last executing test programs: 2m43.737006301s ago: executing program 32 (id=4491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @alu={0x7, 0x1, 0x0, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0x747, 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fstat(r7, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8110, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), 0x0, 0xa7c, r10}, 0x38) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000000000000020}, {0x0, 0x0, 0x800}, 0x9, 0x0, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) 2m31.253113657s ago: executing program 33 (id=4590): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x10, 0x2e, 0x1}, 0x10}], 0x1}, 0x0) 2m27.018809197s ago: executing program 5 (id=4772): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdf07}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7276d8", 0x40, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8ee5233262bfbfd04e1462a0c7cb4974"}, @md5sig={0x13, 0x12, "ffc83bee760e6591385ccf63babe1731"}, @sack_perm={0x4, 0x2}, @eol, @sack={0x5, 0x2}]}}}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 2m25.058545038s ago: executing program 5 (id=4802): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="020400000e0000000000000000000000020001000000000000100500000000a005000600000000000a004e2000000007ff020000000000000000000000000001060000000000000005000500000000000a"], 0x70}, 0x1, 0x7}, 0x0) 2m24.998902561s ago: executing program 5 (id=4803): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x0, @perf_config_ext={0x40, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2d, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000038000b63d25a80648c251bfd07b5", 0x12}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10558, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) 2m24.785549745s ago: executing program 5 (id=4809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m24.045236284s ago: executing program 2 (id=4813): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 2m23.937949201s ago: executing program 5 (id=4815): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x48, 0x24, 0x301, 0x70bd26, 0x8000, {0x1}, [@nested={0x34, 0x131, 0x0, 0x1, [@typed={0x2f, 0x2a, 0x0, 0x0, @str='+/(\x00-\xebN\x97|\b\x93E\x05agbK\xc4\x88\xe4\x7f6Y\xa0\x19e\xcc\xe0\xc5/Oq\xd8\"\x8b\xdb\xf9\xa3\xb2\x9a\x9d\xf8V'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x44004) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2, 0x200000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m23.849719007s ago: executing program 2 (id=4817): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000100)='./file1\x00', 0x1800840, &(0x7f0000000340)=ANY=[@ANYRES64=r4], 0x1, 0x369, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, 0x0, 0x80042, 0xc8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000040), 0x26, 0x75e, &(0x7f0000000280)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x40) pwrite64(0xffffffffffffffff, &(0x7f0000000300)="572654b114b1a9", 0x7, 0x100000000) 2m23.624088393s ago: executing program 5 (id=4818): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6421, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee, 0x9}, 0x4000, 0x2, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2m23.078889178s ago: executing program 3 (id=4823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 2m23.003712513s ago: executing program 3 (id=4824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800) 2m22.923297419s ago: executing program 3 (id=4825): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400", 0x2}], 0x1}, 0x0) 2m22.792959957s ago: executing program 3 (id=4826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m21.914389706s ago: executing program 3 (id=4829): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x48, 0x24, 0x301, 0x70bd26, 0x8000, {0x1}, [@nested={0x34, 0x131, 0x0, 0x1, [@typed={0x2f, 0x2a, 0x0, 0x0, @str='+/(\x00-\xebN\x97|\b\x93E\x05agbK\xc4\x88\xe4\x7f6Y\xa0\x19e\xcc\xe0\xc5/Oq\xd8\"\x8b\xdb\xf9\xa3\xb2\x9a\x9d\xf8V'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x44004) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m21.674453081s ago: executing program 3 (id=4831): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="275deff40000000000000000000000edffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 2m19.103760072s ago: executing program 2 (id=4840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m18.128049496s ago: executing program 2 (id=4841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m17.261594024s ago: executing program 2 (id=4842): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x48, 0x24, 0x301, 0x70bd26, 0x8000, {0x1}, [@nested={0x34, 0x131, 0x0, 0x1, [@typed={0x2f, 0x2a, 0x0, 0x0, @str='+/(\x00-\xebN\x97|\b\x93E\x05agbK\xc4\x88\xe4\x7f6Y\xa0\x19e\xcc\xe0\xc5/Oq\xd8\"\x8b\xdb\xf9\xa3\xb2\x9a\x9d\xf8V'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x44004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m17.221948556s ago: executing program 2 (id=4843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000004c08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) 2m9.936118849s ago: executing program 34 (id=4804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000) 2m8.598438957s ago: executing program 35 (id=4818): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6421, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee, 0x9}, 0x4000, 0x2, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2m6.250408903s ago: executing program 36 (id=4831): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="275deff40000000000000000000000edffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 2m2.126506515s ago: executing program 37 (id=4843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000004c08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) 1m50.151477368s ago: executing program 6 (id=5010): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40051}, 0x20048010) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 1m49.807465891s ago: executing program 6 (id=5013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x98}}, 0x40008800) 1m49.743571085s ago: executing program 6 (id=5016): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000100)='./file1\x00', 0x1800840, &(0x7f0000000340)=ANY=[@ANYRES64=r4], 0x1, 0x369, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, 0x0, 0x80042, 0xc8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x40) 1m49.426037436s ago: executing program 4 (id=5017): ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000140)=ANY=[]) 1m49.041476921s ago: executing program 4 (id=5018): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 1m48.082203385s ago: executing program 4 (id=5024): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263", 0x19}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 1m48.030073418s ago: executing program 4 (id=5025): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 1m45.44149777s ago: executing program 6 (id=5038): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62bad545, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x7, 0x0, 0x8, 0xffff, 0x7fffffff, 0x0, 0x0, 0x200000, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r0, r0, 0xffffffffffffffff, r0, r0], 0x0, 0x10, 0x9}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0xc0000000, 0x3, 0x7}, 0x3, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) 1m45.295893339s ago: executing program 6 (id=5039): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m45.295285149s ago: executing program 6 (id=5040): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdf07}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7276d8", 0x3c, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8ee5233262bfbfd04e1462a0c7cb4974"}, @md5sig={0x13, 0x12, "ffc83bee760e6591385ccf63babe1731"}, @sack_perm={0x4, 0x2}, @eol]}}}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 1m44.122099687s ago: executing program 4 (id=5050): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m44.07161513s ago: executing program 4 (id=5051): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 1m30.220677597s ago: executing program 38 (id=5040): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdf07}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7276d8", 0x3c, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8ee5233262bfbfd04e1462a0c7cb4974"}, @md5sig={0x13, 0x12, "ffc83bee760e6591385ccf63babe1731"}, @sack_perm={0x4, 0x2}, @eol]}}}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 1m28.97204544s ago: executing program 39 (id=5051): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 3.349400898s ago: executing program 8 (id=6451): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) timerfd_create(0x8, 0x0) epoll_create1(0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 3.216542557s ago: executing program 7 (id=6456): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.897931458s ago: executing program 1 (id=6461): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x11, 0x80a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.877604449s ago: executing program 1 (id=6462): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={0x0, 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @empty, 0xfffffffd, 0xffffffff}, 0x80, 0x0}, 0x4810) 2.839448342s ago: executing program 1 (id=6463): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}, 0x0) 2.838840342s ago: executing program 1 (id=6464): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd80) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, 0x0) 2.521062783s ago: executing program 8 (id=6468): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="16", 0x1}], 0x1}, 0xc0004) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x38, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="9b", 0x34000}], 0x1}, 0x4) 2.41542126s ago: executing program 8 (id=6472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb86dd00017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x104, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a58"}, 0x50) 2.368848093s ago: executing program 8 (id=6473): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={0x0, 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @empty, 0xfffffffd, 0xffffffff}, 0x80, 0x0}, 0x4810) 2.323104386s ago: executing program 7 (id=6476): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0xe, 0x0, &(0x7f00000003c0)="46c33c56e981df5e1559014932a2", 0x0, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.225465643s ago: executing program 7 (id=6477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}}, 0x0) 2.223562173s ago: executing program 9 (id=6478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000100), &(0x7f0000000280)=""/115}, 0x20) 2.205616804s ago: executing program 7 (id=6479): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r4 = timerfd_create(0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0x90000004}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.192360085s ago: executing program 8 (id=6480): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x3004d91, &(0x7f0000000080)={[{@noinit_itable}]}, 0x1, 0x523, &(0x7f0000000a80)="$eJzs3c1vHGcZAPBnNrtJnDi1+ThAJUKhRU4F2bVr2locSpEQnCohyj0Ye21ZXnst77qNVxV1/gIkhACJE1y4IPEHIKFIXDgipEpwBqkIhCCFAwfooJ2d9Vd27W262XXs30+azPvO1/O8m8zszOybmQAurGci4tWIeD9N0+cjYiqSbHohH2KvM7SXe+/BW0vtIYk0ff0fSbZku97dVpKPr+erXY2Ib3494jvJw3Ebu631xVqtup3XK82NrUpjt3V7bWNxtbpa3Zyfn3tp4eWFFxdmh9LOGxHxylf/8sPv/fxrr/z6C2/++c7fbn23ndZkPv9wOz6g4kkzO00vZZ/F4RW2HzHYWVTMWpibGGyde48xHwAA+muf4380Ij4bEc/HVFw6+XQWAAAAeAKlX56M/yYRaW+X+0wHAAAAniCFrA9sUijnfQEmo1Aolzt9eD8e1wq1eqP5+ZX6zuZyp6/sdJQKK2u16mzWVzirJ+36XFY+qL9wrD5/pXO/4QdTE1m9vFSvLY/75gcAAABcENePXf//e6pz/Q8AAACcM9PjTgAAAAB47Fz/AwAAwPnn+h8AAADOtW+89tpERKTd918vv7G7s15/4/ZytbFe3thZKi/Vt7fKq/X6avbMvo3Ttler17e+GJs7dyvNaqNZaey27mzUdzabd9aOvAIbAAAAGKGPfPr+H5OI2PvSRDa0XR53UsBIFPdLST7usff/6anO+N0RJQWMxKUBlnn3yggSAUauOO4EgLEpjTsBYOySU+b37bzzu3z8meHmAwAADN/MJ/v//l84cc29k2cDZ56dGC6uY/t/2jauXIDRyn7/H7TDr5MFOFdKA/UABM6zD/37/6lcVwAAwLhNZkNSKOe39yajUCiXI25krwUoJStrtepsRDwVEX+YKl1p1+diwP84CAAAAAAAAAAAAAAAAAAAAAAAAABk0jTpvPQHAAAAOLciCn9NfpNk7/+amXpu8vj9gcvJf6Yif0Xomz95/Ud3F5vN7bn29H/uT2/+OJ/+wjjuYAAAAADHda/Tu9fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBM7z14a6k7jDLu378SEdO94hfjaja+GqWIuPavJIqH1ksi4tIQ4u/di4hP9IqftNPaD9kr/sTjjx/T+afQK/71IcSHi+x++/jzaq/9rxDPZOPe+18x4kj9UR05/rVuHjn+do9/l/rs/zcGjPH0O7+s9I1/L+LpYu/jTzd+0if+swPG//a3Wq1+89KfRsz0/P5JjsSqNDe2Ko3d1u21jcXV6mp1c35+7qWFlxdeXJitrKzVqvmfPWN8/1O/ev+k9l/rE3/6lPY/N2D7//fO3Qcf6xRLB1Mn9uPferZH/N/+LF/u4fiF/Lvvc3m5PX+mW97rlA+7+Yvf3zyp/csH7S99kL//WwO2fyg7CgAwNI3d1vpirVbdfsIKb+f5n75w+zzrbOT8CIXkbKRxXgtvD3WDaZqm7X+TPWbdj4hBtpPEWfhYssJ4j0sAAMDwHZz0jzsTAAAAAAAAAAAAAAAAAAAAuLgefvpXmsaQH0J2PObefinxZGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mz4fwAAAP//j6PX8g==") sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 2.11537997s ago: executing program 0 (id=6482): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="16", 0x1}], 0x1}, 0xc0004) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x38, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="9b", 0x34000}], 0x1}, 0x4) 2.050740724s ago: executing program 0 (id=6483): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb86dd00017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x108, 0x0, &(0x7f0000000400)="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"}, 0x50) 1.993532878s ago: executing program 9 (id=6484): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 1.927554962s ago: executing program 9 (id=6485): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/66, 0x42}, {&(0x7f00000002c0)=""/41, 0x29}], 0x6}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.878867645s ago: executing program 0 (id=6486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x4040000) 1.718585326s ago: executing program 0 (id=6487): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000009c0)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/177, 0xb1}, {&(0x7f0000000f40)=""/202, 0xca}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000c00)=""/208, 0xd0}], 0x8}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1.580098476s ago: executing program 1 (id=6488): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0xfffffffd, 0xe}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, 0x0, 0x40000000) 1.458553083s ago: executing program 0 (id=6489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000002b703000000000001850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x24) 1.377383829s ago: executing program 1 (id=6490): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000100)='./file1\x00', 0x1800840, &(0x7f0000000340)=ANY=[@ANYRES64=r4], 0x1, 0x369, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, 0x0, 0x80042, 0xc8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000040), 0x26, 0x75e, &(0x7f0000000280)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x40) pwrite64(0xffffffffffffffff, &(0x7f0000000300)="572654b114b1a9", 0x7, 0x100000000) 1.212461859s ago: executing program 7 (id=6491): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="14", 0x1}], 0x1}, 0x800) 963.726096ms ago: executing program 0 (id=6492): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0xd9, 0x4) readv(r0, &(0x7f0000001780)=[{&(0x7f0000000480)=""/123, 0x7b}, {0x0}], 0x2) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYRES8=r0], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 348.993827ms ago: executing program 9 (id=6493): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="16", 0x1}], 0x1}, 0xc0004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x38, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, 0x0, 0x4) 348.508627ms ago: executing program 7 (id=6494): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000004ac0)=""/178, 0xb2}, {&(0x7f00000001c0)=""/235, 0xeb}, {&(0x7f0000001880)=""/4105, 0x1009}, {&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000003800)=""/174, 0xae}, {&(0x7f0000000140)=""/119, 0x77}, {&(0x7f0000000e00)=""/93, 0x5d}], 0x7}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 235.477894ms ago: executing program 8 (id=6495): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x833, '\x00', 0x0, 0x0}, 0x50) close(r1) 77.488955ms ago: executing program 9 (id=6496): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb86dd00017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x108, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e5"}, 0x50) 0s ago: executing program 9 (id=6497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x28, 0x0, &(0x7f0000000400)="7a7fa22c5fe77b4a53ef2a2d86ddfa770bff3826590b65c397c86dd2c1105f000000000000000000", 0x0, 0x1009fc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 361.443744][T16583] vhci_hcd vhci_hcd.0: Device attached [ 361.535034][T16583] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.594319][T16583] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 361.601028][T16583] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.608799][T16583] vhci_hcd vhci_hcd.0: Device attached [ 361.632772][T16606] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 361.639432][T16606] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 361.647284][T16606] vhci_hcd vhci_hcd.0: Device attached [ 361.653284][ T5864] usb 7-1: new low-speed USB device number 6 using vhci_hcd [ 361.702758][T16583] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.736073][T16606] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.760271][T16606] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.837403][T16606] vhci_hcd vhci_hcd.0: port 0 already used [ 361.893656][T16607] vhci_hcd: connection closed [ 361.893916][ T31] vhci_hcd: stop threads [ 361.903130][ T31] vhci_hcd: release socket [ 361.907718][ T31] vhci_hcd: disconnect device [ 361.913030][T16599] vhci_hcd: connection closed [ 361.913253][T16584] vhci_hcd: connection reset by peer [ 361.923894][T16590] vhci_hcd: connection closed [ 361.924001][T16588] vhci_hcd: connection closed [ 362.102517][T16634] tipc: Enabled bearer , priority 0 [ 362.198275][T16637] syzkaller0: entered promiscuous mode [ 362.203899][T16637] syzkaller0: entered allmulticast mode [ 362.268059][T16634] tipc: Resetting bearer [ 362.296932][T16632] tipc: Resetting bearer [ 362.327164][ T31] vhci_hcd: stop threads [ 362.331544][ T31] vhci_hcd: release socket [ 362.336429][ T31] vhci_hcd: disconnect device [ 362.341361][ T31] vhci_hcd: stop threads [ 362.345629][ T31] vhci_hcd: release socket [ 362.350107][ T31] vhci_hcd: disconnect device [ 362.361135][T16632] tipc: Disabling bearer [ 362.369777][ T31] vhci_hcd: stop threads [ 362.374053][ T31] vhci_hcd: release socket [ 362.378659][ T31] vhci_hcd: disconnect device [ 362.383532][ T31] vhci_hcd: stop threads [ 362.387837][ T31] vhci_hcd: release socket [ 362.392337][ T31] vhci_hcd: disconnect device [ 362.773912][T16664] loop2: detected capacity change from 0 to 512 [ 362.786427][T16664] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 362.955353][T16674] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 362.961904][T16674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 362.969525][T16674] vhci_hcd vhci_hcd.0: Device attached [ 363.055297][T16685] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 363.061982][T16685] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 363.069602][T16685] vhci_hcd vhci_hcd.0: Device attached [ 363.094090][T16681] tipc: Enabled bearer , priority 0 [ 363.118729][T16681] syzkaller0: entered promiscuous mode [ 363.124348][T16681] syzkaller0: entered allmulticast mode [ 363.160891][T16674] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 363.167542][T16674] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 363.175281][T16674] vhci_hcd vhci_hcd.0: Device attached [ 363.202255][T16693] tipc: Resetting bearer [ 363.216148][T16667] vcan0 speed is unknown, defaulting to 1000 [ 363.238006][T16678] tipc: Resetting bearer [ 363.254449][T16685] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 363.279049][T16678] tipc: Disabling bearer [ 363.298355][T16674] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 363.305000][T16674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 363.312616][T16674] vhci_hcd vhci_hcd.0: Device attached [ 363.412538][T16685] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 363.419180][T16685] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 363.426895][T16685] vhci_hcd vhci_hcd.0: Device attached [ 363.511168][T16674] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 363.543996][T16674] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 363.589527][T16674] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 363.630037][T16667] chnl_net:caif_netlink_parms(): no params data found [ 363.657059][T16685] vhci_hcd vhci_hcd.0: port 0 already used [ 363.674578][T16664] loop2: detected capacity change from 0 to 512 [ 363.681376][T16664] EXT4-fs: Ignoring removed oldalloc option [ 363.698968][T16664] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.4739: Parent and EA inode have the same ino 15 [ 363.717154][T16664] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.4739: Parent and EA inode have the same ino 15 [ 363.729861][T16664] EXT4-fs (loop2): 1 orphan inode deleted [ 363.735958][T16664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.816065][T16696] vhci_hcd: connection closed [ 363.816364][ T52] vhci_hcd: stop threads [ 363.825499][ T52] vhci_hcd: release socket [ 363.829970][ T52] vhci_hcd: disconnect device [ 363.859385][T16676] vhci_hcd: connection closed [ 363.859633][T16690] vhci_hcd: connection closed [ 363.864420][T16686] vhci_hcd: connection closed [ 363.869945][T16694] vhci_hcd: connection closed [ 363.875628][T16705] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.4748'. [ 363.889974][T16705] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 364.146642][T10441] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.180963][T16667] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.188270][T16667] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.198723][T16667] bridge_slave_0: entered allmulticast mode [ 364.205373][T16667] bridge_slave_0: entered promiscuous mode [ 364.216665][T16667] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.223803][T16667] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.231798][T16667] bridge_slave_1: entered allmulticast mode [ 364.238558][T16667] bridge_slave_1: entered promiscuous mode [ 364.271033][T16667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.297258][T16667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.388351][T16667] team0: Port device team_slave_0 added [ 364.410252][T16667] team0: Port device team_slave_1 added [ 364.480200][T16667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.487246][T16667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.513471][T16667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.623830][ T31] bridge_slave_1: left allmulticast mode [ 364.629572][ T31] bridge_slave_1: left promiscuous mode [ 364.635246][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.646854][ T31] bridge_slave_0: left allmulticast mode [ 364.652728][ T31] bridge_slave_0: left promiscuous mode [ 364.658507][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.728341][ T3393] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 364.780452][ T52] vhci_hcd: stop threads [ 364.784758][ T52] vhci_hcd: release socket [ 364.789335][ T52] vhci_hcd: disconnect device [ 364.796184][ T52] vhci_hcd: stop threads [ 364.800564][ T52] vhci_hcd: release socket [ 364.804998][ T52] vhci_hcd: disconnect device [ 364.812100][ T52] vhci_hcd: stop threads [ 364.816414][ T52] vhci_hcd: release socket [ 364.820885][ T52] vhci_hcd: disconnect device [ 364.830615][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.942188][ T52] vhci_hcd: stop threads [ 364.946662][ T52] vhci_hcd: release socket [ 364.951135][ T52] vhci_hcd: disconnect device [ 364.988263][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.997923][ T31] bond0 (unregistering): Released all slaves [ 365.368877][T16667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.375916][T16667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.402246][T16667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.413343][ T1035] infiniband syz2: ib_query_port failed (-19) [ 365.419513][T16727] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4754'. [ 365.450327][T16737] loop1: detected capacity change from 0 to 128 [ 365.454276][T16667] hsr_slave_0: entered promiscuous mode [ 365.463400][T16667] hsr_slave_1: entered promiscuous mode [ 365.469643][T16667] debugfs: 'hsr0' already exists in 'hsr' [ 365.475430][T16667] Cannot create hsr debugfs directory [ 365.508089][T16737] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.512663][ T31] tipc: Left network mode [ 365.531370][T16737] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 365.561567][T16747] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4758'. [ 365.601718][ T31] hsr_slave_0: left promiscuous mode [ 365.633070][ T31] hsr_slave_1: left promiscuous mode [ 365.665710][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.674530][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.747664][T16761] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 365.754226][T16761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 365.761901][T16761] vhci_hcd vhci_hcd.0: Device attached [ 365.788505][T16761] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 365.795359][T16761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 365.803201][T16761] vhci_hcd vhci_hcd.0: Device attached [ 365.824953][T16761] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 365.832650][T16761] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 365.840682][T16761] vhci_hcd vhci_hcd.0: Device attached [ 365.862958][ T31] team0 (unregistering): Port device team_slave_1 removed [ 365.867516][T16761] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 365.885113][ T31] team0 (unregistering): Port device team_slave_0 removed [ 365.983170][T16782] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 365.998210][T16782] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 366.022028][T16782] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 366.038686][T16667] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 366.065038][T16782] vhci_hcd vhci_hcd.0: port 0 already used [ 366.080702][T16667] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 366.089019][T16777] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 366.095806][T16777] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 366.103569][T16777] vhci_hcd vhci_hcd.0: Device attached [ 366.110624][T16761] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 366.117270][T16761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 366.124955][T16761] vhci_hcd vhci_hcd.0: Device attached [ 366.127728][ T37] usb 5-1: new low-speed USB device number 8 using vhci_hcd [ 366.133112][T16667] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 366.165496][T16667] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 366.237305][T16778] vhci_hcd: connection closed [ 366.237418][T16763] vhci_hcd: connection reset by peer [ 366.237439][T16768] vhci_hcd: connection closed [ 366.255068][T16773] vhci_hcd: connection closed [ 366.269255][T16779] vhci_hcd: connection closed [ 366.269283][ T36] vhci_hcd: stop threads [ 366.283061][ T36] vhci_hcd: release socket [ 366.287502][ T36] vhci_hcd: disconnect device [ 366.303709][T16667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.310595][ T36] vhci_hcd: stop threads [ 366.314869][ T36] vhci_hcd: release socket [ 366.319327][ T36] vhci_hcd: disconnect device [ 366.330451][T16667] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.337411][ T36] vhci_hcd: stop threads [ 366.341719][ T36] vhci_hcd: release socket [ 366.346143][ T36] vhci_hcd: disconnect device [ 366.373954][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.381107][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.399559][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.406757][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.415129][ T36] vhci_hcd: stop threads [ 366.419480][ T36] vhci_hcd: release socket [ 366.423923][ T36] vhci_hcd: disconnect device [ 366.432215][T11866] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.450490][T16667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.460962][T16667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.475736][ T36] vhci_hcd: stop threads [ 366.480139][ T36] vhci_hcd: release socket [ 366.484622][ T36] vhci_hcd: disconnect device [ 366.601164][T16667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.687722][ T5864] usb 7-1: enqueue for inactive port 0 [ 366.693452][ T5864] usb 7-1: enqueue for inactive port 0 [ 366.788175][ T5864] vhci_hcd: vhci_device speed not set [ 366.820950][T16853] loop5: detected capacity change from 0 to 512 [ 366.868835][T16862] loop2: detected capacity change from 0 to 128 [ 366.875298][T16853] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 366.898547][T16667] veth0_vlan: entered promiscuous mode [ 366.907029][T16862] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.909786][T16667] veth1_vlan: entered promiscuous mode [ 366.934802][T16853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 366.948087][T16853] System zones: 1-12 [ 366.955041][T16862] ext4 filesystem being mounted at /431/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 366.962648][T16667] veth0_macvtap: entered promiscuous mode [ 366.972376][T16853] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.4772: corrupted in-inode xattr: e_value size too large [ 366.997450][T16667] veth1_macvtap: entered promiscuous mode [ 367.020076][T16667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.031673][T16667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.045749][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.059602][T16853] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4772: couldn't read orphan inode 15 (err -117) [ 367.075412][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.085244][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.096838][T16853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.110402][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.639777][T16916] netlink: 'syz.3.4786': attribute type 10 has an invalid length. [ 367.650625][T16913] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 367.657175][T16913] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.664805][T16913] vhci_hcd vhci_hcd.0: Device attached [ 367.679672][T16916] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 367.691315][T16916] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 367.704088][T16916] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 367.714842][T16920] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 367.721487][T16920] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.729296][T16920] vhci_hcd vhci_hcd.0: Device attached [ 367.746755][T16913] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(11) [ 367.753413][T16913] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 367.761247][T16913] vhci_hcd vhci_hcd.0: Device attached [ 367.773247][T10441] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.791219][T16913] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 367.825398][T16913] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(17) [ 367.832046][T16913] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.839612][T16913] vhci_hcd vhci_hcd.0: Device attached [ 367.867995][T16920] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(20) [ 367.874791][T16920] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 367.882579][T16920] vhci_hcd vhci_hcd.0: Device attached [ 367.893089][T16913] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 367.901930][T16913] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 367.910179][ T5863] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 367.918079][T16913] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 367.938017][T16913] vhci_hcd vhci_hcd.0: port 0 already used [ 367.972064][T16924] vhci_hcd: connection closed [ 367.972223][T16917] vhci_hcd: connection reset by peer [ 367.972249][T16927] vhci_hcd: connection closed [ 367.977110][T16921] vhci_hcd: connection closed [ 367.982686][ T57] vhci_hcd: stop threads [ 367.996051][ T57] vhci_hcd: release socket [ 368.000567][ T57] vhci_hcd: disconnect device [ 368.006157][T16932] vhci_hcd: connection closed [ 368.009171][ T57] vhci_hcd: stop threads [ 368.018193][ T57] vhci_hcd: release socket [ 368.022637][ T57] vhci_hcd: disconnect device [ 368.037894][ T57] vhci_hcd: stop threads [ 368.042182][ T57] vhci_hcd: release socket [ 368.046623][ T57] vhci_hcd: disconnect device [ 368.097817][ T57] vhci_hcd: stop threads [ 368.102183][ T57] vhci_hcd: release socket [ 368.106692][ T57] vhci_hcd: disconnect device [ 368.138972][ T57] vhci_hcd: stop threads [ 368.143368][ T57] vhci_hcd: release socket [ 368.147885][ T57] vhci_hcd: disconnect device [ 368.271910][T16951] netlink: 'syz.2.4794': attribute type 21 has an invalid length. [ 368.292210][T16951] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4794'. [ 368.763192][T16296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.009504][T16979] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 369.016091][T16979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.023708][T16979] vhci_hcd vhci_hcd.0: Device attached [ 369.103418][T16987] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 369.110205][T16987] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 369.117952][T16987] vhci_hcd vhci_hcd.0: Device attached [ 369.137751][T16979] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(11) [ 369.144422][T16979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.150373][T16987] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 369.152020][T16979] vhci_hcd vhci_hcd.0: Device attached [ 369.175648][T16979] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(13) [ 369.182297][T16979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.189884][T16979] vhci_hcd vhci_hcd.0: Device attached [ 369.225240][T16987] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(20) [ 369.231920][T16987] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 369.239849][T16987] vhci_hcd vhci_hcd.0: Device attached [ 369.562407][T16979] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 369.579499][T16979] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 369.608176][T16979] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 369.680409][T16979] vhci_hcd vhci_hcd.0: port 0 already used [ 369.732834][T16994] vhci_hcd: connection closed [ 369.733199][ T12] vhci_hcd: stop threads [ 369.742314][ T12] vhci_hcd: release socket [ 369.746749][ T12] vhci_hcd: disconnect device [ 369.759901][T16981] vhci_hcd: connection closed [ 369.760181][T16984] vhci_hcd: connection closed [ 369.765020][T16992] vhci_hcd: connection closed [ 369.771977][T16988] vhci_hcd: connection closed [ 369.836428][ T12] vhci_hcd: stop threads [ 369.845460][ T12] vhci_hcd: release socket [ 369.849924][ T12] vhci_hcd: disconnect device [ 369.889454][T17011] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4814'. [ 369.970084][ T12] vhci_hcd: stop threads [ 369.974485][ T12] vhci_hcd: release socket [ 369.978990][ T12] vhci_hcd: disconnect device [ 370.111190][ T12] vhci_hcd: stop threads [ 370.115535][ T12] vhci_hcd: release socket [ 370.118383][ T5861] usb usb8-port1: attempt power cycle [ 370.120013][ T12] vhci_hcd: disconnect device [ 370.167693][ T12] vhci_hcd: stop threads [ 370.171991][ T12] vhci_hcd: release socket [ 370.176503][ T12] vhci_hcd: disconnect device [ 370.500730][T17026] loop2: detected capacity change from 0 to 256 [ 370.507312][T17026] vfat: Unknown parameter '' [ 370.517800][ T29] audit: type=1400 audit(1759883630.172:419): avc: denied { setopt } for pid=17024 comm="syz.3.4821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.182351][ T37] usb 5-1: enqueue for inactive port 0 [ 371.197720][ T37] usb 5-1: enqueue for inactive port 0 [ 371.637800][ T37] vhci_hcd: vhci_device speed not set [ 372.927762][ T5863] usb 13-1: enqueue for inactive port 0 [ 372.933438][ T5863] usb 13-1: enqueue for inactive port 0 [ 372.998031][ T5861] usb usb8-port1: unable to enumerate USB device [ 373.007694][ T5863] vhci_hcd: vhci_device speed not set [ 374.438031][ T5860] usb usb6-port1: attempt power cycle [ 375.803989][T17082] vcan0 speed is unknown, defaulting to 1000 [ 375.987932][ T3415] usb usb14-port1: attempt power cycle [ 376.687998][ T5860] usb usb6-port1: unable to enumerate USB device [ 377.838084][ T3415] usb usb14-port1: unable to enumerate USB device [ 379.411981][T17149] loop6: detected capacity change from 0 to 512 [ 379.448251][T17149] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 379.498156][T17149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 379.506119][T17149] System zones: 1-12 [ 379.568022][T17149] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.4852: corrupted in-inode xattr: e_value size too large [ 379.617725][T17149] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4852: couldn't read orphan inode 15 (err -117) [ 379.678455][T17149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.858013][T16667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.010348][T17170] vcan0 speed is unknown, defaulting to 1000 [ 381.828999][T17173] sit0: entered allmulticast mode [ 381.840836][T17173] sit0: entered promiscuous mode [ 384.389936][T17187] vcan0 speed is unknown, defaulting to 1000 [ 385.529109][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.558511][T17223] netlink: 'syz.6.4866': attribute type 1 has an invalid length. [ 385.570366][T17208] vcan0 speed is unknown, defaulting to 1000 [ 385.580243][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.620875][T17187] chnl_net:caif_netlink_parms(): no params data found [ 385.679649][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.782498][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.870808][T17187] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.878006][T17187] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.885702][T17187] bridge_slave_0: entered allmulticast mode [ 385.908332][T17187] bridge_slave_0: entered promiscuous mode [ 385.932453][T17187] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.939639][T17187] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.969278][T17187] bridge_slave_1: entered allmulticast mode [ 385.997860][T17187] bridge_slave_1: entered promiscuous mode [ 386.055961][T17187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.045266][T17187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.124925][T17187] team0: Port device team_slave_0 added [ 387.144320][T17187] team0: Port device team_slave_1 added [ 387.167090][ T31] bridge_slave_1: left allmulticast mode [ 387.172943][ T31] bridge_slave_1: left promiscuous mode [ 387.178632][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.227923][ T31] bridge_slave_0: left allmulticast mode [ 387.233686][ T31] bridge_slave_0: left promiscuous mode [ 387.239447][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.566595][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.586432][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.598820][ T31] bond0 (unregistering): Released all slaves [ 387.971603][T17187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.978723][T17187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.004883][T17187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.061244][T17187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.068387][T17187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.094443][T17187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.188697][T17187] hsr_slave_0: entered promiscuous mode [ 388.197032][T17187] hsr_slave_1: entered promiscuous mode [ 388.210488][T17187] debugfs: 'hsr0' already exists in 'hsr' [ 388.216318][T17187] Cannot create hsr debugfs directory [ 388.413786][T17187] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 388.440228][T17187] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 388.460206][T17187] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 388.478617][T17187] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 388.577719][ T31] tipc: Left network mode [ 388.626658][T17187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.646380][T17187] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.658149][T16639] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.665240][T16639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.691858][T17208] chnl_net:caif_netlink_parms(): no params data found [ 388.751678][ T31] hsr_slave_0: left promiscuous mode [ 388.768810][ T31] hsr_slave_1: left promiscuous mode [ 388.777751][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.785143][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.808250][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.815765][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.861454][ T31] veth1_macvtap: left promiscuous mode [ 388.867002][ T31] veth0_macvtap: left promiscuous mode [ 388.873411][ T31] veth1_vlan: left promiscuous mode [ 388.888014][ T31] veth0_vlan: left promiscuous mode [ 388.993372][ T31] team0 (unregistering): Port device team_slave_1 removed [ 389.004671][ T31] team0 (unregistering): Port device team_slave_0 removed [ 389.052735][T16639] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.059965][T16639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.151750][T17187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.214255][T17208] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.221402][T17208] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.247853][T17208] bridge_slave_0: entered allmulticast mode [ 389.260164][T17208] bridge_slave_0: entered promiscuous mode [ 389.281930][T17208] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.289172][T17208] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.298371][T17208] bridge_slave_1: entered allmulticast mode [ 389.305003][T17208] bridge_slave_1: entered promiscuous mode [ 389.383237][T17208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.413500][T17269] vcan0 speed is unknown, defaulting to 1000 [ 389.441409][T17208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.459170][T17187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.500369][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.542520][T17208] team0: Port device team_slave_0 added [ 389.568822][T17208] team0: Port device team_slave_1 added [ 389.664451][T17208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.671556][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.697880][T17208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.748484][T17208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.755462][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.781598][T17208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.011796][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.142214][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.168052][T17269] chnl_net:caif_netlink_parms(): no params data found [ 390.192882][T17208] hsr_slave_0: entered promiscuous mode [ 390.208563][T17208] hsr_slave_1: entered promiscuous mode [ 390.227976][T17208] debugfs: 'hsr0' already exists in 'hsr' [ 390.233734][T17208] Cannot create hsr debugfs directory [ 390.248549][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.449251][T17269] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.456440][T17269] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.473976][T17269] bridge_slave_0: entered allmulticast mode [ 390.484581][T17269] bridge_slave_0: entered promiscuous mode [ 390.498814][T17269] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.505905][T17269] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.534376][T17269] bridge_slave_1: entered allmulticast mode [ 390.544978][T17269] bridge_slave_1: entered promiscuous mode [ 390.601415][T17187] veth0_vlan: entered promiscuous mode [ 390.609694][T17269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.620064][ T31] bridge_slave_1: left allmulticast mode [ 390.625840][ T31] bridge_slave_1: left promiscuous mode [ 390.631574][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.648321][ T31] bridge_slave_0: left allmulticast mode [ 390.654074][ T31] bridge_slave_0: left promiscuous mode [ 390.659882][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.790214][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.808050][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.818607][ T31] bond0 (unregistering): Released all slaves [ 390.839091][T17269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.848406][T17187] veth1_vlan: entered promiscuous mode [ 390.889808][ T31] tipc: Disabling bearer [ 390.895138][ T31] tipc: Left network mode [ 390.918455][T17269] team0: Port device team_slave_0 added [ 390.925100][T17269] team0: Port device team_slave_1 added [ 390.974476][T17187] veth0_macvtap: entered promiscuous mode [ 390.992440][T17187] veth1_macvtap: entered promiscuous mode [ 391.011090][ T31] hsr_slave_0: left promiscuous mode [ 391.023710][ T31] hsr_slave_1: left promiscuous mode [ 391.038015][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.045445][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.069150][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.076708][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.105258][ T31] veth1_macvtap: left promiscuous mode [ 391.115318][ T31] veth1_vlan: left promiscuous mode [ 391.127731][ T31] veth0_vlan: left promiscuous mode [ 391.260079][ T31] team0 (unregistering): Port device team_slave_1 removed [ 391.280788][ T31] team0 (unregistering): Port device team_slave_0 removed [ 391.369235][T17269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.376273][T17269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.402559][T17269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.453814][T17187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.472819][T17269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.479873][T17269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.505860][T17269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.521942][T17187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.539422][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.548410][T17208] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 391.561063][T17208] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 391.652729][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.671296][T17208] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 391.693115][T17269] hsr_slave_0: entered promiscuous mode [ 391.699831][T17269] hsr_slave_1: entered promiscuous mode [ 391.710301][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.719344][T17208] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 392.098453][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.294712][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.471539][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.676421][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.698421][T17370] vcan0 speed is unknown, defaulting to 1000 [ 392.725641][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.811607][T17269] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 392.853518][T17269] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 392.888369][T17269] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 392.908559][T17269] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 392.924782][T17208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.952940][ T31] bridge_slave_1: left allmulticast mode [ 392.958671][ T31] bridge_slave_1: left promiscuous mode [ 392.964455][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.978040][ T31] bridge_slave_0: left allmulticast mode [ 392.983839][ T31] bridge_slave_0: left promiscuous mode [ 392.989923][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.100204][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.110351][ T31] bond0 (unregistering): Released all slaves [ 393.172361][T17208] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.180383][ T31] tipc: Left network mode [ 393.233312][T17269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.260655][T17370] chnl_net:caif_netlink_parms(): no params data found [ 393.279709][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.286802][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.297144][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.304328][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.319963][ T31] hsr_slave_0: left promiscuous mode [ 393.325741][ T31] hsr_slave_1: left promiscuous mode [ 393.331883][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.339404][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.347168][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.354765][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.365364][ T31] veth1_macvtap: left promiscuous mode [ 393.371527][ T31] veth0_macvtap: left promiscuous mode [ 393.377303][ T31] veth1_vlan: left promiscuous mode [ 393.382917][ T31] veth0_vlan: left promiscuous mode [ 393.471161][ T31] team0 (unregistering): Port device team_slave_1 removed [ 393.482545][ T31] team0 (unregistering): Port device team_slave_0 removed [ 393.587747][ T1035] vcan0 speed is unknown, defaulting to 1000 [ 393.593873][ T1035] syz1: Port: 1 Link DOWN [ 393.635094][T17269] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.671610][T17208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.761245][T17370] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.768490][T17370] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.796718][T17370] bridge_slave_0: entered allmulticast mode [ 393.998906][T17370] bridge_slave_0: entered promiscuous mode [ 394.020533][T17370] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.027805][T17370] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.061000][T17370] bridge_slave_1: entered allmulticast mode [ 394.092185][T17370] bridge_slave_1: entered promiscuous mode [ 394.122451][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.129974][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.217534][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.224762][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.254874][T17370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.284100][T17269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.294576][T17269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.339327][T17370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.355481][T17208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.406630][T17370] team0: Port device team_slave_0 added [ 394.421297][T17370] team0: Port device team_slave_1 added [ 394.464338][T17370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.471382][T17370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.497341][T17370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.520533][T17370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.527508][T17370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.553696][T17370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.568645][T17480] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4891'. [ 394.635962][T17269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.648417][T17483] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4891'. [ 394.668897][T17370] hsr_slave_0: entered promiscuous mode [ 394.675034][T17370] hsr_slave_1: entered promiscuous mode [ 394.699725][T17370] debugfs: 'hsr0' already exists in 'hsr' [ 394.705751][T17370] Cannot create hsr debugfs directory [ 394.712521][T17480] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4891'. [ 394.769272][T17208] veth0_vlan: entered promiscuous mode [ 394.801973][T17208] veth1_vlan: entered promiscuous mode [ 394.946712][T17208] veth0_macvtap: entered promiscuous mode [ 394.972355][T17208] veth1_macvtap: entered promiscuous mode [ 395.480607][T17269] veth0_vlan: entered promiscuous mode [ 395.493316][T17208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.561120][T17269] veth1_vlan: entered promiscuous mode [ 395.573729][T17208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.624509][T17269] veth0_macvtap: entered promiscuous mode [ 395.699841][ T52] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.713353][T17269] veth1_macvtap: entered promiscuous mode [ 395.756662][ T52] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.791942][T17269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.849955][ T52] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.860785][T17269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.875210][ T52] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.921260][ T52] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.950426][ T52] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.988139][ T52] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.008981][T17543] sit0: entered allmulticast mode [ 396.018384][ T52] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.029187][T17370] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 396.048835][T17543] sit0: entered promiscuous mode [ 396.338096][T17574] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4897'. [ 396.807753][T17370] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 396.874074][T17370] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 396.907023][T17370] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 396.926789][T17584] netlink: 'syz.8.4905': attribute type 1 has an invalid length. [ 396.935277][T17584] netlink: 1284 bytes leftover after parsing attributes in process `syz.8.4905'. [ 397.072093][T17584] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 397.195841][T17370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.262800][T17370] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.308962][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.316080][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.383749][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.390880][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.555445][T17631] tipc: Started in network mode [ 397.560448][T17631] tipc: Node identity 9adfcf4798f3, cluster identity 4711 [ 397.567945][T17631] tipc: Enabled bearer , priority 0 [ 397.577069][T17631] syzkaller0: entered promiscuous mode [ 397.582676][T17631] syzkaller0: entered allmulticast mode [ 397.648736][T17631] tipc: Resetting bearer [ 397.687844][T17370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.731934][T17630] tipc: Resetting bearer [ 397.752714][T17630] tipc: Disabling bearer [ 397.815582][T17651] loop9: detected capacity change from 0 to 512 [ 397.843046][T17651] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 398.047226][T17644] loop9: detected capacity change from 0 to 512 [ 398.080671][T17644] EXT4-fs: Ignoring removed oldalloc option [ 398.143296][T17644] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.4917: Parent and EA inode have the same ino 15 [ 398.192720][T17644] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.4917: Parent and EA inode have the same ino 15 [ 398.256143][T17644] EXT4-fs (loop9): 1 orphan inode deleted [ 398.286816][T17644] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.339001][T17370] veth0_vlan: entered promiscuous mode [ 398.359189][T17370] veth1_vlan: entered promiscuous mode [ 398.528398][T17370] veth0_macvtap: entered promiscuous mode [ 398.536274][T17370] veth1_macvtap: entered promiscuous mode [ 398.602678][T17701] loop6: detected capacity change from 0 to 256 [ 398.609714][T17701] vfat: Unknown parameter '' [ 398.644733][T17269] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.511648][T17370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.520910][T17370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.534097][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.565786][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.617553][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.663866][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.404677][T17791] netlink: 'syz.7.4936': attribute type 15 has an invalid length. [ 400.412684][T17791] netlink: 'syz.7.4936': attribute type 7 has an invalid length. [ 400.420487][T17791] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4936'. [ 400.836126][T17822] tipc: Started in network mode [ 400.841075][T17822] tipc: Node identity 7ab25a7d01a5, cluster identity 4711 [ 400.848323][T17822] tipc: Enabled bearer , priority 0 [ 400.887373][T17823] syzkaller0: entered promiscuous mode [ 400.892976][T17823] syzkaller0: entered allmulticast mode [ 400.930187][T17822] tipc: Resetting bearer [ 400.936860][T17819] tipc: Resetting bearer [ 400.969380][T17819] tipc: Disabling bearer [ 401.251330][T17840] loop7: detected capacity change from 0 to 512 [ 401.312189][T17840] EXT4-fs (loop7): orphan cleanup on readonly fs [ 401.347250][T17840] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 401.357798][T17840] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 401.367189][T17840] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.4948: Failed to acquire dquot type 1 [ 401.524523][T17840] EXT4-fs (loop7): 1 truncate cleaned up [ 401.545787][T17840] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 401.633379][T17844] loop9: detected capacity change from 0 to 512 [ 401.672719][T17844] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 401.706619][T17873] netlink: 'syz.6.4968': attribute type 10 has an invalid length. [ 401.762110][T17873] team0: Port device netdevsim0 added [ 401.988727][T17888] loop9: detected capacity change from 0 to 128 [ 402.017967][T17888] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 402.037844][T17888] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 402.290150][ T29] audit: type=1400 audit(1759883661.972:420): avc: denied { create } for pid=17904 comm="syz.4.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 402.360514][ T29] audit: type=1400 audit(1759883662.012:421): avc: denied { module_request } for pid=17904 comm="syz.4.4982" kmod="net-pf-11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 402.599061][T17915] tipc: Started in network mode [ 402.603984][T17915] tipc: Node identity ea5b6a07e9b2, cluster identity 4711 [ 402.611510][T17915] tipc: Enabled bearer , priority 0 [ 402.738145][T17915] syzkaller0: entered promiscuous mode [ 402.743653][T17915] syzkaller0: entered allmulticast mode [ 402.803154][T17915] tipc: Resetting bearer [ 402.870540][T17269] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 402.880652][T17913] tipc: Resetting bearer [ 402.896994][T17913] tipc: Disabling bearer [ 402.946203][ T156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.046539][ T156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.125159][T17938] netlink: 188 bytes leftover after parsing attributes in process `syz.8.4995'. [ 403.137591][ T156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.200307][ T156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.218721][T17946] loop4: detected capacity change from 0 to 128 [ 403.249166][T17946] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 403.263969][T17946] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 403.317887][ T29] audit: type=1400 audit(1759883663.002:422): avc: denied { mounton } for pid=17952 comm="syz.6.5001" path="/86/file0" dev="proc" ino=61115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=dir permissive=1 [ 403.370908][ T29] audit: type=1400 audit(1759883663.012:423): avc: denied { unmount } for pid=16667 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 403.392450][ T156] bridge_slave_1: left allmulticast mode [ 403.398201][ T156] bridge_slave_1: left promiscuous mode [ 403.404035][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.421097][ T156] bridge_slave_0: left allmulticast mode [ 403.426873][ T156] bridge_slave_0: left promiscuous mode [ 403.432771][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.642082][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.665837][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.699322][ T156] bond0 (unregistering): Released all slaves [ 403.760351][ T156] tipc: Left network mode [ 403.780786][ T156] hsr_slave_0: left promiscuous mode [ 403.791093][ T156] hsr_slave_1: left promiscuous mode [ 403.796939][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.804616][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.829749][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.837240][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.849818][ T156] veth1_macvtap: left promiscuous mode [ 403.855403][ T156] veth0_macvtap: left promiscuous mode [ 403.866664][ T156] veth1_vlan: left promiscuous mode [ 403.878332][ T156] veth0_vlan: left promiscuous mode [ 404.055996][T17370] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.187847][ T156] team0 (unregistering): Port device team_slave_1 removed [ 404.198119][ T156] team0 (unregistering): Port device team_slave_0 removed [ 404.249830][T18010] loop8: detected capacity change from 0 to 512 [ 404.392121][T18010] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 404.647068][T18010] loop8: detected capacity change from 0 to 512 [ 404.653936][T18010] EXT4-fs: Ignoring removed oldalloc option [ 404.681793][T18010] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.5011: Parent and EA inode have the same ino 15 [ 404.696046][T18010] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.5011: Parent and EA inode have the same ino 15 [ 404.708794][T18010] EXT4-fs (loop8): 1 orphan inode deleted [ 404.714963][T18010] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.178752][T18042] loop6: detected capacity change from 0 to 256 [ 405.185473][T18042] vfat: Unknown parameter '' [ 405.406377][T18043] loop4: detected capacity change from 0 to 512 [ 405.469450][T18043] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 405.854861][T18072] loop9: detected capacity change from 0 to 256 [ 405.869041][T17187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.931722][T18072] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 405.990094][T18072] FAT-fs (loop9): Directory bread(block 64) failed [ 406.023263][T18072] FAT-fs (loop9): Directory bread(block 65) failed [ 406.067814][T18072] FAT-fs (loop9): Directory bread(block 66) failed [ 406.103723][T18072] FAT-fs (loop9): Directory bread(block 67) failed [ 406.169810][T18072] FAT-fs (loop9): Directory bread(block 68) failed [ 406.222440][T18072] FAT-fs (loop9): Directory bread(block 69) failed [ 406.277769][T18072] FAT-fs (loop9): Directory bread(block 70) failed [ 406.284348][T18072] FAT-fs (loop9): Directory bread(block 71) failed [ 406.347730][T18072] FAT-fs (loop9): Directory bread(block 72) failed [ 406.381566][T18072] FAT-fs (loop9): Directory bread(block 73) failed [ 408.341661][T17208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.081069][T18168] loop7: detected capacity change from 0 to 512 [ 409.122477][T18168] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 409.715212][T18183] loop7: detected capacity change from 0 to 512 [ 409.798154][T18183] EXT4-fs (loop7): orphan cleanup on readonly fs [ 409.805029][T18183] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 409.815986][T18183] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 409.825492][T18183] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.5044: Failed to acquire dquot type 1 [ 409.838532][T18183] EXT4-fs (loop7): 1 truncate cleaned up [ 409.964685][T18189] loop8: detected capacity change from 0 to 512 [ 409.973754][T18189] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 409.988133][T18189] loop8: detected capacity change from 0 to 512 [ 409.994832][T18189] EXT4-fs: Ignoring removed oldalloc option [ 410.014718][T18189] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.5047: Parent and EA inode have the same ino 15 [ 410.055884][T18189] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.5047: Parent and EA inode have the same ino 15 [ 410.068707][T18189] EXT4-fs (loop8): 1 orphan inode deleted [ 410.075034][T18189] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.610346][T18183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 411.041703][T17187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.106759][T18221] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=18221 comm=syz.9.5060 [ 411.178423][T18221] netlink: 216 bytes leftover after parsing attributes in process `syz.9.5060'. [ 413.181088][T18315] loop9: detected capacity change from 0 to 512 [ 413.237599][T18315] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 413.700901][T18333] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5081'. [ 413.709959][T18333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5081'. [ 414.269283][T17208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.250808][T18386] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5107'. [ 415.326365][ T29] audit: type=1400 audit(1759883675.012:424): avc: denied { audit_write } for pid=18391 comm="syz.7.5110" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 415.347688][ T29] audit: type=1107 audit(1759883675.012:425): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 415.647007][T18406] loop9: detected capacity change from 0 to 256 [ 415.718488][T18406] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 415.797523][T18411] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=18411 comm=syz.7.5117 [ 415.920871][T18406] FAT-fs (loop9): Directory bread(block 64) failed [ 415.934690][T18411] netlink: 216 bytes leftover after parsing attributes in process `syz.7.5117'. [ 415.994380][T18406] FAT-fs (loop9): Directory bread(block 65) failed [ 416.062795][T18406] FAT-fs (loop9): Directory bread(block 66) failed [ 416.134161][T18406] FAT-fs (loop9): Directory bread(block 67) failed [ 416.240437][T18406] FAT-fs (loop9): Directory bread(block 68) failed [ 416.309729][T18406] FAT-fs (loop9): Directory bread(block 69) failed [ 416.384752][T18406] FAT-fs (loop9): Directory bread(block 70) failed [ 416.448026][T18406] FAT-fs (loop9): Directory bread(block 71) failed [ 416.518717][T18406] FAT-fs (loop9): Directory bread(block 72) failed [ 416.525342][T18406] FAT-fs (loop9): Directory bread(block 73) failed [ 416.652527][ T29] audit: type=1400 audit(1759883676.342:426): avc: denied { write } for pid=18422 comm="syz.7.5123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 416.691225][T18423] blkio.reset_stats is deprecated [ 416.858770][T18425] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5124'. [ 417.376915][T18443] loop7: detected capacity change from 0 to 512 [ 417.473718][T18443] EXT4-fs (loop7): orphan cleanup on readonly fs [ 417.481110][T18443] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 417.491515][T18443] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 417.500952][T18443] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.5131: Failed to acquire dquot type 1 [ 417.515612][T18443] EXT4-fs (loop7): 1 truncate cleaned up [ 418.264670][T18443] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 418.957290][T17187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.179032][T18477] loop8: detected capacity change from 0 to 256 [ 419.185746][T18477] vfat: Unknown parameter '' [ 419.201863][T18477] loop8: detected capacity change from 0 to 2048 [ 419.235058][T18478] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5136'. [ 419.238912][T18477] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.256254][T18477] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.957776][T18508] netlink: 216 bytes leftover after parsing attributes in process `syz.7.5140'. [ 420.068399][ T29] audit: type=1400 audit(1759883679.752:427): avc: denied { nlmsg_read } for pid=18522 comm="syz.7.5142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 420.458634][T18537] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5147'. [ 422.182515][T18570] loop9: detected capacity change from 0 to 256 [ 422.189275][T18570] vfat: Unknown parameter '' [ 423.808850][T18591] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5167'. [ 423.900686][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.960854][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.020840][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.059451][T18579] chnl_net:caif_netlink_parms(): no params data found [ 424.133519][T18602] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5171'. [ 424.173137][ T36] team0: Port device netdevsim0 removed [ 424.201922][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.340671][T18579] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.347811][T18579] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.381034][T17208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.393831][T18579] bridge_slave_0: entered allmulticast mode [ 424.421139][T18579] bridge_slave_0: entered promiscuous mode [ 424.466780][T18579] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.474046][T18579] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.507782][T18579] bridge_slave_1: entered allmulticast mode [ 424.521794][T18579] bridge_slave_1: entered promiscuous mode [ 424.589944][T18579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.603304][ T36] bridge_slave_1: left allmulticast mode [ 424.609104][ T36] bridge_slave_1: left promiscuous mode [ 424.614914][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.658784][ T36] bridge_slave_0: left allmulticast mode [ 424.664497][ T36] bridge_slave_0: left promiscuous mode [ 424.670321][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.959927][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.983694][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.994196][ T36] bond0 (unregistering): Released all slaves [ 425.003874][T18579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.036937][ T36] tipc: Left network mode [ 425.055633][ T36] hsr_slave_0: left promiscuous mode [ 425.073778][ T36] hsr_slave_1: left promiscuous mode [ 425.081363][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.088865][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.096895][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.104377][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.126690][ T36] veth1_macvtap: left promiscuous mode [ 425.132495][ T36] veth0_macvtap: left promiscuous mode [ 425.138795][ T36] veth1_vlan: left promiscuous mode [ 425.144046][ T36] veth0_vlan: left promiscuous mode [ 425.272777][ T36] team0 (unregistering): Port device team_slave_1 removed [ 425.290887][ T36] team0 (unregistering): Port device team_slave_0 removed [ 425.863985][T18579] team0: Port device team_slave_0 added [ 425.871412][T18579] team0: Port device team_slave_1 added [ 425.893295][T18579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.900360][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.926422][T18579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.951429][T18579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.958450][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.985011][T18579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.076949][T18579] hsr_slave_0: entered promiscuous mode [ 426.097824][T18579] hsr_slave_1: entered promiscuous mode [ 426.103976][T18579] debugfs: 'hsr0' already exists in 'hsr' [ 426.109778][T18579] Cannot create hsr debugfs directory [ 426.266742][ T29] audit: type=1400 audit(1759883685.952:428): avc: denied { cpu } for pid=18678 comm="syz.7.5189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 426.380174][T18632] chnl_net:caif_netlink_parms(): no params data found [ 426.470751][T18709] loop9: detected capacity change from 0 to 128 [ 426.497134][T18709] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.516186][T18709] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 426.544566][T18632] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.551752][T18632] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.559939][T18632] bridge_slave_0: entered allmulticast mode [ 426.566662][T18632] bridge_slave_0: entered promiscuous mode [ 426.573852][T18632] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.581035][T18632] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.589112][T18632] bridge_slave_1: entered allmulticast mode [ 426.595710][T18632] bridge_slave_1: entered promiscuous mode [ 426.664631][T18632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.674741][T18579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.687128][T18579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 426.701284][T18632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.710827][T18579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 426.724953][T18579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 426.769538][T18632] team0: Port device team_slave_0 added [ 426.777707][T18632] team0: Port device team_slave_1 added [ 426.864207][T18632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.871295][T18632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.897502][T18632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.935753][T18632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.942795][T18632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.968918][T18632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.016980][T18579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.039424][T18579] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.071821][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.079014][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.135699][T18632] hsr_slave_0: entered promiscuous mode [ 427.145284][T18632] hsr_slave_1: entered promiscuous mode [ 427.155865][T18632] debugfs: 'hsr0' already exists in 'hsr' [ 427.161678][T18632] Cannot create hsr debugfs directory [ 427.169405][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.176480][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.255228][T18579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.338209][T17269] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 427.465529][T18579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.592811][T18579] veth0_vlan: entered promiscuous mode [ 427.600999][T18579] veth1_vlan: entered promiscuous mode [ 427.635563][T18579] veth0_macvtap: entered promiscuous mode [ 427.668658][T18579] veth1_macvtap: entered promiscuous mode [ 427.716428][T18579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.736072][T18632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 427.757386][T18579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.766015][T18632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 427.788230][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.797002][T18632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 427.815416][T18632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 427.837950][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.847179][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.877461][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.022341][T18632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.061646][T18632] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.102159][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.109282][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.136418][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.143543][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.212867][T18632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.352120][T18632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.391145][T18852] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5207'. [ 428.562523][T18632] veth0_vlan: entered promiscuous mode [ 428.585026][T18632] veth1_vlan: entered promiscuous mode [ 428.627935][T18632] veth0_macvtap: entered promiscuous mode [ 428.635700][T18632] veth1_macvtap: entered promiscuous mode [ 428.670299][T18632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.725423][T18632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.739436][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.752121][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.791285][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.823002][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.052919][T18924] sctp: [Deprecated]: syz.1.5222 (pid 18924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.052919][T18924] Use struct sctp_sack_info instead [ 429.647242][T18998] sctp: [Deprecated]: syz.1.5242 (pid 18998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.647242][T18998] Use struct sctp_sack_info instead [ 431.648339][T19077] netlink: 'syz.7.5260': attribute type 21 has an invalid length. [ 431.656229][T19077] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5260'. [ 431.721882][T19077] netlink: 'syz.7.5260': attribute type 4 has an invalid length. [ 431.730412][T19077] netlink: 'syz.7.5260': attribute type 5 has an invalid length. [ 431.738403][T19077] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5260'. [ 432.049757][T19135] loop1: detected capacity change from 0 to 256 [ 432.160275][T19135] vfat: Unknown parameter '' [ 432.441548][T19170] netlink: 'syz.0.5278': attribute type 29 has an invalid length. [ 432.514252][T19170] netlink: 'syz.0.5278': attribute type 29 has an invalid length. [ 432.639625][T19170] netlink: 'syz.0.5278': attribute type 29 has an invalid length. [ 432.650650][T19185] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5281'. [ 432.901109][T19202] loop7: detected capacity change from 0 to 128 [ 432.947479][T19202] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 433.006383][T19202] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 433.189224][T19217] loop8: detected capacity change from 0 to 512 [ 433.200081][T19217] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 433.557166][T19263] loop9: detected capacity change from 0 to 512 [ 433.635258][T19263] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 433.910075][T17187] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 434.113428][T19276] sctp: [Deprecated]: syz.0.5301 (pid 19276) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.113428][T19276] Use struct sctp_sack_info instead [ 434.453614][T19263] loop9: detected capacity change from 0 to 512 [ 434.460440][T19263] EXT4-fs: Ignoring removed oldalloc option [ 434.473696][T19263] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.5294: Parent and EA inode have the same ino 15 [ 434.490797][T19263] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.5294: Parent and EA inode have the same ino 15 [ 434.503812][T19263] EXT4-fs (loop9): 1 orphan inode deleted [ 434.510641][T19263] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.883205][T19310] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5308'. [ 434.946480][T19314] loop0: detected capacity change from 0 to 128 [ 434.985851][T19314] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 435.033230][T19314] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 435.169765][T17269] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.412460][T19354] netlink: 'syz.9.5317': attribute type 10 has an invalid length. [ 435.420725][T19354] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5317'. [ 435.457722][T19362] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5321'. [ 435.469617][T19354] team0: entered promiscuous mode [ 435.474870][T19354] team_slave_0: entered promiscuous mode [ 435.480784][T19354] team_slave_1: entered promiscuous mode [ 435.487025][T19354] team0: entered allmulticast mode [ 435.492682][T19354] team_slave_0: entered allmulticast mode [ 435.498623][T19354] team_slave_1: entered allmulticast mode [ 435.520250][T19362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5321'. [ 435.526211][T19354] bridge0: port 3(team0) entered blocking state [ 435.535854][T19354] bridge0: port 3(team0) entered disabled state [ 435.571083][T19362] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5321'. [ 435.580027][T19354] bridge0: port 3(team0) entered blocking state [ 435.580148][T19354] bridge0: port 3(team0) entered forwarding state [ 435.622246][T19362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5321'. [ 435.631307][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5321'. [ 435.683426][ T29] audit: type=1400 audit(1759883695.372:429): avc: denied { nlmsg_read } for pid=19361 comm="syz.7.5321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 435.815730][T18579] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.112476][T19397] loop7: detected capacity change from 0 to 512 [ 436.120994][T19397] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 436.202212][T19409] netlink: 'syz.9.5327': attribute type 1 has an invalid length. [ 436.251332][T19409] netlink: 'syz.9.5327': attribute type 10 has an invalid length. [ 436.260107][ T29] audit: type=1400 audit(1759883695.942:430): avc: denied { write } for pid=19408 comm="syz.9.5327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 436.279930][T19409] geneve1: entered promiscuous mode [ 436.302744][T19409] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 436.498188][T19421] syzkaller0: entered promiscuous mode [ 436.503721][T19421] syzkaller0: entered allmulticast mode [ 436.932932][T19453] __nla_validate_parse: 2 callbacks suppressed [ 436.932948][T19453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5343'. [ 437.805739][T19491] loop1: detected capacity change from 0 to 256 [ 437.867301][T19491] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 437.909777][T19491] FAT-fs (loop1): Directory bread(block 64) failed [ 437.916377][T19491] FAT-fs (loop1): Directory bread(block 65) failed [ 437.923087][T19491] FAT-fs (loop1): Directory bread(block 66) failed [ 437.929647][T19491] FAT-fs (loop1): Directory bread(block 67) failed [ 437.936202][T19491] FAT-fs (loop1): Directory bread(block 68) failed [ 437.942761][T19491] FAT-fs (loop1): Directory bread(block 69) failed [ 437.949353][T19491] FAT-fs (loop1): Directory bread(block 70) failed [ 437.955966][T19491] FAT-fs (loop1): Directory bread(block 71) failed [ 437.962730][T19491] FAT-fs (loop1): Directory bread(block 72) failed [ 437.969395][T19491] FAT-fs (loop1): Directory bread(block 73) failed [ 437.996742][T19489] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5359'. [ 438.253064][T19496] loop0: detected capacity change from 0 to 512 [ 438.782695][T19523] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5368'. [ 439.019241][T19496] EXT4-fs (loop0): orphan cleanup on readonly fs [ 439.048076][T19496] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 439.058549][T19496] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 439.068015][T19496] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.5360: Failed to acquire dquot type 1 [ 439.082864][T19496] EXT4-fs (loop0): 1 truncate cleaned up [ 439.466833][T19542] loop8: detected capacity change from 0 to 512 [ 439.478688][T19542] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 439.500428][T19542] loop8: detected capacity change from 0 to 512 [ 439.507448][T19542] EXT4-fs: Ignoring removed oldalloc option [ 439.524361][T19542] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.5374: Parent and EA inode have the same ino 15 [ 439.540229][T19542] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.5374: Parent and EA inode have the same ino 15 [ 439.553443][T19542] EXT4-fs (loop8): 1 orphan inode deleted [ 439.560413][T19542] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.787497][T19496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 439.888280][T18579] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.692339][T19568] loop1: detected capacity change from 0 to 256 [ 440.745213][T19568] vfat: Unknown parameter '' [ 440.857215][T19568] loop1: detected capacity change from 0 to 2048 [ 440.930290][T17208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.359549][T19568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.490598][T19568] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.092065][T19603] sctp: [Deprecated]: syz.8.5395 (pid 19603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.092065][T19603] Use struct sctp_sack_info instead [ 442.229402][T19609] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5398'. [ 442.650317][T19627] sctp: [Deprecated]: syz.9.5407 (pid 19627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.650317][T19627] Use struct sctp_sack_info instead [ 442.801546][T19632] veth0_vlan: entered allmulticast mode [ 443.164238][T19648] loop7: detected capacity change from 0 to 512 [ 443.186000][T19648] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 443.761547][T19673] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5427'. [ 444.181526][T19690] sctp: [Deprecated]: syz.7.5435 (pid 19690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.181526][T19690] Use struct sctp_sack_info instead [ 444.211708][T19688] syzkaller0: entered promiscuous mode [ 444.217230][T19688] syzkaller0: entered allmulticast mode [ 444.321418][T18632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.382667][T19700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5441'. [ 444.476531][T19713] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5445'. [ 444.514526][T19716] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5447'. [ 446.427986][T19801] loop9: detected capacity change from 0 to 256 [ 446.434705][T19801] vfat: Unknown parameter '' [ 447.048858][T19822] loop1: detected capacity change from 0 to 512 [ 447.486195][T19824] loop9: detected capacity change from 0 to 256 [ 447.493034][T19824] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 447.714356][T19822] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 447.748722][T19824] FAT-fs (loop9): Directory bread(block 64) failed [ 447.755315][T19824] FAT-fs (loop9): Directory bread(block 65) failed [ 447.761899][T19824] FAT-fs (loop9): Directory bread(block 66) failed [ 447.768521][T19824] FAT-fs (loop9): Directory bread(block 67) failed [ 447.775152][T19824] FAT-fs (loop9): Directory bread(block 68) failed [ 447.781903][T19824] FAT-fs (loop9): Directory bread(block 69) failed [ 447.788509][T19824] FAT-fs (loop9): Directory bread(block 70) failed [ 447.795043][T19824] FAT-fs (loop9): Directory bread(block 71) failed [ 447.801644][T19824] FAT-fs (loop9): Directory bread(block 72) failed [ 447.808214][T19824] FAT-fs (loop9): Directory bread(block 73) failed [ 448.689697][T19822] loop1: detected capacity change from 0 to 512 [ 448.946834][T19822] EXT4-fs: Ignoring removed oldalloc option [ 449.110899][T19822] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.5474: Parent and EA inode have the same ino 15 [ 449.141711][T19822] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.5474: Parent and EA inode have the same ino 15 [ 449.229704][T19822] EXT4-fs (loop1): 1 orphan inode deleted [ 449.235955][T19822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.468773][T19890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5498'. [ 449.651036][T19900] sctp: [Deprecated]: syz.9.5502 (pid 19900) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.651036][T19900] Use struct sctp_sack_info instead [ 449.737667][T19901] loop0: detected capacity change from 0 to 256 [ 449.745005][T19901] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 449.770929][T19901] FAT-fs (loop0): Directory bread(block 64) failed [ 449.777618][T19901] FAT-fs (loop0): Directory bread(block 65) failed [ 449.784188][T19901] FAT-fs (loop0): Directory bread(block 66) failed [ 449.790757][T19901] FAT-fs (loop0): Directory bread(block 67) failed [ 449.797430][T19901] FAT-fs (loop0): Directory bread(block 68) failed [ 449.803991][T19901] FAT-fs (loop0): Directory bread(block 69) failed [ 449.810713][T19901] FAT-fs (loop0): Directory bread(block 70) failed [ 449.817377][T19901] FAT-fs (loop0): Directory bread(block 71) failed [ 449.824104][T19901] FAT-fs (loop0): Directory bread(block 72) failed [ 449.830697][T19901] FAT-fs (loop0): Directory bread(block 73) failed [ 451.237157][T19934] loop8: detected capacity change from 0 to 512 [ 451.261442][T19934] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 451.305778][T19941] netlink: 'syz.0.5521': attribute type 12 has an invalid length. [ 451.313661][T19941] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5521'. [ 451.699140][T19961] sctp: [Deprecated]: syz.7.5530 (pid 19961) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.699140][T19961] Use struct sctp_sack_info instead [ 452.181598][T20005] sctp: [Deprecated]: syz.7.5550 (pid 20005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.181598][T20005] Use struct sctp_sack_info instead [ 452.432382][T18632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.470179][T20023] netlink: 'syz.1.5559': attribute type 12 has an invalid length. [ 452.478235][T20023] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5559'. [ 452.952906][T20057] netlink: 'syz.8.5571': attribute type 12 has an invalid length. [ 452.960807][T20057] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5571'. [ 452.972337][T20058] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5572'. [ 453.897460][T20090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5588'. [ 455.297735][T20164] loop8: detected capacity change from 0 to 256 [ 455.304452][T20164] vfat: Unknown parameter '' [ 455.450290][T20170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5622'. [ 455.884367][T20190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5631'. [ 455.981218][T20194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5632'. [ 456.595119][T20225] loop7: detected capacity change from 0 to 256 [ 456.602615][T20225] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 456.652557][T20225] FAT-fs (loop7): Directory bread(block 64) failed [ 456.659197][T20225] FAT-fs (loop7): Directory bread(block 65) failed [ 456.665795][T20225] FAT-fs (loop7): Directory bread(block 66) failed [ 456.672362][T20225] FAT-fs (loop7): Directory bread(block 67) failed [ 456.679067][T20225] FAT-fs (loop7): Directory bread(block 68) failed [ 456.685617][T20225] FAT-fs (loop7): Directory bread(block 69) failed [ 456.692876][T20225] FAT-fs (loop7): Directory bread(block 70) failed [ 456.699705][T20225] FAT-fs (loop7): Directory bread(block 71) failed [ 456.706413][T20225] FAT-fs (loop7): Directory bread(block 72) failed [ 456.712978][T20225] FAT-fs (loop7): Directory bread(block 73) failed [ 458.057108][T20241] netlink: 14568 bytes leftover after parsing attributes in process `syz.9.5651'. [ 458.187780][ T29] audit: type=1400 audit(1759883717.822:431): avc: denied { read } for pid=20236 comm="syz.9.5651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 458.724854][ T29] audit: type=1400 audit(1759883718.382:432): avc: denied { write } for pid=20260 comm="syz.8.5658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 458.780987][T20259] loop7: detected capacity change from 0 to 512 [ 458.790516][T20259] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 459.021675][T20288] loop1: detected capacity change from 0 to 256 [ 459.028361][T20288] vfat: Unknown parameter '' [ 459.042934][T20288] loop1: detected capacity change from 0 to 2048 [ 459.080196][T20288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.092370][T20288] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.305635][T20306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5673'. [ 459.475605][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5675'. [ 459.534827][T20315] loop7: detected capacity change from 0 to 128 [ 459.554405][T20315] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 459.615271][T20315] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 460.316779][T18632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.433044][T17187] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 461.102975][T20354] sctp: [Deprecated]: syz.1.5693 (pid 20354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.102975][T20354] Use struct sctp_sack_info instead [ 461.838470][T20356] loop0: detected capacity change from 0 to 512 [ 461.865585][T20356] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 462.187004][T20382] loop9: detected capacity change from 0 to 256 [ 462.194467][T20382] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 462.259514][T20382] FAT-fs (loop9): Directory bread(block 64) failed [ 462.266118][T20382] FAT-fs (loop9): Directory bread(block 65) failed [ 462.272979][T20382] FAT-fs (loop9): Directory bread(block 66) failed [ 462.279776][T20382] FAT-fs (loop9): Directory bread(block 67) failed [ 462.286357][T20382] FAT-fs (loop9): Directory bread(block 68) failed [ 462.293093][T20382] FAT-fs (loop9): Directory bread(block 69) failed [ 462.299737][T20382] FAT-fs (loop9): Directory bread(block 70) failed [ 462.306342][T20382] FAT-fs (loop9): Directory bread(block 71) failed [ 462.312927][T20382] FAT-fs (loop9): Directory bread(block 72) failed [ 462.319475][T20382] FAT-fs (loop9): Directory bread(block 73) failed [ 462.693339][T20392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5704'. [ 463.031759][T20399] netlink: 'syz.0.5706': attribute type 10 has an invalid length. [ 463.136161][T20399] team0: Port device netdevsim0 added [ 463.501242][T20407] sctp: [Deprecated]: syz.8.5710 (pid 20407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.501242][T20407] Use struct sctp_sack_info instead [ 463.616165][T20411] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5712'. [ 463.831211][T20427] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5718'. [ 463.887509][T20435] sctp: [Deprecated]: syz.9.5721 (pid 20435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.887509][T20435] Use struct sctp_sack_info instead [ 464.052859][T20446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5726'. [ 464.059037][T20445] lo speed is unknown, defaulting to 1000 [ 464.068185][T20445] lo speed is unknown, defaulting to 1000 [ 464.074405][T20445] lo speed is unknown, defaulting to 1000 [ 464.082065][T20445] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 464.101933][T20445] lo speed is unknown, defaulting to 1000 [ 464.126949][T20445] lo speed is unknown, defaulting to 1000 [ 464.134158][T20445] lo speed is unknown, defaulting to 1000 [ 464.140885][T20437] loop9: detected capacity change from 0 to 512 [ 464.156638][T20448] lo speed is unknown, defaulting to 1000 [ 464.167487][T20445] lo speed is unknown, defaulting to 1000 [ 464.175003][T20437] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 464.184182][T20445] lo speed is unknown, defaulting to 1000 [ 464.191855][T20445] lo speed is unknown, defaulting to 1000 [ 464.198727][T20445] lo speed is unknown, defaulting to 1000 [ 464.308063][T20461] syzkaller0: entered promiscuous mode [ 464.313667][T20461] syzkaller0: entered allmulticast mode [ 464.356045][T20462] loop8: detected capacity change from 0 to 256 [ 464.362854][T20462] vfat: Unknown parameter '' [ 464.378144][T20462] loop8: detected capacity change from 0 to 2048 [ 464.389995][T20462] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.402117][T20462] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.519827][T20478] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5738'. [ 464.729408][T20490] loop9: detected capacity change from 0 to 512 [ 464.737065][T20490] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 464.879790][T20507] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5751'. [ 465.058044][T17208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.148885][T20528] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.5760'. [ 465.148908][T20535] loop9: detected capacity change from 0 to 512 [ 465.183253][T20536] lo speed is unknown, defaulting to 1000 [ 465.188753][T20535] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 465.205722][T20540] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5765'. [ 465.578361][T20568] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5778'. [ 465.768045][T20566] loop0: detected capacity change from 0 to 512 [ 465.791678][T20566] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 466.105047][T20599] loop9: detected capacity change from 0 to 128 [ 466.112016][T20596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5791'. [ 466.154592][T20599] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 466.211995][T20599] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 466.282612][T17269] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 466.372926][T20620] sctp: [Deprecated]: syz.0.5800 (pid 20620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 466.372926][T20620] Use struct sctp_sack_info instead [ 466.502280][T20634] loop7: detected capacity change from 0 to 128 [ 466.510658][T20634] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 466.523976][T20634] ext4 filesystem being mounted at /250/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 466.547082][T20636] netlink: 'syz.1.5805': attribute type 4 has an invalid length. [ 466.576576][T17187] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 466.626540][T20642] netlink: 'syz.9.5810': attribute type 2 has an invalid length. [ 466.782530][T20667] loop1: detected capacity change from 0 to 128 [ 466.812147][T20667] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 466.825656][T20667] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 466.879938][T18632] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.589571][T20699] loop7: detected capacity change from 0 to 128 [ 467.620689][T20699] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 467.668182][T20699] ext4 filesystem being mounted at /256/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 467.902452][T20710] loop9: detected capacity change from 0 to 256 [ 467.909190][T20710] vfat: Unknown parameter '' [ 467.923806][T20710] loop9: detected capacity change from 0 to 2048 [ 467.932454][T17187] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.988523][T20710] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.001002][T20710] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.339138][T20746] __nla_validate_parse: 1 callbacks suppressed [ 468.339158][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5851'. [ 468.573647][T17269] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.594603][T20754] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5857'. [ 469.077236][T20786] netlink: 'syz.0.5870': attribute type 3 has an invalid length. [ 469.085122][T20786] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5870'. [ 469.200411][T20796] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5878'. [ 469.245232][T20806] netlink: 'syz.0.5881': attribute type 21 has an invalid length. [ 469.323185][T20818] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5886'. [ 469.358109][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5884'. [ 469.438173][T20829] netlink: 228 bytes leftover after parsing attributes in process `syz.8.5891'. [ 469.473644][T20829] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.5891'. [ 469.656592][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5905'. [ 469.881941][T20897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5924'. [ 469.935179][T20903] loop0: detected capacity change from 0 to 128 [ 469.953984][T20903] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.969383][T20903] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 470.901381][T20892] lo speed is unknown, defaulting to 1000 [ 470.982768][T18579] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 471.619183][T20908] loop1: detected capacity change from 0 to 256 [ 471.626013][T20908] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 471.738202][T20908] FAT-fs (loop1): Directory bread(block 64) failed [ 471.744786][T20908] FAT-fs (loop1): Directory bread(block 65) failed [ 471.751415][T20908] FAT-fs (loop1): Directory bread(block 66) failed [ 471.758063][T20908] FAT-fs (loop1): Directory bread(block 67) failed [ 471.764915][T20908] FAT-fs (loop1): Directory bread(block 68) failed [ 471.771458][T20908] FAT-fs (loop1): Directory bread(block 69) failed [ 471.778208][T20908] FAT-fs (loop1): Directory bread(block 70) failed [ 471.784780][T20908] FAT-fs (loop1): Directory bread(block 71) failed [ 471.791379][T20908] FAT-fs (loop1): Directory bread(block 72) failed [ 471.797937][T20908] FAT-fs (loop1): Directory bread(block 73) failed [ 472.006162][T20911] syzkaller0: entered promiscuous mode [ 472.011788][T20911] syzkaller0: entered allmulticast mode [ 472.218469][T20935] loop7: detected capacity change from 0 to 128 [ 472.792340][T20935] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 472.805147][T20935] ext4 filesystem being mounted at /278/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 472.821488][T20944] netlink: 'syz.8.5941': attribute type 4 has an invalid length. [ 472.862364][T17187] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 472.941455][T20947] lo speed is unknown, defaulting to 1000 [ 473.244448][T20972] loop7: detected capacity change from 0 to 128 [ 473.267131][T20976] sctp: [Deprecated]: syz.0.5955 (pid 20976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.267131][T20976] Use struct sctp_sack_info instead [ 473.286872][T20972] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 473.304731][T20972] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 473.365645][T17187] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.450924][T21000] netlink: 'syz.8.5964': attribute type 10 has an invalid length. [ 473.465643][T21000] team0: Port device netdevsim1 added [ 473.521911][T21008] sctp: [Deprecated]: syz.7.5968 (pid 21008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.521911][T21008] Use struct sctp_sack_info instead [ 473.541321][T21010] __nla_validate_parse: 6 callbacks suppressed [ 473.541342][T21010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5970'. [ 473.573923][T21012] loop8: detected capacity change from 0 to 128 [ 473.596713][T21016] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5972'. [ 473.615874][T21012] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 473.628157][T21016] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5972'. [ 473.637566][T21016] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5972'. [ 473.638830][T21012] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 473.681333][T17208] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.807968][T21043] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5983'. [ 473.834779][T21048] netlink: 'syz.0.5987': attribute type 10 has an invalid length. [ 473.842717][T21048] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5987'. [ 473.881301][T21050] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5988'. [ 473.892562][T21050] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5988'. [ 473.903739][T21050] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5988'. [ 474.062714][T21058] loop8: detected capacity change from 0 to 256 [ 474.069603][T21058] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 474.097418][T21058] loop8: detected capacity change from 0 to 2048 [ 474.120352][T21058] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.132520][T21058] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.146944][T21059] netlink: 'syz.9.5989': attribute type 1 has an invalid length. [ 474.154860][T21059] netlink: 'syz.9.5989': attribute type 2 has an invalid length. [ 474.560135][T21069] lo speed is unknown, defaulting to 1000 [ 474.967513][T21085] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6000'. [ 475.489523][T21096] loop7: detected capacity change from 0 to 512 [ 475.787057][T21106] sctp: [Deprecated]: syz.0.6009 (pid 21106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 475.787057][T21106] Use struct sctp_sack_info instead [ 476.058712][T21100] lo speed is unknown, defaulting to 1000 [ 476.163598][T21096] EXT4-fs (loop7): orphan cleanup on readonly fs [ 476.171491][T21096] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 476.181942][T21096] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 476.191375][T21096] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.6003: Failed to acquire dquot type 1 [ 476.206062][T21096] EXT4-fs (loop7): 1 truncate cleaned up [ 476.212745][T17208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.237348][T21096] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 476.971778][T17187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.396010][T21175] lo speed is unknown, defaulting to 1000 [ 477.488228][T21181] loop8: detected capacity change from 0 to 256 [ 477.495071][T21181] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 478.959726][T21192] loop1: detected capacity change from 0 to 256 [ 478.966878][T21192] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 479.009167][T21192] FAT-fs (loop1): Directory bread(block 64) failed [ 479.015833][T21192] FAT-fs (loop1): Directory bread(block 65) failed [ 479.022495][T21192] FAT-fs (loop1): Directory bread(block 66) failed [ 479.029175][T21192] FAT-fs (loop1): Directory bread(block 67) failed [ 479.035917][T21192] FAT-fs (loop1): Directory bread(block 68) failed [ 479.095450][T21192] FAT-fs (loop1): Directory bread(block 69) failed [ 479.102200][T21192] FAT-fs (loop1): Directory bread(block 70) failed [ 479.108784][T21192] FAT-fs (loop1): Directory bread(block 71) failed [ 479.115455][T21192] FAT-fs (loop1): Directory bread(block 72) failed [ 479.122050][T21192] FAT-fs (loop1): Directory bread(block 73) failed [ 479.162419][T21202] sctp: [Deprecated]: syz.0.6046 (pid 21202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.162419][T21202] Use struct sctp_sack_info instead [ 479.197230][T21201] __nla_validate_parse: 3 callbacks suppressed [ 479.197261][T21201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6044'. [ 480.153595][T21235] loop0: detected capacity change from 0 to 512 [ 480.174446][T21235] EXT4-fs (loop0): orphan cleanup on readonly fs [ 480.181561][T21235] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 480.192105][T21235] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 480.201598][T21235] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.6057: Failed to acquire dquot type 1 [ 480.215105][T21235] EXT4-fs (loop0): 1 truncate cleaned up [ 480.351899][T21238] sctp: [Deprecated]: syz.1.6059 (pid 21238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.351899][T21238] Use struct sctp_sack_info instead [ 480.849387][T21248] netlink: 452 bytes leftover after parsing attributes in process `syz.7.6064'. [ 481.100766][T21235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 481.128365][T21250] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6065'. [ 481.504742][T21258] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.6069'. [ 481.525322][T21260] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6070'. [ 481.653555][T18579] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.886146][T21285] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6082'. [ 481.896518][T21286] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6081'. [ 481.938033][T21287] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6081'. [ 481.979297][T21287] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6081'. [ 482.115945][T21301] lo speed is unknown, defaulting to 1000 [ 482.520789][T21300] loop8: detected capacity change from 0 to 512 [ 482.603376][T21300] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 483.059124][T21330] loop1: detected capacity change from 0 to 256 [ 483.065861][T21330] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 483.094882][T21330] loop1: detected capacity change from 0 to 2048 [ 483.155718][T21333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6101'. [ 483.232700][T21330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.245008][T21330] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.759043][T21350] netlink: 'syz.9.6108': attribute type 13 has an invalid length. [ 483.766932][T21350] netlink: 'syz.9.6108': attribute type 17 has an invalid length. [ 483.911149][T21358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=21358 comm=syz.9.6108 [ 483.955880][T21350] sit0: left promiscuous mode [ 483.960731][T21350] sit0: left allmulticast mode [ 484.224264][T21350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.463424][T18632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.554098][T21372] sctp: [Deprecated]: syz.9.6117 (pid 21372) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.554098][T21372] Use struct sctp_sack_info instead [ 484.987934][T21385] __nla_validate_parse: 5 callbacks suppressed [ 484.987999][T21385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6121'. [ 485.011476][T21386] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 485.159137][T21386] netlink: 10 bytes leftover after parsing attributes in process `syz.9.6120'. [ 485.248286][T21397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6123'. [ 485.280027][T21397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6123'. [ 485.310564][T21397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6123'. [ 485.481720][T21406] netlink: 412 bytes leftover after parsing attributes in process `syz.0.6126'. [ 485.757061][T21419] sctp: [Deprecated]: syz.0.6130 (pid 21419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 485.757061][T21419] Use struct sctp_sack_info instead [ 485.865142][T21423] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6132'. [ 486.087745][T21439] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6137'. [ 486.127408][T21439] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6137'. [ 486.155986][T21441] loop7: detected capacity change from 0 to 512 [ 486.172056][T21441] EXT4-fs (loop7): orphan cleanup on readonly fs [ 486.179306][T21441] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 486.189677][T21441] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 486.199098][T21441] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.6134: Failed to acquire dquot type 1 [ 486.211277][T21441] EXT4-fs (loop7): 1 truncate cleaned up [ 486.363103][T21448] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6137'. [ 486.597714][T21457] sctp: [Deprecated]: syz.8.6144 (pid 21457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.597714][T21457] Use struct sctp_sack_info instead [ 486.746318][T21462] lo speed is unknown, defaulting to 1000 [ 487.047573][T21441] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 487.689195][T17187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.838340][T21494] sctp: [Deprecated]: syz.0.6157 (pid 21494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.838340][T21494] Use struct sctp_sack_info instead [ 488.075215][T21505] loop1: detected capacity change from 0 to 512 [ 488.141006][T21505] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 488.220317][T21508] loop0: detected capacity change from 0 to 256 [ 488.227069][T21508] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 488.258318][T21508] loop0: detected capacity change from 0 to 2048 [ 488.329840][T21508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.342188][T21508] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.471161][T21505] loop1: detected capacity change from 0 to 512 [ 488.596512][T21505] EXT4-fs: Ignoring removed oldalloc option [ 488.834135][T21505] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.6158: Parent and EA inode have the same ino 15 [ 489.003668][T21505] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.6158: Parent and EA inode have the same ino 15 [ 489.102537][T21505] EXT4-fs (loop1): 1 orphan inode deleted [ 489.138901][T21505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.625433][T18579] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.654602][T21555] syzkaller0: entered promiscuous mode [ 489.660226][T21555] syzkaller0: entered allmulticast mode [ 490.046188][T21577] __nla_validate_parse: 8 callbacks suppressed [ 490.046204][T21577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6189'. [ 490.342043][T21579] loop7: detected capacity change from 0 to 512 [ 490.351151][T21579] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 490.391119][T21588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6195'. [ 490.473802][T21595] netlink: 412 bytes leftover after parsing attributes in process `syz.0.6198'. [ 491.100649][T21635] syzkaller0: entered promiscuous mode [ 491.106268][T21635] syzkaller0: entered allmulticast mode [ 491.480660][T21657] netlink: 412 bytes leftover after parsing attributes in process `syz.8.6221'. [ 491.556448][T21665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6225'. [ 491.602826][T21665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6225'. [ 491.622242][T21668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6225'. [ 491.781535][T21683] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6233'. [ 491.863309][T21689] netlink: 412 bytes leftover after parsing attributes in process `syz.8.6235'. [ 491.889425][T21691] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6236'. [ 492.129384][T18632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.364318][T21716] syzkaller0: entered promiscuous mode [ 492.369945][T21716] syzkaller0: entered allmulticast mode [ 492.577567][T21724] netlink: 'syz.7.6249': attribute type 10 has an invalid length. [ 492.774466][T21747] sctp: [Deprecated]: syz.9.6259 (pid 21747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.774466][T21747] Use struct sctp_sack_info instead [ 492.932047][T21758] loop8: detected capacity change from 0 to 512 [ 492.939244][T21758] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 493.003360][T21758] loop8: detected capacity change from 0 to 512 [ 493.022552][T21758] EXT4-fs: Ignoring removed oldalloc option [ 493.039216][T21758] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.6256: Parent and EA inode have the same ino 15 [ 493.059712][T21758] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.6256: Parent and EA inode have the same ino 15 [ 493.072471][T21758] EXT4-fs (loop8): 1 orphan inode deleted [ 493.078648][T21758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.123130][T21754] syzkaller0: entered promiscuous mode [ 493.128682][T21754] syzkaller0: entered allmulticast mode [ 494.312142][T21797] netlink: 'syz.1.6279': attribute type 29 has an invalid length. [ 494.338786][T21797] netlink: 'syz.1.6279': attribute type 29 has an invalid length. [ 494.570270][T21814] lo speed is unknown, defaulting to 1000 [ 494.855803][T21829] netlink: 'syz.7.6293': attribute type 29 has an invalid length. [ 494.875066][T21829] netlink: 'syz.7.6293': attribute type 29 has an invalid length. [ 496.052610][T21867] loop0: detected capacity change from 0 to 256 [ 496.059651][T21867] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 496.087849][T21867] loop0: detected capacity change from 0 to 2048 [ 496.259194][T21867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.271424][T21867] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.592481][T21878] __nla_validate_parse: 7 callbacks suppressed [ 496.592529][T21878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6311'. [ 497.864326][T21886] loop1: detected capacity change from 0 to 256 [ 497.871976][T21886] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 497.991579][T21886] FAT-fs (loop1): Directory bread(block 64) failed [ 497.998241][T21886] FAT-fs (loop1): Directory bread(block 65) failed [ 498.004886][T21886] FAT-fs (loop1): Directory bread(block 66) failed [ 498.011465][T21886] FAT-fs (loop1): Directory bread(block 67) failed [ 498.018064][T21886] FAT-fs (loop1): Directory bread(block 68) failed [ 498.024733][T21886] FAT-fs (loop1): Directory bread(block 69) failed [ 498.031347][T21886] FAT-fs (loop1): Directory bread(block 70) failed [ 498.037979][T21886] FAT-fs (loop1): Directory bread(block 71) failed [ 498.044521][T21886] FAT-fs (loop1): Directory bread(block 72) failed [ 498.051087][T21886] FAT-fs (loop1): Directory bread(block 73) failed [ 498.074185][T18579] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.322549][T17208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.441105][T21923] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6327'. [ 499.459140][T21923] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6327'. [ 499.468788][T21923] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6327'. [ 499.538169][T21928] loop7: detected capacity change from 0 to 256 [ 499.545511][T21928] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 499.574683][T21928] loop7: detected capacity change from 0 to 2048 [ 499.690636][T21928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.703831][T21928] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.751086][T21929] lo speed is unknown, defaulting to 1000 [ 500.045036][T21943] syzkaller0: entered promiscuous mode [ 500.051331][T21943] syzkaller0: entered allmulticast mode [ 500.182377][T21953] loop9: detected capacity change from 0 to 512 [ 500.190242][T21953] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 500.205623][T21953] loop9: detected capacity change from 0 to 512 [ 500.213014][T21953] EXT4-fs: Ignoring removed oldalloc option [ 500.232735][T21953] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.6339: Parent and EA inode have the same ino 15 [ 500.247971][T21953] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.6339: Parent and EA inode have the same ino 15 [ 500.261431][T21953] EXT4-fs (loop9): 1 orphan inode deleted [ 500.268113][T21953] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.442648][T17269] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.100419][T17187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.715903][T21984] lo speed is unknown, defaulting to 1000 [ 501.725975][T21983] loop8: detected capacity change from 0 to 512 [ 501.737076][T21983] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 501.783965][T21983] loop8: detected capacity change from 0 to 512 [ 501.790870][T21983] EXT4-fs: Ignoring removed oldalloc option [ 501.824202][T21983] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.6352: Parent and EA inode have the same ino 15 [ 501.838766][T21983] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.6352: Parent and EA inode have the same ino 15 [ 501.851948][T21983] EXT4-fs (loop8): 1 orphan inode deleted [ 501.858152][T21983] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.070017][T17208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.224774][T21997] syzkaller0: entered promiscuous mode [ 502.230746][T21997] syzkaller0: entered allmulticast mode [ 502.309986][T21993] loop0: detected capacity change from 0 to 512 [ 502.325588][T21993] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 502.675441][T22027] loop8: detected capacity change from 0 to 256 [ 502.682208][T22027] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 504.782710][T22045] loop8: detected capacity change from 0 to 512 [ 504.801609][T22045] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 505.500189][T22064] loop0: detected capacity change from 0 to 512 [ 505.553753][T22064] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 505.579192][T22064] EXT4-fs (loop0): 1 truncate cleaned up [ 505.591572][T22064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.620936][T22082] netlink: 452 bytes leftover after parsing attributes in process `syz.7.6386'. [ 505.663506][T22080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.676018][T22080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.775046][T22080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.875536][T22080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.096632][T18579] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.194339][T22107] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6395'. [ 506.203468][T22107] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6395'. [ 506.333738][T22118] netlink: 452 bytes leftover after parsing attributes in process `syz.7.6399'. [ 506.442205][T22119] lo speed is unknown, defaulting to 1000 [ 507.000573][T22139] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6406'. [ 507.023461][T22139] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6406'. [ 507.260093][T22142] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6406'. [ 507.622742][T22148] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6409'. [ 507.685687][T22149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.934963][T22155] netlink: 452 bytes leftover after parsing attributes in process `syz.9.6412'. [ 508.039247][T22170] loop1: detected capacity change from 0 to 512 [ 508.049083][T22170] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 508.082192][T22170] loop1: detected capacity change from 0 to 512 [ 508.154538][T22170] EXT4-fs: Ignoring removed oldalloc option [ 508.216629][T22181] lo speed is unknown, defaulting to 1000 [ 508.230248][T22170] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.6410: Parent and EA inode have the same ino 15 [ 508.327833][T22170] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.6410: Parent and EA inode have the same ino 15 [ 508.376868][T22170] EXT4-fs (loop1): 1 orphan inode deleted [ 508.401806][T22170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.484666][T22187] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6422'. [ 509.471484][T22221] lo speed is unknown, defaulting to 1000 [ 510.520159][T22259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.813140][T18632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.865620][T22277] __nla_validate_parse: 6 callbacks suppressed [ 510.865634][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6459'. [ 511.374540][T22305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6471'. [ 511.766900][T22329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.784329][ T3414] lo speed is unknown, defaulting to 1000 [ 511.862284][T22338] loop8: detected capacity change from 0 to 512 [ 511.952872][T22338] EXT4-fs (loop8): orphan cleanup on readonly fs [ 511.960677][T22338] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 511.971162][T22338] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 511.980585][T22338] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.6480: Failed to acquire dquot type 1 [ 511.999953][T22338] EXT4-fs (loop8): 1 truncate cleaned up [ 512.177534][T22346] netlink: 'syz.0.6487': attribute type 29 has an invalid length. [ 512.241716][T22346] netlink: 'syz.0.6487': attribute type 29 has an invalid length. [ 512.292491][T22349] netlink: 'syz.0.6487': attribute type 29 has an invalid length. [ 512.858848][T22338] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 513.473749][T22357] loop1: detected capacity change from 0 to 256 [ 513.480389][T22357] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 513.495216][T22357] loop1: detected capacity change from 0 to 2048 [ 513.539899][T22362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.556047][T17208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.590931][T22357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.603226][T22357] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.642686][T22367] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6494'. [ 513.670639][T22362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.774623][T22370] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6494'. [ 513.808381][T17441] ================================================================== [ 513.816613][T17441] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 513.822310][T22367] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6494'. [ 513.824794][T17441] [ 513.824804][T17441] read-write to 0xffff888100483138 of 8 bytes by task 17208 on cpu 1: [ 513.844209][T17441] __filemap_remove_folio+0x1bc/0x2a0 [ 513.849691][T17441] __remove_mapping+0x390/0x4c0 [ 513.854564][T17441] remove_mapping+0x22/0x90 [ 513.859204][T17441] mapping_try_invalidate+0x26a/0x3f0 [ 513.864679][T17441] invalidate_mapping_pages+0x27/0x40 [ 513.870061][T17441] invalidate_bdev+0x58/0x70 [ 513.874757][T17441] ext4_put_super+0x624/0x7d0 [ 513.879442][T17441] generic_shutdown_super+0xe6/0x210 [ 513.884837][T17441] kill_block_super+0x2a/0x70 [ 513.889520][T17441] ext4_kill_sb+0x42/0x80 [ 513.893893][T17441] deactivate_locked_super+0x75/0x1c0 [ 513.899288][T17441] deactivate_super+0x97/0xa0 [ 513.903987][T17441] cleanup_mnt+0x269/0x2e0 [ 513.908419][T17441] __cleanup_mnt+0x19/0x20 [ 513.912849][T17441] task_work_run+0x131/0x1a0 [ 513.917449][T17441] exit_to_user_mode_loop+0xed/0x110 [ 513.923101][T17441] do_syscall_64+0x1d6/0x200 [ 513.927708][T17441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.933639][T17441] [ 513.935963][T17441] read to 0xffff888100483138 of 8 bytes by task 17441 on cpu 0: [ 513.943611][T17441] nr_blockdev_pages+0x7e/0xd0 [ 513.948403][T17441] si_meminfo+0x87/0xd0 [ 513.952635][T17441] update_defense_level+0x47/0x5c0 [ 513.957843][T17441] defense_work_handler+0x1f/0x80 [ 513.963080][T17441] process_scheduled_works+0x4ce/0x9d0 [ 513.968560][T17441] worker_thread+0x582/0x770 [ 513.973164][T17441] kthread+0x489/0x510 [ 513.977243][T17441] ret_from_fork+0x122/0x1b0 [ 513.981838][T17441] ret_from_fork_asm+0x1a/0x30 [ 513.986619][T17441] [ 513.988945][T17441] value changed: 0x000000000000000d -> 0x0000000000000001 [ 513.996067][T17441] [ 513.998427][T17441] Reported by Kernel Concurrency Sanitizer on: [ 514.004630][T17441] CPU: 0 UID: 0 PID: 17441 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 514.014543][T17441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.024610][T17441] Workqueue: events_long defense_work_handler [ 514.030700][T17441] ================================================================== [ 514.816643][T18632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.583851][T16639] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.640851][T16639] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.731180][T16639] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.770517][T16639] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.840979][T16639] bridge_slave_1: left allmulticast mode [ 515.846754][T16639] bridge_slave_1: left promiscuous mode [ 515.852544][T16639] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.860387][T16639] bridge_slave_0: left allmulticast mode [ 515.866299][T16639] bridge_slave_0: left promiscuous mode [ 515.872174][T16639] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.961214][T16639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.971518][T16639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.981681][T16639] bond0 (unregistering): Released all slaves [ 516.029282][T16639] tipc: Left network mode [ 516.036772][T16639] hsr_slave_0: left promiscuous mode [ 516.042880][T16639] hsr_slave_1: left promiscuous mode [ 516.048834][T16639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.056299][T16639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.065050][T16639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.072489][T16639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.083810][T16639] veth1_macvtap: left promiscuous mode [ 516.089702][T16639] veth0_macvtap: left promiscuous mode [ 516.095342][T16639] veth1_vlan: left promiscuous mode [ 516.100873][T16639] veth0_vlan: left promiscuous mode [ 516.169722][T16639] team0 (unregistering): Port device team_slave_1 removed [ 516.179573][T16639] team0 (unregistering): Port device team_slave_0 removed