last executing test programs: 3m35.663686805s ago: executing program 0 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x2d6}, {&(0x7f00000002c0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61f48eccfcc29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf76006768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33c0bb3c24fa67c327cde47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f120790934c3b32f2f4777c65b15748267223cbde856fa5a33f12cb1ea51da9ce96881d1aa6d096ed6b23190800000081803a2119d9efd47b1abba3c1e6c563c1ec692da80ef66b19495b8e801d07b133f1b552ee77277b83c7238603bad65111a171e60e1ccd3aff1b1abb449cf2e9243484fcd1444aa76f4d96917dd233fb43990326adc45ea1c7d7165f44244706f4f2ddedb0bb519b4e979c1c2c4a5dd43af638d1774524", 0x284}, {&(0x7f00000000c0)="5be081cd2e5362e9f54ddc66aaa7016e83c893e2c864f68d85738305437c98b91b9455046f57b5fc090014b5", 0x2c}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 3m35.048980343s ago: executing program 0 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB], 0x9c}}, 0x0) 3m34.360064593s ago: executing program 0 (id=665): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) 3m33.189616555s ago: executing program 0 (id=672): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022dbd7000ffdbdf252100000009001f0070"], 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000540), &(0x7f0000000580)='%pB \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) 3m32.403761826s ago: executing program 0 (id=674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fc060025020000000800090002"], 0x1c}}, 0x40) 3m31.698989327s ago: executing program 0 (id=677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m16.15322299s ago: executing program 32 (id=677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m17.900529509s ago: executing program 2 (id=1294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) r2 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x4) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000f80)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004040) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000000)={0x3}) 1m17.459264431s ago: executing program 2 (id=1296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be14182bfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 1m16.485906737s ago: executing program 2 (id=1301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setresgid(0xee00, 0xee01, 0x0) 1m15.7745203s ago: executing program 2 (id=1306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) r2 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x4) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000f80)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004040) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000000)={0x3}) 1m15.183494701s ago: executing program 2 (id=1311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be14182bfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 1m14.278839489s ago: executing program 2 (id=1316): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0xe, &(0x7f00000004c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xc, 0x2, 0xa, 0xfffffffffffffffe, 0x10}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @alu={0x7, 0x0, 0x4, 0xb, 0x9, 0x30, 0xfffffffffffffff0}, @ldst={0x0, 0x2, 0x6, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x14, &(0x7f00000005c0)=""/20, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xe, 0x3, 0x3}, 0x10, 0x21c7c, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x5, 0x5, 0xd, 0x2}], 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002010101000000008008001a4000000100"/32], 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x44880) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x5734, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 59.082264867s ago: executing program 33 (id=1316): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0xe, &(0x7f00000004c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xc, 0x2, 0xa, 0xfffffffffffffffe, 0x10}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @alu={0x7, 0x0, 0x4, 0xb, 0x9, 0x30, 0xfffffffffffffff0}, @ldst={0x0, 0x2, 0x6, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x14, &(0x7f00000005c0)=""/20, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xe, 0x3, 0x3}, 0x10, 0x21c7c, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x5, 0x5, 0xd, 0x2}], 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002010101000000008008001a4000000100"/32], 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x44880) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x5734, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 12.218782622s ago: executing program 1 (id=1624): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x504, &(0x7f0000019940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000540)=ANY=[], 0x9a, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 10.449720894s ago: executing program 1 (id=1635): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfdff, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000540), &(0x7f0000000580)='%pB \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) 9.603867439s ago: executing program 1 (id=1639): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0xfffe, 0x3f3f, 0x0, 0x2, 0x0}) 8.988868767s ago: executing program 1 (id=1644): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000040), 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r2], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) 7.790543649s ago: executing program 1 (id=1650): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_cache\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0xc0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000007000000e27f000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7060000000000008500000003000000950000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 6.13099014s ago: executing program 1 (id=1654): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f00000004c0), 0xffff, r0, 0x0, 0x1ba8847c99}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) 6.032884246s ago: executing program 6 (id=1655): r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 5.626532512s ago: executing program 5 (id=1657): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004001}, 0x51) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000340)="120000001200e7ef0000a1001b0000000000", 0x12, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0xa6c3, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.246334892s ago: executing program 3 (id=1659): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xe0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) 4.806038912s ago: executing program 4 (id=1660): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r2], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) 4.734334979s ago: executing program 6 (id=1661): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130770000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000050000000200000029bd70000000000002000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000080"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x11}, {0x0, 0x2}], 0x2, 0x0, 0x0) listen(r5, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x1, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x18, 0x0, 0x0, 0x0, {[@generic={0xa, 0x3, '['}, @exp_fastopen={0xfe, 0x10, 0xf989, "87bf354737f3760df7bc55fc"}]}}}}}}}}, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x5, 0x8000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 4.734154243s ago: executing program 3 (id=1662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 4.459353508s ago: executing program 5 (id=1663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0xffffffffffffffff, r1) 4.134508149s ago: executing program 3 (id=1664): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_cache\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000007000000e27f000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7060000000000008500000003000000950000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.083253504s ago: executing program 4 (id=1665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x0) 3.945680001s ago: executing program 5 (id=1666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 3.762889297s ago: executing program 6 (id=1667): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r0 = syz_open_pts(0xffffffffffffffff, 0x80) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) 3.327056777s ago: executing program 5 (id=1668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.074613059s ago: executing program 4 (id=1669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 2.886768122s ago: executing program 6 (id=1670): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x30000011}) close_range(r2, 0xffffffffffffffff, 0x0) 2.683414278s ago: executing program 3 (id=1671): r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.566862937s ago: executing program 5 (id=1672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 2.43383031s ago: executing program 4 (id=1673): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$UHID_INPUT2(r0, &(0x7f0000003200)={0xc, {0x3a, "6c2450060f84cfce0059f92be3fbc44cce81cf6db39945ebd08f18764adae66029e17e29738c85b051ced2b488f35ca681091dd3c8976415c191"}}, 0x40) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4092, 0xffc}, {&(0x7f0000005280)=""/4111, 0x100f}], 0x2, 0x0, 0x0, 0x4) 1.963837931s ago: executing program 6 (id=1674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 1.229474897s ago: executing program 4 (id=1675): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r2], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) 1.229052812s ago: executing program 6 (id=1676): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000380)}], 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x31, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x6, 0x1e90000000000000}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f00000005c0)={r9, 0x7}, &(0x7f0000000600)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, 0x0, &(0x7f0000001c40)=r7}, 0x20) unshare(0x64000600) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r10, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r10, 0xf504, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1}, [@printk={@d, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2084}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) open(0x0, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737b7a32000000000800410073697700140033006c6f0000000000000000000000000000dbb422c6f070cc81453ba110e019957e3c941e62cc44e4154194e90eeb78e3085c83c053640e139557f77e76a6610ace1f5b4850039c107febf5d5d01c09cdd688e26e5d7927552c53846eed61"], 0x38}, 0x1, 0x0, 0x0, 0x404c090}, 0x810) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) 1.192518143s ago: executing program 3 (id=1677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x17) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 1.054005814s ago: executing program 5 (id=1678): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x303}, "3c62b8c283856312", "5ed8002558e2bb7174371336dad9ecbd", "868e5b1b", "4c5293d719408a98"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) writev(0xffffffffffffffff, 0x0, 0x0) 186.117622ms ago: executing program 4 (id=1679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}}, 0x0) 0s ago: executing program 3 (id=1680): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) kernel console output (not intermixed with test programs): (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.241715][ T7353] loop3: detected capacity change from 0 to 2048 [ 319.375239][ T5992] loop3: p1 < > p4 [ 319.414373][ T5992] loop3: p4 size 722688 extends beyond EOD, truncated [ 319.479629][ T7353] loop3: p1 < > p4 [ 319.489926][ T7353] loop3: p4 size 722688 extends beyond EOD, truncated [ 320.611618][ T6205] udevd[6205]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 320.615372][ T5992] udevd[5992]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 320.822547][ T7373] netlink: 'syz.2.546': attribute type 7 has an invalid length. [ 321.433920][ T30] audit: type=1326 audit(1762138211.203:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 321.459083][ T30] audit: type=1326 audit(1762138211.213:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 321.482281][ T30] audit: type=1326 audit(1762138211.213:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 321.504573][ T30] audit: type=1326 audit(1762138211.243:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7381 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 324.678585][ T7412] pimreg: entered allmulticast mode [ 324.701653][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 325.008360][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 325.265874][ T7412] pimreg: left allmulticast mode [ 325.364651][ T7422] rdma_rxe: rxe_newlink: failed to add bond0 [ 327.466803][ T30] audit: type=1326 audit(1762138217.233:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7445 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 327.651209][ T30] audit: type=1326 audit(1762138217.283:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7445 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 327.674132][ T30] audit: type=1326 audit(1762138217.423:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7445 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 327.698810][ T30] audit: type=1326 audit(1762138217.423:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7445 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 328.148279][ T7450] lo: entered allmulticast mode [ 328.253724][ T7454] loop3: detected capacity change from 0 to 512 [ 328.269372][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 328.335810][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 328.490408][ T7454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.506676][ T7454] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.888985][ T5814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.919740][ T7449] lo: left allmulticast mode [ 329.499881][ T30] audit: type=1326 audit(1762138219.193:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 329.522418][ T30] audit: type=1326 audit(1762138219.233:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 329.547122][ T30] audit: type=1326 audit(1762138219.233:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 329.838227][ T7474] loop3: detected capacity change from 0 to 512 [ 329.890832][ T7474] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.578: inode has both inline data and extents flags [ 329.971378][ T7474] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.578: couldn't read orphan inode 15 (err -117) [ 330.077149][ T7474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.478273][ T7484] loop2: detected capacity change from 0 to 512 [ 330.596325][ T5814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.704805][ T7484] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.585: bg 0: block 248: padding at end of block bitmap is not set [ 330.748558][ T7484] Quota error (device loop2): write_blk: dquota write failed [ 330.763276][ T7484] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 330.775528][ T7484] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.585: Failed to acquire dquot type 1 [ 330.809130][ T7484] EXT4-fs (loop2): 1 truncate cleaned up [ 330.817288][ T7484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.831115][ T7484] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.178472][ T7484] syz.2.585 (7484) used greatest stack depth: 3096 bytes left [ 331.207088][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.710111][ T7499] lo: entered allmulticast mode [ 331.814671][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 332.053819][ T7504] netlink: 'syz.2.591': attribute type 4 has an invalid length. [ 332.141392][ T7504] netlink: 'syz.2.591': attribute type 4 has an invalid length. [ 332.221684][ T30] audit: type=1326 audit(1762138221.993:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.3.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 332.350596][ T7497] lo: left allmulticast mode [ 332.882311][ T7515] loop3: detected capacity change from 0 to 512 [ 332.951640][ T7515] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.596: inode has both inline data and extents flags [ 332.982808][ T7515] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.596: couldn't read orphan inode 15 (err -117) [ 333.007243][ T7517] netlink: 256 bytes leftover after parsing attributes in process `syz.1.595'. [ 333.019675][ T7517] ksmbd: Unknown IPC event: 3, ignore. [ 333.049111][ T7515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.335108][ T7521] netlink: 'syz.2.598': attribute type 10 has an invalid length. [ 333.343521][ T7521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.598'. [ 333.354095][ T7521] batadv0: entered promiscuous mode [ 333.359477][ T7521] batadv0: entered allmulticast mode [ 333.366735][ T7521] bridge0: port 3(batadv0) entered blocking state [ 333.373962][ T7521] bridge0: port 3(batadv0) entered disabled state [ 333.541402][ T5814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.863524][ T4251] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 333.873412][ T4251] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 333.911509][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 333.911587][ T30] audit: type=1326 audit(1762138223.683:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 333.979614][ T30] audit: type=1326 audit(1762138223.723:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 334.001879][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.008655][ T30] audit: type=1326 audit(1762138223.743:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 334.150481][ T30] audit: type=1326 audit(1762138223.833:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 334.173845][ T30] audit: type=1326 audit(1762138223.833:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 334.196592][ T30] audit: type=1326 audit(1762138223.913:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.3.601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 334.196818][ T30] audit: type=1326 audit(1762138223.933:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.3.601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=299 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 334.218581][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.252333][ T30] audit: type=1326 audit(1762138223.933:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.3.601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 334.275327][ T30] audit: type=1326 audit(1762138224.003:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.3.601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 334.844003][ T7542] syz_tun: entered allmulticast mode [ 334.913113][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 334.987883][ T7542] syz_tun (unregistering): left allmulticast mode [ 335.794771][ T7553] loop0: detected capacity change from 0 to 512 [ 335.873000][ T7553] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.611: inode has both inline data and extents flags [ 335.912436][ T7553] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.611: couldn't read orphan inode 15 (err -117) [ 335.973662][ T7553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.128777][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.767315][ T30] audit: type=1326 audit(1762138226.533:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.0.616" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 337.757406][ T7588] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.793890][ T7586] loop0: detected capacity change from 0 to 1024 [ 337.853239][ T7588] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.875291][ T7586] EXT4-fs: Ignoring removed orlov option [ 337.989595][ T7588] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.088690][ T7586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.152928][ T7588] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.470613][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.531854][ T4039] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.632276][ T4039] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.769636][ T4039] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.817282][ T4039] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.923944][ T7599] loop0: detected capacity change from 0 to 128 [ 338.966275][ T7599] msdos: Unknown parameter '£Çÿÿÿÿÿÿ0000000200000' [ 339.549066][ T7607] loop3: detected capacity change from 0 to 256 [ 339.718572][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 339.718649][ T30] audit: type=1804 audit(1762138229.493:697): pid=7607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.630" name="/newroot/131/file0/bus" dev="loop3" ino=1048622 res=1 errno=0 [ 340.878667][ T7623] loop3: detected capacity change from 0 to 1024 [ 340.945441][ T7623] EXT4-fs: Ignoring removed orlov option [ 341.039966][ T7623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.487025][ T5814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.764804][ T7631] loop0: detected capacity change from 0 to 512 [ 341.902400][ T7631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.916316][ T7631] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.393115][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.067662][ T30] audit: type=1326 audit(1762138232.833:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 343.090476][ T30] audit: type=1326 audit(1762138232.843:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 343.112989][ T30] audit: type=1326 audit(1762138232.843:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 343.135449][ T30] audit: type=1326 audit(1762138232.843:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 343.160074][ T30] audit: type=1326 audit(1762138232.843:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 343.183207][ T30] audit: type=1326 audit(1762138232.843:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 343.253748][ T7652] rdma_rxe: rxe_newlink: failed to add bond0 [ 343.772180][ T7661] loop3: detected capacity change from 0 to 1024 [ 343.807343][ T7661] EXT4-fs: Ignoring removed orlov option [ 343.895791][ T7661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.461192][ T7675] loop2: detected capacity change from 0 to 512 [ 344.554250][ T5814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.674223][ T7675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.692161][ T7675] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.971017][ T30] audit: type=1326 audit(1762138234.693:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 344.996469][ T30] audit: type=1326 audit(1762138234.723:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 345.019736][ T30] audit: type=1326 audit(1762138234.793:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 345.041956][ T30] audit: type=1326 audit(1762138234.793:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 345.232690][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.838433][ T7686] loop2: detected capacity change from 0 to 1024 [ 345.994332][ T7686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.316516][ T7694] rdma_rxe: rxe_newlink: failed to add bond0 [ 346.452532][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.028225][ T7700] netlink: 'syz.0.665': attribute type 7 has an invalid length. [ 347.036295][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 347.424037][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.601459][ T7710] loop2: detected capacity change from 0 to 512 [ 347.763041][ T7710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.776159][ T7710] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.974296][ T30] audit: type=1800 audit(1762138237.753:708): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.669" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 348.084891][ T7718] loop1: detected capacity change from 0 to 1024 [ 348.186912][ T7718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.306251][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.643255][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.764031][ T7738] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.047504][ T7738] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.216669][ T7742] syz1: rxe_newlink: already configured on bond0 [ 351.328650][ T7738] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.558596][ T7738] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.169600][ T4251] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.221209][ T4251] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.229710][ T4251] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.285045][ T4251] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.387797][ T7756] loop4: detected capacity change from 0 to 164 [ 352.621478][ T7756] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 352.745378][ T7759] loop3: detected capacity change from 0 to 1024 [ 352.862216][ T7759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.879742][ T7759] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.092458][ T7759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.978934][ T7812] netlink: 40 bytes leftover after parsing attributes in process `syz.4.709'. [ 357.776558][ T7822] loop1: detected capacity change from 0 to 1024 [ 357.826003][ T7822] EXT4-fs: inline encryption not supported [ 357.953392][ T7822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.050517][ T7822] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.712: Allocating blocks 385-513 which overlap fs metadata [ 358.122210][ T7820] EXT4-fs (loop1): pa ffff888121355620: logic 16, phys. 129, len 24 [ 358.130586][ T7820] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 358.241873][ T7830] syz_tun: entered allmulticast mode [ 358.268532][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 358.282367][ T7828] syz_tun: left allmulticast mode [ 358.393969][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.822713][ T7849] netlink: 128 bytes leftover after parsing attributes in process `syz.2.724'. [ 360.575737][ T7857] loop2: detected capacity change from 0 to 1024 [ 360.604100][ T7859] lo: entered allmulticast mode [ 360.692073][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 360.743556][ T7857] EXT4-fs: inline encryption not supported [ 360.755121][ T7858] lo: left allmulticast mode [ 360.889345][ T7857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.045869][ T7857] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.728: Allocating blocks 385-513 which overlap fs metadata [ 361.092417][ T7856] EXT4-fs (loop2): pa ffff888122adf230: logic 16, phys. 129, len 24 [ 361.101050][ T7856] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 361.397876][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.871087][ T30] audit: type=1326 audit(1762138251.633:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 361.977508][ T30] audit: type=1326 audit(1762138251.673:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 362.003420][ T30] audit: type=1326 audit(1762138251.673:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 362.026054][ T30] audit: type=1326 audit(1762138251.673:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 362.048319][ T30] audit: type=1326 audit(1762138251.673:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 362.650098][ T7882] netlink: 128 bytes leftover after parsing attributes in process `syz.1.738'. [ 363.123646][ T7886] loop2: detected capacity change from 0 to 2048 [ 363.288518][ T7886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.301837][ T7886] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.363415][ T7892] syz_tun: entered allmulticast mode [ 363.392881][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.742'. [ 363.407362][ T7891] syz_tun: left allmulticast mode [ 364.011055][ T3674] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 345: padding at end of block bitmap is not set [ 364.051914][ T7898] loop4: detected capacity change from 0 to 1024 [ 364.075432][ T3674] EXT4-fs (loop2): Remounting filesystem read-only [ 364.078024][ T7898] EXT4-fs: inline encryption not supported [ 364.105940][ T4039] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 364.185343][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.226433][ T7898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.424297][ T7898] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.744: Allocating blocks 385-513 which overlap fs metadata [ 364.507997][ T7897] EXT4-fs (loop4): pa ffff888122adf2a0: logic 16, phys. 129, len 24 [ 364.517217][ T7897] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 364.899274][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.012309][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.022927][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.034506][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.052084][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.073844][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.335738][ T7927] lo: entered allmulticast mode [ 367.480881][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.754'. [ 367.604677][ T7928] rdma_rxe: rxe_newlink: failed to add bond0 [ 367.657922][ T7931] loop4: detected capacity change from 0 to 2048 [ 367.807767][ T7931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.821317][ T7931] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.079397][ T7926] lo: left allmulticast mode [ 368.184432][ T5805] Bluetooth: hci5: command tx timeout [ 368.433982][ T7914] chnl_net:caif_netlink_parms(): no params data found [ 368.872378][ T58] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 368.973764][ T7943] loop1: detected capacity change from 0 to 512 [ 368.991019][ T58] EXT4-fs (loop4): Remounting filesystem read-only [ 369.074921][ T7943] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 369.250226][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.271823][ T30] audit: type=1800 audit(1762138259.023:714): pid=7943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.758" name="file1" dev="loop1" ino=1048623 res=0 errno=0 [ 370.233547][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.242148][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.249929][ T7914] bridge_slave_0: entered allmulticast mode [ 370.260014][ T7914] bridge_slave_0: entered promiscuous mode [ 370.282056][ T5805] Bluetooth: hci5: command tx timeout [ 370.316364][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.324216][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.334561][ T7914] bridge_slave_1: entered allmulticast mode [ 370.344448][ T7914] bridge_slave_1: entered promiscuous mode [ 370.561911][ T7914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.683554][ T7914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.268224][ T7914] team0: Port device team_slave_0 added [ 371.322547][ T7914] team0: Port device team_slave_1 added [ 371.556169][ T7964] loop2: detected capacity change from 0 to 512 [ 371.598548][ T7963] rdma_rxe: rxe_newlink: failed to add bond0 [ 371.649614][ T7964] EXT4-fs (loop2): orphan cleanup on readonly fs [ 371.655891][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.663714][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.689974][ T7914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.743196][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.750439][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.777107][ T7914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.788761][ T7964] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.767: bad orphan inode 13 [ 371.841286][ T7964] ext4_test_bit(bit=12, block=18) = 1 [ 371.846877][ T7964] is_bad_inode(inode)=0 [ 371.851647][ T7964] NEXT_ORPHAN(inode)=2130706432 [ 371.856636][ T7964] max_ino=32 [ 371.859967][ T7964] i_nlink=1 [ 371.865872][ T7964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 371.890207][ T7964] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 372.011529][ T7964] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 372.063163][ T7969] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.767: bg 0: block 248: padding at end of block bitmap is not set [ 372.134641][ T7969] Quota error (device loop2): write_blk: dquota write failed [ 372.142722][ T7969] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 372.153426][ T7969] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.767: Failed to acquire dquot type 1 [ 372.347782][ T7914] hsr_slave_0: entered promiscuous mode [ 372.350959][ T5805] Bluetooth: hci5: command tx timeout [ 372.358165][ T7914] hsr_slave_1: entered promiscuous mode [ 372.367782][ T7914] debugfs: 'hsr0' already exists in 'hsr' [ 372.373766][ T7914] Cannot create hsr debugfs directory [ 372.570599][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.862462][ T3674] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.136399][ T3674] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.271054][ T3674] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.389862][ T7974] loop2: detected capacity change from 0 to 4096 [ 373.403059][ T3674] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.495101][ T7977] loop1: detected capacity change from 0 to 512 [ 373.537729][ T7974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.861591][ T3674] bridge_slave_1: left allmulticast mode [ 373.875559][ T3674] bridge_slave_1: left promiscuous mode [ 373.882601][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.911450][ T7977] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 374.163796][ T3674] bridge_slave_0: left allmulticast mode [ 374.169670][ T3674] bridge_slave_0: left promiscuous mode [ 374.183990][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.422376][ T5805] Bluetooth: hci5: command tx timeout [ 374.435577][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.663134][ T3674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.744712][ T3674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.781669][ T3674] bond0 (unregistering): Released all slaves [ 375.941813][ T7998] netlink: 128 bytes leftover after parsing attributes in process `syz.4.778'. [ 376.006346][ T7995] rdma_rxe: rxe_newlink: failed to add bond0 [ 376.496969][ T7914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 376.609658][ T8006] loop2: detected capacity change from 0 to 512 [ 376.615206][ T7914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 376.678331][ T8006] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 376.806493][ T7914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 376.871751][ T7914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 377.710220][ T3674] hsr_slave_0: left promiscuous mode [ 377.738237][ T3674] hsr_slave_1: left promiscuous mode [ 377.774324][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.785761][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.873576][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.881371][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.960460][ T3674] veth1_macvtap: left promiscuous mode [ 377.969734][ T3674] veth0_macvtap: left promiscuous mode [ 377.975884][ T3674] veth1_vlan: left promiscuous mode [ 377.981627][ T3674] veth0_vlan: left promiscuous mode [ 379.302979][ T3674] team0 (unregistering): Port device team_slave_1 removed [ 379.329033][ T8038] netlink: 128 bytes leftover after parsing attributes in process `syz.3.791'. [ 379.341785][ T3674] team0 (unregistering): Port device team_slave_0 removed [ 379.777569][ T8039] rdma_rxe: rxe_newlink: failed to add bond0 [ 380.476883][ T7914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.621889][ T7914] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.704104][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.711702][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.819519][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.827110][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.771759][ T8077] netlink: 'syz.4.802': attribute type 12 has an invalid length. [ 382.912937][ T8079] syz1: rxe_newlink: already configured on bond0 [ 382.968991][ T7914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.513626][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.805'. [ 383.524089][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 385.385626][ T7914] veth0_vlan: entered promiscuous mode [ 385.467868][ T7914] veth1_vlan: entered promiscuous mode [ 385.606099][ T30] audit: type=1326 audit(1762138275.383:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 385.628903][ T30] audit: type=1326 audit(1762138275.383:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 385.777309][ T7914] veth0_macvtap: entered promiscuous mode [ 385.788343][ T8126] syz1: rxe_newlink: already configured on bond0 [ 385.831220][ T7914] veth1_macvtap: entered promiscuous mode [ 385.873285][ T30] audit: type=1326 audit(1762138275.443:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 385.896072][ T30] audit: type=1326 audit(1762138275.443:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 385.918465][ T30] audit: type=1326 audit(1762138275.443:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 385.941330][ T30] audit: type=1326 audit(1762138275.453:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 385.963804][ T30] audit: type=1326 audit(1762138275.483:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 385.988613][ T30] audit: type=1326 audit(1762138275.483:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 385.999297][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.011923][ T30] audit: type=1326 audit(1762138275.493:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 386.040387][ T30] audit: type=1326 audit(1762138275.533:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=341 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 386.170320][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.278920][ T3816] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.316164][ T3816] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.366262][ T3816] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.447799][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.818'. [ 386.457957][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 386.478060][ T3816] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.126639][ T8141] loop4: detected capacity change from 0 to 512 [ 387.372222][ T8141] EXT4-fs (loop4): orphan cleanup on readonly fs [ 387.484909][ T8141] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.821: bad orphan inode 13 [ 387.559304][ T8141] ext4_test_bit(bit=12, block=18) = 1 [ 387.565534][ T8141] is_bad_inode(inode)=0 [ 387.569961][ T8141] NEXT_ORPHAN(inode)=2130706432 [ 387.575126][ T8141] max_ino=32 [ 387.578462][ T8141] i_nlink=1 [ 387.584094][ T8141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 387.715526][ T8141] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 387.798660][ T8141] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 388.074314][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.595813][ T8168] loop4: detected capacity change from 0 to 136 [ 389.021772][ T8175] rdma_rxe: rxe_newlink: failed to add bond0 [ 389.362648][ T8178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.831'. [ 389.373054][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 392.478074][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 392.478149][ T30] audit: type=1326 audit(1762138282.253:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.1.839" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d539 code=0x0 [ 392.603402][ T30] audit: type=1326 audit(1762138282.383:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 392.625648][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.636842][ T30] audit: type=1326 audit(1762138282.383:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 392.659077][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.665953][ T30] audit: type=1326 audit(1762138282.383:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 392.743507][ T30] audit: type=1326 audit(1762138282.503:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 392.766121][ T30] audit: type=1326 audit(1762138282.503:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 392.788988][ T30] audit: type=1326 audit(1762138282.503:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 392.811127][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.822259][ T30] audit: type=1326 audit(1762138282.503:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 392.844285][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.852011][ T30] audit: type=1326 audit(1762138282.503:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 392.874506][ T30] audit: type=1326 audit(1762138282.503:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 392.896511][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.469320][ T8229] netlink: 'syz.2.841': attribute type 4 has an invalid length. [ 393.477294][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 393.677498][ T8231] rdma_rxe: rxe_newlink: failed to add bond0 [ 393.892815][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.844'. [ 393.902528][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 394.892588][ T3674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.900620][ T3674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.102725][ T8258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.848'. [ 395.290961][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.299250][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.413667][ T8253] lo speed is unknown, defaulting to 1000 [ 395.419888][ T8253] lo speed is unknown, defaulting to 1000 [ 395.427659][ T8253] lo speed is unknown, defaulting to 1000 [ 395.446538][ T8253] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 395.497216][ T8253] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98 [ 395.676055][ T8253] lo speed is unknown, defaulting to 1000 [ 395.689022][ T8253] lo speed is unknown, defaulting to 1000 [ 395.699297][ T8253] lo speed is unknown, defaulting to 1000 [ 395.708255][ T8253] lo speed is unknown, defaulting to 1000 [ 395.758726][ T8253] lo speed is unknown, defaulting to 1000 [ 395.773561][ T8253] lo speed is unknown, defaulting to 1000 [ 396.451793][ T8268] pimreg: entered allmulticast mode [ 396.694360][ T8268] pimreg: left allmulticast mode [ 397.980029][ T8283] syz1: rxe_newlink: already configured on bond0 [ 398.056943][ T8290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.856'. [ 398.233515][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 398.252379][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 398.252458][ T30] audit: type=1326 audit(1762138288.033:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.5.859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 398.281195][ T30] audit: type=1326 audit(1762138288.033:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.5.859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 398.303733][ T30] audit: type=1326 audit(1762138288.063:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.5.859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 398.540964][ T30] audit: type=1326 audit(1762138288.163:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.5.859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 398.567336][ T30] audit: type=1326 audit(1762138288.163:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.5.859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 398.594290][ T30] audit: type=1326 audit(1762138288.163:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.5.859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 398.617980][ T30] audit: type=1326 audit(1762138288.163:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.5.859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 398.640529][ T30] audit: type=1326 audit(1762138288.173:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.5.859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 398.666704][ T30] audit: type=1326 audit(1762138288.173:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.5.859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 398.690088][ T30] audit: type=1326 audit(1762138288.173:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.5.859" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 399.322279][ T8308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.862'. [ 399.843787][ T8305] lo speed is unknown, defaulting to 1000 [ 399.952768][ T8310] siw: device registration error -23 [ 400.738757][ T8326] netlink: 128 bytes leftover after parsing attributes in process `syz.5.869'. [ 401.475648][ T8329] rdma_rxe: rxe_newlink: failed to add bond0 [ 401.809075][ T8337] loop1: detected capacity change from 0 to 512 [ 401.950116][ T8337] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.874: ea_inode file size=0 entry size=6 [ 401.964132][ T8337] ------------[ cut here ]------------ [ 401.969754][ T8337] EA inode 11 i_nlink=2 [ 401.973200][ T8337] WARNING: CPU: 1 PID: 8337 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x711/0x900 [ 401.988186][ T8337] Modules linked in: [ 401.992558][ T8337] CPU: 1 UID: 0 PID: 8337 Comm: syz.1.874 Not tainted syzkaller #0 PREEMPT(none) [ 402.002190][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 402.012594][ T8337] RIP: 0010:ext4_xattr_inode_update_ref+0x711/0x900 [ 402.019493][ T8337] Code: 00 00 00 00 4d 85 ed 0f 85 e6 01 00 00 45 85 ff 0f 85 ee 01 00 00 48 c7 c7 f0 72 ba 91 48 8b 75 d0 8b 55 c0 e8 b0 17 dd fd 90 <0f> 0b 90 90 4c 8b 6d a8 4c 8b 75 c8 4c 8b 7d b0 e9 6c fe ff ff e8 [ 402.045389][ T8337] RSP: 0018:ffff888124c87140 EFLAGS: 00010283 [ 402.053320][ T8337] RAX: ffffffff8120833e RBX: ffff88804f128ba0 RCX: 0000000000080000 [ 402.061726][ T8337] RDX: ffffc90008c03000 RSI: 0000000000006201 RDI: 0000000000006202 [ 402.069904][ T8337] RBP: ffff888124c871c8 R08: ffffea000000000f R09: 0000000000000000 [ 402.078210][ T8337] R10: ffff888237aba028 R11: ffff88823f273d40 R12: 0000000000000000 [ 402.086548][ T8337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.094826][ T8337] FS: 0000000000000000(0000) GS:ffff8881aae51000(0063) knlGS:00000000f540db40 [ 402.104174][ T8337] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 402.111142][ T8337] CR2: 0000000000000000 CR3: 000000012ea32000 CR4: 00000000003526f0 [ 402.119327][ T8337] Call Trace: [ 402.123481][ T8337] [ 402.126598][ T8337] ext4_xattr_inode_dec_ref_all+0xf57/0x1670 [ 402.137741][ T8337] ? __ext4_journal_get_write_access+0x46b/0x900 [ 402.146202][ T8337] ext4_xattr_delete_inode+0xd0d/0x14b0 [ 402.152361][ T8337] ext4_evict_inode+0x1dc9/0x2480 [ 402.157694][ T8337] ? __pfx_ext4_evict_inode+0x10/0x10 [ 402.163529][ T8337] evict+0x700/0xd00 [ 402.167686][ T8337] ? kmsan_get_metadata+0xfb/0x160 [ 402.173223][ T8337] iput+0xba3/0xfa0 [ 402.177275][ T8337] ext4_process_orphan+0x49a/0x520 [ 402.182787][ T8337] ext4_orphan_cleanup+0x10a6/0x1e30 [ 402.188363][ T8337] ext4_fill_super+0xa788/0xb010 [ 402.193833][ T8337] get_tree_bdev_flags+0x6e6/0x920 [ 402.199262][ T8337] ? __pfx_ext4_fill_super+0x10/0x10 [ 402.204941][ T8337] ? __pfx_ext4_fill_super+0x10/0x10 [ 402.210522][ T8337] ? __pfx_ext4_get_tree+0x10/0x10 [ 402.216317][ T8337] get_tree_bdev+0x38/0x50 [ 402.221106][ T8337] ext4_get_tree+0x35/0x40 [ 402.225801][ T8337] vfs_get_tree+0xb3/0x5c0 [ 402.230452][ T8337] do_new_mount+0x839/0x15f0 [ 402.240125][ T8337] ? kmsan_get_metadata+0xfb/0x160 [ 402.247275][ T8337] path_mount+0x747/0x1fb0 [ 402.253830][ T8337] __se_sys_mount+0x6f7/0x7e0 [ 402.258773][ T8337] __ia32_sys_mount+0xe2/0x150 [ 402.264001][ T8337] ia32_sys_call+0x2c16/0x4310 [ 402.269066][ T8337] __do_fast_syscall_32+0xb0/0x150 [ 402.278115][ T8337] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 402.286962][ T8337] do_fast_syscall_32+0x38/0x80 [ 402.292248][ T8337] do_SYSENTER_32+0x1f/0x30 [ 402.297030][ T8337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.303844][ T8337] RIP: 0023:0xf701d539 [ 402.308216][ T8337] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 402.328334][ T8337] RSP: 002b:00000000f540d3b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 402.341901][ T8337] RAX: ffffffffffffffda RBX: 00000000f540d410 RCX: 00000000800001c0 [ 402.350098][ T8337] RDX: 0000000080000180 RSI: 0000000000800700 RDI: 00000000f540d450 [ 402.360067][ T8337] RBP: 00000000f540d410 R08: 0000000000000000 R09: 0000000000000000 [ 402.368493][ T8337] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 402.376783][ T8337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.385095][ T8337] [ 402.388259][ T8337] ---[ end trace 0000000000000000 ]--- [ 402.394717][ T8337] EXT4-fs (loop1): 1 orphan inode deleted [ 402.403076][ T8337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.032836][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.296855][ T8358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.878'. [ 404.812368][ T8381] rdma_rxe: rxe_newlink: failed to add bond0 [ 405.811235][ T8394] loop5: detected capacity change from 0 to 512 [ 406.078419][ T8394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.094795][ T8394] ext4 filesystem being mounted at /10/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.220382][ T8401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.894'. [ 406.233983][ T8401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.894'. [ 406.510929][ T7914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.164310][ T8413] loop5: detected capacity change from 0 to 512 [ 407.179152][ T8414] rdma_rxe: rxe_newlink: failed to add bond0 [ 407.321632][ T8413] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.897: inode has both inline data and extents flags [ 407.402430][ T8419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.903'. [ 407.421558][ T8413] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.897: couldn't read orphan inode 15 (err -117) [ 407.518928][ T8413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.938011][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 407.938091][ T30] audit: type=1326 audit(1762138297.713:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 408.056410][ T7914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.090002][ T30] audit: type=1326 audit(1762138297.753:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 408.113351][ T30] audit: type=1326 audit(1762138297.753:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 408.136974][ T30] audit: type=1326 audit(1762138297.753:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 408.414481][ T30] audit: type=1326 audit(1762138298.103:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 408.864876][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 409.822630][ T8446] rdma_rxe: rxe_newlink: failed to add bond0 [ 410.207287][ T8451] netlink: 172 bytes leftover after parsing attributes in process `syz.3.917'. [ 411.843677][ T8474] loop4: detected capacity change from 0 to 512 [ 411.916823][ T8474] EXT4-fs (loop4): orphan cleanup on readonly fs [ 411.950123][ T8474] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.926: bad orphan inode 13 [ 411.972708][ T8474] ext4_test_bit(bit=12, block=18) = 1 [ 411.978405][ T8474] is_bad_inode(inode)=0 [ 411.982800][ T8474] NEXT_ORPHAN(inode)=2130706432 [ 411.987842][ T8474] max_ino=32 [ 411.991318][ T8474] i_nlink=1 [ 411.996855][ T8474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 412.329966][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.612230][ T8481] rdma_rxe: rxe_newlink: failed to add bond0 [ 413.859482][ T8496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.935'. [ 414.512838][ T8506] syz.1.941: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 414.532211][ T8506] CPU: 1 UID: 0 PID: 8506 Comm: syz.1.941 Tainted: G W syzkaller #0 PREEMPT(none) [ 414.532392][ T8506] Tainted: [W]=WARN [ 414.532442][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 414.532526][ T8506] Call Trace: [ 414.532575][ T8506] [ 414.532624][ T8506] __dump_stack+0x26/0x30 [ 414.532795][ T8506] dump_stack_lvl+0x1df/0x270 [ 414.532973][ T8506] dump_stack+0x1e/0x25 [ 414.533122][ T8506] warn_alloc+0x470/0x690 [ 414.533336][ T8506] ? kmsan_get_metadata+0xfb/0x160 [ 414.533488][ T8506] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 414.533655][ T8506] __vmalloc_node_range_noprof+0x133/0x2330 [ 414.533847][ T8506] ? kmsan_get_metadata+0xfb/0x160 [ 414.534002][ T8506] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 414.534172][ T8506] ? should_fail_ex+0x45/0x8a0 [ 414.534334][ T8506] ? kmsan_get_metadata+0xfb/0x160 [ 414.534479][ T8506] ? kmsan_get_metadata+0xfb/0x160 [ 414.534629][ T8506] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 414.534791][ T8506] ? kmsan_get_metadata+0xfb/0x160 [ 414.534964][ T8506] vmalloc_user_noprof+0xce/0x140 [ 414.535136][ T8506] ? xskq_create+0x11d/0x290 [ 414.535325][ T8506] xskq_create+0x11d/0x290 [ 414.535515][ T8506] xsk_init_queue+0xfd/0x1d0 [ 414.535698][ T8506] xsk_setsockopt+0x968/0xfe0 [ 414.535888][ T8506] ? __pfx_xsk_setsockopt+0x10/0x10 [ 414.536067][ T8506] __sys_setsockopt+0x43e/0x580 [ 414.536270][ T8506] __ia32_sys_setsockopt+0xf3/0x1a0 [ 414.536473][ T8506] ia32_sys_call+0x24c2/0x4310 [ 414.536666][ T8506] __do_fast_syscall_32+0xb0/0x150 [ 414.536856][ T8506] do_fast_syscall_32+0x38/0x80 [ 414.537042][ T8506] do_SYSENTER_32+0x1f/0x30 [ 414.537216][ T8506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.537391][ T8506] RIP: 0023:0xf701d539 [ 414.537489][ T8506] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 414.537613][ T8506] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 414.537749][ T8506] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 414.537842][ T8506] RDX: 0000000000000002 RSI: 0000000080000900 RDI: 0000000000000004 [ 414.537934][ T8506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 414.538019][ T8506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 414.538103][ T8506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.538223][ T8506] [ 414.539976][ T8506] Mem-Info: [ 414.757148][ T8509] siw: device registration error -23 [ 414.763213][ T8506] active_anon:7658 inactive_anon:0 isolated_anon:0 [ 414.763213][ T8506] active_file:3369 inactive_file:40357 isolated_file:0 [ 414.763213][ T8506] unevictable:768 dirty:105 writeback:0 [ 414.763213][ T8506] slab_reclaimable:5134 slab_unreclaimable:37744 [ 414.763213][ T8506] mapped:29574 shmem:3587 pagetables:1669 [ 414.763213][ T8506] sec_pagetables:0 bounce:0 [ 414.763213][ T8506] kernel_misc_reclaimable:0 [ 414.763213][ T8506] free:354883 free_pcp:13222 free_cma:0 [ 414.857129][ T8506] Node 0 active_anon:30564kB inactive_anon:0kB active_file:13476kB inactive_file:161224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118296kB dirty:420kB writeback:0kB shmem:12812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5024kB pagetables:6312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 414.890900][ T8506] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 414.925613][ T8506] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.959889][ T8506] lowmem_reserve[]: 0 929 1242 1242 1242 [ 414.967432][ T8506] Node 0 DMA32 free:486724kB boost:0kB min:36800kB low:46000kB high:55200kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13208kB inactive_anon:0kB active_file:10680kB inactive_file:70908kB unevictable:0kB writepending:404kB zspages:0kB present:3129332kB managed:952048kB mlocked:0kB bounce:0kB free_pcp:38104kB local_pcp:21944kB free_cma:0kB [ 415.001011][ T8506] lowmem_reserve[]: 0 0 312 312 312 [ 415.006690][ T8506] Node 0 Normal free:20840kB boost:0kB min:12980kB low:16224kB high:19468kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17332kB inactive_anon:0kB active_file:2796kB inactive_file:90316kB unevictable:1536kB writepending:16kB zspages:0kB present:1048580kB managed:320476kB mlocked:0kB bounce:0kB free_pcp:14952kB local_pcp:7280kB free_cma:0kB [ 415.044041][ T8506] lowmem_reserve[]: 0 0 0 0 0 [ 415.049368][ T8506] Node 1 Normal free:907872kB boost:0kB min:40156kB low:50192kB high:60228kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:991252kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.082585][ T8506] lowmem_reserve[]: 0 0 0 0 0 [ 415.087827][ T8506] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 415.103767][ T8506] Node 0 DMA32: 429*4kB (UM) 478*8kB (UME) 256*16kB (UME) 177*32kB (UME) 86*64kB (UME) 142*128kB (UME) 105*256kB (UME) 64*512kB (UME) 35*1024kB (U) 34*2048kB (UME) 69*4096kB (UM) = 486724kB [ 415.126953][ T8506] Node 0 Normal: 608*4kB (UM) 231*8kB (UME) 94*16kB (UME) 59*32kB (UME) 16*64kB (UME) 11*128kB (UME) 2*256kB (U) 4*512kB (UE) 2*1024kB (UM) 1*2048kB (M) 1*4096kB (U) = 20856kB [ 415.150077][ T8506] Node 1 Normal: 6*4kB (UME) 11*8kB (UE) 21*16kB (UME) 31*32kB (UME) 19*64kB (UME) 12*128kB (UME) 8*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 4*2048kB (UE) 217*4096kB (M) = 907872kB [ 415.171310][ T8506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.171430][ T8506] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 415.171529][ T8506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.171640][ T8506] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 415.171745][ T8506] 47308 total pagecache pages [ 415.171813][ T8506] 0 pages in swap cache [ 415.171869][ T8506] Free swap = 124996kB [ 415.171923][ T8506] Total swap = 124996kB [ 415.171989][ T8506] 2097051 pages RAM [ 415.234270][ T8506] 0 pages HighMem/MovableOnly [ 415.242704][ T8506] 1530083 pages reserved [ 415.247089][ T8506] 0 pages cma reserved [ 415.624241][ T8515] syz1: rxe_newlink: already configured on bond0 [ 415.951013][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.5.947'. [ 417.150047][ T5857] hid_parser_main: 24 callbacks suppressed [ 417.150144][ T5857] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 417.267078][ T5857] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 417.738308][ T8537] lo speed is unknown, defaulting to 1000 [ 417.746241][ T8540] siw: device registration error -23 [ 418.843084][ T8552] rdma_rxe: rxe_newlink: failed to add bond0 [ 419.564618][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 420.966876][ T8583] syz1: rxe_newlink: already configured on bond0 [ 421.868411][ T8585] lo speed is unknown, defaulting to 1000 [ 421.879472][ T8593] siw: device registration error -23 [ 422.231054][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.979'. [ 424.211021][ T8617] rdma_rxe: rxe_newlink: failed to add bond0 [ 424.245038][ T8619] program syz.2.988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.932720][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.993'. [ 425.518595][ T30] audit: type=1107 audit(1762138315.263:779): pid=8636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 425.744078][ T8629] lo speed is unknown, defaulting to 1000 [ 425.803989][ T8633] siw: device registration error -23 [ 426.947415][ T8650] rdma_rxe: rxe_newlink: failed to add bond0 [ 427.616026][ T8661] loop1: detected capacity change from 0 to 512 [ 427.723620][ T8661] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1005: inode has both inline data and extents flags [ 427.791514][ T8661] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1005: couldn't read orphan inode 15 (err -117) [ 427.866682][ T8661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.941879][ T30] audit: type=1326 audit(1762138317.713:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 427.964923][ T30] audit: type=1326 audit(1762138317.713:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 427.987373][ T30] audit: type=1326 audit(1762138317.723:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 428.133876][ T30] audit: type=1326 audit(1762138317.793:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 428.159671][ T30] audit: type=1326 audit(1762138317.793:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 428.183331][ T30] audit: type=1326 audit(1762138317.793:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 428.206048][ T30] audit: type=1326 audit(1762138317.793:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 428.228676][ T30] audit: type=1326 audit(1762138317.793:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 428.254085][ T30] audit: type=1326 audit(1762138317.793:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 428.614789][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.533317][ T8685] rdma_rxe: rxe_newlink: failed to add bond0 [ 430.331708][ T8699] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1019'. [ 431.137233][ T8692] lo speed is unknown, defaulting to 1000 [ 431.170574][ T8700] siw: device registration error -23 [ 431.243986][ T8706] loop5: detected capacity change from 0 to 512 [ 431.285986][ T8706] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1023: inode has both inline data and extents flags [ 431.392000][ T8706] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1023: couldn't read orphan inode 15 (err -117) [ 431.645214][ T8706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.450120][ T7914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.862486][ T8713] lo speed is unknown, defaulting to 1000 [ 433.755869][ T8728] rdma_rxe: rxe_newlink: failed to add bond0 [ 435.234824][ T8742] tipc: Failed to obtain node identity [ 435.240965][ T8742] tipc: Enabling of bearer rejected, failed to enable media [ 435.698636][ T8746] loop1: detected capacity change from 0 to 512 [ 436.219985][ T8747] lo speed is unknown, defaulting to 1000 [ 436.373102][ T8746] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1038: inode has both inline data and extents flags [ 436.421725][ T8746] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1038: couldn't read orphan inode 15 (err -117) [ 436.501046][ T8746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.659856][ T8747] siw: device registration error -23 [ 437.116395][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.402821][ T8765] rdma_rxe: rxe_newlink: failed to add bond0 [ 438.654202][ T8778] loop1: detected capacity change from 0 to 1024 [ 438.823045][ T8778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.976438][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 438.976517][ T30] audit: type=1800 audit(1762138328.753:927): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1050" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 439.047988][ T30] audit: type=1804 audit(1762138328.813:928): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1050" name="/newroot/223/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 439.070307][ T30] audit: type=1800 audit(1762138328.813:929): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1050" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 439.197311][ T30] audit: type=1800 audit(1762138328.883:930): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1050" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 439.323765][ T8790] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1053'. [ 439.413176][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.553336][ T8795] lo speed is unknown, defaulting to 1000 [ 440.561564][ T8800] rdma_rxe: rxe_newlink: failed to add bond0 [ 443.069570][ T8828] mmap: syz.1.1070 (8828) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 443.437939][ T8830] rdma_rxe: rxe_newlink: failed to add bond0 [ 444.460496][ T8834] lo speed is unknown, defaulting to 1000 [ 444.521500][ T8836] siw: device registration error -23 [ 446.421526][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 446.643095][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 447.195136][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1091'. [ 448.574097][ T8890] lo speed is unknown, defaulting to 1000 [ 448.599155][ T8895] siw: device registration error -23 [ 449.112434][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1103'. [ 451.099499][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 452.503188][ T8938] 9pnet_fd: Insufficient options for proto=fd [ 455.221533][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 455.781562][ T8970] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.954182][ T8970] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.142709][ T8970] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.422223][ T8970] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.948050][ T3674] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.962667][ T3674] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.007903][ T3674] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.066146][ T3674] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.292186][ T30] audit: type=1326 audit(1762138347.073:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8987 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 457.315051][ T30] audit: type=1326 audit(1762138347.073:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8987 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 457.378578][ T30] audit: type=1326 audit(1762138347.153:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8987 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 457.401411][ T30] audit: type=1326 audit(1762138347.153:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8987 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 457.563619][ T30] audit: type=1326 audit(1762138347.213:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8987 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 457.586145][ T30] audit: type=1326 audit(1762138347.233:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8987 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 457.608939][ T30] audit: type=1326 audit(1762138347.233:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8987 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 457.633977][ T30] audit: type=1326 audit(1762138347.233:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8987 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 457.656975][ T30] audit: type=1326 audit(1762138347.233:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8987 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 457.678795][ T30] audit: type=1326 audit(1762138347.233:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8987 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 457.750249][ T8996] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1138'. [ 457.782305][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 459.215641][ T9015] tc_dump_action: action bad kind [ 459.963841][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 462.391895][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1169'. [ 464.372846][ T9084] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 464.427075][ T9084] netlink: 72 bytes leftover after parsing attributes in process `gtp'. [ 464.649172][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 466.756628][ T9114] loop2: detected capacity change from 0 to 512 [ 467.103294][ T9114] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1195: error while reading EA inode 32 err=-116 [ 467.171907][ T9114] EXT4-fs (loop2): Remounting filesystem read-only [ 467.178997][ T9114] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 467.189698][ T9114] EXT4-fs (loop2): 1 orphan inode deleted [ 467.197792][ T9114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.492574][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 467.628152][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.692630][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'. [ 470.159741][ T9155] loop2: detected capacity change from 0 to 512 [ 470.295507][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.341972][ T9155] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.1211: iget: bad extra_isize 90 (inode size 256) [ 470.378749][ T9155] EXT4-fs (loop2): Remounting filesystem read-only [ 470.386120][ T9155] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 470.395530][ T9155] EXT4-fs (loop2): 1 orphan inode deleted [ 470.403942][ T9155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.849507][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.875533][ T9165] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1212'. [ 472.590006][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 473.444824][ T9201] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1230'. [ 474.507184][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 474.507262][ T30] audit: type=1326 audit(1762138364.283:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 474.539233][ T30] audit: type=1326 audit(1762138364.283:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 474.563335][ T30] audit: type=1326 audit(1762138364.323:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 474.585802][ T30] audit: type=1326 audit(1762138364.323:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 474.608823][ T30] audit: type=1326 audit(1762138364.323:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 474.634033][ T30] audit: type=1326 audit(1762138364.333:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 474.657430][ T30] audit: type=1326 audit(1762138364.333:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 474.680369][ T30] audit: type=1326 audit(1762138364.343:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 474.702787][ T30] audit: type=1326 audit(1762138364.343:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 474.725138][ T30] audit: type=1326 audit(1762138364.343:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 475.081723][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'. [ 475.702562][ T9230] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1243'. [ 475.931803][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'. [ 477.150385][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'. [ 479.256343][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 483.002381][ T9333] loop5: detected capacity change from 0 to 1024 [ 483.041251][ T9333] EXT4-fs: Ignoring removed mblk_io_submit option [ 483.069494][ T9333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 483.108235][ T9333] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 483.202584][ T9333] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.1290: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 483.301138][ T9333] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1290: couldn't read orphan inode 11 (err -117) [ 483.401021][ T9333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.521956][ T9333] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1290: Invalid block bitmap block 0 in block_group 0 [ 483.638191][ T9333] __quota_error: 25 callbacks suppressed [ 483.638275][ T9333] Quota error (device loop5): write_blk: dquota write failed [ 483.657318][ T9333] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 483.668325][ T9333] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1290: Failed to acquire dquot type 0 [ 483.721689][ T9345] netlink: 'syz.3.1295': attribute type 21 has an invalid length. [ 483.729819][ T9345] netlink: 'syz.3.1295': attribute type 1 has an invalid length. [ 483.737987][ T9345] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1295'. [ 483.857039][ T7914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.038142][ T9360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1302'. [ 485.818451][ T9376] loop5: detected capacity change from 0 to 512 [ 485.904265][ T9376] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 486.048396][ T9376] EXT4-fs (loop5): 1 truncate cleaned up [ 486.056548][ T9376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.527301][ T7914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.216972][ T9394] loop1: detected capacity change from 0 to 1024 [ 487.391357][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1318'. [ 487.407364][ T9394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.939235][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.074375][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1321'. [ 489.929376][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1332'. [ 491.243949][ T9449] loop4: detected capacity change from 0 to 512 [ 491.314087][ T9449] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 491.366079][ T9449] EXT4-fs (loop4): 1 truncate cleaned up [ 491.383425][ T9449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.765405][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.175024][ T30] audit: type=1326 audit(1762138381.953:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 492.240383][ T30] audit: type=1326 audit(1762138382.003:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 492.268189][ T30] audit: type=1326 audit(1762138382.003:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 492.290821][ T30] audit: type=1326 audit(1762138382.013:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 492.313261][ T30] audit: type=1326 audit(1762138382.013:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 492.336887][ T30] audit: type=1326 audit(1762138382.013:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 492.363723][ T30] audit: type=1326 audit(1762138382.053:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 492.423939][ T30] audit: type=1326 audit(1762138382.183:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=118 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 492.450272][ T30] audit: type=1326 audit(1762138382.183:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 492.475461][ T30] audit: type=1326 audit(1762138382.253:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 492.821944][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 494.652444][ T9490] veth0_to_team: entered promiscuous mode [ 495.414172][ T9500] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1364'. [ 496.499966][ T9516] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.779735][ T9516] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.827677][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'. [ 496.944686][ T9516] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.032502][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1373'. [ 497.032631][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1373'. [ 497.100879][ C1] hrtimer: interrupt took 292884 ns [ 497.101515][ T9516] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.195825][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'. [ 497.417715][ T4039] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.441209][ T4039] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.470827][ T4039] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.495359][ T3816] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.580500][ T9538] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1378'. [ 499.482777][ T9552] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.609996][ T9552] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.802647][ T9552] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.939405][ T9552] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.367226][ T4251] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.417678][ T3816] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.470393][ T3816] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.502203][ T3816] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.974783][ T9578] tipc: Started in network mode [ 501.979963][ T9578] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 501.989896][ T9578] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 502.001153][ T9578] tipc: Enabled bearer , priority 10 [ 502.705323][ T9585] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.882590][ T9585] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.039079][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 503.054143][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 503.068355][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 503.106432][ T9585] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.112107][ T9595] 9pnet_fd: Insufficient options for proto=fd [ 503.125759][ T5857] tipc: Node number set to 1 [ 503.139076][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 503.155358][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 503.619964][ T9585] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.229856][ T9592] lo speed is unknown, defaulting to 1000 [ 504.562811][ T3816] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.641711][ T4039] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.817900][ T4251] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.849087][ T4251] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.260957][ T5805] Bluetooth: hci0: command tx timeout [ 505.404934][ T9592] chnl_net:caif_netlink_parms(): no params data found [ 506.514741][ T9622] netlink: 'syz.1.1412': attribute type 10 has an invalid length. [ 506.523153][ T9622] veth1_macvtap: entered allmulticast mode [ 506.530151][ T9622] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 506.712531][ T9623] syz.4.1411 uses obsolete (PF_INET,SOCK_PACKET) [ 507.076081][ T9592] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.083843][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.096874][ T9592] bridge_slave_0: entered allmulticast mode [ 507.106712][ T9592] bridge_slave_0: entered promiscuous mode [ 507.302916][ T5805] Bluetooth: hci0: command tx timeout [ 507.520346][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.532043][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.539754][ T9592] bridge_slave_1: entered allmulticast mode [ 507.551095][ T9592] bridge_slave_1: entered promiscuous mode [ 508.135759][ T9592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.236841][ T9592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.282798][ T9638] 9pnet_fd: Insufficient options for proto=fd [ 508.514558][ T9592] team0: Port device team_slave_0 added [ 508.612853][ T9592] team0: Port device team_slave_1 added [ 509.089369][ T4251] bridge0: port 3(batadv0) entered disabled state [ 509.165755][ T4251] bridge_slave_1: left allmulticast mode [ 509.171734][ T4251] bridge_slave_1: left promiscuous mode [ 509.178544][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.263492][ T4251] bridge_slave_0: left allmulticast mode [ 509.269363][ T4251] bridge_slave_0: left promiscuous mode [ 509.275968][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.384055][ T5805] Bluetooth: hci0: command tx timeout [ 509.873162][ T4251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.926796][ T4251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.966872][ T4251] bond0 (unregistering): Released all slaves [ 510.044605][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.051921][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.082235][ T9592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.255286][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.264121][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.296314][ T9592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.373025][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 510.827382][ T9655] loop5: detected capacity change from 0 to 512 [ 510.905577][ T9592] hsr_slave_0: entered promiscuous mode [ 510.916086][ T9592] hsr_slave_1: entered promiscuous mode [ 510.928782][ T9592] debugfs: 'hsr0' already exists in 'hsr' [ 510.934857][ T9592] Cannot create hsr debugfs directory [ 510.953214][ T9655] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 511.135342][ T9655] EXT4-fs (loop5): 1 truncate cleaned up [ 511.144042][ T9655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.408139][ T4251] hsr_slave_0: left promiscuous mode [ 511.470318][ T4251] hsr_slave_1: left promiscuous mode [ 511.478599][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.486638][ T5805] Bluetooth: hci0: command tx timeout [ 511.543658][ T30] audit: type=1800 audit(1762138401.303:987): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1424" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 511.583356][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.804690][ T7914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.881262][ T5857] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 512.154589][ T5857] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 512.164566][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.173160][ T5857] usb 5-1: Product: syz [ 512.177496][ T5857] usb 5-1: Manufacturer: syz [ 512.182413][ T5857] usb 5-1: SerialNumber: syz [ 512.196622][ T4251] team0 (unregistering): Port device team_slave_1 removed [ 512.294106][ T5857] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 512.318087][ T4251] team0 (unregistering): Port device team_slave_0 removed [ 512.568450][ T9643] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 512.993737][ T5928] usb 5-1: USB disconnect, device number 2 [ 513.052787][ T9673] tipc: Started in network mode [ 513.057999][ T9673] tipc: Node identity 46fffffb3049, cluster identity 4711 [ 513.066080][ T9673] tipc: Enabled bearer , priority 0 [ 513.102085][ T9667] tipc: Resetting bearer [ 513.284328][ T9665] tipc: Disabling bearer [ 513.558524][ T9682] 9pnet_fd: Insufficient options for proto=fd [ 513.622875][ T9643] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 513.631059][ T9643] ath9k_htc: Failed to initialize the device [ 513.697990][ T5928] usb 5-1: ath9k_htc: USB layer deinitialized [ 514.327242][ T9592] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 514.455411][ T9592] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 514.505643][ T9592] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 514.540245][ T9592] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 514.662340][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'. [ 515.033228][ T9696] netlink: 'syz.1.1437': attribute type 6 has an invalid length. [ 515.638410][ T9592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.745780][ T9700] loop4: detected capacity change from 0 to 512 [ 515.820203][ T9700] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 515.850826][ T9592] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.887590][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.895273][ T4251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.944703][ T9700] EXT4-fs (loop4): 1 truncate cleaned up [ 515.953920][ T9700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.992222][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.999751][ T4251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.058936][ T30] audit: type=1800 audit(1762138405.833:988): pid=9700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1438" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 516.073448][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1439'. [ 516.370150][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.712718][ T30] audit: type=1326 audit(1762138406.483:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 516.738399][ T30] audit: type=1326 audit(1762138406.483:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 516.761871][ T30] audit: type=1326 audit(1762138406.493:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 516.908499][ T30] audit: type=1326 audit(1762138406.573:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 516.935069][ T30] audit: type=1326 audit(1762138406.573:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 516.958525][ T30] audit: type=1326 audit(1762138406.633:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 516.981065][ T30] audit: type=1326 audit(1762138406.633:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 517.186535][ T30] audit: type=1326 audit(1762138406.883:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 517.209290][ T30] audit: type=1326 audit(1762138406.923:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 517.234742][ T30] audit: type=1326 audit(1762138406.923:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 517.582887][ T9723] 9pnet_fd: Insufficient options for proto=fd [ 517.876867][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 518.129499][ T9592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.006086][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1452'. [ 519.015564][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1452'. [ 520.274829][ T9592] veth0_vlan: entered promiscuous mode [ 520.350398][ T9592] veth1_vlan: entered promiscuous mode [ 520.590176][ T9592] veth0_macvtap: entered promiscuous mode [ 520.660375][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1459'. [ 520.715631][ T9592] veth1_macvtap: entered promiscuous mode [ 520.840167][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.869481][ T9766] 9pnet_fd: Insufficient options for proto=fd [ 520.923010][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.977081][ T4251] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.993725][ T4251] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.069740][ T4251] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.125616][ T4251] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.489558][ T9784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1467'. [ 522.915783][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 522.915863][ T30] audit: type=1326 audit(1762138412.693:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 523.045429][ T30] audit: type=1326 audit(1762138412.743:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 523.067689][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.077718][ T30] audit: type=1326 audit(1762138412.743:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 523.099921][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.107705][ T30] audit: type=1326 audit(1762138412.743:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 523.130003][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.136849][ T30] audit: type=1326 audit(1762138412.753:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 523.159850][ T30] audit: type=1326 audit(1762138412.753:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 523.160094][ T30] audit: type=1326 audit(1762138412.773:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 523.160319][ T30] audit: type=1326 audit(1762138412.773:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 523.160540][ T30] audit: type=1326 audit(1762138412.793:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 523.160877][ T30] audit: type=1326 audit(1762138412.823:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 524.038875][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 524.308713][ T9810] 9pnet_fd: Insufficient options for proto=fd [ 526.373972][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 526.863991][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.872119][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.183814][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.192793][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.641141][ T9869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1494'. [ 528.651344][ T9869] IPVS: Error connecting to the multicast addr [ 529.296736][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 529.296815][ T30] audit: type=1326 audit(1762138419.073:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 529.298430][ T9878] loop4: detected capacity change from 0 to 512 [ 529.304918][ T30] audit: type=1326 audit(1762138419.073:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 529.396237][ T9877] netlink: 'syz.3.1497': attribute type 10 has an invalid length. [ 529.455817][ T9877] batadv0: entered allmulticast mode [ 529.465794][ T9877] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 529.520358][ T9878] ext4: Unknown parameter 'seclabel' [ 529.536437][ T9883] netlink: 'syz.3.1497': attribute type 10 has an invalid length. [ 529.536532][ T9883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1497'. [ 529.536634][ T9883] batadv0: entered promiscuous mode [ 529.572192][ T30] audit: type=1326 audit(1762138419.213:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 529.578766][ T9883] bridge0: port 3(batadv0) entered blocking state [ 529.599454][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.600095][ T30] audit: type=1326 audit(1762138419.213:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 529.600347][ T30] audit: type=1326 audit(1762138419.213:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 529.601306][ T30] audit: type=1326 audit(1762138419.223:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 529.608034][ T9883] bridge0: port 3(batadv0) entered disabled state [ 529.613931][ T30] audit: type=1326 audit(1762138419.223:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 529.714100][ T3816] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 529.714256][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.728210][ T3816] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 529.732912][ T30] audit: type=1326 audit(1762138419.233:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 529.762155][ T30] audit: type=1326 audit(1762138419.233:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 529.786015][ T30] audit: type=1326 audit(1762138419.233:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 530.979469][ T9901] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1508'. [ 531.034288][ T9897] loop4: detected capacity change from 0 to 1024 [ 531.095625][ T9897] EXT4-fs: Ignoring removed mblk_io_submit option [ 531.131652][ T9897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 531.140958][ T9897] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 531.283152][ T9897] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.1505: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 531.375511][ T9897] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1505: couldn't read orphan inode 11 (err -117) [ 531.413534][ T9897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.521451][ T9897] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1505: Invalid block bitmap block 0 in block_group 0 [ 531.552413][ T9897] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1505: Failed to acquire dquot type 0 [ 531.732111][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.908562][ T9915] tipc: Enabled bearer , priority 0 [ 531.919356][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.955206][ T9913] syzkaller0: entered promiscuous mode [ 531.962376][ T9913] syzkaller0: entered allmulticast mode [ 532.065781][ T9913] tipc: Resetting bearer [ 532.115790][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 532.126053][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 532.146590][ T9910] tipc: Resetting bearer [ 532.159552][ T9910] tipc: Disabling bearer [ 532.488329][ T9924] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 532.506490][ T9921] IPVS: stopping master sync thread 9924 ... [ 533.145641][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1521'. [ 533.937281][ T9942] loop6: detected capacity change from 0 to 1024 [ 533.980162][ T9942] EXT4-fs: Ignoring removed mblk_io_submit option [ 534.014610][ T9942] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 534.029808][ T9942] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 534.132894][ T9942] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.1525: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 534.153411][ T9942] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1525: couldn't read orphan inode 11 (err -117) [ 534.169791][ T9942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.289047][ T9942] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1525: Invalid block bitmap block 0 in block_group 0 [ 534.321751][ T9942] __quota_error: 66 callbacks suppressed [ 534.321834][ T9942] Quota error (device loop6): write_blk: dquota write failed [ 534.341892][ T9942] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 534.352380][ T9942] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1525: Failed to acquire dquot type 0 [ 534.810418][ T9592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.405654][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1535'. [ 535.941098][ T30] audit: type=1326 audit(1762138425.713:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.1540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 536.050535][ T30] audit: type=1326 audit(1762138425.743:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.1540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 536.079221][ T30] audit: type=1326 audit(1762138425.773:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.1540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 536.103256][ T30] audit: type=1326 audit(1762138425.773:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.1540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 536.126769][ T30] audit: type=1326 audit(1762138425.773:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.1540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 536.149319][ T30] audit: type=1326 audit(1762138425.773:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.1540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 536.176342][ T30] audit: type=1326 audit(1762138425.773:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.1540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 536.200408][ T30] audit: type=1326 audit(1762138425.773:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.1540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 537.552740][ T9998] tipc: Enabled bearer , priority 0 [ 537.573392][ T9998] syzkaller0: entered promiscuous mode [ 537.579093][ T9998] syzkaller0: entered allmulticast mode [ 537.682563][ T9998] tipc: Resetting bearer [ 537.697343][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1552'. [ 537.758713][ T9995] tipc: Resetting bearer [ 537.803986][ T9995] tipc: Disabling bearer [ 538.849741][T10017] loop6: detected capacity change from 0 to 512 [ 538.921540][T10017] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 538.996602][T10017] EXT4-fs (loop6): 1 truncate cleaned up [ 539.004708][T10017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.135845][ T9592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.958405][T10029] 9pnet: Could not find request transport: 0xffffffffffffffff [ 540.089135][T10036] tipc: Enabled bearer , priority 0 [ 540.126683][T10036] syzkaller0: entered promiscuous mode [ 540.132552][T10036] syzkaller0: entered allmulticast mode [ 540.228919][T10036] tipc: Resetting bearer [ 540.277621][T10035] tipc: Resetting bearer [ 540.315802][T10035] tipc: Disabling bearer [ 540.350846][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 540.350925][ T30] audit: type=1326 audit(1762138430.123:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 540.384678][ T30] audit: type=1326 audit(1762138430.123:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 540.409043][ T30] audit: type=1326 audit(1762138430.163:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 540.432737][ T30] audit: type=1326 audit(1762138430.163:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 540.455616][ T30] audit: type=1326 audit(1762138430.163:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 540.482606][ T30] audit: type=1326 audit(1762138430.163:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 540.506744][ T30] audit: type=1326 audit(1762138430.163:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 540.529296][ T30] audit: type=1326 audit(1762138430.163:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 540.551788][ T30] audit: type=1326 audit(1762138430.183:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 540.579114][ T30] audit: type=1326 audit(1762138430.193:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 541.308126][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1575'. [ 541.373042][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1575'. [ 542.735996][T10074] tipc: Enabled bearer , priority 0 [ 542.772517][T10074] syzkaller0: entered promiscuous mode [ 542.778197][T10074] syzkaller0: entered allmulticast mode [ 542.879233][T10075] tipc: Resetting bearer [ 542.972516][T10072] tipc: Resetting bearer [ 543.061879][T10072] tipc: Disabling bearer [ 543.392529][T10085] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1590'. [ 543.575289][T10084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1589'. [ 545.926799][T10113] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1604'. [ 546.086141][T10112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1603'. [ 546.271525][T10117] syz.6.1606 (10117) used obsolete PPPIOCDETACH ioctl [ 547.016146][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 547.016418][ T30] audit: type=1326 audit(1762138436.793:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.3.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 547.175981][ T30] audit: type=1326 audit(1762138436.853:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.3.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 547.198782][ T30] audit: type=1326 audit(1762138436.873:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.3.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 547.221366][ T30] audit: type=1326 audit(1762138436.883:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.3.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 547.247259][ T30] audit: type=1326 audit(1762138436.883:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.3.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 547.271519][ T30] audit: type=1326 audit(1762138436.883:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.3.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 547.294296][ T30] audit: type=1326 audit(1762138436.883:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.3.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 547.316972][ T30] audit: type=1326 audit(1762138436.883:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.3.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 547.342540][ T30] audit: type=1326 audit(1762138436.883:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.3.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 547.366217][ T30] audit: type=1326 audit(1762138437.023:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 548.193839][T10143] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1618'. [ 548.216954][T10144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1617'. [ 549.047917][T10158] loop1: detected capacity change from 0 to 512 [ 549.334334][T10158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.347541][T10158] ext4 filesystem being mounted at /342/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.517445][T10158] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.1624: corrupted inode contents [ 549.581304][T10158] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #4: comm syz.1.1624: mark_inode_dirty error [ 549.647401][T10158] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.1624: corrupted inode contents [ 549.703511][T10158] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.1624: mark_inode_dirty error [ 549.842405][T10158] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1624: Failed to acquire dquot type 1 [ 549.882561][T10170] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.1624: corrupted inode contents [ 549.930264][T10170] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #4: comm syz.1.1624: mark_inode_dirty error [ 550.012594][T10170] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.1624: corrupted inode contents [ 550.058491][T10170] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.1624: mark_inode_dirty error [ 550.117428][T10170] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1624: Failed to acquire dquot type 1 [ 550.394963][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.462918][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1633'. [ 551.127533][T10186] netlink: 'syz.4.1636': attribute type 11 has an invalid length. [ 551.566430][T10192] usb usb3: usbfs: process 10192 (syz.1.1639) did not claim interface 63 before use [ 552.189338][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 552.189410][ T30] audit: type=1326 audit(1762138441.963:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 552.320319][ T30] audit: type=1326 audit(1762138442.013:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 552.344105][ T30] audit: type=1326 audit(1762138442.013:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 552.369697][ T30] audit: type=1326 audit(1762138442.013:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 552.393374][ T30] audit: type=1326 audit(1762138442.013:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 552.416440][ T30] audit: type=1326 audit(1762138442.023:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 552.439203][ T30] audit: type=1326 audit(1762138442.033:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 552.461827][ T30] audit: type=1326 audit(1762138442.033:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 552.487444][ T30] audit: type=1326 audit(1762138442.043:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 552.511221][ T30] audit: type=1326 audit(1762138442.053:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 553.014227][T10209] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1647'. [ 553.293244][T10212] netlink: 'syz.4.1648': attribute type 1 has an invalid length. [ 553.392272][T10212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.560829][T10212] bond1: (slave dummy0): making interface the new active one [ 553.575415][T10212] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 553.603355][T10216] 9pnet_fd: Insufficient options for proto=fd [ 553.927488][T10212] loop4: detected capacity change from 0 to 164 [ 556.579879][T10241] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1661'. [ 556.995703][T10247] 9pnet_fd: Insufficient options for proto=fd [ 558.865457][T10264] loop4: detected capacity change from 0 to 512 [ 559.034639][T10264] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 559.222908][T10264] EXT4-fs (loop4): 1 truncate cleaned up [ 559.231448][T10264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.304077][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 559.304156][ T30] audit: type=1800 audit(1762138449.073:1408): pid=10264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1673" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 559.564599][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.392520][T10277] tipc: Started in network mode [ 560.397692][T10277] tipc: Node identity ac14140f, cluster identity 4711 [ 560.405456][T10277] tipc: New replicast peer: 255.255.255.83 [ 560.412700][T10277] tipc: Enabled bearer , priority 10 [ 560.660835][T10270] lo speed is unknown, defaulting to 1000 [ 560.712435][T10272] siw: device registration error -23 [ 560.924045][T10283] ===================================================== [ 560.931494][T10283] BUG: KMSAN: uninit-value in eth_type_trans+0x69d/0x9a0 [ 560.938824][T10283] eth_type_trans+0x69d/0x9a0 [ 560.943971][T10283] __dev_forward_skb2+0x4b1/0x950 [ 560.949162][T10283] dev_forward_skb_nomtu+0x3b/0xe0 [ 560.954576][T10283] __bpf_redirect+0x14d6/0x1760 [ 560.959613][T10283] bpf_clone_redirect+0x366/0x530 [ 560.964999][T10283] ___bpf_prog_run+0x1297/0xeba0 [ 560.970106][T10283] __bpf_prog_run512+0xc5/0x100 [ 560.975332][T10283] bpf_test_run+0x496/0xd80 [ 560.980009][T10283] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 560.985802][T10283] bpf_prog_test_run+0x5c2/0xa40 [ 560.990994][T10283] __sys_bpf+0x873/0xeb0 [ 560.995385][T10283] __ia32_sys_bpf+0xa4/0xf0 [ 561.000091][T10283] ia32_sys_call+0xadf/0x4310 [ 561.005273][T10283] __do_fast_syscall_32+0xb0/0x150 [ 561.010678][T10283] do_fast_syscall_32+0x38/0x80 [ 561.015713][T10283] do_SYSENTER_32+0x1f/0x30 [ 561.020415][T10283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 561.027099][T10283] [ 561.029500][T10283] Uninit was created at: [ 561.034127][T10283] kmem_cache_alloc_node_noprof+0x989/0x16b0 [ 561.040278][T10283] kmalloc_reserve+0x13c/0x4b0 [ 561.045371][T10283] pskb_expand_head+0x1fc/0x1610 [ 561.050518][T10283] skb_ensure_writable+0x44e/0x510 [ 561.055956][T10283] bpf_clone_redirect+0x1c1/0x530 [ 561.061446][T10283] ___bpf_prog_run+0x1297/0xeba0 [ 561.066538][T10283] __bpf_prog_run512+0xc5/0x100 [ 561.071695][T10283] bpf_test_run+0x496/0xd80 [ 561.076377][T10283] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 561.082176][T10283] bpf_prog_test_run+0x5c2/0xa40 [ 561.087272][T10283] __sys_bpf+0x873/0xeb0 [ 561.091798][T10283] __ia32_sys_bpf+0xa4/0xf0 [ 561.096495][T10283] ia32_sys_call+0xadf/0x4310 [ 561.101513][T10283] __do_fast_syscall_32+0xb0/0x150 [ 561.106815][T10283] do_fast_syscall_32+0x38/0x80 [ 561.112004][T10283] do_SYSENTER_32+0x1f/0x30 [ 561.116707][T10283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 561.123395][T10283] [ 561.125831][T10283] CPU: 0 UID: 0 PID: 10283 Comm: syz.3.1680 Tainted: G W syzkaller #0 PREEMPT(none) [ 561.137192][T10283] Tainted: [W]=WARN [ 561.141223][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.151564][T10283] ===================================================== [ 561.158583][T10283] Disabling lock debugging due to kernel taint [ 561.165002][T10283] Kernel panic - not syncing: kmsan.panic set ... [ 561.171555][T10283] CPU: 0 UID: 0 PID: 10283 Comm: syz.3.1680 Tainted: G B W syzkaller #0 PREEMPT(none) [ 561.182701][T10283] Tainted: [B]=BAD_PAGE, [W]=WARN [ 561.187835][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.198180][T10283] Call Trace: [ 561.201558][T10283] [ 561.204577][T10283] __dump_stack+0x26/0x30 [ 561.209085][T10283] dump_stack_lvl+0x53/0x270 [ 561.213856][T10283] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 561.219861][T10283] dump_stack+0x1e/0x25 [ 561.224194][T10283] vpanic+0x435/0xd30 [ 561.228379][T10283] panic+0x15d/0x160 [ 561.232507][T10283] kmsan_report+0x31c/0x320 [ 561.237175][T10283] ? bpf_prog_test_run+0x5c2/0xa40 [ 561.242451][T10283] ? __msan_warning+0x1b/0x30 [ 561.247270][T10283] ? eth_type_trans+0x69d/0x9a0 [ 561.252319][T10283] ? __dev_forward_skb2+0x4b1/0x950 [ 561.257684][T10283] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 561.263214][T10283] ? __bpf_redirect+0x14d6/0x1760 [ 561.268431][T10283] ? bpf_clone_redirect+0x366/0x530 [ 561.273837][T10283] ? ___bpf_prog_run+0x1297/0xeba0 [ 561.279101][T10283] ? __bpf_prog_run512+0xc5/0x100 [ 561.284275][T10283] ? bpf_test_run+0x496/0xd80 [ 561.289136][T10283] ? bpf_prog_test_run_skb+0x18c1/0x26a0 [ 561.294961][T10283] ? bpf_prog_test_run+0x5c2/0xa40 [ 561.300237][T10283] ? __sys_bpf+0x873/0xeb0 [ 561.304800][T10283] ? __ia32_sys_bpf+0xa4/0xf0 [ 561.309671][T10283] ? ia32_sys_call+0xadf/0x4310 [ 561.314733][T10283] ? __do_fast_syscall_32+0xb0/0x150 [ 561.320228][T10283] ? do_fast_syscall_32+0x38/0x80 [ 561.325456][T10283] ? do_SYSENTER_32+0x1f/0x30 [ 561.330322][T10283] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 561.337017][T10283] ? kmem_cache_alloc_node_noprof+0x1/0x16b0 [ 561.343183][T10283] ? kmsan_get_metadata+0xfb/0x160 [ 561.348472][T10283] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 561.354458][T10283] ? eth_type_trans+0x11/0x9a0 [ 561.359425][T10283] ? filter_irq_stacks+0x49/0x190 [ 561.364670][T10283] ? stack_depot_save_flags+0x35/0x7b0 [ 561.370297][T10283] ? kmsan_get_metadata+0xfb/0x160 [ 561.375564][T10283] ? kmsan_get_metadata+0xfb/0x160 [ 561.380844][T10283] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 561.387408][T10283] ? kmsan_get_metadata+0xfb/0x160 [ 561.392692][T10283] __msan_warning+0x1b/0x30 [ 561.397340][T10283] eth_type_trans+0x69d/0x9a0 [ 561.402237][T10283] __dev_forward_skb2+0x4b1/0x950 [ 561.407416][T10283] ? pskb_expand_head+0x1268/0x1610 [ 561.412827][T10283] dev_forward_skb_nomtu+0x3b/0xe0 [ 561.418097][T10283] __bpf_redirect+0x14d6/0x1760 [ 561.423134][T10283] ? kmsan_get_metadata+0xfb/0x160 [ 561.428418][T10283] bpf_clone_redirect+0x366/0x530 [ 561.433657][T10283] ___bpf_prog_run+0x1297/0xeba0 [ 561.438775][T10283] __bpf_prog_run512+0xc5/0x100 [ 561.443803][T10283] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 561.449796][T10283] ? stack_depot_save_flags+0x35/0x7b0 [ 561.455416][T10283] ? kmsan_get_metadata+0xfb/0x160 [ 561.460681][T10283] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 561.466658][T10283] ? ktime_get+0x530/0x590 [ 561.471246][T10283] ? kmsan_get_metadata+0xfb/0x160 [ 561.476520][T10283] ? kmsan_get_metadata+0xfb/0x160 [ 561.481782][T10283] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 561.488323][T10283] ? kmsan_get_metadata+0x150/0x160 [ 561.493674][T10283] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 561.499644][T10283] ? __pfx___bpf_prog_run512+0x10/0x10 [ 561.505261][T10283] ? __pfx___bpf_prog_run512+0x10/0x10 [ 561.510873][T10283] bpf_test_run+0x496/0xd80 [ 561.515639][T10283] ? kmsan_get_metadata+0xfb/0x160 [ 561.520893][T10283] ? kmsan_get_metadata+0xfb/0x160 [ 561.526159][T10283] ? kmsan_get_metadata+0xfb/0x160 [ 561.531417][T10283] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 561.537406][T10283] ? bpf_test_run+0x2f7/0xd80 [ 561.542280][T10283] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 561.548252][T10283] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 561.553952][T10283] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 561.559943][T10283] bpf_prog_test_run+0x5c2/0xa40 [ 561.565059][T10283] __sys_bpf+0x873/0xeb0 [ 561.569487][T10283] __ia32_sys_bpf+0xa4/0xf0 [ 561.574200][T10283] ia32_sys_call+0xadf/0x4310 [ 561.579164][T10283] __do_fast_syscall_32+0xb0/0x150 [ 561.584480][T10283] do_fast_syscall_32+0x38/0x80 [ 561.589522][T10283] do_SYSENTER_32+0x1f/0x30 [ 561.594198][T10283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 561.600701][T10283] RIP: 0023:0xf7f12539 [ 561.604879][T10283] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 561.624646][T10283] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 561.633209][T10283] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 561.641294][T10283] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.649365][T10283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.657437][T10283] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 561.665506][T10283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.673614][T10283] [ 561.677036][T10283] Kernel Offset: disabled [ 561.681423][T10283] Rebooting in 86400 seconds..