last executing test programs: 2m42.929854964s ago: executing program 32 (id=4255): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1, 0x1}]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x9}, 0x28) 2m42.228984183s ago: executing program 33 (id=4280): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) socket$nl_route(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m39.273918158s ago: executing program 34 (id=4340): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64, @ANYRESOCT], 0x20) 2m34.201191583s ago: executing program 35 (id=4448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m34.151943484s ago: executing program 36 (id=4452): r0 = openat(0xffffffffffffff9c, 0x0, 0x40140, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) close(r0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m33.205355375s ago: executing program 37 (id=4457): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000080)={[{@fat=@errors_continue}, {}, {@fat=@dmask={'dmask', 0x3d, 0x32}}, {@fat=@flush}]}, 0x1, 0x29b, &(0x7f0000000340)="$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") truncate(0x0, 0x64) 2m30.565747066s ago: executing program 38 (id=4470): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0xda, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200000000000000000008004ad700cc"], 0x0) 2m27.39439863s ago: executing program 8 (id=4535): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) 2m27.349173082s ago: executing program 8 (id=4537): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x7fff}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m27.333395873s ago: executing program 8 (id=4538): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)=ANY=[], 0x210) 2m27.293350994s ago: executing program 8 (id=4539): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) 2m27.293044084s ago: executing program 8 (id=4540): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x46, &(0x7f0000002800)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}}}}, 0x0) 2m27.057221914s ago: executing program 8 (id=4542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="0109ffff00000000350000000800"], 0x60}}, 0x0) r1 = io_uring_setup(0x2edd, &(0x7f0000000100)={0x0, 0xdbcb, 0x800, 0x0, 0x64}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 2m27.057060074s ago: executing program 39 (id=4542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="0109ffff00000000350000000800"], 0x60}}, 0x0) r1 = io_uring_setup(0x2edd, &(0x7f0000000100)={0x0, 0xdbcb, 0x800, 0x0, 0x64}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 2m26.21551669s ago: executing program 5 (id=4548): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) 2m26.121547534s ago: executing program 5 (id=4549): r0 = syz_open_dev$sg(0x0, 0x0, 0x103801) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 2m26.049384397s ago: executing program 5 (id=4550): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103801) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[]) 2m26.033212378s ago: executing program 5 (id=4551): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) 2m26.004267169s ago: executing program 5 (id=4552): connect$inet6(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c000180080001"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 2m25.791814068s ago: executing program 5 (id=4553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m25.791691848s ago: executing program 40 (id=4553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.333959006s ago: executing program 1 (id=4743): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x10000000) 2m21.310775987s ago: executing program 1 (id=4744): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000002400028004"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 2m21.310239437s ago: executing program 1 (id=4745): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb7030000080000002c0300000000000085"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x46, &(0x7f0000002800)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}}}}, 0x0) 2m21.299226228s ago: executing program 1 (id=4746): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, 0x0, r0, &(0x7f0000000240)='./file0\x00', 0x0) 2m21.24901375s ago: executing program 1 (id=4748): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xe, 0x0, &(0x7f0000000940)="178d048604bf0bfb19d5b0a634da", 0x0, 0xffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2m21.147602184s ago: executing program 4 (id=4754): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x10000000) 2m21.129982325s ago: executing program 4 (id=4756): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x8000}]}}]}]}, 0x3c}}, 0x0) 2m21.129534165s ago: executing program 4 (id=4757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb7030000080000002c030000000000008500000033"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x46, &(0x7f0000002800)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}}}}, 0x0) 2m21.117313355s ago: executing program 4 (id=4758): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, 0x0, r0, &(0x7f0000000240)='./file0\x00', 0x0) 2m21.105299476s ago: executing program 4 (id=4759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2m20.812065878s ago: executing program 4 (id=4765): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x9001}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="080008000600060000"], 0xfce) 2m20.811846808s ago: executing program 41 (id=4765): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x9001}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="080008000600060000"], 0xfce) 2m19.179724597s ago: executing program 1 (id=4795): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6", 0x30, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 2m19.151707168s ago: executing program 42 (id=4795): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6", 0x30, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 2m6.225665535s ago: executing program 7 (id=5368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000004}, 0x50) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 2m5.217047807s ago: executing program 7 (id=5404): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 2m5.175364029s ago: executing program 7 (id=5405): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x20, r0, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) 2m5.096298063s ago: executing program 7 (id=5408): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) 2m5.095932793s ago: executing program 7 (id=5409): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c000180"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 2m4.817962604s ago: executing program 7 (id=5417): unshare(0x22020400) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000001d40)=0x1000) 2m4.763030396s ago: executing program 43 (id=5417): unshare(0x22020400) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000001d40)=0x1000) 9.127205224s ago: executing program 3 (id=8150): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = accept$inet(0xffffffffffffffff, 0x0, 0x0) dup(r6) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x41}) 6.14637296s ago: executing program 2 (id=8163): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.081039602s ago: executing program 2 (id=8167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x98}}, 0x0) 5.708279308s ago: executing program 2 (id=8169): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 5.079594535s ago: executing program 2 (id=8173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) 4.95017482s ago: executing program 3 (id=8174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r4, 0x25, 0x2, @void}, 0x10) 4.925862281s ago: executing program 3 (id=8176): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x208, 0x66, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='neigh_update\x00', r1, 0x0, 0xfffffffe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000600000004000000ffffff0f01000000"], 0x50) keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffd, 0x2a, 0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, r2, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x4) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.911846132s ago: executing program 0 (id=8178): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.332134626s ago: executing program 6 (id=8181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008000000080000", @ANYRES32=0x0], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x29, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 3.962384262s ago: executing program 0 (id=8182): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = syz_io_uring_setup(0xa2, &(0x7f0000000640)={0x0, 0xfe0a, 0x10000, 0x2, 0x2c5}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f00000002c0)}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) close(r0) 3.888382685s ago: executing program 2 (id=8183): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 3.660979925s ago: executing program 2 (id=8184): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = accept$inet(0xffffffffffffffff, 0x0, 0x0) dup(r6) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x41}) 3.495308612s ago: executing program 0 (id=8185): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x11e95000) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000006c0)="c3b0e8e35baf67d5925529afcb8ef9faed1e39990d3c644344", 0x19}], 0x1}, 0x4800) 3.444965604s ago: executing program 3 (id=8186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) 3.347631648s ago: executing program 6 (id=8187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r4, 0x25, 0x2, @void}, 0x10) 3.253070332s ago: executing program 6 (id=8188): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 2.381045649s ago: executing program 0 (id=8189): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x2, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x540c, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@local, 0x0, r3}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 2.055046323s ago: executing program 3 (id=8191): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/135, 0x87}, {0x0}, {&(0x7f00000028c0)=""/4059, 0xfdb}, {&(0x7f00000038c0)=""/4105, 0x1009}, {&(0x7f00000006c0)=""/171, 0xab}], 0x5}, 0x40002000) 2.042002253s ago: executing program 0 (id=8192): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000b2f9fc03ba4eabccd7d668442eb8c06ce8fa90d88b05a75f6fa3946424584b38c0b51cfce4f69bd6fdc6e7fd8e66667394e7dcc770a59d818253bbadf932259fbc799740feb4a7f6218051a29574eb8800fd31132e94920443c6914eb2ce4c5de90c15f6ddbead202105913c0c5f5265b2d87085a02adb82eb0c4c9ed6b3fb00f196d7733835527e8bcf1231a0d0a00be874a591c8f62df31a1b7964b93be9730fa3b6188fd309b2144e5ca90421b2b64915d9a93eee8389ccdc9c1f100e7626c4ae17a5197335eb7301170f7a2488e919da37971cb6"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x20, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3, 0xf}, [@FRA_DST={0x8, 0x1, @private=0xa010101}]}, 0x24}}, 0x42094) 1.997363275s ago: executing program 6 (id=8193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 924.548411ms ago: executing program 0 (id=8196): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x208, 0x66, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='neigh_update\x00', r1, 0x0, 0xfffffffe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000600000004000000ffffff0f01000000"], 0x50) keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffd, 0x2a, 0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, r2, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x4) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 723.583999ms ago: executing program 6 (id=8197): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 707.421199ms ago: executing program 3 (id=8199): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000b2f9fc03ba4eabccd7d668442eb8c06ce8fa90d88b05a75f6fa3946424584b38c0b51cfce4f69bd6fdc6e7fd8e66667394e7dcc770a59d818253bbadf932259fbc799740feb4a7f6218051a29574eb8800fd31132e94920443c6914eb2ce4c5de90c15f6ddbead202105913c0c5f5265b2d87085a02adb82eb0c4c9ed6b3fb00f196d7733835527e8bcf1231a0d0a00be874a591c8f62df31a1b7964b93be9730fa3b6188fd309b2144e5ca90421b2b64915d9a93eee8389ccdc9c1f100e7626c4ae17a5197335eb7301170f7a2488e919da37971cb6"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x20, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3, 0xf}, [@FRA_DST={0x8, 0x1, @private=0xa010101}]}, 0x24}}, 0x42094) 537.974347ms ago: executing program 6 (id=8200): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x40) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xb8, 0xff, 0xfd, 0x10, 0x1286, 0x2046, 0x8a88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc, 0x9, 0x10, 0x0, [{{0x9, 0x4, 0x47, 0x2, 0x1, 0xff, 0x4, 0x1, 0x5e, [], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0xff, 0x9, 0xa}}]}}]}}]}}, 0x0) 524.851997ms ago: executing program 9 (id=8201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x40000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}}, 0x0) 349.419725ms ago: executing program 9 (id=8202): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x2, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x540c, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@local, 0x0, r3}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 256.892329ms ago: executing program 9 (id=8203): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100003}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000240)="b18f6d", 0x3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="180000000000000029000000370000005c00000000000000500000000000000029000000370000002c06000000000000c910fe8000000000000000000000000000bb050200000105000000000001010005020004010800000000000000000502000200000000000070100000000000002900000036000000000a000000000000c910000000000000000000000000000000000000574d8febee499ad1ab9a3ce2288ec5b054ce8a5c870f0f0ac1bb1c8fbf2ef393fb916820878de5f313e13d1fb1554533541fbc56f14247d8a229f9695d553bbcf9b9fd1c512ddc9c06e974520994a5c4161533668f42170eb9bd87294c7f3e10bb42e3feb1bb060b140f60194ba59c4690cc4d7f72e0749efc8e350a80412eab1ad65e0a02c0b613b2a527cba8c794ad3945a93aa4afc2be1d971736c201e8b3bf58ff9190e0b60637527742065ddf3dc38e51e593f0242ff3328376fbbd867743722e7a010ea7e51e259b353e16a38e33d314dad3cc7ecb028512e740f1a43dc387ebbf6378f005a371b2143ceff637f25978c6f094d3de905e01ef4f9e0b541d31b33ae757d49660b6ce3c1b5e217926d802876cdc116ce43a756313f7897299eae074726c48e95281aecf5e8c23cef6a9615d37583f7460c8bdb3c652827b688faaa9551c869f1c9004d218c9777e9489d077ab3794bca55ac1bd36cb54d23444318e3c40329fc810477f07f69552468d56dd25f5b6ebd9caf769b11400a6cf571717a0aff69182899257d098ff41c2150ec390bfc3858fea38434997edff38a532226d136b6674efa3217829aa371b8dca8c63f719b481da16a01afa211ac531fe8178071ddd2c74df2320bee950dea4fb3c1cca4a722be1db15f1a2786e16b473d236e9b3e208b280ca04c5c0ffe9fe8e26ac49cc6c167242328216c8e0a264e341bc885b8afa035efa9a03172261df9b026753fd74e4f1cb41e55e2b73c4cb8cf47a2d9edc4b5e0397758f226332db67f7851753805396474498b21efd10726da9041ed9d9723c96b258c2029adef9fc9c94f333f8a7da46d7b3f777cecc2475bec146094056e13cea4cfb7ca8a0bfa1b89e4b4bf45ae4a006adfa8991e4afaede6b0ae8c9cd16e9a8bff64854c58cad0859e88799ba7bf2efad0b54f8fac03160f16c5cc96f043c42d8ee5c03146c0cc26484212524fb19f0a1b739667aff8b7b476a032ec4e1f36245b740b2e612b17061eda5196c627f5f644e6a04263caefefdd2ddfc1752ac84dd8650b1b3c0ef1882f8a8d07a20e842cbec788057e9901e06624f03be8eb4489062548c6ef3497731e1b74fbd7e795ab8217a5b95905a9c110e381b998027095888ec5e47d8a560c0f8f8a1625d4643891acce6ea1d9acb70761cf7f105aa83338ee9115788395d3ed7fc6938742be651641620cb9234e4f4698a93af75166236d5719ea7ceabe19ad3b2ed7bcb4450e2d56e169281341325e6359d7609b4fe92d1c9803a450ce536aa7f49928ac9b0fa4272b0e46f350225e087a329be4d0bb9248ae981cb38dc988629012331c2730e2cc1914845fa48039724ea366b7b20e6360a7ff3d1dcb170fd56ddf9bb4ba577455e1009fd29511f577e27a3feb94ff8638f2d1935003ebdc0586de75096f51bca858857e6e35c2ced5f1dc01d41616b7624930e2275f4162017d1ddd52ecf43b27c19bd6d75c27f4fbee4c39ca19a18a27158ff90cc76675c8064fd759518abd0f70313bbaadc4973db0153e2274a084a19b6e4784347143ce2336934382c99fb6f8c753bcaf6e69962f76d976ec6e96886770067959b37f1dd6e857ab6fcc06248356934c2260e39b0fd4c7e63b9e00439a0f1fa79b92b78668834bd4d4cb0b1cfdaf2a8ee11041084f286283d2272fddc51a9e00ccaf558d92e7d6f96010330f3560df689f923a1c67fe2601c0e6e8bd56251e9fe98944e8c7eced672281b70c7ee2ea1af47bc59c723f3e3640a9cbf9a249db706833aa7f039a395ee675a4c5c8aed4b96f1ab1a8ac87224926ee478ce9af563a848e14e138319da0ee219a4dc9e939a9dbd5e1a4edbb2d13774878465622c6eddd6af25692a4642fc06e882a69895ad8ec949455898b6a9f9729efc82aac402d42dd5f24455213c24f33780cb719f75974aa9643fa0c21d7dc98eee87de80bfb3fcd79de81f75e7f127e864c41c085a04a6a9700d76efac830f85adc0900e0e94821e07da125b93c1ecd4aceb23be8cc5e92f476f588ede4081db9ac327632c052de9007abd66b20f8e86891ea8e4ddc5003380ec88a494d1ccd674ce9a24b9d824cdd68f414b27b1fee4dda167e385fd237fc9ec038783d405fae5f002343b87e6f23ca359aebd935f4c0e6f7e94d2b92b64c14a1af7f1a1a78ce436de5625282e77d51caef93497a19ba60a17dff0acacdf053849ef94fbf4192324d06f6f4c0ebbb4f74796fd76afbae5956f6056c0fd2e2e4d0c290091f46a78b0c0ce95ec4c8aa2b340e84d9f153d2484d990a85f001a34100473639e906a5b14d9941569ae6ac0351d75f1edc17c0a08454bf581324c9582acbb17810ac959bcc3acd4d16b0229d40aec84c52fdf7cb1d44cb9eadef6fa082ef582ddca37ee63cf9c02d3da25117bd98cc70ada7d4b2738622e22ecc64bf7e855d579f9f70d001e0f7978fcf210ef71025b91922f1faa38cfe7dfe65e7dd3dcc0afe191031d7e93625d3f289ce65220c1d5d085b7c9bfe3aa234c8bf6762e2a82ebdf065c2960195fa09caf843df0c8898ef2a4d77f3b43d5df1f4bcf3e55ff0f1542062c70085b01de8840fa6c84062062bd1664e11253721fb7086882d7eb2afb08136e5409322666dafaa41f67f0a21768ec41c6039d0b64869867146a25657bbc848e0cbe7a3d39f0404e2eb829df8146b73547faa77431d3c7c8b99ce8eead657445e16d34b329cc3157b5c0c9efb81d6a8d70f251713b9e1ab15bc28bb4e6f7642b612676d620e6c0d03a502a6b1a75154a02600344334c7d3e65b23ef7099099c90529a8f8152af98aaf6a6dcf47fc615dbb290979131f226dff87de1e866a163fefb0b8466369feee39902e6f819cb53eee413c1f27466e700b3ee0fe0256ab207af1220fb050358c713495dc917a658f7bd144f624a1d03071c5955d5b5bc919a61a60fdad04ec215f80a026c01427e4cdd8ece1fe01080ae66f0c8af467b7fc54e3468efa06a9440cdc85a8be5a5522ded29d05e0923ebcef395fe143bff4d177a559c33392fe6d83c36459fd1c572b98239e6ae9e5cf468678a7beda7660db59176917c0408e7cc00133e6"], 0x1220}}], 0x2, 0x4c040) 184.161592ms ago: executing program 9 (id=8204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 89.389096ms ago: executing program 9 (id=8205): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 9 (id=8206): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) socket$kcm(0xa, 0x2, 0x88) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x3, 0x8000000000, 0x1, 0x400000000000, 0x5, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x6, 0x7fffffff, 0xffffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): e_slave_1: left allmulticast mode [ 314.628125][ T41] bridge_slave_1: left promiscuous mode [ 314.633906][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.641829][ T41] bridge_slave_0: left allmulticast mode [ 314.647516][ T41] bridge_slave_0: left promiscuous mode [ 314.653257][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.661430][ T41] bridge_slave_1: left allmulticast mode [ 314.667134][ T41] bridge_slave_1: left promiscuous mode [ 314.672748][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.680762][ T41] bridge_slave_0: left allmulticast mode [ 314.686560][ T41] bridge_slave_0: left promiscuous mode [ 314.692209][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.742209][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.752891][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.761863][ T41] bond0 (unregistering): Released all slaves [ 314.824892][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.834206][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.843094][ T41] bond0 (unregistering): Released all slaves [ 314.879832][ T41] tipc: Left network mode [ 314.923739][ T41] hsr_slave_0: left promiscuous mode [ 314.929469][ T41] hsr_slave_1: left promiscuous mode [ 314.935144][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.944067][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.953371][ T41] hsr_slave_0: left promiscuous mode [ 314.958912][ T41] hsr_slave_1: left promiscuous mode [ 314.964496][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.971796][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.002137][ T41] team0 (unregistering): Port device team_slave_1 removed [ 315.011678][ T41] team0 (unregistering): Port device team_slave_0 removed [ 315.065016][ T41] team0 (unregistering): Port device team_slave_1 removed [ 315.074700][ T41] team0 (unregistering): Port device team_slave_0 removed [ 315.128660][T20036] __nla_validate_parse: 6 callbacks suppressed [ 315.128671][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6284'. [ 315.176709][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6287'. [ 315.232081][T20050] loop0: detected capacity change from 0 to 256 [ 315.359721][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6295'. [ 315.438280][T20073] loop0: detected capacity change from 0 to 256 [ 315.482776][ T41] IPVS: stop unused estimator thread 0... [ 315.558607][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6306'. [ 315.695446][T20108] loop2: detected capacity change from 0 to 7 [ 315.736609][T20119] bond_slave_1: mtu less than device minimum [ 315.958052][T20151] IPv6: sit1: Disabled Multicast RS [ 315.964422][T20151] sit1: entered allmulticast mode [ 316.012676][T20155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.021207][T20155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.937634][T20188] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.001407][T19509] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.008498][T19509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.484369][T20301] netlink: 'syz.0.6404': attribute type 1 has an invalid length. [ 318.502477][T20301] gretap1: entered allmulticast mode [ 318.544807][T20309] loop2: detected capacity change from 0 to 7 [ 318.604395][T20319] loop2: detected capacity change from 0 to 7 [ 318.610785][T20319] loop2: [ 319.338872][T20388] loop2: detected capacity change from 0 to 7 [ 319.359920][T20393] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6447'. [ 319.518649][T20434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6458'. [ 319.701908][T20476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6470'. [ 319.739756][T20485] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 319.746133][T20485] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 319.906866][T20520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6483'. [ 320.001490][T20536] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6486'. [ 320.449751][T20634] netlink: 'syz.0.6509': attribute type 1 has an invalid length. [ 320.604025][T20648] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.6514'. [ 320.686462][T20650] loop9: detected capacity change from 0 to 1024 [ 320.705581][T20650] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 320.748482][T20650] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #3: block 1: comm syz.9.6515: lblock 1 mapped to illegal pblock 1 (length 1) [ 320.778428][T20650] __quota_error: 1 callbacks suppressed [ 320.778443][T20650] Quota error (device loop9): write_blk: dquota write failed [ 320.791389][T20650] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 320.819014][T20650] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.6515: Failed to acquire dquot type 0 [ 320.832390][T20650] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.6515: Freeing blocks not in datazone - block = 0, count = 4096 [ 320.845960][T20650] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.6515: Invalid inode bitmap blk 0 in block_group 0 [ 320.858724][ T166] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 320.859047][T20650] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 320.882057][T20650] EXT4-fs (loop9): 1 orphan inode deleted [ 320.908884][ T166] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 320.917384][ T166] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 320.966111][ T1602] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 320.991985][ T1602] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 321.000401][ T1602] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 321.054698][T20679] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.182223][T20702] loop2: detected capacity change from 0 to 128 [ 321.396367][T20714] loop2: detected capacity change from 0 to 7 [ 321.466815][T20731] loop0: detected capacity change from 0 to 1024 [ 321.481919][T20731] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 321.498571][T20731] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #3: block 1: comm syz.0.6553: lblock 1 mapped to illegal pblock 1 (length 1) [ 321.528671][T20731] Quota error (device loop0): write_blk: dquota write failed [ 321.536069][T20731] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 321.546517][T20731] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.6553: Failed to acquire dquot type 0 [ 321.558032][T20731] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.6553: Freeing blocks not in datazone - block = 0, count = 4096 [ 321.573772][T20731] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.6553: Invalid inode bitmap blk 0 in block_group 0 [ 321.586587][T20731] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 321.595402][ T802] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 321.595757][T20731] EXT4-fs (loop0): 1 orphan inode deleted [ 321.656902][ T802] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 321.657609][T20747] bond_slave_1: mtu less than device minimum [ 321.665343][ T802] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 321.694913][ T802] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 321.711031][ T802] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 321.720275][ T802] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 321.742235][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6562'. [ 321.765023][T20760] loop2: detected capacity change from 0 to 7 [ 321.771193][T20758] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 321.786811][T20762] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6566'. [ 321.863294][T20782] bond_slave_1: mtu less than device minimum [ 321.884780][T20786] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6577'. [ 321.899894][T20788] loop2: detected capacity change from 0 to 7 [ 322.401825][T20899] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6593'. [ 322.810479][T20967] loop0: detected capacity change from 0 to 128 [ 322.958052][T20972] loop2: detected capacity change from 0 to 7 [ 322.999835][T20975] loop2: detected capacity change from 0 to 7 [ 323.505453][T21009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6621'. [ 323.514466][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6621'. [ 323.766483][T21021] loop0: detected capacity change from 0 to 128 [ 323.956129][T21025] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6628'. [ 324.170052][T21043] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 324.214879][T21043] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 1: comm syz.3.6637: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.261374][T21043] Quota error (device loop3): write_blk: dquota write failed [ 324.268885][T21043] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 324.281454][T21043] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.6637: Failed to acquire dquot type 0 [ 324.295159][T21043] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.6637: Freeing blocks not in datazone - block = 0, count = 4096 [ 324.308842][T21043] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.6637: Invalid inode bitmap blk 0 in block_group 0 [ 324.321921][T21043] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 324.330584][ T176] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.349337][ T176] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 324.363925][T21043] EXT4-fs (loop3): 1 orphan inode deleted [ 324.388578][T21053] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6641'. [ 324.454306][ T176] kworker/u8:6: attempt to access beyond end of device [ 324.454306][ T176] loop9: rw=1, sector=145, nr_sectors = 8 limit=128 [ 324.477395][ T176] kworker/u8:6: attempt to access beyond end of device [ 324.477395][ T176] loop9: rw=1, sector=161, nr_sectors = 8 limit=128 [ 324.491008][ T176] kworker/u8:6: attempt to access beyond end of device [ 324.491008][ T176] loop9: rw=1, sector=177, nr_sectors = 8 limit=128 [ 324.519882][ T176] kworker/u8:6: attempt to access beyond end of device [ 324.519882][ T176] loop9: rw=1, sector=193, nr_sectors = 8 limit=128 [ 324.531451][T21058] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 324.541289][ T176] kworker/u8:6: attempt to access beyond end of device [ 324.541289][ T176] loop9: rw=1, sector=209, nr_sectors = 8 limit=128 [ 324.581819][ T176] kworker/u8:6: attempt to access beyond end of device [ 324.581819][ T176] loop9: rw=1, sector=225, nr_sectors = 8 limit=128 [ 324.595423][T21062] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 324.605949][ T176] kworker/u8:6: attempt to access beyond end of device [ 324.605949][ T176] loop9: rw=1, sector=241, nr_sectors = 8 limit=128 [ 324.613191][T21058] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 1: comm syz.3.6643: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.633896][T21058] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.6643: Failed to acquire dquot type 0 [ 324.639230][ T176] kworker/u8:6: attempt to access beyond end of device [ 324.639230][ T176] loop9: rw=1, sector=257, nr_sectors = 8 limit=128 [ 324.645621][T21058] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.6643: Freeing blocks not in datazone - block = 0, count = 4096 [ 324.671691][ T176] kworker/u8:6: attempt to access beyond end of device [ 324.671691][ T176] loop9: rw=1, sector=273, nr_sectors = 8 limit=128 [ 324.685290][ T176] kworker/u8:6: attempt to access beyond end of device [ 324.685290][ T176] loop9: rw=1, sector=289, nr_sectors = 8 limit=128 [ 324.700096][T21062] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #3: block 1: comm syz.2.6647: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.719070][T21062] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6647: Failed to acquire dquot type 0 [ 324.732165][T21058] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.6643: Invalid inode bitmap blk 0 in block_group 0 [ 324.745015][T21062] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.6647: Freeing blocks not in datazone - block = 0, count = 4096 [ 324.758377][ T2063] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.758515][T21062] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.6647: Invalid inode bitmap blk 0 in block_group 0 [ 324.786614][T21062] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 324.789020][T21068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6648'. [ 324.795345][T21062] EXT4-fs (loop2): 1 orphan inode deleted [ 324.810111][ T2063] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 324.829969][T21058] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 324.852937][T21058] EXT4-fs (loop3): 1 orphan inode deleted [ 324.867617][ T2063] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.904898][ T2063] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 324.957011][ T1602] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.972238][ T1602] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 324.985383][ T2063] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.999769][ T2063] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 325.066773][T21095] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 325.087666][T21095] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #3: block 1: comm syz.0.6661: lblock 1 mapped to illegal pblock 1 (length 1) [ 325.101844][T21095] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.6661: Failed to acquire dquot type 0 [ 325.113309][T21095] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.6661: Freeing blocks not in datazone - block = 0, count = 4096 [ 325.126911][T21095] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.6661: Invalid inode bitmap blk 0 in block_group 0 [ 325.140630][T21095] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 325.149151][ T2063] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 325.174275][T21095] EXT4-fs (loop0): 1 orphan inode deleted [ 325.184765][ T2063] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 325.251799][ T1602] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 325.289852][ T1602] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 325.728413][T21132] loop0: p1 < > p4 [ 325.792579][T21132] loop0: p4 size 8388608 extends beyond EOD, truncated [ 325.852987][T21139] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 325.919403][T21139] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 1: comm syz.3.6681: lblock 1 mapped to illegal pblock 1 (length 1) [ 325.969820][T21139] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.6681: Failed to acquire dquot type 0 [ 325.981542][T21139] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.6681: Freeing blocks not in datazone - block = 0, count = 4096 [ 326.018704][T21139] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.6681: Invalid inode bitmap blk 0 in block_group 0 [ 326.032600][T21139] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 326.042357][ T166] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 326.056555][T21139] EXT4-fs (loop3): 1 orphan inode deleted [ 326.064524][ T166] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 326.087078][ T166] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 326.105698][T21144] __nla_validate_parse: 4 callbacks suppressed [ 326.105756][T21144] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6683'. [ 326.133553][ T166] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 326.197029][T21156] bond_slave_1: mtu less than device minimum [ 326.249378][T21158] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6686'. [ 326.280513][T21167] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6692'. [ 326.289554][T21167] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6692'. [ 326.304983][T21171] set_capacity_and_notify: 7 callbacks suppressed [ 326.304998][T21171] loop3: detected capacity change from 0 to 1024 [ 326.358167][T21171] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 326.381295][T21171] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 1: comm syz.3.6696: lblock 1 mapped to illegal pblock 1 (length 1) [ 326.396553][T21171] __quota_error: 17 callbacks suppressed [ 326.396567][T21171] Quota error (device loop3): write_blk: dquota write failed [ 326.409592][T21171] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 326.419654][T21171] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.6696: Failed to acquire dquot type 0 [ 326.431520][T21171] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.6696: Freeing blocks not in datazone - block = 0, count = 4096 [ 326.445076][T21171] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.6696: Invalid inode bitmap blk 0 in block_group 0 [ 326.454754][T21176] loop9: detected capacity change from 0 to 2048 [ 326.457825][T21171] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 326.472653][T21171] EXT4-fs (loop3): 1 orphan inode deleted [ 326.478479][ T1602] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 326.493519][T21176] loop9: p1 < > p4 [ 326.497686][ T1602] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 326.506114][ T1602] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 326.557437][T21176] loop9: p4 size 8388608 extends beyond EOD, truncated [ 326.853677][ T2063] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 326.871961][ T2063] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 326.880402][ T2063] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 326.967671][T21185] bond_slave_1: mtu less than device minimum [ 327.105521][T21202] loop2: detected capacity change from 0 to 7 [ 327.242272][T21209] bond_slave_1: mtu less than device minimum [ 327.390424][T21220] loop3: detected capacity change from 0 to 1024 [ 327.397583][T21220] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 327.409334][T21220] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 1: comm syz.3.6716: lblock 1 mapped to illegal pblock 1 (length 1) [ 327.423707][T21220] Quota error (device loop3): write_blk: dquota write failed [ 327.431110][T21220] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 327.441316][T21220] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.6716: Failed to acquire dquot type 0 [ 327.453600][T21220] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.6716: Freeing blocks not in datazone - block = 0, count = 4096 [ 327.468446][T21220] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.6716: Invalid inode bitmap blk 0 in block_group 0 [ 327.481264][T21220] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 327.491833][ T29] audit: type=1326 audit(1765023833.516:13475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47575ef749 code=0x7ffc0000 [ 327.515434][ T29] audit: type=1326 audit(1765023833.516:13476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47575ef749 code=0x7ffc0000 [ 327.539027][ T29] audit: type=1326 audit(1765023833.516:13477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47575ef749 code=0x7ffc0000 [ 327.562583][ T29] audit: type=1326 audit(1765023833.516:13478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47575ef749 code=0x7ffc0000 [ 327.587423][ T875] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 327.595309][T21220] EXT4-fs (loop3): 1 orphan inode deleted [ 327.607403][ T875] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 327.616885][T21220] EXT4-fs mount: 18 callbacks suppressed [ 327.616924][T21220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.663273][T21229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.671850][T15818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.710602][T21231] loop3: detected capacity change from 0 to 512 [ 327.727317][T21231] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.6721: Invalid inode bitmap blk 4 in block_group 0 [ 327.749430][T21231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.079953][T21240] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6724'. [ 328.111147][T21242] loop6: detected capacity change from 0 to 512 [ 328.150546][T21242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.166440][T15818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.175906][T21242] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.208838][T16466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.257056][T21253] loop3: detected capacity change from 0 to 1024 [ 328.264255][T21253] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 328.277550][T21253] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 1: comm syz.3.6731: lblock 1 mapped to illegal pblock 1 (length 1) [ 328.313900][T21261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6733'. [ 328.328460][T21253] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.6731: Failed to acquire dquot type 0 [ 328.352293][T21253] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.6731: Freeing blocks not in datazone - block = 0, count = 4096 [ 328.365834][T21253] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.6731: Invalid inode bitmap blk 0 in block_group 0 [ 328.378565][ T2063] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 328.380300][T21253] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 328.394130][T21266] loop2: detected capacity change from 0 to 7 [ 328.403508][T21267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6736'. [ 328.423750][T21253] EXT4-fs (loop3): 1 orphan inode deleted [ 328.429702][T21269] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6737'. [ 328.430060][T21253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.463963][ T2063] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 328.535194][T21287] loop6: detected capacity change from 0 to 128 [ 328.542972][T15818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.584038][T21294] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6749'. [ 328.628084][T21298] loop2: detected capacity change from 0 to 7 [ 328.740390][T21312] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 328.775897][T21312] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 1: comm syz.3.6757: lblock 1 mapped to illegal pblock 1 (length 1) [ 328.803365][T21319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.814844][T21312] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.6757: Failed to acquire dquot type 0 [ 328.828003][T21312] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.6757: Freeing blocks not in datazone - block = 0, count = 4096 [ 328.862971][T21312] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.6757: Invalid inode bitmap blk 0 in block_group 0 [ 328.881665][ T2063] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 328.919496][T21312] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 328.926346][ T2063] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 328.940694][T21312] EXT4-fs (loop3): 1 orphan inode deleted [ 328.947345][T21312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.982032][T15818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.993802][T21332] netlink: 11 bytes leftover after parsing attributes in process `syz.9.6764'. [ 330.091490][T21347] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 330.106655][T21347] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #3: block 1: comm syz.2.6772: lblock 1 mapped to illegal pblock 1 (length 1) [ 330.121105][T21347] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6772: Failed to acquire dquot type 0 [ 330.157543][T21347] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.6772: Freeing blocks not in datazone - block = 0, count = 4096 [ 330.207440][T21347] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.6772: Invalid inode bitmap blk 0 in block_group 0 [ 330.228776][ T1602] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 330.243396][T21347] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 330.252270][T21347] EXT4-fs (loop2): 1 orphan inode deleted [ 330.258450][T21347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.278646][ T1602] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 330.309833][T17950] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.326204][T21368] bond_slave_1: mtu less than device minimum [ 330.334917][ T1602] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 330.358203][ T1602] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 330.476513][T21394] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 330.484677][T21399] bond_slave_1: mtu less than device minimum [ 330.501723][T21394] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #3: block 1: comm syz.6.6794: lblock 1 mapped to illegal pblock 1 (length 1) [ 330.517837][T21394] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.6794: Failed to acquire dquot type 0 [ 330.545366][T21394] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.6794: Freeing blocks not in datazone - block = 0, count = 4096 [ 330.572511][T21394] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.6794: Invalid inode bitmap blk 0 in block_group 0 [ 330.586220][T21394] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 330.595283][ T1602] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 330.595423][T21394] EXT4-fs (loop6): 1 orphan inode deleted [ 330.618979][T21394] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.646089][ T1602] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 330.664118][T21420] bond_slave_1: mtu less than device minimum [ 330.677859][T16466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.699208][ T1602] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 330.713979][T21424] loop2: p1 < > p4 [ 330.718074][ T1602] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 330.733380][T21424] loop2: p4 size 8388608 extends beyond EOD, truncated [ 331.788504][T21497] __nla_validate_parse: 4 callbacks suppressed [ 331.788522][T21497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6836'. [ 331.803839][T21497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6836'. [ 331.869462][T21507] set_capacity_and_notify: 8 callbacks suppressed [ 331.869480][T21507] loop2: detected capacity change from 0 to 7 [ 332.599137][T21641] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6847'. [ 332.612926][T21641] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6847'. [ 332.831347][T21683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6865'. [ 333.633466][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 333.633483][ T29] audit: type=1400 audit(1765023839.278:13495): avc: denied { read write } for pid=21696 comm="syz.6.6871" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 333.664076][ T29] audit: type=1400 audit(1765023839.278:13496): avc: denied { open } for pid=21696 comm="syz.6.6871" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 333.808309][T21714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6879'. [ 333.826806][T21714] gretap1: entered allmulticast mode [ 333.836345][T21716] loop6: detected capacity change from 0 to 512 [ 333.844002][T21716] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 333.861664][T21716] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.6881: bad orphan inode 131083 [ 333.880137][T21716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.920615][T16466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.047723][T21742] loop6: detected capacity change from 0 to 128 [ 334.067859][T21742] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 334.092349][T21742] ext4 filesystem being mounted at /454/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 334.177656][ T29] audit: type=1400 audit(1765023839.792:13497): avc: denied { link } for pid=21741 comm="syz.6.6892" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 334.232457][T16466] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.385046][T21760] loop2: detected capacity change from 0 to 7 [ 334.466879][T21763] IPv6: sit1: Disabled Multicast RS [ 334.473164][T21763] sit1: entered allmulticast mode [ 334.521049][T21764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.529627][T21764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.670273][T21771] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6904'. [ 334.679324][T21771] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6904'. [ 334.721200][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6905'. [ 334.730520][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6905'. [ 334.878285][T21775] netlink: 'syz.9.6906': attribute type 10 has an invalid length. [ 335.351938][T21797] loop3: detected capacity change from 0 to 128 [ 335.425719][T18007] bridge_slave_1: left allmulticast mode [ 335.431387][T18007] bridge_slave_1: left promiscuous mode [ 335.437252][T18007] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.471536][T18007] bridge_slave_0: left allmulticast mode [ 335.477214][T18007] bridge_slave_0: left promiscuous mode [ 335.483029][T18007] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.598300][T21811] loop3: detected capacity change from 0 to 128 [ 335.631691][T18007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.642585][T18007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.755377][T18007] bond0 (unregistering): Released all slaves [ 336.029810][T18007] hsr_slave_0: left promiscuous mode [ 336.038609][T18007] hsr_slave_1: left promiscuous mode [ 336.047714][T18007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.055195][T18007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.067292][T18007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.070405][T21835] loop9: detected capacity change from 0 to 256 [ 336.074682][T18007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.091991][T18007] veth1_macvtap: left promiscuous mode [ 336.097491][T18007] veth0_macvtap: left promiscuous mode [ 336.103351][T18007] veth1_vlan: left promiscuous mode [ 336.103675][ T29] audit: type=1400 audit(1765023841.579:13498): avc: denied { create } for pid=21833 comm="syz.9.6934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 336.109939][T18007] veth0_vlan: left promiscuous mode [ 336.190420][T18007] team0 (unregistering): Port device team_slave_1 removed [ 336.202237][T18007] team0 (unregistering): Port device team_slave_0 removed [ 336.237417][T21834] bond_slave_1: mtu less than device minimum [ 336.291400][T21845] loop3: detected capacity change from 0 to 128 [ 336.381295][T21862] bond_slave_1: mtu less than device minimum [ 336.596408][T21887] bond_slave_1: mtu less than device minimum [ 336.630676][ T29] audit: type=1400 audit(1765023842.084:13499): avc: denied { setopt } for pid=21890 comm="syz.0.6961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 336.650421][ T29] audit: type=1400 audit(1765023842.084:13500): avc: denied { read } for pid=21890 comm="syz.0.6961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 337.294142][T21905] __nla_validate_parse: 1 callbacks suppressed [ 337.294158][T21905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6968'. [ 337.309407][T21905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6968'. [ 337.517935][T21925] loop2: detected capacity change from 0 to 7 [ 337.552446][T21930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6980'. [ 337.793166][T21956] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6982'. [ 337.865684][T21958] loop0: detected capacity change from 0 to 2048 [ 337.905089][T21958] loop0: p1 < > p4 [ 337.909829][T21958] loop0: p4 size 8388608 extends beyond EOD, truncated [ 338.182694][T21972] bond_slave_1: mtu less than device minimum [ 338.309920][T21981] loop2: detected capacity change from 0 to 2048 [ 338.343150][T21981] loop2: p1 < > p4 [ 338.347442][T21981] loop2: p4 size 8388608 extends beyond EOD, truncated [ 338.538338][T21993] batman_adv: batadv0: Adding interface: dummy0 [ 338.544653][T21993] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.570126][T21993] batman_adv: batadv0: Interface activated: dummy0 [ 338.599124][T21999] bond_slave_1: mtu less than device minimum [ 338.660880][T22008] loop9: detected capacity change from 0 to 128 [ 338.881686][T22030] netlink: 60 bytes leftover after parsing attributes in process `syz.9.7026'. [ 338.891404][T22030] netlink: 60 bytes leftover after parsing attributes in process `syz.9.7026'. [ 339.292300][T22056] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7037'. [ 339.397834][T22062] batman_adv: batadv0: Adding interface: dummy0 [ 339.404266][T22062] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.430304][T22062] batman_adv: batadv0: Interface activated: dummy0 [ 339.444666][T22062] batadv0: mtu less than device minimum [ 339.450793][T22062] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 339.461652][T22062] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 339.464751][ T29] audit: type=1400 audit(1765023844.712:13501): avc: denied { ioctl } for pid=22061 comm="syz.0.7040" path="socket:[78207]" dev="sockfs" ino=78207 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 339.472702][T22062] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 339.507848][T22062] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 339.571018][T22064] loop0: detected capacity change from 0 to 2048 [ 339.615462][T22064] loop0: p1 < > p4 [ 339.619715][T22064] loop0: p4 size 8388608 extends beyond EOD, truncated [ 339.798660][T22092] loop2: detected capacity change from 0 to 7 [ 339.931914][T22106] loop9: detected capacity change from 0 to 2048 [ 339.979590][T22106] loop9: p1 < > p4 [ 339.991210][T22106] loop9: p4 size 8388608 extends beyond EOD, truncated [ 340.895861][T22131] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7070'. [ 340.945531][T22138] loop2: detected capacity change from 0 to 7 [ 341.089847][T22156] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7082'. [ 341.118749][T22160] loop0: detected capacity change from 0 to 2048 [ 341.141322][T22166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.150267][T22166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.162262][T22166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7086'. [ 341.187289][T22160] loop0: p1 < > p4 [ 341.193147][T22160] loop0: p4 size 8388608 extends beyond EOD, truncated [ 341.222421][T22174] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 341.260422][T22178] loop9: detected capacity change from 0 to 128 [ 341.445572][T22208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.454188][T22208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.595652][T22218] syz_tun: entered allmulticast mode [ 341.613328][T22220] net_ratelimit: 16 callbacks suppressed [ 341.613342][T22220] bond_slave_1: mtu less than device minimum [ 341.679068][ T29] audit: type=1400 audit(1765023846.808:13502): avc: denied { write } for pid=22229 comm="syz.6.7116" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 341.702688][ T29] audit: type=1400 audit(1765023846.808:13503): avc: denied { ioctl } for pid=22229 comm="syz.6.7116" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 341.786188][T22242] syz_tun: entered allmulticast mode [ 341.855710][ T29] audit: type=1400 audit(1765023846.976:13504): avc: denied { connect } for pid=22257 comm="syz.3.7130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 342.160061][T22302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.168643][T22302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.817527][T22322] __nla_validate_parse: 6 callbacks suppressed [ 342.817549][T22322] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7158'. [ 342.830274][T22324] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7159'. [ 342.854980][T22318] loop2: p1 < > p4 [ 342.862484][T22318] loop2: p4 size 8388608 extends beyond EOD, truncated [ 343.058271][T22349] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7171'. [ 343.088807][T22353] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7173'. [ 343.170552][T22359] set_capacity_and_notify: 6 callbacks suppressed [ 343.170566][T22359] loop2: detected capacity change from 0 to 2048 [ 343.250281][T22359] loop2: p1 < > p4 [ 343.255972][T22359] loop2: p4 size 8388608 extends beyond EOD, truncated [ 343.358050][T22374] loop2: detected capacity change from 0 to 512 [ 343.380141][T22374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.392950][T22374] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.421122][T17950] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.573879][T22399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7193'. [ 343.606193][T22401] loop2: detected capacity change from 0 to 2048 [ 343.645952][T22401] loop2: p1 < > p4 [ 343.650380][T22401] loop2: p4 size 8388608 extends beyond EOD, truncated [ 343.983395][T22424] loop2: detected capacity change from 0 to 128 [ 344.232251][ T29] audit: type=1400 audit(1765023849.193:13505): avc: denied { map } for pid=22440 comm="syz.6.7213" path="/proc/1123/net/fib_trie" dev="proc" ino=4026534639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 344.384633][T22447] siw: device registration error -23 [ 344.676962][T22471] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7227'. [ 344.752070][T22475] loop3: detected capacity change from 0 to 512 [ 344.777734][T22475] EXT4-fs: Ignoring removed i_version option [ 344.783785][T22475] EXT4-fs: Ignoring removed bh option [ 344.789413][T22477] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7229'. [ 344.824375][T22475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.847577][T22475] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.878029][T15818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.952218][T22488] loop2: detected capacity change from 0 to 7 [ 344.970008][T22490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7234'. [ 345.113683][T22502] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7240'. [ 345.267158][T22516] loop2: detected capacity change from 0 to 7 [ 345.435923][T22528] syz_tun: entered allmulticast mode [ 345.459191][ T29] audit: type=1400 audit(1765023850.344:13506): avc: denied { read write } for pid=22529 comm="syz.9.7252" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 345.482961][ T29] audit: type=1400 audit(1765023850.344:13507): avc: denied { open } for pid=22529 comm="syz.9.7252" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 345.563007][T22534] loop0: detected capacity change from 0 to 128 [ 345.693857][T22542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7258'. [ 345.952102][T22552] siw: device registration error -23 [ 346.083622][T22574] bond_slave_1: mtu less than device minimum [ 346.104521][T22577] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 346.566152][T22614] loop2: detected capacity change from 0 to 7 [ 346.630095][T22599] chnl_net:caif_netlink_parms(): no params data found [ 346.683541][T22620] loop6: detected capacity change from 0 to 512 [ 346.690009][T15601] bond1: (slave syz_tun): Releasing backup interface [ 346.706597][T22620] EXT4-fs: Ignoring removed i_version option [ 346.712611][T22620] EXT4-fs: Ignoring removed bh option [ 346.731575][T22620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.745342][T22620] ext4 filesystem being mounted at /548/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.775925][T16466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.797904][ T166] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.809255][T22599] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.816360][T22599] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.823608][T22599] bridge_slave_0: entered allmulticast mode [ 346.830794][T22599] bridge_slave_0: entered promiscuous mode [ 346.837990][T22599] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.845258][T22599] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.868935][T22599] bridge_slave_1: entered allmulticast mode [ 346.876481][T22599] bridge_slave_1: entered promiscuous mode [ 346.906488][ T166] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.929950][T22599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.994780][ T166] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.017647][T22599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.062205][ T166] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.084984][T22599] team0: Port device team_slave_0 added [ 347.099826][T22599] team0: Port device team_slave_1 added [ 347.141185][T22599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.148138][T22599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.174072][T22599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.229496][ T166] bridge_slave_1: left allmulticast mode [ 347.235160][ T166] bridge_slave_1: left promiscuous mode [ 347.240931][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.252624][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.303661][ T166] dvmrp8 (unregistering): left allmulticast mode [ 347.346915][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.357090][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.366978][ T166] bond0 (unregistering): Released all slaves [ 347.375977][ T166] bond1 (unregistering): Released all slaves [ 347.384840][ T166] bond2 (unregistering): Released all slaves [ 347.393704][ T166] bond3 (unregistering): Released all slaves [ 347.402510][T22599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.409498][T22599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.435408][T22599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.477806][T22599] hsr_slave_0: entered promiscuous mode [ 347.509599][T22599] hsr_slave_1: entered promiscuous mode [ 347.520565][ T166] hsr_slave_0: left promiscuous mode [ 347.526526][ T166] hsr_slave_1: left promiscuous mode [ 347.532251][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.539676][ T166] batadv0: mtu less than device minimum [ 347.545902][ T166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.556922][ T166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.567821][ T166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.578538][ T166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.589307][ T166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.600000][ T166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.610694][ T166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.621647][ T166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.632454][ T166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.647730][ T166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.663796][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.680558][ T166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.688258][ T166] batman_adv: batadv0: Interface deactivated: dummy0 [ 347.694930][ T166] batman_adv: batadv0: Removing interface: dummy0 [ 347.704365][ T166] veth1_macvtap: left promiscuous mode [ 347.710103][ T166] veth0_macvtap: left promiscuous mode [ 347.715643][ T166] veth1_vlan: left promiscuous mode [ 347.721080][ T166] veth0_vlan: left promiscuous mode [ 348.041100][ T29] audit: type=1400 audit(1765023852.766:13508): avc: denied { read } for pid=22712 comm="syz.6.7308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 348.086617][ T29] audit: type=1400 audit(1765023852.785:13509): avc: denied { write } for pid=22705 comm="syz.2.7305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 348.107214][ T29] audit: type=1400 audit(1765023852.822:13510): avc: denied { ioctl } for pid=22724 comm="syz.3.7310" path="socket:[80651]" dev="sockfs" ino=80651 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 348.194601][ T29] audit: type=1400 audit(1765023852.907:13511): avc: denied { write } for pid=22712 comm="syz.6.7308" path="socket:[81306]" dev="sockfs" ino=81306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 348.239629][T22742] __nla_validate_parse: 7 callbacks suppressed [ 348.239641][T22742] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7315'. [ 348.270281][ T29] audit: type=1326 audit(1765023852.907:13512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22739 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47575ef749 code=0x7ffc0000 [ 348.293926][ T29] audit: type=1326 audit(1765023852.907:13513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22739 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47575ef749 code=0x7ffc0000 [ 348.317536][ T29] audit: type=1326 audit(1765023852.925:13514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22739 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47575ef749 code=0x7ffc0000 [ 348.341271][ T29] audit: type=1326 audit(1765023852.925:13515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22739 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47575ef749 code=0x7ffc0000 [ 348.370965][T22750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.523982][T22599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.543812][T22599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.563556][T22599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.618874][T22599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.723786][T22791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.732318][T22791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.993390][T22599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.165898][T22599] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.284763][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.291871][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.495617][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.502691][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.877585][T22599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.106203][T22599] veth0_vlan: entered promiscuous mode [ 350.116600][T22599] veth1_vlan: entered promiscuous mode [ 350.135439][T22599] veth0_macvtap: entered promiscuous mode [ 350.147657][T22599] veth1_macvtap: entered promiscuous mode [ 350.160496][T22599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.175125][T22599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.185429][ T166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.201689][ T166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.218193][ T166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.235450][ T166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.251983][T22828] set_capacity_and_notify: 1 callbacks suppressed [ 350.251998][T22828] loop6: detected capacity change from 0 to 2048 [ 350.274125][T22828] loop6: p1 < > p4 [ 350.278520][T22828] loop6: p4 size 8388608 extends beyond EOD, truncated [ 350.566352][T22867] loop0: detected capacity change from 0 to 512 [ 350.586310][T22867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.599411][T22867] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.647016][T22599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.677037][T22872] syz_tun: entered allmulticast mode [ 350.750282][T22874] loop0: detected capacity change from 0 to 512 [ 350.757585][T22874] EXT4-fs: Ignoring removed i_version option [ 350.764313][T22874] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 350.808790][T22874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e11c, mo2=0082] [ 350.817136][T22874] System zones: 1-12 [ 350.821556][T22874] EXT4-fs (loop0): orphan cleanup on readonly fs [ 350.828196][T22874] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.7348: invalid indirect mapped block 12 (level 1) [ 350.841984][T22874] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.7348: invalid indirect mapped block 2 (level 2) [ 350.858327][T22874] EXT4-fs (loop0): 1 truncate cleaned up [ 350.865111][T22874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 351.031794][T22599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 351.304898][T22896] loop6: detected capacity change from 0 to 512 [ 351.343770][T22896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.366525][T22901] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7357'. [ 351.372125][T22896] ext4 filesystem being mounted at /565/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.411254][T16466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.446131][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 351.446223][ T29] audit: type=1326 audit(1765023855.947:13522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22908 comm="syz.6.7360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 351.492365][ T29] audit: type=1326 audit(1765023855.947:13523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22908 comm="syz.6.7360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 351.515952][ T29] audit: type=1326 audit(1765023855.947:13524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22908 comm="syz.6.7360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 351.539497][ T29] audit: type=1326 audit(1765023855.947:13525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22908 comm="syz.6.7360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 351.563047][ T29] audit: type=1326 audit(1765023855.947:13526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22908 comm="syz.6.7360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 351.586611][ T29] audit: type=1326 audit(1765023855.947:13527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22908 comm="syz.6.7360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 351.610021][ T29] audit: type=1326 audit(1765023855.947:13528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22908 comm="syz.6.7360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 351.633558][ T29] audit: type=1326 audit(1765023855.947:13529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22908 comm="syz.6.7360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 351.806671][T22919] siw: device registration error -23 [ 351.822652][T22921] netlink: 'syz.3.7365': attribute type 12 has an invalid length. [ 351.856064][ T166] bridge_slave_1: left allmulticast mode [ 351.861725][ T166] bridge_slave_1: left promiscuous mode [ 351.867499][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.913934][ T166] bridge_slave_0: left allmulticast mode [ 351.919599][ T166] bridge_slave_0: left promiscuous mode [ 351.925296][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.964375][T22934] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7371'. [ 352.018857][T22939] loop0: detected capacity change from 0 to 128 [ 352.049595][T22939] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.092635][T22939] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 352.120337][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.131233][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.152493][ T166] bond0 (unregistering): Released all slaves [ 352.159279][T22599] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.172490][T22940] syz_tun: entered allmulticast mode [ 352.333397][ T166] hsr_slave_0: left promiscuous mode [ 352.339187][ T166] hsr_slave_1: left promiscuous mode [ 352.344789][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.352313][ T166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.388302][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.395728][ T166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.422057][ T166] veth1_macvtap: left promiscuous mode [ 352.427756][ T166] veth0_macvtap: left promiscuous mode [ 352.436055][ T166] veth1_vlan: left promiscuous mode [ 352.441552][ T166] veth0_vlan: left promiscuous mode [ 352.818513][ T166] team0 (unregistering): Port device team_slave_1 removed [ 352.832109][ T166] team0 (unregistering): Port device team_slave_0 removed [ 352.963025][T22970] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7385'. [ 352.990283][T22972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.998807][T22972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.148606][T22987] loop0: detected capacity change from 0 to 128 [ 353.598258][T23011] loop9: detected capacity change from 0 to 512 [ 353.634624][T23011] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.647853][T23011] ext4 filesystem being mounted at /492/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.676355][T15470] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.724602][T22766] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.768835][T23027] netlink: 'syz.9.7410': attribute type 12 has an invalid length. [ 353.840101][T23035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.849009][T23035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.106240][T23045] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7419'. [ 354.213320][T23056] loop3: detected capacity change from 0 to 8192 [ 354.461341][T23085] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7427'. [ 354.792540][T23098] loop9: detected capacity change from 0 to 512 [ 354.830975][T23098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.879180][T23098] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.925778][T15470] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.949383][T23122] netlink: 68 bytes leftover after parsing attributes in process `syz.9.7438'. [ 355.252641][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.332721][T23186] loop0: detected capacity change from 0 to 8192 [ 355.533630][ C0] I/O error, dev loop0, sector 65 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 355.543153][ C0] Buffer I/O error on dev loop0, logical block 65, lost sync page write [ 355.551634][T23186] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 355.561226][ C1] I/O error, dev loop9, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 355.561184][T23186] FAT-fs (loop0): unable to read inode block for updating (i_pos 2070) [ 355.570459][ C1] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 355.585446][T23188] FAT-fs (loop9): FAT read failed (blocknr 1) [ 355.590157][T19509] FAT-fs (loop0): unable to read inode block for updating (i_pos 2070) [ 355.601995][T23186] FAT-fs (loop0): unable to read inode block for updating (i_pos 2070) [ 355.611830][T23186] FAT-fs (loop0): unable to read inode block for updating (i_pos 2070) [ 355.620199][T23186] FAT-fs (loop0): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 355.635105][T23207] netlink: 11 bytes leftover after parsing attributes in process `syz.3.7460'. [ 355.645331][T23186] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 355.715300][T23188] FAT-fs (loop9): unable to read inode block for updating (i_pos 2070) [ 355.724038][T23188] Buffer I/O error on dev loop9, logical block 185, lost async page write [ 355.735979][T23188] Buffer I/O error on dev loop9, logical block 186, lost async page write [ 355.774036][T23188] Buffer I/O error on dev loop9, logical block 187, lost async page write [ 355.782852][T23188] Buffer I/O error on dev loop9, logical block 188, lost async page write [ 355.791568][T23188] Buffer I/O error on dev loop9, logical block 189, lost async page write [ 355.800219][T23188] Buffer I/O error on dev loop9, logical block 190, lost async page write [ 355.809907][ T802] FAT-fs (loop9): unable to read inode block for updating (i_pos 2070) [ 356.078535][ T29] audit: type=1326 audit(1765023860.268:13530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23228 comm="syz.0.7471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9203b1f749 code=0x7ffc0000 [ 356.102203][ T29] audit: type=1326 audit(1765023860.268:13531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23228 comm="syz.0.7471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9203b1f749 code=0x7ffc0000 [ 356.215885][T19509] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.513307][T23261] set_capacity_and_notify: 3 callbacks suppressed [ 356.513321][T23261] loop3: detected capacity change from 0 to 512 [ 356.544722][T23261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.557459][T23261] ext4 filesystem being mounted at /597/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.580644][T15818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.615994][T19509] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.641466][T23268] netlink: 'syz.3.7487': attribute type 12 has an invalid length. [ 356.725404][T15818] syz_tun (unregistering): left allmulticast mode [ 356.919177][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.931872][T23270] chnl_net:caif_netlink_parms(): no params data found [ 356.987756][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.019974][T23270] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.027030][T23270] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.035772][T23270] bridge_slave_0: entered allmulticast mode [ 357.049390][T23270] bridge_slave_0: entered promiscuous mode [ 357.059491][T23270] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.067336][T23270] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.075616][T23270] bridge_slave_1: entered allmulticast mode [ 357.082436][T23270] bridge_slave_1: entered promiscuous mode [ 357.100178][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.128279][T23270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.138755][T23270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.150800][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.211151][T23270] team0: Port device team_slave_0 added [ 357.228132][T23270] team0: Port device team_slave_1 added [ 357.267003][T23270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.273964][T23270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.299993][T23270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.442485][T23270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.449510][T23270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.475504][T23270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.561077][T23305] loop2: detected capacity change from 0 to 8192 [ 357.568325][T23307] net_ratelimit: 32 callbacks suppressed [ 357.568346][T23307] bond_slave_1: mtu less than device minimum [ 357.580232][ T52] bridge_slave_1: left allmulticast mode [ 357.585861][ T52] bridge_slave_1: left promiscuous mode [ 357.591567][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.617849][ T52] bridge_slave_0: left allmulticast mode [ 357.623528][ T52] bridge_slave_0: left promiscuous mode [ 357.629209][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.674803][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 357.674815][ T29] audit: type=1326 audit(1765023861.774:13540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23310 comm="syz.6.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 357.704463][ T29] audit: type=1326 audit(1765023861.774:13541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23310 comm="syz.6.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 357.735739][T23309] loop2: detected capacity change from 8192 to 0 [ 357.743222][ C0] I/O error, dev loop2, sector 97 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 357.752821][T23305] FAT-fs (loop2): unable to read inode block for updating (i_pos 2070) [ 357.769399][ T176] FAT-fs (loop2): unable to read inode block for updating (i_pos 2070) [ 357.802432][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.810317][ T29] audit: type=1326 audit(1765023861.774:13542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23310 comm="syz.6.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 357.834659][ T29] audit: type=1326 audit(1765023861.774:13543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23310 comm="syz.6.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 357.858215][ T29] audit: type=1326 audit(1765023861.774:13544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23310 comm="syz.6.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 357.881805][ T29] audit: type=1326 audit(1765023861.774:13545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23310 comm="syz.6.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 357.905386][ T29] audit: type=1326 audit(1765023861.774:13546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23310 comm="syz.6.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 357.929044][ T29] audit: type=1326 audit(1765023861.774:13547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23310 comm="syz.6.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 357.952418][ T29] audit: type=1326 audit(1765023861.774:13548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23310 comm="syz.6.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 357.976058][ T29] audit: type=1326 audit(1765023861.774:13549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23310 comm="syz.6.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f2e65def749 code=0x7ffc0000 [ 358.027428][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.059256][ T52] bond0 (unregistering): Released all slaves [ 358.102705][T23270] hsr_slave_0: entered promiscuous mode [ 358.109125][T23270] hsr_slave_1: entered promiscuous mode [ 358.122918][T23270] debugfs: 'hsr0' already exists in 'hsr' [ 358.128680][T23270] Cannot create hsr debugfs directory [ 358.161791][ T52] hsr_slave_0: left promiscuous mode [ 358.168486][ T52] hsr_slave_1: left promiscuous mode [ 358.174131][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.181540][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.216956][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.224398][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.249789][ T52] batman_adv: batadv0: Interface deactivated: dummy0 [ 358.256499][ T52] batman_adv: batadv0: Removing interface: dummy0 [ 358.277240][ T52] veth1_macvtap: left promiscuous mode [ 358.282782][ T52] veth0_macvtap: left promiscuous mode [ 358.291531][ T52] veth1_vlan: left promiscuous mode [ 358.296749][ T52] veth0_vlan: left promiscuous mode [ 358.421034][ T52] team0 (unregistering): Port device team_slave_1 removed [ 358.442714][ T52] team0 (unregistering): Port device team_slave_0 removed [ 358.645855][T23337] bond_slave_1: mtu less than device minimum [ 359.673321][T23366] bond_slave_1: mtu less than device minimum [ 359.973283][T23270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 359.995529][T23270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.008437][T23270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.028021][T23270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.139089][T23401] bond_slave_1: mtu less than device minimum [ 360.200139][T23270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.220962][T23270] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.232398][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.239460][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.274021][T23270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.284426][T23270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.299198][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.306256][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.657880][T23419] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7542'. [ 360.659710][T23270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.748761][T23270] veth0_vlan: entered promiscuous mode [ 360.763407][T23424] loop6: detected capacity change from 0 to 8192 [ 360.765812][T23270] veth1_vlan: entered promiscuous mode [ 360.791091][T23270] veth0_macvtap: entered promiscuous mode [ 360.799950][T23270] veth1_macvtap: entered promiscuous mode [ 360.825781][T23270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.848425][T23270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.866621][ T1602] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.879539][ T1602] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.889518][T23443] loop6: detected capacity change from 8192 to 0 [ 360.893686][ C0] I/O error, dev loop6, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 360.905097][ C0] buffer_io_error: 62 callbacks suppressed [ 360.905110][ C0] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 360.921055][ T1602] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.924605][T23424] FAT-fs (loop6): FAT read failed (blocknr 1) [ 360.936998][ T1602] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.953570][T23424] FAT-fs (loop6): unable to read inode block for updating (i_pos 2070) [ 360.962624][T23424] Buffer I/O error on dev loop6, logical block 185, lost async page write [ 360.971229][T23424] Buffer I/O error on dev loop6, logical block 186, lost async page write [ 360.997108][T23424] Buffer I/O error on dev loop6, logical block 187, lost async page write [ 361.043037][T23424] Buffer I/O error on dev loop6, logical block 188, lost async page write [ 361.091570][T23424] Buffer I/O error on dev loop6, logical block 189, lost async page write [ 361.136035][T23424] Buffer I/O error on dev loop6, logical block 190, lost async page write [ 361.156254][T23424] Buffer I/O error on dev loop6, logical block 191, lost async page write [ 361.181697][T23424] Buffer I/O error on dev loop6, logical block 193, lost async page write [ 361.207022][T23424] Buffer I/O error on dev loop6, logical block 202, lost async page write [ 361.230966][ T1602] FAT-fs (loop6): unable to read inode block for updating (i_pos 2070) [ 361.231580][T23475] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.239965][T23424] FAT-fs (loop6): unable to read inode block for updating (i_pos 2070) [ 361.257689][T23424] FAT-fs (loop6): unable to read inode block for updating (i_pos 2070) [ 361.266048][T23424] FAT-fs (loop6): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 361.423854][T23496] bond_slave_1: mtu less than device minimum [ 361.474933][T23500] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7556'. [ 361.762786][T23562] netlink: 'syz.9.7566': attribute type 10 has an invalid length. [ 361.778095][T23565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7567'. [ 361.795309][T16466] syz_tun (unregistering): left allmulticast mode [ 361.907637][T23576] bond_slave_1: mtu less than device minimum [ 361.984766][T19509] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.080892][T19509] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.168297][T19509] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.212111][T23612] netlink: 'syz.2.7584': attribute type 10 has an invalid length. [ 362.222114][T19509] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.282249][T23612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.291242][T23612] team0: Port device bond0 added [ 362.345821][T23567] chnl_net:caif_netlink_parms(): no params data found [ 362.375541][T23618] netlink: 11 bytes leftover after parsing attributes in process `syz.3.7585'. [ 362.402062][T23626] tipc: Started in network mode [ 362.406937][T23626] tipc: Node identity 4, cluster identity 4711 [ 362.413163][T23626] tipc: Node number set to 4 [ 362.457193][T23567] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.464299][T23567] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.498723][T23567] bridge_slave_0: entered allmulticast mode [ 362.519005][T23567] bridge_slave_0: entered promiscuous mode [ 362.547439][T19509] bridge_slave_1: left allmulticast mode [ 362.553119][T19509] bridge_slave_1: left promiscuous mode [ 362.558972][T19509] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.591893][T19509] bridge_slave_0: left allmulticast mode [ 362.597580][T19509] bridge_slave_0: left promiscuous mode [ 362.603301][T19509] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.832703][T19509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.848945][T19509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.861038][T19509] bond0 (unregistering): Released all slaves [ 362.877436][T19509] bond1 (unregistering): Released all slaves [ 362.896199][T23567] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.903278][T23567] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.914785][T23567] bridge_slave_1: entered allmulticast mode [ 362.929053][T23567] bridge_slave_1: entered promiscuous mode [ 362.945111][T19509] IPVS: stopping backup sync thread 20758 ... [ 363.062083][T19509] hsr_slave_0: left promiscuous mode [ 363.067772][T19509] hsr_slave_1: left promiscuous mode [ 363.074228][T19509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.081615][T19509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.089367][T19509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.096780][T19509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.120253][T19509] veth1_macvtap: left promiscuous mode [ 363.138227][T19509] veth0_macvtap: left promiscuous mode [ 363.163595][T19509] veth1_vlan: left promiscuous mode [ 363.174346][T19509] veth0_vlan: left promiscuous mode [ 363.313716][T18007] smc: removing ib device syz2 [ 363.405663][T19509] team0 (unregistering): Port device team_slave_1 removed [ 363.415584][T19509] team0 (unregistering): Port device team_slave_0 removed [ 363.478245][T20273] infiniband syz0: ib_query_port failed (-19) [ 363.496152][T23567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.518802][T23567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.597909][T23567] team0: Port device team_slave_0 added [ 363.616623][T23567] team0: Port device team_slave_1 added [ 363.649685][T23567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.656684][T23567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.682779][T23567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.740696][T23649] bond_slave_1: mtu less than device minimum [ 363.760601][T23567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.767575][T23567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.793580][T23567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.841258][T23651] netlink: 'syz.9.7598': attribute type 12 has an invalid length. [ 363.880628][T23567] hsr_slave_0: entered promiscuous mode [ 363.886739][T23567] hsr_slave_1: entered promiscuous mode [ 363.905865][T23567] debugfs: 'hsr0' already exists in 'hsr' [ 363.911603][T23567] Cannot create hsr debugfs directory [ 363.922524][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.241536][T23671] bond_slave_1: mtu less than device minimum [ 364.330695][T23567] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 364.343550][T23567] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 364.355392][T23567] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 364.365357][T23567] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 364.421766][T23567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.435961][T23567] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.451046][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.458215][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.471810][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.478874][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.548677][T23567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.721959][T23567] veth0_vlan: entered promiscuous mode [ 364.739794][T23567] veth1_vlan: entered promiscuous mode [ 364.766339][T23567] veth0_macvtap: entered promiscuous mode [ 364.782069][T23567] veth1_macvtap: entered promiscuous mode [ 364.820361][T23567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.831647][T23567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.843387][ T1602] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.921197][ T1602] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.960816][ T1602] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.995095][ T1602] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.092834][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 365.092849][ T29] audit: type=1326 audit(1765023868.715:13570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23725 comm="syz.6.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7e59f749 code=0x7ffc0000 [ 365.219653][ T29] audit: type=1326 audit(1765023868.743:13571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23725 comm="syz.6.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e7e59f749 code=0x7ffc0000 [ 365.243297][ T29] audit: type=1326 audit(1765023868.743:13572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23725 comm="syz.6.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7e59f749 code=0x7ffc0000 [ 365.266876][ T29] audit: type=1326 audit(1765023868.743:13573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23725 comm="syz.6.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e7e59f749 code=0x7ffc0000 [ 365.290562][ T29] audit: type=1326 audit(1765023868.743:13574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23725 comm="syz.6.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7e59f749 code=0x7ffc0000 [ 365.314220][ T29] audit: type=1326 audit(1765023868.743:13575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23725 comm="syz.6.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e7e59f749 code=0x7ffc0000 [ 365.337663][ T29] audit: type=1326 audit(1765023868.743:13576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23725 comm="syz.6.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7e59f749 code=0x7ffc0000 [ 365.339559][T23730] netlink: 11 bytes leftover after parsing attributes in process `syz.9.7619'. [ 365.361299][ T29] audit: type=1326 audit(1765023868.743:13577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23725 comm="syz.6.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f8e7e59f749 code=0x7ffc0000 [ 365.410054][T23729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 365.445537][T23736] loop3: detected capacity change from 0 to 512 [ 365.462097][T23736] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 365.480565][T23736] EXT4-fs (loop3): 1 truncate cleaned up [ 365.486735][T23736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.553710][T23270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.665845][T23758] team0: Port device bond0 removed [ 365.691078][T23758] bridge_slave_0: left allmulticast mode [ 365.696819][T23758] bridge_slave_0: left promiscuous mode [ 365.702730][T23758] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.711850][T23763] netlink: 'syz.2.7634': attribute type 10 has an invalid length. [ 365.731607][T23758] bridge_slave_1: left allmulticast mode [ 365.737374][T23758] bridge_slave_1: left promiscuous mode [ 365.743151][T23758] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.778151][T23758] bond0: (slave bond_slave_0): Releasing backup interface [ 365.795947][T23758] bond0: (slave bond_slave_1): Releasing backup interface [ 365.882185][T23758] team0: Port device team_slave_0 removed [ 365.891256][T23758] team0: Port device team_slave_1 removed [ 365.898117][T23758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.905665][T23758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.914739][T23758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.922125][T23758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.932016][T23758] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 366.062920][T23763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.175173][T23763] team0: Port device bond0 added [ 366.314624][T23780] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7638'. [ 366.549757][T23788] netlink: 'syz.2.7644': attribute type 12 has an invalid length. [ 366.703611][T23792] bridge_slave_0: left allmulticast mode [ 366.709330][T23792] bridge_slave_0: left promiscuous mode [ 366.715014][T23792] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.727827][T23792] bridge_slave_1: left allmulticast mode [ 366.733672][T23792] bridge_slave_1: left promiscuous mode [ 366.739766][T23792] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.753245][T23795] netlink: 'syz.0.7646': attribute type 10 has an invalid length. [ 366.785333][T23792] bond0: (slave bond_slave_0): Releasing backup interface [ 366.797741][T23792] bond0: (slave bond_slave_1): Releasing backup interface [ 366.810913][T23792] team0: Port device team_slave_0 removed [ 366.820479][T23792] team0: Port device team_slave_1 removed [ 366.827595][T23792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.835060][T23792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.845091][T23792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.852469][T23792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.862195][T23792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 366.881748][T23795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.890513][T23795] team0: Port device bond0 added [ 366.908729][ T875] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.921560][ T29] audit: type=1326 audit(1765023870.427:13578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23802 comm="syz.2.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47575ef749 code=0x7ffc0000 [ 366.984315][ T29] audit: type=1326 audit(1765023870.445:13579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23802 comm="syz.2.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47575ef749 code=0x7ffc0000 [ 367.110333][T23816] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.395428][T23839] team0: Port device bond0 removed [ 367.418106][T23839] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 367.435292][T23847] bond_slave_1: mtu less than device minimum [ 367.911210][T23912] bridge_slave_0: left allmulticast mode [ 367.917066][T23912] bridge_slave_0: left promiscuous mode [ 367.922859][T23912] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.949663][T23912] bridge_slave_1: left allmulticast mode [ 367.954542][T23917] netlink: 'syz.9.7669': attribute type 10 has an invalid length. [ 367.955342][T23912] bridge_slave_1: left promiscuous mode [ 367.968932][T23912] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.040643][T23912] bond0: (slave bond_slave_0): Releasing backup interface [ 368.052854][T23912] bond0: (slave bond_slave_1): Releasing backup interface [ 368.117787][T23912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.125368][T23912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.155151][T23912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.162691][T23912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.196386][T23951] loop2: detected capacity change from 0 to 7 [ 368.208041][T23912] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 368.224034][T23924] bond_slave_1: mtu less than device minimum [ 368.415443][T23976] loop6: detected capacity change from 0 to 1024 [ 368.422297][T23976] EXT4-fs: Ignoring removed nomblk_io_submit option [ 368.565613][T23981] bond_slave_1: mtu less than device minimum [ 368.630255][T23976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.914748][T23567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.001246][T23996] new mount options do not match the existing superblock, will be ignored [ 369.380663][T24008] bond_slave_1: mtu less than device minimum [ 370.472922][T24033] bond_slave_1: mtu less than device minimum [ 370.785161][T24023] tipc: Started in network mode [ 370.790080][T24023] tipc: Node identity 4, cluster identity 4711 [ 370.796232][T24023] tipc: Node number set to 4 [ 371.062660][T24058] tipc: Started in network mode [ 371.067654][T24058] tipc: Node identity 4, cluster identity 4711 [ 371.073794][T24058] tipc: Node number set to 4 [ 371.456618][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 371.456635][ T29] audit: type=1400 audit(1765023874.655:13594): avc: denied { getopt } for pid=24064 comm="syz.3.7722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 371.594919][T24071] loop3: detected capacity change from 0 to 8192 [ 372.084772][T24078] bridge_slave_0: left allmulticast mode [ 372.090445][T24078] bridge_slave_0: left promiscuous mode [ 372.096188][T24078] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.202385][T24078] bridge_slave_1: left allmulticast mode [ 372.208079][T24078] bridge_slave_1: left promiscuous mode [ 372.213832][T24078] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.245294][T24078] bond0: (slave bond_slave_0): Releasing backup interface [ 372.281069][T24078] bond0: (slave bond_slave_1): Releasing backup interface [ 372.415855][T24078] team0: Port device team_slave_0 removed [ 372.459995][T24078] team0: Port device team_slave_1 removed [ 372.481502][T24078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.488923][T24078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.502044][T24078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.509436][T24078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.590849][T24078] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.173393][T24108] tipc: Enabled bearer , priority 0 [ 373.211500][T24108] syzkaller0: entered promiscuous mode [ 373.217088][T24108] syzkaller0: entered allmulticast mode [ 373.290952][T24106] tipc: Resetting bearer [ 373.347399][T24106] tipc: Disabling bearer [ 373.555332][ T29] audit: type=1400 audit(1765023876.600:13595): avc: denied { setopt } for pid=24136 comm="syz.2.7741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 373.574995][ T29] audit: type=1400 audit(1765023876.600:13596): avc: denied { connect } for pid=24136 comm="syz.2.7741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 373.672029][T24148] team0: Port device bond0 removed [ 373.701550][T24148] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 375.136052][T24210] tipc: Started in network mode [ 375.141024][T24210] tipc: Node identity 4, cluster identity 4711 [ 375.147232][T24210] tipc: Node number set to 4 [ 375.886639][T24220] bond_slave_1: mtu less than device minimum [ 376.924400][T24238] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7762'. [ 376.933428][T24238] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7762'. [ 377.543892][ T29] audit: type=1326 audit(1765023880.351:13597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24261 comm="syz.3.7770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 377.576451][ T29] audit: type=1326 audit(1765023880.370:13598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24261 comm="syz.3.7770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 377.600073][ T29] audit: type=1326 audit(1765023880.370:13599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24261 comm="syz.3.7770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 377.623665][ T29] audit: type=1326 audit(1765023880.370:13600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24261 comm="syz.3.7770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 377.647250][ T29] audit: type=1326 audit(1765023880.370:13601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24261 comm="syz.3.7770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 377.671136][ T29] audit: type=1326 audit(1765023880.370:13602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24261 comm="syz.3.7770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 377.694604][ T29] audit: type=1326 audit(1765023880.370:13603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24261 comm="syz.3.7770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 377.718181][ T29] audit: type=1326 audit(1765023880.370:13604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24261 comm="syz.3.7770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 377.801322][ T29] audit: type=1400 audit(1765023880.594:13605): avc: denied { setopt } for pid=24261 comm="syz.3.7770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 377.821237][T24269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.857231][ T29] audit: type=1400 audit(1765023880.622:13606): avc: denied { ioctl } for pid=24272 comm="syz.0.7772" path="socket:[87207]" dev="sockfs" ino=87207 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 382.538805][T24390] netlink: 'syz.0.7796': attribute type 12 has an invalid length. [ 382.847580][T24410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.856619][T24405] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 382.865335][T24405] ref_ctr increment failed for inode: 0xbdc offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888131781b00 [ 382.878676][T24404] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 382.887496][T24404] ref_ctr decrement failed for inode: 0xbdc offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888131781b00 [ 382.921589][T24404] uprobe: syz.9.7803:24404 failed to unregister, leaking uprobe [ 383.063859][T24420] netlink: 'syz.6.7808': attribute type 12 has an invalid length. [ 384.237194][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 384.243253][ T29] audit: type=1400 audit(1765023886.609:13616): avc: denied { bind } for pid=24437 comm="syz.2.7817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 385.279197][ T29] audit: type=1400 audit(1765023887.264:13617): avc: denied { connect } for pid=24437 comm="syz.2.7817" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 385.843070][T24467] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 386.753402][ T29] audit: type=1400 audit(1765023888.976:13618): avc: denied { ioctl } for pid=24492 comm="syz.0.7838" path="socket:[86511]" dev="sockfs" ino=86511 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 386.778609][ T29] audit: type=1400 audit(1765023888.976:13619): avc: denied { connect } for pid=24492 comm="syz.0.7838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 387.305668][T24524] xt_CT: No such helper "pptp" [ 387.490254][T24554] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7866'. [ 387.627310][T24565] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 387.636018][T24565] ref_ctr increment failed for inode: 0xf5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888131785e80 [ 387.649027][T24564] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 387.657791][T24564] ref_ctr decrement failed for inode: 0xf5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888131785e80 [ 387.668673][T24564] uprobe: syz.3.7870:24564 failed to unregister, leaking uprobe [ 387.714858][T24567] xt_CT: No such helper "pptp" [ 388.962707][T15470] syz_tun (unregistering): left allmulticast mode [ 389.193580][ T2063] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.280348][ T2063] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.502980][ T2063] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.594189][ T2063] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.662965][T24622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7890'. [ 389.672001][T24622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7890'. [ 390.140259][ T2063] bond0 (unregistering): Released all slaves [ 390.165356][T24626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7891'. [ 390.174348][T24626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7891'. [ 390.259306][T24594] chnl_net:caif_netlink_parms(): no params data found [ 390.281366][ T2063] tipc: Left network mode [ 390.307442][ T2063] hsr_slave_0: left promiscuous mode [ 390.313056][ T29] audit: type=1400 audit(1765023892.306:13620): avc: denied { read } for pid=24630 comm="syz.0.7893" path="socket:[87684]" dev="sockfs" ino=87684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 390.336870][ T2063] hsr_slave_1: left promiscuous mode [ 390.367317][ T2063] veth1_macvtap: left promiscuous mode [ 390.377882][ T2063] veth0_macvtap: left promiscuous mode [ 390.383522][ T2063] veth1_vlan: left promiscuous mode [ 390.423148][ T2063] veth0_vlan: left promiscuous mode [ 390.531058][ T29] audit: type=1400 audit(1765023892.502:13621): avc: denied { read } for pid=24633 comm="syz.3.7894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 390.750914][T24594] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.757994][T24594] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.765277][T24594] bridge_slave_0: entered allmulticast mode [ 390.771707][T24594] bridge_slave_0: entered promiscuous mode [ 390.778600][T24594] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.785716][T24594] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.792925][T24594] bridge_slave_1: entered allmulticast mode [ 390.799369][T24594] bridge_slave_1: entered promiscuous mode [ 390.818134][T24594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.828808][T24594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.849087][T24594] team0: Port device team_slave_0 added [ 390.855880][T24594] team0: Port device team_slave_1 added [ 390.871107][T24594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.878081][T24594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.904043][T24594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.915552][T24594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.922518][T24594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.948439][T24594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.975080][T24594] hsr_slave_0: entered promiscuous mode [ 390.980967][T24594] hsr_slave_1: entered promiscuous mode [ 390.986901][T24594] debugfs: 'hsr0' already exists in 'hsr' [ 390.992637][T24594] Cannot create hsr debugfs directory [ 391.008166][ T2063] IPVS: stop unused estimator thread 0... [ 391.253972][T24594] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 391.262742][T24594] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 391.271402][T24594] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 391.279896][T24594] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 391.295308][T24594] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.302383][T24594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.309621][T24594] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.316685][T24594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.344193][T24594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.352065][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.359774][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.376819][T24594] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.386103][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.393212][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.403578][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.410705][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.468437][T24594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.529120][T24673] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7901'. [ 391.574122][T24594] veth0_vlan: entered promiscuous mode [ 391.587561][T24594] veth1_vlan: entered promiscuous mode [ 391.593845][T24683] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7904'. [ 391.614477][T24594] veth0_macvtap: entered promiscuous mode [ 391.620955][T24683] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7904'. [ 391.631084][T24594] veth1_macvtap: entered promiscuous mode [ 391.642108][T24594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.659449][T24594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.676585][ T2063] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.698388][ T2063] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.717208][ T2063] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.726556][ T2063] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.654152][T24715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7916'. [ 393.426334][T24728] xt_CT: No such helper "pptp" [ 393.426853][T24724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7920'. [ 393.524268][T24738] xt_CT: No such helper "pptp" [ 394.163817][T24773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7939'. [ 394.211972][ T29] audit: type=1326 audit(1765023895.944:13622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24779 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 394.235667][ T29] audit: type=1326 audit(1765023895.944:13623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24779 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 394.259454][ T29] audit: type=1326 audit(1765023895.944:13624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24779 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 394.283117][ T29] audit: type=1326 audit(1765023895.944:13625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24779 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 394.306754][ T29] audit: type=1326 audit(1765023895.944:13626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24779 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 394.330425][ T29] audit: type=1326 audit(1765023895.944:13627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24779 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 394.354008][ T29] audit: type=1326 audit(1765023895.944:13628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24779 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 394.377550][ T29] audit: type=1326 audit(1765023895.944:13629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24779 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 394.433095][T24787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.487840][T24800] bond_slave_1: mtu less than device minimum [ 394.612769][T24809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7956'. [ 395.327030][T24825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7962'. [ 395.407781][T24827] bond_slave_1: mtu less than device minimum [ 395.614508][T24837] xt_CT: No such helper "pptp" [ 397.163324][T24856] xt_CT: No such helper "pptp" [ 397.335254][T24874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.512320][T24874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.929568][T24880] xt_CT: No such helper "pptp" [ 398.892282][T24932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.903140][T24932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.920689][T24950] xt_CT: No such helper "pptp" [ 399.928231][ T2063] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.563731][T25028] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8024'. [ 400.572707][T25028] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8024'. [ 401.311077][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 401.311094][ T29] audit: type=1326 audit(1765023902.539:13631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.9.8034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e16f749 code=0x7ffc0000 [ 401.382041][T25105] bond_slave_1: mtu less than device minimum [ 401.412989][ T29] audit: type=1326 audit(1765023902.632:13632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.9.8034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff18e16f749 code=0x7ffc0000 [ 401.436649][ T29] audit: type=1326 audit(1765023902.632:13633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.9.8034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e16f749 code=0x7ffc0000 [ 401.460535][ T29] audit: type=1326 audit(1765023902.632:13634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.9.8034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e16f749 code=0x7ffc0000 [ 401.484268][ T29] audit: type=1326 audit(1765023902.632:13635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.9.8034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff18e16f749 code=0x7ffc0000 [ 401.507863][ T29] audit: type=1326 audit(1765023902.632:13636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.9.8034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e16f749 code=0x7ffc0000 [ 401.531542][ T29] audit: type=1326 audit(1765023902.632:13637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.9.8034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff18e16f749 code=0x7ffc0000 [ 401.554950][ T29] audit: type=1326 audit(1765023902.632:13638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.9.8034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e16f749 code=0x7ffc0000 [ 401.578557][ T29] audit: type=1326 audit(1765023902.632:13639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.9.8034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff18e16f749 code=0x7ffc0000 [ 401.834274][T25121] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8038'. [ 402.640423][T25113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.365467][T25141] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8046'. [ 403.374468][T25141] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8046'. [ 404.237665][T25148] loop9: detected capacity change from 0 to 8192 [ 404.328090][T25022] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.336289][T25156] loop9: detected capacity change from 8192 to 0 [ 404.337796][ C0] I/O error, dev loop9, sector 33 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 404.352100][ C0] buffer_io_error: 24 callbacks suppressed [ 404.352120][ C0] Buffer I/O error on dev loop9, logical block 33, lost sync page write [ 404.366890][T25148] FAT-fs (loop9): FAT read failed (blocknr 1) [ 404.369295][T25162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8056'. [ 404.381972][T25162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8056'. [ 404.394169][T25164] bond_slave_1: mtu less than device minimum [ 404.396466][T25148] FAT-fs (loop9): unable to read inode block for updating (i_pos 2070) [ 404.436463][T25168] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8058'. [ 404.448830][T25148] Buffer I/O error on dev loop9, logical block 185, lost async page write [ 404.459253][T25148] Buffer I/O error on dev loop9, logical block 186, lost async page write [ 404.467840][T25148] Buffer I/O error on dev loop9, logical block 187, lost async page write [ 404.476560][T25148] Buffer I/O error on dev loop9, logical block 188, lost async page write [ 404.485275][T25148] Buffer I/O error on dev loop9, logical block 189, lost async page write [ 404.494553][T25148] Buffer I/O error on dev loop9, logical block 190, lost async page write [ 404.515384][T25148] Buffer I/O error on dev loop9, logical block 191, lost async page write [ 404.525407][T25148] Buffer I/O error on dev loop9, logical block 193, lost async page write [ 404.534014][T25148] Buffer I/O error on dev loop9, logical block 202, lost async page write [ 404.542788][T25022] FAT-fs (loop9): unable to read inode block for updating (i_pos 2070) [ 404.551591][T25148] FAT-fs (loop9): unable to read boot sector to mark fs as dirty [ 404.596574][T25188] bond_slave_1: mtu less than device minimum [ 404.630332][T25192] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8069'. [ 404.639825][T25192] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8069'. [ 404.700070][T25194] loop6: detected capacity change from 0 to 4096 [ 404.710989][T25194] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.929400][T23567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.221385][T25297] bond_slave_1: mtu less than device minimum [ 406.237042][T25299] __nla_validate_parse: 1 callbacks suppressed [ 406.237055][T25299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8093'. [ 406.257210][T25299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8093'. [ 406.344352][T25307] loop6: detected capacity change from 0 to 4096 [ 406.474771][T25307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.540620][T25311] xt_CT: No such helper "pptp" [ 407.023778][T25329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8104'. [ 407.032886][T25329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8104'. [ 407.126531][T25331] bond_slave_1: mtu less than device minimum [ 407.159537][T25333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8106'. [ 407.169511][T25333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8106'. [ 407.284187][T23567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.422928][T25353] bond_slave_1: mtu less than device minimum [ 407.459204][T25359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8118'. [ 407.471382][T25359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8118'. [ 407.744545][T25381] bond_slave_1: mtu less than device minimum [ 407.792301][T25383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8129'. [ 407.801316][T25383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8129'. [ 409.326805][T25408] xt_CT: No such helper "pptp" [ 410.151958][T25425] xt_CT: No such helper "pptp" [ 410.876042][T25434] xt_CT: No such helper "pptp" [ 411.251626][T25452] xt_CT: No such helper "pptp" [ 412.077598][T25464] __nla_validate_parse: 5 callbacks suppressed [ 412.077648][T25464] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8150'. [ 412.198103][T25466] bond_slave_1: mtu less than device minimum [ 412.611991][T25468] xt_CT: No such helper "pptp" [ 413.986650][T25493] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 414.112565][T25494] xt_CT: No such helper "pptp" [ 414.371445][T25502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8170'. [ 414.438011][T25503] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8168'. [ 414.898872][T25504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8169'. [ 414.907885][T25504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8169'. [ 415.144184][ T29] audit: type=1326 audit(1765023915.522:13640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25517 comm="syz.3.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 415.167870][ T29] audit: type=1326 audit(1765023915.522:13641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25517 comm="syz.3.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 415.175623][T25522] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8179'. [ 415.191536][ T29] audit: type=1326 audit(1765023915.522:13642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25517 comm="syz.3.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 415.224109][ T29] audit: type=1326 audit(1765023915.522:13643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25517 comm="syz.3.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 415.230246][T25522] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8179'. [ 415.247729][ T29] audit: type=1326 audit(1765023915.522:13644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25517 comm="syz.3.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 415.280179][ T29] audit: type=1326 audit(1765023915.522:13645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25517 comm="syz.3.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 415.303872][ T29] audit: type=1326 audit(1765023915.522:13646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25517 comm="syz.3.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 415.327466][ T29] audit: type=1326 audit(1765023915.522:13647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25517 comm="syz.3.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 415.350849][ T29] audit: type=1326 audit(1765023915.522:13648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25517 comm="syz.3.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 415.374506][ T29] audit: type=1326 audit(1765023915.522:13649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25517 comm="syz.3.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f01267cf749 code=0x7ffc0000 [ 416.044283][T25527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.405446][T25539] xt_CT: No such helper "pptp" [ 416.684813][T25594] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8184'. [ 417.908973][T25622] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8190'. [ 417.917973][T25622] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8190'. [ 418.274574][T25659] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8193'. [ 418.283643][T25659] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8193'. [ 418.338750][T25638] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8191'. [ 418.491034][T25653] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8191'. [ 419.491516][T25702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.771034][T25714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.779720][T25714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.898336][T25718] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8204'. [ 419.907457][T25718] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8204'. [ 420.126084][T25698] ================================================================== [ 420.134189][T25698] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 420.142601][T25698] [ 420.144922][T25698] write to 0xffff88810c4843dc of 4 bytes by task 25679 on cpu 1: [ 420.152638][T25698] inode_update_timestamps+0x147/0x270 [ 420.158101][T25698] file_update_time_flags+0x26c/0x310 [ 420.163472][T25698] file_update_time+0x17/0x20 [ 420.168156][T25698] shmem_file_write_iter+0x9c/0xf0 [ 420.173274][T25698] iter_file_splice_write+0x66b/0xa20 [ 420.178643][T25698] direct_splice_actor+0x156/0x2a0 [ 420.183760][T25698] splice_direct_to_actor+0x312/0x680 [ 420.189132][T25698] do_splice_direct+0xda/0x150 [ 420.193895][T25698] do_sendfile+0x380/0x650 [ 420.198318][T25698] __x64_sys_sendfile64+0x105/0x150 [ 420.203524][T25698] x64_sys_call+0x2db1/0x3000 [ 420.208212][T25698] do_syscall_64+0xd8/0x2a0 [ 420.212726][T25698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.218621][T25698] [ 420.220939][T25698] read to 0xffff88810c4843dc of 4 bytes by task 25698 on cpu 0: [ 420.228562][T25698] atime_needs_update+0x2a8/0x3e0 [ 420.233581][T25698] touch_atime+0x4a/0x340 [ 420.237899][T25698] shmem_file_splice_read+0x5b1/0x600 [ 420.243268][T25698] splice_direct_to_actor+0x26f/0x680 [ 420.248642][T25698] do_splice_direct+0xda/0x150 [ 420.253390][T25698] do_sendfile+0x380/0x650 [ 420.257805][T25698] __x64_sys_sendfile64+0x105/0x150 [ 420.263001][T25698] x64_sys_call+0x2db1/0x3000 [ 420.267672][T25698] do_syscall_64+0xd8/0x2a0 [ 420.272188][T25698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.278075][T25698] [ 420.280383][T25698] value changed: 0x0aca771a -> 0x0b59322b [ 420.286134][T25698] [ 420.288445][T25698] Reported by Kernel Concurrency Sanitizer on: [ 420.294592][T25698] CPU: 0 UID: 0 PID: 25698 Comm: syz.0.8196 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 420.305955][T25698] Tainted: [W]=WARN [ 420.309741][T25698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.319786][T25698] ==================================================================