last executing test programs: 13m51.265928691s ago: executing program 1 (id=131): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe2$9p(&(0x7f0000000300), 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x43, 0x0, @fd=r0, 0x11e, 0x5, 0x0, 0x8, 0x0, {0x3}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x48, 0x4007, @fd_index=0x1, 0x0, 0x8, 0xd7, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 13m46.335829906s ago: executing program 1 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) 13m38.168288889s ago: executing program 1 (id=134): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb5111132c32e4187}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x120}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) kexec_load(0xff0e, 0x0, 0x0, 0x0) 13m24.50454441s ago: executing program 1 (id=137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r3, 0xffffffffffffffff, 0x17, 0x1, r4, @void, @value=r4, @void, @void, r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0x34, 0x0, @val=@tcx={@void, @value=r7, @void, @void, r6}}, 0x1c) 13m16.972636953s ago: executing program 1 (id=139): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r0, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 13m0.144120915s ago: executing program 1 (id=141): socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 12m21.449755824s ago: executing program 32 (id=141): socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 45.940339112s ago: executing program 2 (id=237): socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305839, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xfcc3}) r1 = socket(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$inet6(r2, &(0x7f0000002d40)={0xa, 0x4e23, 0x1, @private0, 0x6}, 0x1c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="674466980100000000000400040000006d32ba03985140bbde9368624676db68516c87343ce088e4353705c784de7facd78deadfc649c2b517f8d531ca430100db58ee83e2d5e09f766813bd2ba80458ea2146ec47ee8c4802000e8b71f15a11e030f882d2557dc8c7ae60658afa99e96cca3a68fc27ebb35ecd9a1ea725188558f3e943a503c939108de9bea8562d96b9454a96f0ffb4af22c3880888914cc3c5336044ae72c42433e0bee9f62f47734cb86d50a26d80e391e8b862d9bbccf36fb107dda6f5e1cd4ad70e000000"], 0xce) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x80}, {0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 45.939353062s ago: executing program 0 (id=238): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000000)=0x5) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r5, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000) 36.652021229s ago: executing program 2 (id=239): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r0, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 34.676544759s ago: executing program 0 (id=240): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x4, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x400c000) 28.239573973s ago: executing program 0 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, 0x0, &(0x7f0000001c40)=r1}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x6c}}, 0x0) 27.71935389s ago: executing program 2 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) 18.198226125s ago: executing program 0 (id=243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0x3c}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) 16.053401257s ago: executing program 2 (id=244): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 11.416123144s ago: executing program 0 (id=245): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) 8.664259913s ago: executing program 2 (id=246): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r0, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 4.879588642s ago: executing program 0 (id=247): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) openat(r0, &(0x7f0000000500)='file3/file5\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 0s ago: executing program 2 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="24785466124cebc6c88735f544a9", 0xe, 0x440040c4, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:56761' (ED25519) to the list of known hosts. syzkaller login: [ 438.537583][ T3194] cgroup: Unknown subsys name 'net' [ 439.168513][ T3194] cgroup: Unknown subsys name 'cpuset' [ 439.270002][ T3194] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 510.229818][ T3194] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 663.550218][ T3206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.938049][ T3206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.879190][ T3205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.518304][ T3205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.896364][ T3206] hsr_slave_0: entered promiscuous mode [ 675.978481][ T3206] hsr_slave_1: entered promiscuous mode [ 678.643707][ T3205] hsr_slave_0: entered promiscuous mode [ 678.699795][ T3205] hsr_slave_1: entered promiscuous mode [ 678.731551][ T3205] debugfs: 'hsr0' already exists in 'hsr' [ 678.739252][ T3205] Cannot create hsr debugfs directory [ 687.262321][ T3206] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 687.553774][ T3206] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 687.742974][ T3206] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 688.039231][ T3206] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 690.212811][ T3205] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 690.416867][ T3205] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 690.698655][ T3205] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 690.951905][ T3205] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 701.677485][ T3206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.758183][ T3205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.331554][ T3206] veth0_vlan: entered promiscuous mode [ 752.688655][ T3206] veth1_vlan: entered promiscuous mode [ 754.578076][ T3206] veth0_macvtap: entered promiscuous mode [ 754.877652][ T3206] veth1_macvtap: entered promiscuous mode [ 755.888138][ T3205] veth0_vlan: entered promiscuous mode [ 756.695993][ T3205] veth1_vlan: entered promiscuous mode [ 756.993415][ T3334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.051043][ T3334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.053265][ T3334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.128254][ T3334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.431347][ T3205] veth0_macvtap: entered promiscuous mode [ 758.701523][ T3205] veth1_macvtap: entered promiscuous mode [ 760.191310][ T3206] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 760.821940][ T3759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.823891][ T3759] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.891200][ T3803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.939182][ T3803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.836714][ T3835] syz_tun: entered allmulticast mode [ 796.827282][ T3835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'. [ 797.751901][ T3835] syz_tun (unregistering): left allmulticast mode [ 805.396403][ T3844] syz_tun: entered allmulticast mode [ 805.737875][ T3844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 806.648095][ T3844] syz_tun (unregistering): left allmulticast mode [ 845.467754][ T3871] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14'. [ 851.218263][ T3875] process 'syz.1.16' launched './file1' with NULL argv: empty string added [ 992.971109][ T3933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1014.475713][ T31] audit: type=1326 audit(1013.320:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3941 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1014.527045][ T31] audit: type=1326 audit(1013.390:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3941 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1014.636286][ T31] audit: type=1326 audit(1013.470:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3941 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1014.747275][ T31] audit: type=1326 audit(1013.610:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3941 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1014.770945][ T31] audit: type=1326 audit(1013.630:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3941 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1014.810796][ T31] audit: type=1326 audit(1013.680:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3941 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1014.953599][ T31] audit: type=1326 audit(1013.820:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3941 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1015.006755][ T31] audit: type=1326 audit(1013.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3941 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1015.206821][ T31] audit: type=1326 audit(1014.070:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3941 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1015.262124][ T31] audit: type=1326 audit(1014.090:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3941 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 1042.710464][ T3962] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1053.948128][ T3978] xt_TCPMSS: Only works on TCP SYN packets [ 1074.250978][ T3991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 1074.252969][ T3991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 1084.769760][ T3997] netlink: 'syz.1.54': attribute type 4 has an invalid length. [ 1100.071780][ T4004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 1150.380870][ T4037] lo speed is unknown, defaulting to 1000 [ 1150.399481][ T4037] lo speed is unknown, defaulting to 1000 [ 1150.585166][ T4037] lo speed is unknown, defaulting to 1000 [ 1150.943995][ T4037] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1151.567004][ T4037] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1156.488924][ T4037] lo speed is unknown, defaulting to 1000 [ 1156.758683][ T4037] lo speed is unknown, defaulting to 1000 [ 1219.572761][ T4077] veth0_to_team: entered promiscuous mode [ 1227.517953][ T4084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73'. [ 1278.809337][ T4103] syz.0.81 uses obsolete (PF_INET,SOCK_PACKET) [ 1287.657358][ T4108] nftables ruleset with unbound chain [ 1384.129500][ T4136] netlink: 'syz.1.91': attribute type 12 has an invalid length. [ 1393.421859][ T4138] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1398.982623][ T4143] netlink: 'syz.1.94': attribute type 4 has an invalid length. [ 1400.890841][ T4145] binder_alloc: 4144: binder_alloc_buf, no vma [ 1406.888528][ T4148] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 1425.883084][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 1515.431901][ T4209] lo: entered allmulticast mode [ 1515.673327][ T4208] lo: left allmulticast mode [ 1575.408904][ T4237] Zero length message leads to an empty skb [ 1635.313301][ T4258] syzkaller0: entered promiscuous mode [ 1635.332070][ T4258] syzkaller0: entered allmulticast mode [ 1664.320780][ T4284] syzkaller0: entered promiscuous mode [ 1664.322117][ T4284] syzkaller0: entered allmulticast mode [ 1671.328518][ T4292] lo speed is unknown, defaulting to 1000 [ 1671.330099][ T4292] lo speed is unknown, defaulting to 1000 [ 1671.437270][ T4292] lo speed is unknown, defaulting to 1000 [ 1671.947386][ T4292] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1672.932890][ T4292] lo speed is unknown, defaulting to 1000 [ 1673.035330][ T4292] lo speed is unknown, defaulting to 1000 [ 1750.238348][ T4326] syzkaller0: entered promiscuous mode [ 1750.240460][ T4326] syzkaller0: entered allmulticast mode [ 1761.739405][ T4336] syzkaller0: entered promiscuous mode [ 1761.740723][ T4336] syzkaller0: entered allmulticast mode [ 1777.277545][ T4332] lo speed is unknown, defaulting to 1000 [ 1779.741589][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.084924][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.682809][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.990028][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.458626][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1795.640675][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1795.758510][ T55] bond0 (unregistering): Released all slaves [ 1797.408781][ T55] hsr_slave_0: left promiscuous mode [ 1797.481753][ T55] hsr_slave_1: left promiscuous mode [ 1798.155356][ T55] veth1_macvtap: left promiscuous mode [ 1798.160240][ T55] veth0_macvtap: left promiscuous mode [ 1798.171699][ T55] veth1_vlan: left promiscuous mode [ 1798.178738][ T55] veth0_vlan: left promiscuous mode [ 1836.096637][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1836.330323][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1855.321212][ T4332] hsr_slave_0: entered promiscuous mode [ 1855.643161][ T4332] hsr_slave_1: entered promiscuous mode [ 1867.540541][ T4332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1867.712443][ T4332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1867.909320][ T4332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1868.120502][ T4332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1884.073847][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1953.442633][ T4332] veth0_vlan: entered promiscuous mode [ 1954.192385][ T4332] veth1_vlan: entered promiscuous mode [ 1957.937706][ T4332] veth0_macvtap: entered promiscuous mode [ 1958.159723][ T4332] veth1_macvtap: entered promiscuous mode [ 1962.436099][ T3334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.452671][ T3334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.868945][ T3980] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.051326][ T3980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2067.068442][ T4764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2067.152219][ T4764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2075.772495][ T4770] syzkaller0: entered promiscuous mode [ 2075.780547][ T4770] syzkaller0: entered allmulticast mode [ 2080.075718][ T4777] mmap: syz.2.164 (4777) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2102.983315][ T4788] syzkaller0: entered promiscuous mode [ 2103.010072][ T4788] syzkaller0: entered allmulticast mode [ 2110.915508][ T4797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 2113.321292][ T4797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 2267.248912][ T4894] syzkaller0: entered promiscuous mode [ 2267.250131][ T4894] syzkaller0: entered allmulticast mode [ 2313.079524][ T3196] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2313.948475][ T3196] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2313.951732][ T3196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2313.977955][ T3196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2313.980306][ T3196] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2313.983324][ T3196] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2314.006344][ T3196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2314.509965][ T3196] usb 1-1: config 0 descriptor?? [ 2318.943445][ T3196] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2322.961415][ T933] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 2325.183397][ T4733] usb 1-1: USB disconnect, device number 2 [ 2331.168271][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 2336.340231][ T4967] binder_alloc: 4966: binder_alloc_buf, no vma [ 2359.529550][ T4985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.218'. [ 2413.752391][ T5024] Process accounting resumed [ 2477.088857][ T5071] BUG: sleeping function called from invalid context at fs/inode.c:1928 [ 2477.091416][ T5071] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5071, name: syz.0.247 [ 2477.093278][ T5071] preempt_count: 1, expected: 0 [ 2477.095911][ T5071] RCU nest depth: 0, expected: 0 [ 2477.097039][ T5071] 2 locks held by syz.0.247/5071: [ 2477.097978][ T5071] #0: ffffaf8013eac0e0 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0x7e/0x98 [ 2477.102885][ T5071] #1: ffffaf8013eac998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0x12e/0xbde [ 2477.107075][ T5071] Preemption disabled at: [ 2477.107393][ T5071] [] hook_sb_delete+0x12e/0xbde [ 2477.109810][ T5071] CPU: 1 UID: 0 PID: 5071 Comm: syz.0.247 Not tainted syzkaller #0 PREEMPT [ 2477.110509][ T5071] Hardware name: riscv-virtio,qemu (DT) [ 2477.110989][ T5071] Call Trace: [ 2477.111402][ T5071] [] dump_backtrace+0x2e/0x3c [ 2477.111769][ T5071] [] show_stack+0x30/0x3c [ 2477.112015][ T5071] [] dump_stack_lvl+0x12a/0x1a2 [ 2477.112432][ T5071] [] dump_stack+0x1c/0x24 [ 2477.112841][ T5071] [] __might_resched+0x59c/0x5f8 [ 2477.113203][ T5071] [] __might_sleep+0x86/0xca [ 2477.113538][ T5071] [] iput+0x3c/0xb22 [ 2477.113991][ T5071] [] hook_sb_delete+0x86e/0xbde [ 2477.114379][ T5071] [] security_sb_delete+0xac/0x184 [ 2477.114744][ T5071] [] generic_shutdown_super+0xba/0x37c [ 2477.115137][ T5071] [] kill_litter_super+0x74/0xb0 [ 2477.115493][ T5071] [] deactivate_locked_super+0xd8/0x19c [ 2477.115864][ T5071] [] deactivate_super+0x84/0x98 [ 2477.116270][ T5071] [] cleanup_mnt+0x1dc/0x3e6 [ 2477.116735][ T5071] [] __cleanup_mnt+0x1c/0x26 [ 2477.117048][ T5071] [] task_work_run+0x16a/0x25e [ 2477.117312][ T5071] [] do_exit+0x84c/0x28e4 [ 2477.117692][ T5071] [] do_group_exit+0xd4/0x26c [ 2477.118089][ T5071] [] get_signal+0x2076/0x22f8 [ 2477.118470][ T5071] [] arch_do_signal_or_restart+0x738/0x1c4e [ 2477.118846][ T5071] [] exit_to_user_mode_loop+0x8a/0x142 [ 2477.119153][ T5071] [] do_trap_ecall_u+0x3f8/0x53a [ 2477.119630][ T5071] [] handle_exception+0x15e/0x16a SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2477.479199][ T5073] syzkaller0: entered promiscuous mode [ 2477.480582][ T5073] syzkaller0: entered allmulticast mode [ 2503.113536][ T4119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2505.513131][ T4119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0