, defaulting to 1000 [ 171.416011][T13078] lo speed is unknown, defaulting to 1000 [ 171.547336][T13492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1526'. [ 171.718311][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.057969][T13825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1539'. [ 172.066312][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1538'. [ 172.279891][ T3383] Process accounting resumed [ 172.666597][ T10] Process accounting resumed [ 172.845979][T14484] netlink: 'syz.4.1563': attribute type 1 has an invalid length. [ 172.859869][T14484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.876833][T14484] bond0: (slave veth3): Enslaving as an active interface with a down link [ 172.890876][T14484] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 172.900160][T14484] bond0: (slave batadv1): making interface the new active one [ 172.909034][T14484] batadv1: entered promiscuous mode [ 172.916766][T14484] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 172.927590][ T29] kauditd_printk_skb: 970 callbacks suppressed [ 172.927608][ T29] audit: type=1400 audit(172.904:21488): avc: denied { bind } for pid=14486 comm="syz.1.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.953498][ T29] audit: type=1400 audit(172.904:21489): avc: denied { listen } for pid=14486 comm="syz.1.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.973042][ T29] audit: type=1400 audit(172.904:21490): avc: denied { accept } for pid=14486 comm="syz.1.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.999231][ T29] audit: type=1326 audit(172.974:21491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 173.024795][ T29] audit: type=1326 audit(172.974:21492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 173.047903][ T29] audit: type=1326 audit(172.974:21493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 173.071077][ T29] audit: type=1326 audit(172.974:21494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 173.094108][ T29] audit: type=1326 audit(172.974:21495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 173.117261][ T29] audit: type=1326 audit(172.974:21496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 173.140360][ T29] audit: type=1326 audit(172.974:21497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 173.200281][T14593] loop3: detected capacity change from 0 to 1024 [ 173.207278][T14593] EXT4-fs: Ignoring removed bh option [ 173.216432][T14593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 173.229522][T14597] team0 (unregistering): Port device team_slave_0 removed [ 173.237165][T14593] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-001000000000. [ 173.245741][T14597] team0 (unregistering): Port device team_slave_1 removed [ 173.268307][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 173.291494][T14686] 0ªX¹¦À: renamed from caif0 [ 173.304729][T14686] 0ªX¹¦À: entered allmulticast mode [ 173.309990][T14686] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 173.587922][T15015] lo speed is unknown, defaulting to 1000 [ 173.669564][T15015] lo speed is unknown, defaulting to 1000 [ 173.688936][T15015] lo speed is unknown, defaulting to 1000 [ 173.795619][T15336] netlink: 'syz.2.1583': attribute type 10 has an invalid length. [ 173.986617][T15649] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 174.097629][T15881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=15881 comm=syz.4.1593 [ 174.244514][T16101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.331865][T16281] lo speed is unknown, defaulting to 1000 [ 174.353835][T16304] netlink: 'syz.1.1607': attribute type 13 has an invalid length. [ 174.407287][T16304] veth0_macvtap: left allmulticast mode [ 174.418388][T16281] lo speed is unknown, defaulting to 1000 [ 174.426076][T16281] lo speed is unknown, defaulting to 1000 [ 174.548435][T16596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16596 comm=+}[@ [ 174.619941][T16699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.635361][T16699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.650920][ T10] lo speed is unknown, defaulting to 1000 [ 174.656867][ T10] syz2: Port: 1 Link ACTIVE [ 175.107451][T17128] __nla_validate_parse: 15 callbacks suppressed [ 175.107528][T17128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1627'. [ 175.422902][T17240] syz_tun: left promiscuous mode [ 175.437557][T17240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.447448][T17240] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.465284][T17240] 0ªX¹¦À: left allmulticast mode [ 175.470367][T17240] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 175.488040][ T9] lo speed is unknown, defaulting to 1000 [ 175.494001][ T9] syz0: Port: 1 Link ACTIVE [ 175.548859][T17347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1634'. [ 175.558113][T17347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1634'. [ 175.608480][T17349] lo: entered promiscuous mode [ 175.615997][T17353] futex_wake_op: syz.3.1638 tries to shift op by -1; fix this program [ 175.625515][T17349] tunl0: entered promiscuous mode [ 175.631495][T17349] gre0: entered promiscuous mode [ 175.648994][T17349] gretap0: entered promiscuous mode [ 175.665981][T17349] erspan0: entered promiscuous mode [ 175.682462][T17349] ip_vti0: entered promiscuous mode [ 175.689907][T17349] ip6_vti0: entered promiscuous mode [ 175.703429][T17349] sit0: entered promiscuous mode [ 175.719777][T17349] ip6tnl0: entered promiscuous mode [ 175.727423][T17349] ip6gre0: entered promiscuous mode [ 175.737690][T17349] ip6gretap0: entered promiscuous mode [ 175.744529][T17349] vcan0: entered promiscuous mode [ 175.750348][T17349] bond0: entered promiscuous mode [ 175.755530][T17349] ÿ: entered promiscuous mode [ 175.760471][T17349] bond_slave_1: entered promiscuous mode [ 175.766240][T17349] bridge_slave_1: entered promiscuous mode [ 175.769715][T17464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1642'. [ 175.772347][T17349] dummy0: entered promiscuous mode [ 175.787685][T17349] nlmon0: entered promiscuous mode [ 175.793346][T17349] caif0: entered promiscuous mode [ 175.798499][T17349] wg0: entered promiscuous mode [ 175.803633][T17349] wg2: entered promiscuous mode [ 175.808522][T17349] veth0_to_bridge: entered promiscuous mode [ 175.814737][T17349] bridge_slave_0: entered promiscuous mode [ 175.820613][T17349] veth1_to_bridge: entered promiscuous mode [ 175.826749][T17349] veth0_to_bond: entered promiscuous mode [ 175.832658][T17349] veth1_to_bond: entered promiscuous mode [ 175.838603][T17349] veth0_to_team: entered promiscuous mode [ 175.844486][T17349] team_slave_0: entered promiscuous mode [ 175.850221][T17349] veth1_to_team: entered promiscuous mode [ 175.856103][T17349] team_slave_1: entered promiscuous mode [ 175.861863][T17349] veth0_to_batadv: entered promiscuous mode [ 175.867908][T17349] batadv_slave_0: entered promiscuous mode [ 175.873815][T17349] veth1_to_batadv: entered promiscuous mode [ 175.880042][T17349] batadv_slave_1: entered promiscuous mode [ 175.886148][T17349] xfrm0: entered promiscuous mode [ 175.891313][T17349] veth0_to_hsr: entered promiscuous mode [ 175.897129][T17349] hsr_slave_0: entered promiscuous mode [ 175.902864][T17349] veth1_to_hsr: entered promiscuous mode [ 175.908676][T17349] hsr_slave_1: entered promiscuous mode [ 175.914331][T17349] veth1_virt_wifi: entered promiscuous mode [ 175.920415][T17349] veth0_virt_wifi: entered promiscuous mode [ 175.926479][T17349] @: entered promiscuous mode [ 175.931331][T17349] vlan1: entered promiscuous mode [ 175.936586][T17349] macvlan0: entered promiscuous mode [ 175.942031][T17349] macvlan1: entered promiscuous mode [ 175.947382][T17349] ipvlan0: entered promiscuous mode [ 175.952752][T17349] ipvlan1: entered promiscuous mode [ 175.958269][T17349] macvtap0: entered promiscuous mode [ 175.963637][T17349] macsec0: entered promiscuous mode [ 175.968974][T17349] geneve0: entered promiscuous mode [ 175.975024][T17349] geneve1: entered promiscuous mode [ 175.980659][T17349] netdevsim netdevsim1 eth0: entered promiscuous mode [ 175.987837][T17349] netdevsim netdevsim1 eth1: entered promiscuous mode [ 175.995017][T17349] netdevsim netdevsim1 eth2: entered promiscuous mode [ 176.002212][T17349] netdevsim netdevsim1 eth3: entered promiscuous mode [ 176.009200][T17349] batadv1: entered promiscuous mode [ 176.014611][T17349] macvtap1: entered promiscuous mode [ 176.020046][T17349] macvtap1: left allmulticast mode [ 176.025400][T17349] sit1: entered promiscuous mode [ 176.030450][T17349] bridge0: entered promiscuous mode [ 176.036249][ T3383] lo speed is unknown, defaulting to 1000 [ 176.042007][ T3383] syz2: Port: 1 Link DOWN [ 176.085310][T17472] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1643'. [ 176.125586][T17475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 176.681718][T17889] pim6reg: entered allmulticast mode [ 176.707226][T17889] pim6reg: left allmulticast mode [ 176.734049][T17783] Set syz1 is full, maxelem 65536 reached [ 176.816360][T17993] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 176.911775][T18001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 176.943196][T18001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 176.986965][T18004] netlink: 'syz.1.1657': attribute type 28 has an invalid length. [ 176.995050][T18004] netlink: 'syz.1.1657': attribute type 3 has an invalid length. [ 177.002821][T18004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1657'. [ 177.102818][T18111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1659'. [ 178.110188][ T29] kauditd_printk_skb: 739 callbacks suppressed [ 178.110224][ T29] audit: type=1326 audit(178.084:22237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 178.139897][ T29] audit: type=1326 audit(178.084:22238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 178.163009][ T29] audit: type=1326 audit(178.084:22239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 178.186128][ T29] audit: type=1326 audit(178.084:22240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 178.209223][ T29] audit: type=1326 audit(178.084:22241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 178.232664][ T29] audit: type=1326 audit(178.084:22242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb25fded69f code=0x7ffc0000 [ 178.255727][ T29] audit: type=1326 audit(178.084:22243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 178.278789][ T29] audit: type=1326 audit(178.084:22244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 178.301790][ T29] audit: type=1326 audit(178.084:22245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 178.307138][T18256] netlink: 'syz.1.1678': attribute type 4 has an invalid length. [ 178.324890][ T29] audit: type=1326 audit(178.084:22246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 178.368955][ T9] Process accounting resumed [ 178.657815][T18484] loop3: detected capacity change from 0 to 1024 [ 178.682088][T18484] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 179.440514][T18920] lo speed is unknown, defaulting to 1000 [ 179.500279][T18920] lo speed is unknown, defaulting to 1000 [ 179.524135][T18920] lo speed is unknown, defaulting to 1000 [ 179.767215][T19240] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 180.123279][T19345] netlink: 'syz.2.1713': attribute type 21 has an invalid length. [ 180.140401][T19345] __nla_validate_parse: 15 callbacks suppressed [ 180.140422][T19345] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1713'. [ 180.165517][T19347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1714'. [ 180.336312][T19458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1719'. [ 180.525170][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 180.557825][T19569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1721'. [ 180.569132][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 180.649522][T19674] netlink: 'syz.4.1725': attribute type 4 has an invalid length. [ 181.014731][T19802] loop3: detected capacity change from 0 to 512 [ 181.036887][T19802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.037160][T19801] lo speed is unknown, defaulting to 1000 [ 181.095140][T19801] lo speed is unknown, defaulting to 1000 [ 181.101394][T19801] lo speed is unknown, defaulting to 1000 [ 181.125985][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.169509][T20011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1733'. [ 181.231860][T20015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1736'. [ 181.242391][T20015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.250387][T20015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.874125][T20843] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20843 comm=syz.4.1749 [ 181.886817][T20843] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20843 comm=syz.4.1749 [ 182.063505][T20889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1753'. [ 182.072522][T20889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1753'. [ 182.125407][T20889] loop3: detected capacity change from 0 to 1024 [ 182.183633][T20889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.244285][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.113732][ T29] kauditd_printk_skb: 983 callbacks suppressed [ 183.113750][ T29] audit: type=1326 audit(183.094:23230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.4.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 183.189469][ T29] audit: type=1326 audit(183.094:23231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.4.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 183.212549][ T29] audit: type=1326 audit(183.094:23232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.4.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 183.235762][ T29] audit: type=1326 audit(183.124:23233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.4.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 183.258923][ T29] audit: type=1326 audit(183.124:23234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.4.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 183.282107][ T29] audit: type=1326 audit(183.124:23235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.4.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 183.305165][ T29] audit: type=1326 audit(183.124:23236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.4.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 183.552994][T22325] Process accounting resumed [ 183.740801][T22741] lo speed is unknown, defaulting to 1000 [ 183.789508][T22741] lo speed is unknown, defaulting to 1000 [ 183.795918][T22741] lo speed is unknown, defaulting to 1000 [ 183.879626][T22748] Invalid option length (1265) for dns_resolver key [ 184.059181][T22963] netlink: 'syz.1.1795': attribute type 10 has an invalid length. [ 184.407138][T22974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.415737][T22974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.543798][ T6961] batadv1: left promiscuous mode [ 184.665970][ T29] audit: type=1326 audit(184.644:23237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23184 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 184.708803][ T29] audit: type=1326 audit(184.674:23238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23184 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 184.732025][ T29] audit: type=1326 audit(184.674:23239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23184 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 186.121447][T23401] __nla_validate_parse: 9 callbacks suppressed [ 186.121467][T23401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1812'. [ 186.145431][T23406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1813'. [ 186.197923][T23412] loop3: detected capacity change from 0 to 512 [ 186.218771][T23412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.353160][T23620] lo speed is unknown, defaulting to 1000 [ 186.360188][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.462042][T23755] hub 9-0:1.0: USB hub found [ 186.469048][T23620] lo speed is unknown, defaulting to 1000 [ 186.480448][T23755] hub 9-0:1.0: 8 ports detected [ 186.491256][T23620] lo speed is unknown, defaulting to 1000 [ 186.531619][T23825] loop3: detected capacity change from 0 to 1024 [ 186.554549][T23501] lo speed is unknown, defaulting to 1000 [ 186.611500][T23825] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 186.647089][T23501] lo speed is unknown, defaulting to 1000 [ 186.657755][T23501] lo speed is unknown, defaulting to 1000 [ 186.861641][T23893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1826'. [ 186.910179][T23945] loop3: detected capacity change from 0 to 1024 [ 186.936869][T23945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.956757][T23945] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1827: bg 0: block 88: padding at end of block bitmap is not set [ 186.982108][T23951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1829'. [ 186.993382][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.060470][T23954] bridge1: port 1(vlan2) entered disabled state [ 187.093382][T23954] veth0_macvtap: left allmulticast mode [ 187.109935][ T36] lo speed is unknown, defaulting to 1000 [ 187.115954][ T36] syz0: Port: 1 Link DOWN [ 187.540413][T24308] lo speed is unknown, defaulting to 1000 [ 187.600772][T24308] lo speed is unknown, defaulting to 1000 [ 187.607115][T24308] lo speed is unknown, defaulting to 1000 [ 188.121571][T24586] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1843'. [ 188.135919][T24590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1845'. [ 188.147097][T24584] loop3: detected capacity change from 0 to 2048 [ 188.154302][T24586] netlink: zone id is out of range [ 188.159597][T24586] netlink: zone id is out of range [ 188.165012][T24586] netlink: zone id is out of range [ 188.170169][T24586] netlink: zone id is out of range [ 188.178419][T24586] netlink: zone id is out of range [ 188.184428][T24586] netlink: zone id is out of range [ 188.189715][T24586] netlink: zone id is out of range [ 188.195767][T24586] netlink: zone id is out of range [ 188.201228][T24586] netlink: zone id is out of range [ 188.207884][T24586] netlink: del zone limit has 8 unknown bytes [ 188.208006][T24584] Alternate GPT is invalid, using primary GPT. [ 188.220375][T24584] loop3: p2 p3 p7 [ 188.274280][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 188.274300][ T29] audit: type=1326 audit(188.254:23491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24696 comm="syz.4.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 188.333598][ T29] audit: type=1326 audit(188.254:23492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24696 comm="syz.4.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 188.356762][ T29] audit: type=1326 audit(188.254:23493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24696 comm="syz.4.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 188.380206][ T29] audit: type=1326 audit(188.254:23494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24696 comm="syz.4.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 188.403547][ T29] audit: type=1326 audit(188.254:23495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24696 comm="syz.4.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 188.426651][ T29] audit: type=1326 audit(188.294:23496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24696 comm="syz.4.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 188.449714][ T29] audit: type=1326 audit(188.294:23497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24696 comm="syz.4.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 188.472766][ T29] audit: type=1326 audit(188.294:23498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24696 comm="syz.4.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 188.496083][ T29] audit: type=1326 audit(188.304:23499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24696 comm="syz.4.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb25fded69f code=0x7ffc0000 [ 188.519079][ T29] audit: type=1326 audit(188.304:23500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24696 comm="syz.4.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 188.603158][T24802] netlink: 'syz.1.1849': attribute type 21 has an invalid length. [ 188.611343][T24802] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1849'. [ 189.485685][T25023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1856'. [ 189.713778][T25137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'. [ 189.867967][T25435] futex_wake_op: syz.2.1864 tries to shift op by -1; fix this program [ 189.957155][T25460] netlink: 'syz.0.1870': attribute type 10 has an invalid length. [ 190.574239][T25702] wireguard0: entered promiscuous mode [ 190.579821][T25702] wireguard0: entered allmulticast mode [ 190.618455][T25811] lo: entered allmulticast mode [ 190.625927][T25811] tunl0: entered allmulticast mode [ 190.631737][T25811] gre0: entered allmulticast mode [ 190.637988][T25811] gretap0: entered allmulticast mode [ 190.644285][T25811] erspan0: entered allmulticast mode [ 190.650498][T25811] ip_vti0: entered allmulticast mode [ 190.656474][T25811] ip6_vti0: entered allmulticast mode [ 190.662697][T25811] sit0: entered allmulticast mode [ 190.669977][T25811] ip6tnl0: entered allmulticast mode [ 190.676295][T25811] ip6gre0: entered allmulticast mode [ 190.682632][T25811] ip6gretap0: entered allmulticast mode [ 190.689305][T25811] vcan0: entered allmulticast mode [ 190.695180][T25811] bond0: entered allmulticast mode [ 190.700379][T25811] ÿ: entered allmulticast mode [ 190.705432][T25811] bond_slave_1: entered allmulticast mode [ 190.711217][T25811] bridge_slave_1: entered allmulticast mode [ 190.717426][T25811] dummy0: entered allmulticast mode [ 190.723316][T25811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.733278][T25811] nlmon0: entered allmulticast mode [ 190.739493][T25811] caif0: entered allmulticast mode [ 190.744784][ T9] lo speed is unknown, defaulting to 1000 [ 190.750609][ T9] syz2: Port: 1 Link ACTIVE [ 191.013202][T26137] IPVS: Error joining to the multicast group [ 191.125629][T26147] netlink: 'syz.3.1899': attribute type 4 has an invalid length. [ 191.133548][T26147] __nla_validate_parse: 23 callbacks suppressed [ 191.133566][T26147] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1899'. [ 191.157532][T26147] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1899'. [ 191.293393][T26251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1904'. [ 191.914313][T26369] netlink: 'syz.1.1912': attribute type 27 has an invalid length. [ 191.922910][T26369] lo: left promiscuous mode [ 191.927557][T26369] lo: left allmulticast mode [ 191.934620][T26369] tunl0: left promiscuous mode [ 191.939624][T26369] tunl0: left allmulticast mode [ 191.946244][T26369] gre0: left promiscuous mode [ 191.951024][T26369] gre0: left allmulticast mode [ 191.957560][T26369] gretap0: left promiscuous mode [ 191.962530][T26369] gretap0: left allmulticast mode [ 191.974418][T26369] erspan0: left promiscuous mode [ 191.979428][T26369] erspan0: left allmulticast mode [ 191.987035][T26369] ip_vti0: left promiscuous mode [ 191.992032][T26369] ip_vti0: left allmulticast mode [ 191.998652][T26369] ip6_vti0: left promiscuous mode [ 192.003981][T26369] ip6_vti0: left allmulticast mode [ 192.011848][T26369] sit0: left promiscuous mode [ 192.016806][T26369] sit0: left allmulticast mode [ 192.024694][T26369] ip6tnl0: left promiscuous mode [ 192.029700][T26369] ip6tnl0: left allmulticast mode [ 192.037206][T26369] ip6gre0: left promiscuous mode [ 192.042247][T26369] ip6gre0: left allmulticast mode [ 192.049107][T26369] ip6gretap0: left promiscuous mode [ 192.054433][T26369] ip6gretap0: left allmulticast mode [ 192.062100][T26369] vcan0: left promiscuous mode [ 192.067071][T26369] vcan0: left allmulticast mode [ 192.073294][T26369] bond0: left promiscuous mode [ 192.079221][T26369] bond0: left allmulticast mode [ 192.084536][T26369] ÿ: left allmulticast mode [ 192.089157][T26369] bond_slave_1: left allmulticast mode [ 192.094899][T26369] bridge_slave_1: left allmulticast mode [ 192.103184][T26369] dummy0: left promiscuous mode [ 192.108400][T26369] dummy0: left allmulticast mode [ 192.115777][T26369] nlmon0: left promiscuous mode [ 192.120866][T26369] nlmon0: left allmulticast mode [ 192.127246][T26369] caif0: left promiscuous mode [ 192.132163][T26369] caif0: left allmulticast mode [ 192.137213][T26369] wg0: left promiscuous mode [ 192.141880][T26369] wg2: left promiscuous mode [ 192.146646][T26369] veth0_to_bridge: left promiscuous mode [ 192.152443][T26369] bridge_slave_0: left promiscuous mode [ 192.158110][T26369] veth1_to_bridge: left promiscuous mode [ 192.163842][T26369] bridge_slave_1: left promiscuous mode [ 192.169495][T26369] veth0_to_bond: left promiscuous mode [ 192.175165][T26369] ÿ: left promiscuous mode [ 192.179792][T26369] veth1_to_bond: left promiscuous mode [ 192.185470][T26369] bond_slave_1: left promiscuous mode [ 192.190937][T26369] veth0_to_team: left promiscuous mode [ 192.196635][T26369] team_slave_0: left promiscuous mode [ 192.202309][T26369] veth1_to_team: left promiscuous mode [ 192.208153][T26369] team_slave_1: left promiscuous mode [ 192.213639][T26369] veth0_to_batadv: left promiscuous mode [ 192.219364][T26369] batadv_slave_0: left promiscuous mode [ 192.225154][T26369] veth1_to_batadv: left promiscuous mode [ 192.231202][T26369] batadv_slave_1: left promiscuous mode [ 192.236970][T26369] xfrm0: left promiscuous mode [ 192.242153][T26369] veth0_to_hsr: left promiscuous mode [ 192.247729][T26369] hsr_slave_0: left promiscuous mode [ 192.253073][T26369] veth1_to_hsr: left promiscuous mode [ 192.258567][T26369] hsr_slave_1: left promiscuous mode [ 192.263980][T26369] veth1_virt_wifi: left promiscuous mode [ 192.269848][T26369] veth0_virt_wifi: left promiscuous mode [ 192.275793][T26369] macvtap0: left promiscuous mode [ 192.280904][T26369] macsec0: left promiscuous mode [ 192.286000][T26369] geneve0: left promiscuous mode [ 192.291015][T26369] geneve1: left promiscuous mode [ 192.340205][T26369] netdevsim netdevsim1 eth0: left promiscuous mode [ 192.347963][T26369] netdevsim netdevsim1 eth1: left promiscuous mode [ 192.355190][T26369] netdevsim netdevsim1 eth2: left promiscuous mode [ 192.362232][T26369] netdevsim netdevsim1 eth3: left promiscuous mode [ 192.369172][T26369] batadv1: left promiscuous mode [ 192.374262][T26369] macvtap1: left promiscuous mode [ 192.379353][T26369] sit1: left promiscuous mode [ 192.384195][T26369] bridge0: left promiscuous mode [ 192.392972][ T3383] lo speed is unknown, defaulting to 1000 [ 192.398753][ T3383] syz2: Port: 1 Link DOWN [ 192.750139][T26583] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1916'. [ 192.760174][T26583] 0ªî{X¹¦: renamed from gretap0 [ 192.772689][T26583] 0ªî{X¹¦: entered allmulticast mode [ 193.294162][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 193.294177][ T29] audit: type=1326 audit(193.274:24061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 193.324386][ T29] audit: type=1326 audit(193.274:24062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 193.347596][ T29] audit: type=1326 audit(193.274:24063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 193.370643][ T29] audit: type=1326 audit(193.274:24064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 193.393684][ T29] audit: type=1326 audit(193.274:24065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 193.416744][ T29] audit: type=1326 audit(193.274:24066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 193.440092][ T29] audit: type=1326 audit(193.274:24067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 193.463226][ T29] audit: type=1326 audit(193.274:24068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 193.486466][ T29] audit: type=1326 audit(193.274:24069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 193.509640][ T29] audit: type=1326 audit(193.274:24070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 193.585827][T26905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'. [ 193.631123][T27111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1938'. [ 193.654688][T27116] netlink: 'syz.4.1928': attribute type 10 has an invalid length. [ 193.656944][T27118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1930'. [ 193.662532][T27116] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1928'. [ 193.751253][T27189] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 193.982238][T27533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1947'. [ 193.995354][T27535] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1936'. [ 194.647167][T27844] loop3: detected capacity change from 0 to 512 [ 194.660663][T27844] EXT4-fs: Ignoring removed i_version option [ 194.668837][T27844] EXT4-fs: journaled quota format not specified [ 194.706736][T27886] loop3: detected capacity change from 0 to 512 [ 194.725879][T27886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.745360][T27891] IPVS: Error joining to the multicast group [ 194.818576][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.670967][T28244] bridge0: port 2() entered blocking state [ 195.676935][T28244] bridge0: port 2() entered forwarding state [ 195.683184][T28244] 8021q: adding VLAN 0 to HW filter on device  [ 195.692105][T28244] bridge0: port 3(dummy0) entered blocking state [ 195.698563][T28244] bridge0: port 3(dummy0) entered forwarding state [ 195.713682][T28244] net_ratelimit: 2 callbacks suppressed [ 195.713695][T28244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.741189][ T6961] bridge1: port 1(vlan0) entered blocking state [ 195.747504][ T6961] bridge1: port 1(vlan0) entered forwarding state [ 195.882546][T28491] !: renamed from dummy0 (while UP) [ 195.903989][T28550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.963187][T28668] loop3: detected capacity change from 0 to 512 [ 195.986690][T28668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.043751][T28727] IPVS: Error connecting to the multicast addr [ 196.059420][T28778] lo speed is unknown, defaulting to 1000 [ 196.112875][T28778] lo speed is unknown, defaulting to 1000 [ 196.119339][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.120097][T28778] lo speed is unknown, defaulting to 1000 [ 196.312472][T29104] __nla_validate_parse: 45 callbacks suppressed [ 196.312492][T29104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1999'. [ 196.312759][T29105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2000'. [ 196.329422][T29106] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1997'. [ 196.369357][T29109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2001'. [ 196.376507][T29111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2002'. [ 196.378588][T29109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2001'. [ 196.398218][T29109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2001'. [ 196.418164][T29109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2001'. [ 196.427247][T29109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2001'. [ 196.437598][T29109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2001'. [ 196.511718][T29222] IPVS: Error joining to the multicast group [ 197.031204][T29966] loop3: detected capacity change from 0 to 512 [ 197.038069][T29966] EXT4-fs: Ignoring removed orlov option [ 197.044407][T29966] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 197.054032][T29966] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 197.063178][T29966] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2022: corrupted in-inode xattr: e_value size too large [ 197.078670][T29966] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2022: couldn't read orphan inode 15 (err -117) [ 197.091387][T29966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.160917][T30070] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30070 comm=syz.4.2023 [ 197.896649][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.305362][ T29] kauditd_printk_skb: 1306 callbacks suppressed [ 198.305379][ T29] audit: type=1326 audit(198.284:25377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.4.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 198.365159][T31445] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 198.368924][ T29] audit: type=1326 audit(198.324:25378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.4.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 198.371791][T31445] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 198.395120][ T29] audit: type=1326 audit(198.324:25379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31437 comm="syz.1.2052" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f144901ebe9 code=0x0 [ 198.402850][T31445] vhci_hcd vhci_hcd.0: Device attached [ 198.425337][ T29] audit: type=1326 audit(198.334:25380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.4.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 198.453807][ T29] audit: type=1326 audit(198.344:25381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31438 comm="syz.2.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab233bebe9 code=0x7ffc0000 [ 198.476936][ T29] audit: type=1326 audit(198.344:25382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31438 comm="syz.2.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab233bebe9 code=0x7ffc0000 [ 198.500001][ T29] audit: type=1326 audit(198.344:25383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31438 comm="syz.2.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fab233bebe9 code=0x7ffc0000 [ 198.523768][ T29] audit: type=1326 audit(198.404:25384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.4.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 198.546855][ T29] audit: type=1326 audit(198.404:25385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.4.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 198.569861][ T29] audit: type=1326 audit(198.404:25386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.4.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 199.044043][T31680] lo speed is unknown, defaulting to 1000 [ 199.976153][T31456] vhci_hcd: connection closed [ 199.976539][ T6966] vhci_hcd: stop threads [ 199.985577][ T6966] vhci_hcd: release socket [ 199.990032][ T6966] vhci_hcd: disconnect device [ 199.996515][T31893] lo speed is unknown, defaulting to 1000 [ 200.003144][T31680] lo speed is unknown, defaulting to 1000 [ 200.025554][T31680] lo speed is unknown, defaulting to 1000 [ 200.062363][T31893] lo speed is unknown, defaulting to 1000 [ 200.069322][T31893] lo speed is unknown, defaulting to 1000 [ 200.769633][T32357] netlink: 'syz.0.2088': attribute type 1 has an invalid length. [ 200.982739][T32561] IPVS: Error joining to the multicast group [ 201.287309][ T964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=964 comm=syz.0.2099 [ 201.324110][ T968] __nla_validate_parse: 28 callbacks suppressed [ 201.324130][ T968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2100'. [ 201.407557][ T974] loop3: detected capacity change from 0 to 128 [ 201.436318][ T974] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.610392][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.673138][ T1289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2110'. [ 201.704192][ T1298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2111'. [ 201.873783][ T1430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2117'. [ 201.999293][ T1522] Set syz1 is full, maxelem 65536 reached [ 202.026016][ T1559] loop3: detected capacity change from 0 to 2048 [ 202.048294][ T1559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.102444][ T1647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2123'. [ 202.129164][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.141181][ T1653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2127'. [ 202.379922][ T1976] bridge0: port 2() entered disabled state [ 202.386062][ T1976] bridge0: port 3(0!) entered disabled state [ 202.394318][ T1976] bridge1: port 1(vlan0) entered disabled state [ 202.486989][ T1989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2139'. [ 202.521643][ T1991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2140'. [ 202.872357][ T2117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2151'. [ 202.899615][ T2112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2149'. [ 203.165815][ T2230] loop3: detected capacity change from 0 to 512 [ 203.175676][ T2230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.214543][ T2230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.268471][ T2230] lo speed is unknown, defaulting to 1000 [ 203.307127][ T2230] lo speed is unknown, defaulting to 1000 [ 203.313256][ T2230] lo speed is unknown, defaulting to 1000 [ 203.369117][ T2344] lo: left allmulticast mode [ 203.374680][ T2344] tunl0: left allmulticast mode [ 203.380360][ T2344] gre0: left allmulticast mode [ 203.386124][ T2344] gretap0: left allmulticast mode [ 203.391917][ T2344] erspan0: left allmulticast mode [ 203.404179][ T2344] ip_vti0: left allmulticast mode [ 203.410578][ T2344] ip6_vti0: left allmulticast mode [ 203.416730][ T2344] sit0: left allmulticast mode [ 203.422459][ T2344] ip6tnl0: left allmulticast mode [ 203.429089][ T2344] ip6gre0: left allmulticast mode [ 203.436533][ T2344] syz_tun: left allmulticast mode [ 203.442942][ T2344] ip6gretap0: left allmulticast mode [ 203.458742][ T2344] vcan0: left allmulticast mode [ 203.469548][ T2344] team0: left allmulticast mode [ 203.474497][ T2344] C: left allmulticast mode [ 203.479164][ T2344] team_slave_1: left allmulticast mode [ 203.491878][ T2344] nlmon0: left allmulticast mode [ 203.500212][ T2344] caif0: left allmulticast mode [ 203.505186][ T2344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.527144][ T29] kauditd_printk_skb: 926 callbacks suppressed [ 203.527161][ T29] audit: type=1400 audit(203.504:26313): avc: denied { map } for pid=2340 comm="syz.2.2170" path="socket:[26773]" dev="sockfs" ino=26773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 203.798256][ T29] audit: type=1326 audit(203.774:26314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 203.821560][ T29] audit: type=1326 audit(203.774:26315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 203.887329][ T29] audit: type=1326 audit(203.844:26316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 203.910404][ T29] audit: type=1326 audit(203.844:26317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 203.933403][ T29] audit: type=1326 audit(203.844:26318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 203.956436][ T29] audit: type=1326 audit(203.844:26319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 203.979692][ T29] audit: type=1326 audit(203.844:26320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 204.002594][ T29] audit: type=1326 audit(203.844:26321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 204.025490][ T29] audit: type=1326 audit(203.844:26322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 204.068492][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.390186][ T2675] netlink: 'syz.2.2173': attribute type 10 has an invalid length. [ 204.434077][ T2675] !: left allmulticast mode [ 204.441709][ T2675] !: left promiscuous mode [ 204.446564][ T2675] bridge0: port 3(0!) entered disabled state [ 204.528611][ T2675] netlink: 'syz.2.2173': attribute type 10 has an invalid length. [ 204.540594][ T2675] !: entered promiscuous mode [ 204.558914][ T2675] !: entered allmulticast mode [ 204.580179][ T2675] : (slave 0!): Enslaving as an active interface with an up link [ 204.925179][ T3121] netlink: 'syz.2.2182': attribute type 4 has an invalid length. [ 206.030155][ T3482] lo speed is unknown, defaulting to 1000 [ 206.091144][ T3482] lo speed is unknown, defaulting to 1000 [ 206.097809][ T3482] lo speed is unknown, defaulting to 1000 [ 206.770090][ T3827] __nla_validate_parse: 11 callbacks suppressed [ 206.770132][ T3827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2200'. [ 207.475050][ T4468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2208'. [ 207.499335][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'. [ 207.615548][ T4479] syz_tun: entered allmulticast mode [ 207.642752][ T4479] dvmrp1: entered allmulticast mode [ 207.671021][ T4476] syz_tun: left allmulticast mode [ 207.913332][ T4615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2222'. [ 207.931432][ T4618] siw: device registration error -23 [ 208.015566][ T4740] pimreg: entered allmulticast mode [ 208.037807][ T4740] pimreg: left allmulticast mode [ 208.049664][ T4747] netlink: 'syz.4.2230': attribute type 4 has an invalid length. [ 208.501450][ T5224] netlink: 'syz.1.2249': attribute type 10 has an invalid length. [ 208.510972][ T5224] bond0: (slave dummy0): Releasing backup interface [ 208.519449][ T5224] IPVS: Error connecting to the multicast addr [ 208.581530][ T5228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2251'. [ 208.937250][ T5594] loop3: detected capacity change from 0 to 512 [ 208.959403][ T29] kauditd_printk_skb: 806 callbacks suppressed [ 208.959424][ T29] audit: type=1326 audit(208.934:27129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5598 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 208.999114][ T29] audit: type=1326 audit(208.934:27130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5598 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 209.022208][ T29] audit: type=1326 audit(208.934:27131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5598 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 209.045222][ T29] audit: type=1326 audit(208.934:27132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5598 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 209.068028][ T29] audit: type=1326 audit(208.934:27133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5598 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 209.091029][ T29] audit: type=1326 audit(208.934:27134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5598 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f144901d69f code=0x7ffc0000 [ 209.113946][ T29] audit: type=1326 audit(208.934:27135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5598 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 209.136944][ T29] audit: type=1326 audit(208.934:27136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5598 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 209.159859][ T29] audit: type=1326 audit(208.934:27137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5598 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 209.182811][ T29] audit: type=1326 audit(208.934:27138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5598 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 209.212191][ T5334] lo speed is unknown, defaulting to 1000 [ 209.376838][ T5622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2263'. [ 209.471313][ T5724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2266'. [ 209.514966][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 209.579013][ T5730] IPv4: Oversized IP packet from 127.202.26.0 [ 209.609555][ T5735] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2269'. [ 209.619599][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2269'. [ 209.685267][ T5334] lo speed is unknown, defaulting to 1000 [ 209.697388][ T5334] lo speed is unknown, defaulting to 1000 [ 209.724755][ T5745] loop9: detected capacity change from 0 to 7 [ 209.731129][ T5745] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.752429][ T5745] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.760769][ T5745] loop9: unable to read partition table [ 209.776872][ T5745] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 209.776872][ T5745] ) failed (rc=-5) [ 209.895805][ T5746] cgroup: fork rejected by pids controller in /syz2 [ 210.292645][ T5989] syz.1.2282: attempt to access beyond end of device [ 210.292645][ T5989] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 210.306172][ T5989] FAT-fs (loop3): unable to read boot sector [ 210.477598][ T6104] lo speed is unknown, defaulting to 1000 [ 210.532050][ T6104] lo speed is unknown, defaulting to 1000 [ 210.551902][ T6104] lo speed is unknown, defaulting to 1000 [ 210.588375][ T6305] IPv6: Can't replace route, no match found [ 210.698607][ T6328] lo speed is unknown, defaulting to 1000 [ 210.858499][ T6328] lo speed is unknown, defaulting to 1000 [ 210.877484][ T6328] lo speed is unknown, defaulting to 1000 [ 210.978210][ T6560] rdma_rxe: rxe_newlink: failed to add bond0 [ 211.266521][ T6897] netlink: 'syz.4.2307': attribute type 6 has an invalid length. [ 211.715367][ T7435] tipc: Enabling of bearer rejected, failed to enable media [ 211.793099][ T7445] loop3: detected capacity change from 0 to 512 [ 211.805923][ T7445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.885106][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.038953][ T7561] lo speed is unknown, defaulting to 1000 [ 212.108628][ T7561] lo speed is unknown, defaulting to 1000 [ 212.127537][ T7561] lo speed is unknown, defaulting to 1000 [ 212.207066][ T7679] __nla_validate_parse: 4 callbacks suppressed [ 212.207145][ T7679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2331'. [ 212.284721][ T7686] siw: device registration error -23 [ 212.326372][ T7677] loop3: detected capacity change from 0 to 512 [ 212.357730][ T7686] lo speed is unknown, defaulting to 1000 [ 212.375698][ T7677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.465940][ T7686] lo speed is unknown, defaulting to 1000 [ 212.492774][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.513419][ T7686] lo speed is unknown, defaulting to 1000 [ 212.577983][ T7911] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 213.099599][ T8436] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 213.479514][ T8648] syz.3.2352: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 213.494453][ T8648] CPU: 1 UID: 0 PID: 8648 Comm: syz.3.2352 Not tainted syzkaller #0 PREEMPT(voluntary) [ 213.494481][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.494497][ T8648] Call Trace: [ 213.494504][ T8648] [ 213.494514][ T8648] __dump_stack+0x1d/0x30 [ 213.494541][ T8648] dump_stack_lvl+0xe8/0x140 [ 213.494577][ T8648] dump_stack+0x15/0x1b [ 213.494598][ T8648] warn_alloc+0x12b/0x1a0 [ 213.494643][ T8648] __vmalloc_node_range_noprof+0x9c/0xe00 [ 213.494685][ T8648] ? __futex_wait+0x1ff/0x260 [ 213.494791][ T8648] ? __pfx_futex_wake_mark+0x10/0x10 [ 213.494830][ T8648] ? __rcu_read_unlock+0x4f/0x70 [ 213.494928][ T8648] ? avc_has_perm_noaudit+0x1b1/0x200 [ 213.494959][ T8648] ? should_fail_ex+0x30/0x280 [ 213.494984][ T8648] ? xskq_create+0x36/0xe0 [ 213.495081][ T8648] vmalloc_user_noprof+0x7d/0xb0 [ 213.495133][ T8648] ? xskq_create+0x80/0xe0 [ 213.495164][ T8648] xskq_create+0x80/0xe0 [ 213.495214][ T8648] xsk_init_queue+0x95/0xf0 [ 213.495253][ T8648] xsk_setsockopt+0x477/0x640 [ 213.495316][ T8648] ? __pfx_xsk_setsockopt+0x10/0x10 [ 213.495352][ T8648] __sys_setsockopt+0x181/0x200 [ 213.495381][ T8648] __x64_sys_setsockopt+0x64/0x80 [ 213.495414][ T8648] x64_sys_call+0x20ec/0x2ff0 [ 213.495456][ T8648] do_syscall_64+0xd2/0x200 [ 213.495488][ T8648] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.495519][ T8648] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 213.495551][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.495633][ T8648] RIP: 0033:0x7fdcd60cebe9 [ 213.495655][ T8648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.495679][ T8648] RSP: 002b:00007fdcd4b2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 213.495703][ T8648] RAX: ffffffffffffffda RBX: 00007fdcd62f5fa0 RCX: 00007fdcd60cebe9 [ 213.495720][ T8648] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 213.495735][ T8648] RBP: 00007fdcd6151e19 R08: 0000000000000004 R09: 0000000000000000 [ 213.495751][ T8648] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 213.495766][ T8648] R13: 00007fdcd62f6038 R14: 00007fdcd62f5fa0 R15: 00007ffce98c40f8 [ 213.495861][ T8648] [ 213.495873][ T8648] Mem-Info: [ 213.720003][ T8648] active_anon:14561 inactive_anon:11237 isolated_anon:0 [ 213.720003][ T8648] active_file:12824 inactive_file:11161 isolated_file:0 [ 213.720003][ T8648] unevictable:20763 dirty:331 writeback:0 [ 213.720003][ T8648] slab_reclaimable:3557 slab_unreclaimable:34225 [ 213.720003][ T8648] mapped:28903 shmem:11073 pagetables:4692 [ 213.720003][ T8648] sec_pagetables:0 bounce:0 [ 213.720003][ T8648] kernel_misc_reclaimable:0 [ 213.720003][ T8648] free:1786209 free_pcp:26638 free_cma:0 [ 213.766327][ T8648] Node 0 active_anon:58244kB inactive_anon:44948kB active_file:51296kB inactive_file:44644kB unevictable:83052kB isolated(anon):0kB isolated(file):0kB mapped:115612kB dirty:1324kB writeback:0kB shmem:44292kB kernel_stack:6240kB pagetables:18884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.794551][ T8648] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.823456][ T8648] lowmem_reserve[]: 0 2883 7862 7862 [ 213.828864][ T8648] Node 0 DMA32 free:2949308kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952840kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 213.859208][ T8648] lowmem_reserve[]: 0 0 4978 4978 [ 213.864353][ T8648] Node 0 Normal free:4179796kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58244kB inactive_anon:44948kB active_file:51296kB inactive_file:44644kB unevictable:83052kB writepending:1324kB present:5242880kB managed:5098240kB mlocked:8kB bounce:0kB free_pcp:102644kB local_pcp:44112kB free_cma:0kB [ 213.897380][ T8648] lowmem_reserve[]: 0 0 0 0 [ 213.901919][ T8648] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.914806][ T8648] Node 0 DMA32: 5*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949308kB [ 213.931165][ T8648] Node 0 Normal: 145*4kB (UME) 137*8kB (UME) 425*16kB (UME) 44*32kB (UM) 13*64kB (UM) 124*128kB (UME) 295*256kB (UM) 96*512kB (UM) 96*1024kB (UME) 47*2048kB (UM) 936*4096kB (UM) = 4179676kB [ 213.950149][ T8648] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 213.959727][ T8648] 55855 total pagecache pages [ 213.964448][ T8648] 41 pages in swap cache [ 213.968699][ T8648] Free swap = 81560kB [ 213.972770][ T8648] Total swap = 124996kB [ 213.976959][ T8648] 2097051 pages RAM [ 213.980783][ T8648] 0 pages HighMem/MovableOnly [ 213.985266][ T29] kauditd_printk_skb: 1135 callbacks suppressed [ 213.985284][ T29] audit: type=1326 audit(213.964:28274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 213.985548][ T8648] 80441 pages reserved [ 213.991806][ T29] audit: type=1326 audit(213.964:28275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 214.042341][ T29] audit: type=1326 audit(213.964:28276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 214.065322][ T29] audit: type=1326 audit(213.964:28277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 214.088716][ T29] audit: type=1326 audit(213.964:28278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 214.089452][ T8864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2356'. [ 214.155048][ T8864] netem: change failed [ 214.187405][ T29] audit: type=1326 audit(214.074:28279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 214.210694][ T29] audit: type=1326 audit(214.134:28280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 214.233775][ T29] audit: type=1326 audit(214.134:28281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 214.257049][ T29] audit: type=1326 audit(214.194:28282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 214.280145][ T29] audit: type=1326 audit(214.194:28283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144901ebe9 code=0x7ffc0000 [ 214.321194][ T8873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2359'. [ 214.441985][ T9187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9187 comm=syz.4.2367 [ 214.454560][ T9187] netlink: 'syz.4.2367': attribute type 2 has an invalid length. [ 214.462311][ T9187] netlink: 'syz.4.2367': attribute type 1 has an invalid length. [ 214.470199][ T9187] netlink: 'syz.4.2367': attribute type 8 has an invalid length. [ 214.478059][ T9187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2367'. [ 214.505875][ T9187] tipc: Started in network mode [ 214.511143][ T9187] tipc: Node identity ac14140f, cluster identity 4711 [ 214.518801][ T9187] tipc: New replicast peer: 255.255.255.255 [ 214.524959][ T9187] tipc: Enabled bearer , priority 10 [ 214.669963][ T9308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2375'. [ 214.932386][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2382'. [ 214.954299][ T9516] lo speed is unknown, defaulting to 1000 [ 214.963266][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2382'. [ 215.157329][ T9831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2396'. [ 215.242404][ T9877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2389'. [ 215.410803][ T9962] loop3: detected capacity change from 0 to 512 [ 215.474316][T10067] netlink: 'syz.0.2398': attribute type 10 has an invalid length. [ 215.511001][ T9962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 215.539118][ T9962] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2394: Failed to acquire dquot type 0 [ 215.557682][T10067] bridge0: port 3(bond0) entered disabled state [ 215.591852][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 215.646451][ T10] tipc: Node number set to 2886997007 [ 215.654680][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2402'. [ 215.979579][ T9516] lo speed is unknown, defaulting to 1000 [ 216.003309][ T9516] lo speed is unknown, defaulting to 1000 [ 216.068203][T10699] netlink: 'syz.0.2413': attribute type 27 has an invalid length. [ 216.105791][T10699] bridge0: port 2(dummy0) entered disabled state [ 216.140121][ T3375] syz1: Port: 1 Link DOWN [ 217.004253][T11536] netlink: 'syz.3.2442': attribute type 1 has an invalid length. [ 217.175262][T11788] tmpfs: Bad value for 'mpol' [ 217.228140][T11818] __nla_validate_parse: 17 callbacks suppressed [ 217.228162][T11818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2451'. [ 217.348320][T11999] bond_slave_1: mtu less than device minimum [ 217.363047][T11999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2455'. [ 217.371020][T12000] lo speed is unknown, defaulting to 1000 [ 217.447723][T12000] lo speed is unknown, defaulting to 1000 [ 217.455987][T12000] lo speed is unknown, defaulting to 1000 [ 217.456330][T12191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12191 comm=syz.2.2459 [ 217.484394][T12191] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 217.494267][T12191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2459'. [ 217.562352][T12216] tipc: Enabling of bearer rejected, failed to enable media [ 217.655616][T12223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2464'. [ 217.727984][T12232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2468'. [ 217.744763][T12238] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2471'. [ 217.754218][T12238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2471'. [ 217.873116][T12359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2480'. [ 217.932894][T12366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2484'. [ 217.995726][T12245] cgroup: fork rejected by pids controller in /syz3 [ 218.009612][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2486'. [ 218.159367][T12579] lo speed is unknown, defaulting to 1000 [ 218.257342][T12646] loop3: detected capacity change from 0 to 512 [ 218.258673][T12579] lo speed is unknown, defaulting to 1000 [ 218.270335][T12579] lo speed is unknown, defaulting to 1000 [ 218.317059][T12646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.485099][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.552244][T12847] lo speed is unknown, defaulting to 1000 [ 218.616490][T12847] lo speed is unknown, defaulting to 1000 [ 218.622596][T12847] lo speed is unknown, defaulting to 1000 [ 218.848911][T13203] lo speed is unknown, defaulting to 1000 [ 218.919855][T13203] lo speed is unknown, defaulting to 1000 [ 218.926873][T13203] lo speed is unknown, defaulting to 1000 [ 218.997613][ T29] kauditd_printk_skb: 1530 callbacks suppressed [ 218.997632][ T29] audit: type=1326 audit(218.974:29812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.2.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab233bebe9 code=0x7ffc0000 [ 219.037040][ T29] audit: type=1326 audit(218.974:29813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.2.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab233bebe9 code=0x7ffc0000 [ 219.060191][ T29] audit: type=1326 audit(218.974:29814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.2.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab233bebe9 code=0x7ffc0000 [ 219.083363][ T29] audit: type=1326 audit(218.974:29815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.2.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab233bebe9 code=0x7ffc0000 [ 219.106340][ T29] audit: type=1326 audit(218.974:29816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.2.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab233bebe9 code=0x7ffc0000 [ 219.129590][ T29] audit: type=1326 audit(218.984:29817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.2.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab233bebe9 code=0x7ffc0000 [ 219.152891][ T29] audit: type=1326 audit(218.984:29818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.2.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab233bebe9 code=0x7ffc0000 [ 219.175976][ T29] audit: type=1326 audit(218.984:29819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.2.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab233bebe9 code=0x7ffc0000 [ 219.199168][ T29] audit: type=1326 audit(218.984:29820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.2.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab233bebe9 code=0x7ffc0000 [ 219.222463][ T29] audit: type=1326 audit(218.984:29821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.2.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fab233bebe9 code=0x7ffc0000 [ 219.600140][T13866] loop3: detected capacity change from 0 to 1764 [ 219.731020][T14086] 9pnet_fd: Insufficient options for proto=fd [ 219.775623][T14087] netlink: 'syz.3.2532': attribute type 10 has an invalid length. [ 219.785669][T14087] team0: Port device dummy0 added [ 219.798797][T14087] IPVS: Error connecting to the multicast addr [ 219.852271][T14297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14297 comm=syz.4.2539 [ 219.868503][T14297] syz_tun: entered allmulticast mode [ 219.915828][T14296] syz_tun: left allmulticast mode [ 220.017103][T14324] loop3: detected capacity change from 0 to 512 [ 220.069420][T14324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.226707][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.338126][T14836] netlink: 'syz.4.2553': attribute type 10 has an invalid length. [ 220.367319][T14836] IPVS: Error connecting to the multicast addr [ 220.508028][T14978] siw: device registration error -23 [ 220.577685][T14978] lo speed is unknown, defaulting to 1000 [ 220.658798][T14978] lo speed is unknown, defaulting to 1000 [ 220.665695][T14978] lo speed is unknown, defaulting to 1000 [ 221.301857][T15736] loop3: detected capacity change from 0 to 256 [ 221.329185][T15736] FAT-fs (loop3): Directory bread(block 64) failed [ 221.336666][T15736] FAT-fs (loop3): Directory bread(block 65) failed [ 221.343410][T15736] FAT-fs (loop3): Directory bread(block 66) failed [ 221.350295][T15736] FAT-fs (loop3): Directory bread(block 67) failed [ 221.358276][T15736] FAT-fs (loop3): Directory bread(block 68) failed [ 221.365043][T15736] FAT-fs (loop3): Directory bread(block 69) failed [ 221.371793][T15736] FAT-fs (loop3): Directory bread(block 70) failed [ 221.379322][T15736] FAT-fs (loop3): Directory bread(block 71) failed [ 221.386052][T15736] FAT-fs (loop3): Directory bread(block 72) failed [ 221.404928][T15736] FAT-fs (loop3): Directory bread(block 73) failed [ 221.451978][T15736] syz.3.2582: attempt to access beyond end of device [ 221.451978][T15736] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 221.503019][T16045] syz.3.2582: attempt to access beyond end of device [ 221.503019][T16045] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 221.576951][T16055] syz_tun: entered allmulticast mode [ 221.599632][T16054] syz_tun: left allmulticast mode [ 222.242590][T16729] __nla_validate_parse: 21 callbacks suppressed [ 222.242615][T16729] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2624'. [ 222.426809][T16985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2632'. [ 222.757045][T16903] Set syz1 is full, maxelem 65536 reached [ 222.789698][T17294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2641'. [ 222.838760][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2641'. [ 222.895540][T17384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2644'. [ 222.916419][T17294] netlink: 'syz.4.2641': attribute type 10 has an invalid length. [ 222.961288][T17491] netlink: 'syz.4.2647': attribute type 1 has an invalid length. [ 222.977767][T17491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.992743][T17491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.000612][T17491] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 223.013009][T17491] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 223.435481][T18057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2656'. [ 223.896740][T18811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2669'. [ 223.923914][T18813] IPv6: Can't replace route, no match found [ 223.947766][T18815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2670'. [ 224.167037][T18934] lo speed is unknown, defaulting to 1000 [ 224.236347][T19089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2681'. [ 224.255967][T18934] lo speed is unknown, defaulting to 1000 [ 224.275274][T18934] lo speed is unknown, defaulting to 1000 [ 224.486337][ T29] kauditd_printk_skb: 632 callbacks suppressed [ 224.486354][ T29] audit: type=1326 audit(224.444:30454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19277 comm="syz.0.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 224.516079][ T29] audit: type=1326 audit(224.444:30455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19277 comm="syz.0.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 224.539181][ T29] audit: type=1326 audit(224.444:30456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19277 comm="syz.0.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 224.562234][ T29] audit: type=1326 audit(224.444:30457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19277 comm="syz.0.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 224.585322][ T29] audit: type=1326 audit(224.444:30458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19277 comm="syz.0.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 224.608447][ T29] audit: type=1326 audit(224.444:30459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19277 comm="syz.0.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 224.631512][ T29] audit: type=1326 audit(224.444:30460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19277 comm="syz.0.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 224.654576][ T29] audit: type=1326 audit(224.444:30461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19277 comm="syz.0.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 224.677575][ T29] audit: type=1326 audit(224.444:30462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19277 comm="syz.0.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 224.701068][ T29] audit: type=1326 audit(224.444:30463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19277 comm="syz.0.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0c29d5ebe9 code=0x7ffc0000 [ 224.772466][T19384] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2698'. [ 224.781464][T19384] 0ªî{X¹¦: renamed from gretap0 [ 224.793889][T19384] 0ªî{X¹¦: entered allmulticast mode [ 224.803872][T19384] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 224.871446][T19473] loop3: detected capacity change from 0 to 512 [ 224.894763][T19473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.263362][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.284146][T19809] wireguard1: entered promiscuous mode [ 225.289794][T19809] wireguard1: entered allmulticast mode [ 225.510986][T19940] lo speed is unknown, defaulting to 1000 [ 225.584643][T20183] openvswitch: netlink: Message has 6 unknown bytes. [ 225.603020][T19940] lo speed is unknown, defaulting to 1000 [ 225.609232][T19940] lo speed is unknown, defaulting to 1000 [ 226.238291][T20604] pim6reg: entered allmulticast mode [ 226.281900][T20604] pim6reg: left allmulticast mode [ 226.753130][T21611] loop3: detected capacity change from 0 to 1024 [ 226.763460][T21611] EXT4-fs: Ignoring removed bh option [ 226.774686][T21611] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 226.880938][T21966] syz_tun: entered allmulticast mode [ 226.929369][T21966] netlink: 'syz.2.2746': attribute type 4 has an invalid length. [ 226.959776][T21966] dvmrp1: entered allmulticast mode [ 227.096749][T22056] lo speed is unknown, defaulting to 1000 [ 227.202392][T22056] lo speed is unknown, defaulting to 1000 [ 227.216152][T22056] lo speed is unknown, defaulting to 1000 [ 227.442304][T22629] __nla_validate_parse: 9 callbacks suppressed [ 227.442379][T22629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2761'. [ 227.457898][T22629] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2761'. [ 227.467512][T22629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2761'. [ 227.476819][T22629] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2761'. [ 227.485957][T22629] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2761'. [ 227.525415][T22709] netlink: 'syz.4.2763': attribute type 27 has an invalid length. [ 227.955711][T22845] 8021q: adding VLAN 0 to HW filter on device  [ 227.977061][T22845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.002660][T23057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2772'. [ 228.203455][T23171] macsec1: entered promiscuous mode [ 228.313795][T23171] bridge0: port 3(macsec1) entered blocking state [ 228.320365][T23171] bridge0: port 3(macsec1) entered disabled state [ 228.332605][T23171] macsec1: entered allmulticast mode [ 228.378684][T23171] macsec1: left allmulticast mode [ 228.540582][T23703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2787'. [ 228.575476][T23713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2790'. [ 228.999418][T24263] netlink: 'syz.0.2811': attribute type 27 has an invalid length. [ 229.012278][T24263] 0ªî{X¹¦: left allmulticast mode [ 229.427513][T24891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2819'. [ 229.487583][T25096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2823'. [ 229.510247][ T29] kauditd_printk_skb: 3409 callbacks suppressed [ 229.510264][ T29] audit: type=1326 audit(229.484:33873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25099 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 229.540205][ T29] audit: type=1326 audit(229.484:33874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25099 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 229.610134][T25100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25100 comm=syz.3.2826 [ 229.617749][ T29] audit: type=1326 audit(229.514:33875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25099 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 229.645787][ T29] audit: type=1326 audit(229.514:33876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25099 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 229.668880][ T29] audit: type=1326 audit(229.514:33877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25099 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 229.692150][ T29] audit: type=1326 audit(229.514:33878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25099 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 229.715124][ T29] audit: type=1326 audit(229.544:33879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25099 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 229.738290][ T29] audit: type=1326 audit(229.544:33880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25099 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 229.761445][ T29] audit: type=1326 audit(229.544:33881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25099 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 229.784616][ T29] audit: type=1326 audit(229.574:33882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25099 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 229.833815][T25410] loop3: detected capacity change from 0 to 512 [ 229.847413][T25410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.929677][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.316620][T26055] loop3: detected capacity change from 0 to 128 [ 230.383600][T26055] syz.3.2844: attempt to access beyond end of device [ 230.383600][T26055] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 230.397402][T26055] syz.3.2844: attempt to access beyond end of device [ 230.397402][T26055] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 230.411694][T26055] syz.3.2844: attempt to access beyond end of device [ 230.411694][T26055] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 230.431568][T26055] syz.3.2844: attempt to access beyond end of device [ 230.431568][T26055] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 230.446348][T26055] syz.3.2844: attempt to access beyond end of device [ 230.446348][T26055] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 230.460618][T26055] syz.3.2844: attempt to access beyond end of device [ 230.460618][T26055] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 230.475180][T26055] syz.3.2844: attempt to access beyond end of device [ 230.475180][T26055] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 230.494082][T26055] syz.3.2844: attempt to access beyond end of device [ 230.494082][T26055] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 230.508342][T26055] syz.3.2844: attempt to access beyond end of device [ 230.508342][T26055] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 230.527062][T26055] syz.3.2844: attempt to access beyond end of device [ 230.527062][T26055] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 231.566696][T27879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27879 comm=syz.3.2883 [ 231.579495][T27879] netlink: 'syz.3.2883': attribute type 2 has an invalid length. [ 231.587313][T27879] netlink: 'syz.3.2883': attribute type 1 has an invalid length. [ 231.595090][T27879] netlink: 'syz.3.2883': attribute type 8 has an invalid length. [ 231.719431][T27879] tipc: New replicast peer: 255.255.255.255 [ 231.725475][T27879] tipc: Enabled bearer , priority 10 [ 231.736604][T27879] loop3: detected capacity change from 0 to 512 [ 231.750833][T27879] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 232.148046][T28866] pimreg: entered allmulticast mode [ 232.324252][T29029] openvswitch: netlink: Message has 6 unknown bytes. [ 232.600226][T29248] __nla_validate_parse: 14 callbacks suppressed [ 232.600247][T29248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2918'. [ 232.618148][T29248] netlink: 304 bytes leftover after parsing attributes in process `syz.3.2918'. [ 232.629817][T29253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2919'. [ 232.639767][T29253] netem: change failed [ 232.731366][T29437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2924'. [ 232.843515][ T1034] tipc: Node number set to 426616650 [ 233.579705][T30442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30442 comm=syz.4.2960 [ 233.932260][T31045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2973'. [ 233.935850][T30954] lo speed is unknown, defaulting to 1000 [ 234.028507][T30954] lo speed is unknown, defaulting to 1000 [ 234.084536][T30954] lo speed is unknown, defaulting to 1000 [ 234.185944][T31405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2978'. [ 234.361422][T31564] loop3: detected capacity change from 0 to 512 [ 234.390960][T31564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.417370][T31563] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2982'. [ 234.499928][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.737597][T32163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2998'. [ 234.746946][T32163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2998'. [ 234.758144][ T29] kauditd_printk_skb: 971 callbacks suppressed [ 234.758162][ T29] audit: type=1326 audit(234.734:34854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 234.787751][ T29] audit: type=1326 audit(234.734:34855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 234.852905][ T29] audit: type=1326 audit(234.734:34856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 234.876082][ T29] audit: type=1326 audit(234.734:34857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 234.899579][ T29] audit: type=1326 audit(234.734:34858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 234.922590][ T29] audit: type=1326 audit(234.734:34859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 234.946233][ T29] audit: type=1326 audit(234.734:34860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 234.969618][ T29] audit: type=1326 audit(234.734:34861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 234.992775][ T29] audit: type=1326 audit(234.734:34862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 235.015912][ T29] audit: type=1326 audit(234.734:34863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 235.168569][T32585] loop3: detected capacity change from 0 to 512 [ 235.205810][T32594] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3010'. [ 235.224579][T32585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.243327][T32588] netlink: 'syz.4.3007': attribute type 10 has an invalid length. [ 235.256834][T32588] netlink: 'syz.4.3007': attribute type 10 has an invalid length. [ 235.267009][T32588] : (slave dummy0): Enslaving as an active interface with an up link [ 235.291778][T32585] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.3008: invalid fast symlink length 10 [ 235.390554][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.441335][ T354] IPVS: Error connecting to the multicast addr [ 235.450413][ T355] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 235.512028][ T470] loop3: detected capacity change from 0 to 128 [ 235.519497][ T470] vfat: Unknown parameter 'sþrtname' [ 235.809063][ T984] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 235.975101][ T1033] netlink: 'syz.0.3035': attribute type 4 has an invalid length. [ 236.569468][ T2410] netlink: 'syz.4.3058': attribute type 10 has an invalid length. [ 236.590008][ T2410] : (slave dummy0): Releasing backup interface [ 236.852328][ T2637] netlink: 'syz.2.3069': attribute type 27 has an invalid length. [ 236.880200][ T2637] gretap1: left promiscuous mode [ 236.898082][ T2637] syz_tun: left allmulticast mode [ 236.906465][ T2637] dvmrp1: left allmulticast mode [ 236.934379][ T2646] vlan0: entered promiscuous mode [ 236.939455][ T2646] hsr_slave_1: entered promiscuous mode [ 236.945227][ T2646] vlan0: entered allmulticast mode [ 236.950444][ T2646] hsr_slave_1: entered allmulticast mode [ 237.285283][ T2653] lo speed is unknown, defaulting to 1000 [ 237.466084][ T3409] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 237.474924][ T3409] ref_ctr increment failed for inode: 0xcd2 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005ed40 [ 237.502936][ T3463] atomic_op ffff888169078d28 conn xmit_atomic 0000000000000000 [ 237.557922][ T3520] tmpfs: Bad value for 'mpol' [ 237.765681][ T3468] lo speed is unknown, defaulting to 1000 [ 237.777030][ T2653] lo speed is unknown, defaulting to 1000 [ 237.814703][ T2653] lo speed is unknown, defaulting to 1000 [ 237.833638][ T3468] lo speed is unknown, defaulting to 1000 [ 237.852197][ T3468] lo speed is unknown, defaulting to 1000 [ 237.875697][ T3899] futex_wake_op: syz.1.3099 tries to shift op by -1; fix this program [ 237.941106][ T3901] netlink: 'syz.1.3110': attribute type 13 has an invalid length. [ 238.010141][ T3901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.028456][ T3901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.044027][ T3375] lo speed is unknown, defaulting to 1000 [ 238.049862][ T3375] syz2: Port: 1 Link ACTIVE [ 238.416075][ T4287] __nla_validate_parse: 6 callbacks suppressed [ 238.416093][ T4287] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3112'. [ 238.716262][ T4712] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3116'. [ 239.034130][ T5085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3124'. [ 239.169784][ T5326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3128'. [ 239.386170][ T5693] vxcan3: entered promiscuous mode [ 239.391355][ T5693] vxcan3: entered allmulticast mode [ 239.417161][ T5712] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3134'. [ 239.666395][ T6110] 9pnet: Could not find request transport: tc€ [ 239.666395][ T6110] [ 239.709694][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3149'. [ 239.718919][ T6110] netlink: 4 bytes leftover after parsing attributes in process `"ýbä3ÙA¹-'. [ 239.734439][ T6228] loop3: detected capacity change from 0 to 512 [ 239.785273][ T6228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.950455][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.979466][ T29] kauditd_printk_skb: 702 callbacks suppressed [ 239.979485][ T29] audit: type=1326 audit(239.954:35566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.3.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 240.009526][ T29] audit: type=1326 audit(239.964:35567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.3.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 240.032691][ T29] audit: type=1326 audit(239.964:35568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.3.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 240.055916][ T29] audit: type=1326 audit(239.964:35569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.3.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 240.078935][ T29] audit: type=1326 audit(239.964:35570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.3.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 240.102342][ T29] audit: type=1326 audit(239.964:35571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.3.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 240.125513][ T29] audit: type=1326 audit(239.964:35572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.3.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 240.148609][ T29] audit: type=1326 audit(239.964:35573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.3.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 240.171663][ T29] audit: type=1326 audit(239.964:35574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.3.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 240.194602][ T29] audit: type=1326 audit(239.964:35575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.3.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 240.418381][ T7228] loop3: detected capacity change from 0 to 512 [ 240.467694][ T7228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.495031][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.502554][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.511833][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.519312][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.526768][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.534214][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.541629][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.549059][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.556514][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.561250][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3170'. [ 240.563959][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.742490][ T3375] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 240.764379][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.053392][ T8435] loop3: detected capacity change from 0 to 512 [ 241.068003][ T8435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.206790][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.258002][ T8650] wireguard0: entered promiscuous mode [ 241.263729][ T8650] wireguard0: entered allmulticast mode [ 241.527727][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 241.539123][ T9078] : left allmulticast mode [ 241.543983][ T9078] ÿ: left allmulticast mode [ 241.548654][ T9078] bond_slave_1: left allmulticast mode [ 241.555310][ T9078] !: left allmulticast mode [ 241.559935][ T9078] : left promiscuous mode [ 241.564442][ T9078] ÿ: left promiscuous mode [ 241.569073][ T9078] bond_slave_1: left promiscuous mode [ 241.576846][ T9078] !: left promiscuous mode [ 241.581799][ T9078] bridge0: port 2() entered disabled state [ 241.597620][ T9078] : (slave 0!): Releasing backup interface [ 241.605748][ T9078] bridge_slave_0: left allmulticast mode [ 241.611455][ T9078] bridge_slave_0: left promiscuous mode [ 241.617326][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.629570][ T9078] : (slave c1ÿ): Releasing backup interface [ 241.639762][ T9078] : (slave bond_slave_1): Releasing backup interface [ 241.680127][ T9078] bond0: (slave gretap1): Releasing active interface [ 241.694416][ T9078] vlan0: left allmulticast mode [ 241.699358][ T9078] bridge0: left allmulticast mode [ 241.704552][ T9078] vlan0: left promiscuous mode [ 241.709403][ T9078] bridge0: left promiscuous mode [ 241.714847][ T9078] bridge1: port 1(vlan0) entered disabled state [ 241.768376][ T9495] loop3: detected capacity change from 0 to 512 [ 241.809336][ T9495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.812625][ T9501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3204'. [ 241.834425][ T9503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=9503 comm=syz.0.3205 [ 241.852806][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 241.969159][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.982956][ T3375] Process accounting resumed [ 242.292968][T10154] lo speed is unknown, defaulting to 1000 [ 242.349571][T10178] bridge: RTM_NEWNEIGH with invalid ether address [ 242.367013][T10154] lo speed is unknown, defaulting to 1000 [ 242.376721][T10154] lo speed is unknown, defaulting to 1000 [ 242.546740][T10452] lo speed is unknown, defaulting to 1000 [ 242.610242][T10452] lo speed is unknown, defaulting to 1000 [ 242.624079][T10452] lo speed is unknown, defaulting to 1000 [ 243.096931][T11192] loop3: detected capacity change from 0 to 512 [ 243.155096][T11192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.318628][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.436090][T11440] __nla_validate_parse: 4 callbacks suppressed [ 243.436109][T11440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3270'. [ 243.451400][T11440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3270'. [ 243.471670][T11440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3270'. [ 243.480742][T11440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3270'. [ 243.524693][T11440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3270'. [ 243.533998][T11440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3270'. [ 243.655518][T11858] netlink: 'syz.0.3264': attribute type 6 has an invalid length. [ 243.689092][T11864] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3266'. [ 243.924888][T12103] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3277'. [ 243.934001][T12103] netlink: 380 bytes leftover after parsing attributes in process `syz.1.3277'. [ 243.943188][T12103] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3277'. [ 244.468070][T12755] netlink: 'syz.0.3295': attribute type 13 has an invalid length. [ 244.476295][T12755] netlink: 'syz.0.3295': attribute type 17 has an invalid length. [ 244.519090][T12755] bridge0: port 3(bond0) entered blocking state [ 244.525442][T12755] bridge0: port 3(bond0) entered forwarding state [ 244.532087][T12755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.541931][T12755] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.552632][T12755] bridge0: port 2(dummy0) entered blocking state [ 244.559072][T12755] bridge0: port 2(dummy0) entered forwarding state [ 244.569746][T12755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.585472][ T1034] syz1: Port: 1 Link ACTIVE [ 244.735557][T12954] rdma_rxe: rxe_newlink: failed to add syz_tun [ 244.776073][T12958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12958 comm=syz.1.3303 [ 245.002919][T13365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=13365 comm=syz.2.3315 [ 245.086972][ T29] kauditd_printk_skb: 1276 callbacks suppressed [ 245.086991][ T29] audit: type=1326 audit(245.054:36852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 245.116351][ T29] audit: type=1326 audit(245.054:36853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 245.139437][ T29] audit: type=1326 audit(245.054:36854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 245.162555][ T29] audit: type=1326 audit(245.054:36855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 245.185697][ T29] audit: type=1326 audit(245.054:36856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 245.209142][ T29] audit: type=1326 audit(245.054:36857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 245.232239][ T29] audit: type=1326 audit(245.054:36858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 245.255251][ T29] audit: type=1326 audit(245.054:36859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 245.278393][ T29] audit: type=1326 audit(245.054:36860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 245.301490][ T29] audit: type=1326 audit(245.054:36861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcd60cebe9 code=0x7ffc0000 [ 245.454755][T12954] Set syz1 is full, maxelem 65536 reached [ 245.589085][T14017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14017 comm=syz.0.3325 [ 245.590655][T14019] sch_tbf: burst 511 is lower than device veth5 mtu (1514) ! [ 245.602007][T14017] netlink: 'syz.0.3325': attribute type 2 has an invalid length. [ 245.617183][T14017] netlink: 'syz.0.3325': attribute type 1 has an invalid length. [ 245.624966][T14017] netlink: 'syz.0.3325': attribute type 8 has an invalid length. [ 245.640351][T14017] tipc: Enabling of bearer rejected, already enabled [ 245.699581][T14238] siw: device registration error -23 [ 245.704309][ T1034] hid_parser_main: 44 callbacks suppressed [ 245.704371][ T1034] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 245.718250][ T1034] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 245.725875][ T1034] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 245.733833][ T1034] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 245.741391][ T1034] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 245.748960][ T1034] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 245.756522][ T1034] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 245.764096][ T1034] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 245.771689][ T1034] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 245.779476][ T1034] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 245.788187][ T1034] hid-generic 0008:0006:0007.0005: hidraw0: HID v0.0b Device [syz1] on syz1 [ 246.002106][T14465] loop3: detected capacity change from 0 to 512 [ 246.018271][T14465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.101285][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.224667][T14525] loop3: detected capacity change from 0 to 8192 [ 246.232488][T14525] SELinux: security_context_str_to_sid (poot) failed with errno=-22 [ 246.428267][T14693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14693 comm=syz.1.3340 [ 246.431446][T14694] loop3: detected capacity change from 0 to 128 [ 246.440836][T14693] netlink: 'syz.1.3340': attribute type 2 has an invalid length. [ 246.454908][T14693] netlink: 'syz.1.3340': attribute type 1 has an invalid length. [ 246.462721][T14693] netlink: 'syz.1.3340': attribute type 8 has an invalid length. [ 246.469488][T14694] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.484960][T14693] tipc: Started in network mode [ 246.490049][T14693] tipc: Node identity ac14140f, cluster identity 4711 [ 246.496941][T14693] tipc: New replicast peer: 255.255.255.255 [ 246.502985][T14693] tipc: Enabled bearer , priority 10 [ 246.585986][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.650836][T14916] lo speed is unknown, defaulting to 1000 [ 246.695369][T14916] lo speed is unknown, defaulting to 1000 [ 246.701567][T14916] lo speed is unknown, defaulting to 1000 [ 246.785996][T15349] loop3: detected capacity change from 0 to 512 [ 246.798795][T15349] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 246.868961][T15367] loop3: detected capacity change from 0 to 512 [ 246.882087][T15352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15352 comm=syz.0.3350 [ 246.956262][T15367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.992328][T15367] EXT4-fs: Ignoring removed orlov option [ 247.006973][T15367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.023830][T15367] EXT4-fs (loop3): can't enable nombcache during remount [ 247.072758][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.084620][T15490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15490 comm=syz.2.3359 [ 247.097193][T15490] netlink: 'syz.2.3359': attribute type 2 has an invalid length. [ 247.129920][T15490] tipc: New replicast peer: 255.255.255.255 [ 247.135987][T15490] tipc: Enabled bearer , priority 10 [ 247.326039][T15826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15826 comm=syz.4.3371 [ 247.498105][ T36] tipc: Node number set to 2886997007 [ 248.050097][T15843] sch_tbf: burst 511 is lower than device veth1 mtu (1514) ! [ 248.182226][T16167] loop3: detected capacity change from 0 to 512 [ 248.261871][T16167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.280347][ T3383] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 248.490917][T15853] Set syz1 is full, maxelem 65536 reached [ 248.498244][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.517863][ T3383] lo speed is unknown, defaulting to 1000 [ 248.521493][T16521] __nla_validate_parse: 18 callbacks suppressed [ 248.521513][T16521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3385'. [ 248.523700][ T3383] syz2: Port: 1 Link DOWN [ 248.552231][T16494] lo speed is unknown, defaulting to 1000 [ 248.586637][T16602] loop3: detected capacity change from 0 to 128 [ 248.604358][T16602] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 248.617293][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3388'. [ 248.631811][T16494] lo speed is unknown, defaulting to 1000 [ 248.637962][T16494] lo speed is unknown, defaulting to 1000 [ 248.708856][T16682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3390'. [ 249.384712][T17048] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 249.414439][T17046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3396'. [ 249.428942][T17046] usb usb8: usbfs: process 17046 (syz.3.3396) did not claim interface 0 before use [ 249.471831][T17052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3398'. [ 249.548093][T17056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3400'. [ 249.607538][T17264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3403'. [ 249.709516][T17475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3408'. [ 249.714821][T17293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3406'. [ 250.188602][ T29] kauditd_printk_skb: 1473 callbacks suppressed [ 250.188618][ T29] audit: type=1326 audit(250.164:38335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.4.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 250.218086][ T29] audit: type=1326 audit(250.164:38336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.4.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 250.257981][T18061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3417'. [ 250.267994][ T29] audit: type=1326 audit(250.224:38337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.4.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 250.291370][ T29] audit: type=1326 audit(250.224:38338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.4.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 250.314596][ T29] audit: type=1326 audit(250.224:38339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.4.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 250.337641][ T29] audit: type=1326 audit(250.224:38340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.4.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 250.360558][ T29] audit: type=1326 audit(250.224:38341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.4.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 250.383806][ T29] audit: type=1326 audit(250.224:38342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.4.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb25fdeebe9 code=0x7ffc0000 [ 250.406890][ T29] audit: type=1326 audit(250.224:38343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.4.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb25fdeec23 code=0x7ffc0000 [ 250.429737][ T29] audit: type=1326 audit(250.224:38344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.4.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb25fdeec23 code=0x7ffc0000 [ 250.734322][T18451] usb usb8: usbfs: process 18451 (syz.3.3430) did not claim interface 0 before use [ 250.911564][T18752] atomic_op ffff88813d9bc928 conn xmit_atomic 0000000000000000 [ 251.273211][T18872] lo speed is unknown, defaulting to 1000 [ 251.644405][T19345] validate_nla: 3 callbacks suppressed [ 251.644424][T19345] netlink: 'syz.4.3459': attribute type 6 has an invalid length. [ 251.744846][T19326] netlink: 'syz.2.3458': attribute type 4 has an invalid length. [ 251.872515][T19537] loop3: detected capacity change from 0 to 256 [ 252.056625][T19559] loop3: detected capacity change from 0 to 512 [ 252.107245][T19559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.147114][T18872] lo speed is unknown, defaulting to 1000 [ 252.149183][ T3375] hid_parser_main: 70 callbacks suppressed [ 252.149276][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.167185][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.171922][T18872] lo speed is unknown, defaulting to 1000 [ 252.215096][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.222723][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.230241][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.237887][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.245361][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.252976][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.260453][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.267901][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.297593][ T3375] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 252.346776][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.044254][T20449] Falling back ldisc for ttyS3. [ 253.262132][T20808] loop3: detected capacity change from 0 to 512 [ 253.364212][T20876] openvswitch: netlink: Message has 6 unknown bytes. [ 253.375736][T20808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.445459][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.465662][T20987] futex_wake_op: syz.2.3510 tries to shift op by -1; fix this program [ 253.496772][T20989] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 253.718432][T21219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.892730][T21431] __nla_validate_parse: 9 callbacks suppressed [ 253.892747][T21431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3515'. [ 253.926109][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3515'. [ 253.978323][T21431] netlink: 'syz.3.3515': attribute type 10 has an invalid length. [ 253.986945][T21431] ipvlan0: entered allmulticast mode [ 253.992270][T21431] veth0_vlan: entered allmulticast mode [ 253.998478][T21431] team0: Device ipvlan0 failed to register rx_handler [ 254.028445][T21573] loop3: detected capacity change from 0 to 1024 [ 254.035910][T21573] EXT4-fs: Ignoring removed bh option [ 254.063995][T21573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 254.105921][T21573] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-001000000000. [ 254.125538][T21665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3521'. [ 254.134804][T21665] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3521'. [ 254.154321][T21665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3521'. [ 254.164339][T21665] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3521'. [ 254.173659][T21665] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3521'. [ 254.183172][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 254.317188][T21858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3529'. [ 254.509514][T22111] ================================================================== [ 254.517647][T22111] BUG: KCSAN: data-race in memcpy_and_pad / rcu_tasks_trace_pregp_step [ 254.525919][T22111] [ 254.528286][T22111] write to 0xffff88814b8894dc of 4 bytes by task 28 on cpu 1: [ 254.535742][T22111] rcu_tasks_trace_pregp_step+0x1ac/0x920 [ 254.541544][T22111] rcu_tasks_wait_gp+0x8b/0x530 [ 254.546411][T22111] rcu_tasks_one_gp+0x7f3/0x8e0 [ 254.551274][T22111] rcu_tasks_kthread+0xf7/0x110 [ 254.556135][T22111] kthread+0x486/0x510 [ 254.560212][T22111] ret_from_fork+0xda/0x150 [ 254.564726][T22111] ret_from_fork_asm+0x1a/0x30 [ 254.569499][T22111] [ 254.571828][T22111] read to 0xffff88814b889080 of 3264 bytes by task 22111 on cpu 0: [ 254.579895][T22111] memcpy_and_pad+0x48/0x80 [ 254.584404][T22111] arch_dup_task_struct+0x2c/0x40 [ 254.589443][T22111] dup_task_struct+0x83/0x6a0 [ 254.594135][T22111] copy_process+0x399/0x2000 [ 254.598735][T22111] kernel_clone+0x16c/0x5c0 [ 254.603254][T22111] __se_sys_clone3+0x1c2/0x200 [ 254.608049][T22111] __x64_sys_clone3+0x31/0x40 [ 254.612743][T22111] x64_sys_call+0x1fc9/0x2ff0 [ 254.617604][T22111] do_syscall_64+0xd2/0x200 [ 254.622132][T22111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.628031][T22111] [ 254.630362][T22111] Reported by Kernel Concurrency Sanitizer on: [ 254.636599][T22111] CPU: 0 UID: 0 PID: 22111 Comm: syz.2.3534 Not tainted syzkaller #0 PREEMPT(voluntary) [ 254.646409][T22111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.656474][T22111] ==================================================================