last executing test programs: 5m37.04893895s ago: executing program 32 (id=2673): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1m57.693811854s ago: executing program 33 (id=7018): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080), 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000370401000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c0400000000000500000005000000240012800b00010067726574617000001400028008000400030000000600030080000000"], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) socket$inet(0x2, 0x2, 0x0) r4 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) shmdt(r4) 1m32.633885219s ago: executing program 34 (id=7332): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000ef0000000000000001000000000000d09b429ea35eb042cc38ccdbcc9a7a6e1d77f6eac726872565a06145505c7a77433c30966f40f7a94de8d9"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000e00000000005120000000000000000258fa6160dfa8cd0eeea67804924a44d4ed97b7cb12a46b15ee3647628d7d2c44e2ea624680a297892c351acaa20f8ab70e880c9206ffdeb7e7099bf9cc004612d76fdb32087c6b088f40da87657f834bc4028bc8c725c47448dae65b777891c09d53102a862a96043434f97acf9a15cf63892d539f014aeed3c8e7f7df49eb6e8a6d1580ddf8c57933bd0a5cf116685cf0d7087c7ae4c610f79f3b115ef9378d069a2ce0d9d12664165fc38dd1c1faf7c2743f5c787bfa990ad6d5c66c1326990318d", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {0x0, 0x0, 0x1}, 0xfd}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000005200000227bd70e1ffdbdf251c000000"], 0x14}}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) 17.355293867s ago: executing program 1 (id=8360): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6000}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x86, 0x1, "42341f9b1000007e4f00"}) syz_open_pts(r1, 0x40000) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 16.50578869s ago: executing program 1 (id=8378): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 16.450873701s ago: executing program 1 (id=8379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, &(0x7f00000004c0)}, 0x20) 16.393399112s ago: executing program 1 (id=8382): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 16.356190872s ago: executing program 1 (id=8384): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0xfffd, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e1504511602000000", 0x13}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000680)="6d88bf32d60ac8ae9356e65db5d12fdcda958237999df0f598896761dc57ac52c18406975dcc79d5c3cf74038cc604882a2f796e035765", 0x37}, {&(0x7f0000000800)}], 0x2}}], 0x2, 0x4004040) 16.242333384s ago: executing program 5 (id=8385): clock_getres(0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) mbind(&(0x7f00004fa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x1ff, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x4, 0x2) 16.052071817s ago: executing program 1 (id=8388): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6000}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x86, 0x1, "42341f9b1000007e4f00"}) dup3(0xffffffffffffffff, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 15.961171018s ago: executing program 35 (id=8388): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6000}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x86, 0x1, "42341f9b1000007e4f00"}) dup3(0xffffffffffffffff, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 15.85166327s ago: executing program 5 (id=8392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x2d0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x2b8, 0x0, @wg=@data={0x4, 0x4, 0x8, "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"}}}}, 0x2de) 15.784305881s ago: executing program 5 (id=8393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, &(0x7f00000004c0)}, 0x20) 15.698395383s ago: executing program 5 (id=8394): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 15.680248763s ago: executing program 5 (id=8395): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 15.450722757s ago: executing program 5 (id=8398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) 15.443586547s ago: executing program 36 (id=8398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) 15.153133891s ago: executing program 7 (id=8402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x2d0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x2b8, 0x0, @wg=@data={0x4, 0x4, 0x8, "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"}}}}, 0x2de) 14.977720534s ago: executing program 7 (id=8403): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x120, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0xff, 'rose0\x00', 'wg1\x00', {}, {}, 0x84}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2a, 0x10, 0x26, 0x19, 0x2c, 0x13, 0xe, 0x3e, 0x8, 0xb, 0x16, 0x25, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000380)={[], [{@appraise_type}, {@permit_directio}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) rmdir(&(0x7f0000000040)='./control\x00') 14.814484576s ago: executing program 7 (id=8404): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0xfffd, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e1504511602000000", 0x13}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000680)="6d88bf32d60ac8ae9356e65db5d12fdcda958237999df0f598896761dc57ac52c18406975dcc79d5c3cf74038cc604882a2f796e035765", 0x37}, {&(0x7f0000000800)}], 0x2}}], 0x2, 0x4004040) 14.726431357s ago: executing program 7 (id=8405): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 14.724603857s ago: executing program 7 (id=8406): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x9, 0x2}, {0x3, 0x5, 0x1}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 14.694559958s ago: executing program 7 (id=8407): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f0000000500)={0x0, 0x79ac, 0x400, 0x7ffa, 0x70, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x10, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_enter(r1, 0xfd0, 0x544, 0x43, 0x0, 0x0) 14.648717869s ago: executing program 37 (id=8407): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f0000000500)={0x0, 0x79ac, 0x400, 0x7ffa, 0x70, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x10, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_enter(r1, 0xfd0, 0x544, 0x43, 0x0, 0x0) 12.156689718s ago: executing program 2 (id=8437): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000380)={[], [{@appraise_type}, {@permit_directio}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) rmdir(&(0x7f0000000040)='./control\x00') 12.101836169s ago: executing program 2 (id=8438): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x9, 0x2}, {0x3, 0x5, 0x1}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 12.04502001s ago: executing program 2 (id=8439): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x894) 11.950426811s ago: executing program 2 (id=8440): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) umount2(&(0x7f0000000040)='.\x00', 0x2) 11.580670747s ago: executing program 2 (id=8450): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, &(0x7f0000000140)="b8", 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/84, 0x54}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e00)=""/41, 0x29}], 0x1}, 0x1}], 0x2, 0x40000000, 0x0) write(r2, &(0x7f0000000200)='~', 0x1) 11.521689048s ago: executing program 2 (id=8451): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0xfffd, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000680)="6d88bf32d60ac8ae9356e65db5d12fdcda958237999df0f598896761dc57ac52c18406975dcc79d5c3cf74038cc604882a2f796e035765", 0x37}, {&(0x7f0000000800)}], 0x2}}], 0x2, 0x4004040) 11.519772338s ago: executing program 38 (id=8451): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0xfffd, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000680)="6d88bf32d60ac8ae9356e65db5d12fdcda958237999df0f598896761dc57ac52c18406975dcc79d5c3cf74038cc604882a2f796e035765", 0x37}, {&(0x7f0000000800)}], 0x2}}], 0x2, 0x4004040) 11.39680618s ago: executing program 9 (id=8400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300)=0x6bbb, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000140), 0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x10, 0x95, 0x8, 0x0, 0xc304, 0x1031, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x9, 0xb06}, 0x80, 0x2, 0x1c, 0x5, 0x9, 0xd0d, 0x2, 0x0, 0x0, 0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r6 = socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc3ffb}]}) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r9, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) readv(r9, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 11.341974891s ago: executing program 9 (id=8456): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 11.304732601s ago: executing program 9 (id=8458): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) umount2(&(0x7f0000000040)='.\x00', 0x2) 11.143126334s ago: executing program 9 (id=8459): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, &(0x7f0000000140)="b8", 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/84, 0x54}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e00)=""/41, 0x29}], 0x1}, 0x1}], 0x2, 0x40000000, 0x0) write(r2, &(0x7f0000000200)='~', 0x1) 9.786237875s ago: executing program 9 (id=8484): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) umount2(&(0x7f0000000040)='.\x00', 0x2) 9.786009305s ago: executing program 39 (id=8484): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.003300388s ago: executing program 0 (id=8650): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x2b, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) 1.85245942s ago: executing program 4 (id=8654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000004c0)}, 0x20) 1.802526231s ago: executing program 4 (id=8655): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000004c0)}, 0x20) 1.755134662s ago: executing program 4 (id=8658): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8402, 0x0) poll(0x0, 0x0, 0xf0) close_range(r0, 0xffffffffffffffff, 0x0) 1.683684473s ago: executing program 8 (id=8662): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4000084) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x8, 0xfb, 0x5}, {0x84, 0x6, 0xa8, 0x4}, {0x6, 0x9, 0x4, 0x1}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.516022126s ago: executing program 3 (id=8669): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40), 0x10, 0xfffffff7}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.515479916s ago: executing program 3 (id=8670): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x2000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.457718517s ago: executing program 4 (id=8671): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x10100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0, 0x0, 0x80000001}, 0x9339e0bf06549738) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x268, 0x1d8, 0x1d8, 0x268, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00'}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x3202, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x40080) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x53}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f00000000c0)=""/60, 0x3c, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000004700008500000083000000bf0900000000000055090100000000009500000000000000bf9100"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r8, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r8], 0xff2e) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 1.26181797s ago: executing program 3 (id=8678): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1.169910971s ago: executing program 3 (id=8682): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}], 0x10, 0xfffffff7}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.136778202s ago: executing program 3 (id=8683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300)=0x6bbb, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000140), 0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x10, 0x95, 0x8, 0x0, 0xc304, 0x1031, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x9, 0xb06}, 0x80, 0x2, 0x1c, 0x5, 0x9, 0xd0d, 0x2, 0x0, 0x0, 0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r6 = socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc3ffb}]}) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r9, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) readv(r9, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 1.134922372s ago: executing program 0 (id=8684): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 1.118433142s ago: executing program 0 (id=8685): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000006900)=""/102400, 0x19000) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0xa4000061) read(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x8001, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) r3 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r3, 0x402, 0x5) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8) creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet6(r2, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket(0x10, 0x803, 0x0) 844.576046ms ago: executing program 0 (id=8687): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 822.245977ms ago: executing program 8 (id=8689): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x2000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 821.434857ms ago: executing program 0 (id=8690): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 611.03639ms ago: executing program 4 (id=8693): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}], 0x10, 0xfffffff7}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 602.83543ms ago: executing program 8 (id=8694): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='rxrpc_notify_socket\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) fspick(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace80bebeec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="04e6d3cb", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x8025) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYRESHEX=r1, @ANYRES8=r5, @ANYBLOB="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", @ANYBLOB="a540068fd090d687276ff710f3a295afeb514c359ab5aec9af90f6fb5ff0a084f3b25fd3b9d19572af3ec0b257432942c032fa2400586137e1024fb0d3da79bb19009cf82788916b97d148eb3a3ee854402f15a7cdd23ed4c7f22361a16876df5b4d6844de9420", @ANYRES64=r4, @ANYRESDEC=r1, @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x17, 0x0, @void}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b88af1d7defd81b3fa31001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x10) set_robust_list(&(0x7f0000000600)={0x0, 0xeed7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) ioctl(r8, 0xf, &(0x7f0000000540)="ba6841bbec9e68fe510873836aa5cc3cb6cf24b623a1752934dac003727a") bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r9}, 0x4) 559.594471ms ago: executing program 4 (id=8695): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x2b, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) 553.243211ms ago: executing program 6 (id=8696): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8402, 0x0) poll(&(0x7f0000000280), 0x0, 0xf0) close_range(r0, 0xffffffffffffffff, 0x0) 547.086041ms ago: executing program 8 (id=8697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000015a, &(0x7f0000000d40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:', @ANYRESOCT, @ANYBLOB='f']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x76) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0), 0x64, 0x50a, &(0x7f0000000940)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0xee01) 546.411501ms ago: executing program 0 (id=8698): syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) iopl(0x3) 268.254645ms ago: executing program 6 (id=8699): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) 263.695416ms ago: executing program 3 (id=8700): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4000084) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x8, 0xfb, 0x5}, {0x84, 0x6, 0xa8, 0x4}, {0x6, 0x9, 0x4, 0x1}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 209.342817ms ago: executing program 8 (id=8701): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000500)='./file0\x00', 0x85, &(0x7f00000002c0)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c646f733178666c6f7070792c646973636172642c636865636b3d7374726963742c646f74732c756d61736b3d30303030303030303030303030303030303030303030302c005cfc62f4d02467f358b5994840ea56b0221d013e71e44b8219d56c01000100d5bfd1b1537d0559da1ee418effe196657db344d30f27f6c0609979d6c93505e2d63e489bba6c6ee52f58754c60dfcc1d4"], 0x1, 0x261, &(0x7f0000000ac0)="$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") r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003f40)) sendmmsg$inet(r1, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000440)="216a7607fdc47e5014ebbd3d8bf05c11f7f2f3f1fa3fb49c583798832323cac572b29a79861a3482ddcd2634c8c83556a06b90414886304cf1708c98167e77e59e947b02550c9fce819a3672465d5315275391b532cd038849971e4a4c7ee69ec472ad06c1647f166c06a76524a73522b5cad3497b1d4e20b59bbb83a13e1c039e2533", 0x83}, {&(0x7f0000000180)="2449fdc45b532dde4880c496f43c2fa31251a1694c3ca1712af1d53078fb55301fc9ef6091093ae1e64272b9c2ea9cb4327fb11cd6faf80a5459a9f4d5e4d10dc1a74bbd184a5fbbf1a7", 0x4a}], 0x3}}, {{&(0x7f0000000640)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001ec0)=[{&(0x7f0000000680)="403158802626009bf0cfc4fa7c5a7111b40b79f942ccfdc1ae05bdda97cb08d52dfd73135e715b483ab9e6b72f8924f3bf76aff01d5f76336d3b139653d095c3dcfef2ec9eb893fd305784c838a243bf9de95dc3b3db6a601d9f0129109b0a40a185bb6ff1dfe696d8e37d4f7514faec48a2de985cb297b8ee4f0b1f0c5d728e73105cbec1112f574c8d61b982e0869da2edb79345cba9a1268a9feedad6853c0c028c87c02e9b80af442be208611fbd4173aaf32a5b500670e148aec4c13e7004a6dbd5bfcd7823447882", 0xcb}, {&(0x7f0000000780)="65ba0bf6ca344921398aa9445223f132953b957f59685cfde73eec258bf558b9de4a03ba7752684718ccdc9e08fa068246e1ec4717b4b85418e62bd3dc8f77d620827c3b73b0656ff9719cd4e58de618294fe70204167ec8194e8df34aaed24f089bd8a568e92fb693f560a812de27d3d39f585ba8f9f3686c78b826c9da34fb5c620aef80d8594beeb67eb64ef2ecb389ce25fd57edaf363e5bddbe6692292937ca0102df2b04ae784aea01897877f8366563", 0xb3}, {&(0x7f0000000840)="17adc683762bdbfc7c1e556481650a9c735d6966f0d0b08584475239381c73d2c7c8a876c85b5367243177f0cc4d4a13b70c1f0c0d475ba959ee00b43944c9b693f9ddea3de327a601d9e99101bad8a8d848160f418ec500047878d76711b72eb45f8d3f320e68fa5914e8600edffa76b67cb382f96fc6ca125c58047e2325c277b144dc2730cbe7438647dcd52877bbc70af6823267744dba69ab50fa7790a4d02e", 0xa2}, {&(0x7f0000000900)="a50ec6", 0x3}, {&(0x7f0000000a00)="e211d19fb849fd79362488ec55022cf8fc70bc7676aad601510eab07cdd0cf88a8e3ed7b2fd1bbd8d44cba0bcfaa70c79c946270a7fe59e7de8642b0cb4d5ec53dda9ef79ab9acf7ec609b99fd5d31fe64c875153e9d5ff7b203d0b8b8019becf5dc1240bd018de134bf8ac12ecd11e131627451a954075b9abe7598e828c707f02295df27ad3128c616ca", 0x8b}, {&(0x7f0000000940)='.r', 0x2}, {&(0x7f0000001d40)="bd3cf39ea2f8ef8b96d0bd54da485617dc25692bb1cb3a4903340373685ca15e7999ba079f639da34747e18b161ac41fa5fdfa5d01b3cad1fc43d1de50f4629b66baa552fd62c72552ce2b3119997728174f1dc8b8b4bd70df90a881f74c83b1fd37883f2d3afab5854e011f23b747c4acd9c509b9089e56c900f9086421616b39fbb6303b655bb0", 0x88}, {&(0x7f0000000980)="e076fcb7e80fdebdc3a2deef17a50e", 0xf}, {&(0x7f0000001e00)="74f0faa23384e9a103a7284982a5caf243d80713d517f7cb84b36bcf96e476adac40deb47562d3fa85e0ab496c4d65ccd609315e44f53154575a15afe08cd53b4450840c34266e069a5b8964f62a2974eb21e34caaf543bdda500d67859cb1952ced79828e5eeb8d06857c5cae8d39f9741a56b4c1ea6be88dfa79030dc9f3b93e99f6baf3d330af28f715467f5259d8eac2acfbecf7246e90344e29cb8f34c44e3638f16cc5a2d4ca0e1e38207548cf", 0xb0}], 0x9, &(0x7f0000001f80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @local}}}], 0x98}}, {{&(0x7f0000002040)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000002180)=[{&(0x7f0000002080)="6ca5c9cd2898c20ba18eca3c3b8fd41826716c5144e433c0e5bd2d44d51411e6139a78171fed45c04770396fd39184a055f0354e1040df2d8353e8422864a7b1fdbaf0ff049755ad7903c2c0d71c8f9bce9295a1ee7828e48609d9b70fa97e05a151c79e0d41872b2226105519b66120d4270d2dfeaff48d9d71c0ec0f647cee45126375e1a8b5d06613b0e0c2384603db50f5b8dc9ce13aa64610f7cc40fa98f2f2ebb321c54051f58b96b9e0c7022d21a8d6ca76e94a13657cf181f595e86f808d7e70ac19b7db8fa6875e5a7b5db32fbbd329d7ba2033b984ac5c", 0xdc}], 0x1, &(0x7f0000002280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}], 0x20}}, {{&(0x7f00000022c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000002480)=[{&(0x7f0000002300)="202d0e1bcf170b05a855b8a3b86d81d105af00a5f301d2b384a60c81493beb2d21ce6bf0d63686230eee87b99f7fdce57b90beb1c01e1f815d9e60b9f13688b5cf804c479e103f1dd7ab570d0a75fa59952cd51b30f39fc57dd886a988b34af7e99a9af68323bd", 0x67}, {&(0x7f0000002380)="3802b3f65a576aab5e6cdcb448e656771cc49e43ddac15417f652d9668b7235e4b0888ef925ae01210f3146f0732efeb80e41db5f82c834cbb30dd4dd686aa5b1d5f8a0bfdfd9a262080afc2faa3729611270f25215fb5e7b131a68eb0ea84f93ce99958c5ad4c0c9ee87ceea09978cf8c76f6738eb8f806a00ec4dc52a0380b3d762e70ddd8a0de6d4f9cb73ae93c52eb618f2fefe9dbf4f4b3043fb4804cb662d233e183728e308327d23037df2cb582b652adfa1f42c69c100a70f018c6e81cee2aff0c5241d2ae2d281d3a617304a6635681ba832b8b888af2bab611744852817e32887d4165392d0fa13e60c6ae76cef7", 0xf3}], 0x2}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000024c0)="b119631f52fb4832c23f8ed99e71f9f571e1d6ed6a941c10bdd32913db17073db79a89699a9aaa007e7d2679ae196600a933cfac00d12ac9f210a2ad9c2f933ce37120b1c1c4f9b70225ff095adbc10ad55f2112a849a712d82c12587a31cf6cf80ef83e609c21eda79200bd0ccaae1bb4b3842ac1e1e44655056cb0375ef0d8616bf7a888e1ac8bde70430e1e63aa7008dfe0e4f06ffd85688a7c39bce5ff5b311ab864aa207dddc20927aa553685717ddb2936a6166275d798bd56a1a31bec2716b8d01e926b171787", 0xca}], 0x1, &(0x7f0000002600)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@generic={0x83, 0x5, "371d89"}, @lsrr={0x83, 0x7, 0xfb, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0x57, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}]}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xaf, 0x0, 0x4, [0x7fffffff, 0x200]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x68}}, {{&(0x7f0000003ac0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000003d80)=[{&(0x7f0000003b00)}, {&(0x7f0000003c00)}], 0x2}}], 0x6, 0x4040800) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf68}]}}}]}]}], {0x14}}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="b80000000101010335343e13ecd4c96500000000000000000a00000044000480400002800500010008000000050001007d0000000c00034000000000000005490c000340000000000010ce3b05000200000000000c000340000000000000e882100005d4f8d40a97f2f2e6800b000100616d616e646100001caa164000000066000100fa2865dba969a0ed0caa21f79600000053388000be5a97e48c814531a3153c8cf900040000000514000f8008000340000007cc08000340fffffffb2000170000000008000000050000ca4800000002000000030000000400008f31ee65df6481024413a2968fc40663f74b2a43411cbc68198fcad30c"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0xc5) mq_unlink(0x0) 190.905546ms ago: executing program 6 (id=8702): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000000), &(0x7f0000000280)}, 0xffffffffffffffa9) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x29ba, 0x80, 0x1, 0x357}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r0, 0x47bc, 0x2, 0x8, 0x0, 0x0) 158.921397ms ago: executing program 6 (id=8703): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x2000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 101.972338ms ago: executing program 8 (id=8704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009006a0001"], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000000740)="cc", 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x1a3) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, 0x0) 26.425789ms ago: executing program 6 (id=8705): sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x27a}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0, 0x82, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1f, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001740)=""/4096, 0x41000, 0x61, '\x00', r2, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x4, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000d80)=[r0, r0, r0, r0, r0, 0xffffffffffffffff, r0], &(0x7f0000000dc0)=[{0x2, 0x3, 0x2, 0x4}], 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000000ffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 0s ago: executing program 6 (id=8706): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x6, 0x4}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x2}, {0x2, 0x3}], {}, [], {0x10, 0x5}}, 0x3c, 0x2) kernel console output (not intermixed with test programs): ce bond0 [ 461.060390][T26270] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.154859][T26270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.198089][T26320] xt_hashlimit: size too large, truncated to 1048576 [ 461.217795][ T3408] syz1: Port: 1 Link DOWN [ 461.373452][ T29] audit: type=1326 audit(1753794621.486:82725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26321 comm="syz.1.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9c9be9a9 code=0x7ffc0000 [ 461.397182][ T29] audit: type=1326 audit(1753794621.486:82726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26321 comm="syz.1.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3b9c9be9a9 code=0x7ffc0000 [ 461.420915][ T29] audit: type=1326 audit(1753794621.486:82727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26321 comm="syz.1.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9c9be9a9 code=0x7ffc0000 [ 461.444673][ T29] audit: type=1326 audit(1753794621.486:82728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26321 comm="syz.1.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b9c9be9a9 code=0x7ffc0000 [ 461.468385][ T29] audit: type=1326 audit(1753794621.486:82729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26321 comm="syz.1.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9c9be9a9 code=0x7ffc0000 [ 461.492216][ T29] audit: type=1326 audit(1753794621.486:82730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26321 comm="syz.1.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b9c9be9a9 code=0x7ffc0000 [ 461.515962][ T29] audit: type=1326 audit(1753794621.486:82731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26321 comm="syz.1.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9c9be9a9 code=0x7ffc0000 [ 461.596876][T26333] lo speed is unknown, defaulting to 1000 [ 461.628918][T26338] tipc: Enabling of bearer rejected, already enabled [ 461.658593][T26337] xt_hashlimit: size too large, truncated to 1048576 [ 462.198350][T26350] loop1: detected capacity change from 0 to 512 [ 462.221604][T26350] EXT4-fs: Ignoring removed bh option [ 462.239621][T26350] EXT4-fs: Mount option(s) incompatible with ext3 [ 462.240745][T26353] xt_hashlimit: size too large, truncated to 1048576 [ 462.357428][T26356] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.7837'. [ 462.440757][T21000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.457564][T26356] loop1: detected capacity change from 0 to 1024 [ 462.507463][T26356] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 462.518484][T26356] EXT4-fs (loop1): group descriptors corrupted! [ 462.717327][T26351] loop7: detected capacity change from 0 to 512 [ 462.787739][T26351] EXT4-fs (loop7): orphan cleanup on readonly fs [ 462.865702][T26351] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7835: bg 0: block 248: padding at end of block bitmap is not set [ 463.100330][T26351] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.7835: Failed to acquire dquot type 1 [ 463.137250][T26365] lo speed is unknown, defaulting to 1000 [ 463.152504][T26351] EXT4-fs (loop7): 1 truncate cleaned up [ 463.158536][T26356] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 463.178213][T26351] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 463.450458][T26379] netlink: 'syz.6.7847': attribute type 2 has an invalid length. [ 463.458321][T26379] netlink: 'syz.6.7847': attribute type 1 has an invalid length. [ 463.466247][T26379] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.7847'. [ 463.532410][T24852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.681183][T26396] syzkaller0: entered allmulticast mode [ 463.691337][T26396] syzkaller0 (unregistering): left allmulticast mode [ 463.805220][T26405] loop5: detected capacity change from 0 to 4096 [ 463.817955][T26405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 463.826737][T26409] netlink: 'syz.2.7859': attribute type 2 has an invalid length. [ 463.834534][T26409] netlink: 'syz.2.7859': attribute type 1 has an invalid length. [ 463.842282][T26409] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.7859'. [ 463.871070][T26405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.922632][T26407] loop7: detected capacity change from 0 to 8192 [ 463.970276][T26407] vfat: Unknown parameter '0xffffffffffffffffÿÿ' [ 463.996055][T26416] syzkaller0: entered allmulticast mode [ 464.031076][T26416] syzkaller0 (unregistering): left allmulticast mode [ 464.102408][T26424] loop7: detected capacity change from 0 to 128 [ 464.127015][T26424] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 464.137081][T26424] FAT-fs (loop7): Filesystem has been set read-only [ 464.276222][ T3514] batadv1: left allmulticast mode [ 464.281692][ T3514] batadv1: left promiscuous mode [ 464.287194][ T3514] bridge0: port 3(batadv1) entered disabled state [ 464.294449][T21000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.314188][ T3514] bridge_slave_1: left allmulticast mode [ 464.320081][ T3514] bridge_slave_1: left promiscuous mode [ 464.325916][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.373095][ T3514] bridge_slave_0: left allmulticast mode [ 464.378863][ T3514] bridge_slave_0: left promiscuous mode [ 464.384688][ T3514] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.412933][T26441] IPv4: Oversized IP packet from 127.202.26.0 [ 464.474883][ T3514] dvmrp1 (unregistering): left allmulticast mode [ 464.585185][ T3514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.600533][ T3514] bond_slave_0: left promiscuous mode [ 464.639654][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.668912][ T3514] bond_slave_1: left promiscuous mode [ 464.678224][ T3514] bond0 (unregistering): Released all slaves [ 464.713229][T26438] tipc: Enabling of bearer rejected, already enabled [ 464.721576][T26434] lo speed is unknown, defaulting to 1000 [ 464.936199][ T3514] hsr_slave_0: left promiscuous mode [ 464.963795][T26461] loop1: detected capacity change from 0 to 512 [ 464.970518][ T3514] hsr_slave_1: left promiscuous mode [ 464.972590][T26461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.074898][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 465.074911][ T29] audit: type=1326 audit(1753794625.176:83182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26456 comm="syz.5.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2d6b5967 code=0x7ffc0000 [ 465.104928][ T29] audit: type=1326 audit(1753794625.176:83183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26456 comm="syz.5.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c2d65ab89 code=0x7ffc0000 [ 465.128431][ T29] audit: type=1326 audit(1753794625.176:83184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26456 comm="syz.5.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f9c2d6be9a9 code=0x7ffc0000 [ 465.152096][ T29] audit: type=1326 audit(1753794625.186:83185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26456 comm="syz.5.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2d6b5967 code=0x7ffc0000 [ 465.175609][ T29] audit: type=1326 audit(1753794625.186:83186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26456 comm="syz.5.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c2d65ab89 code=0x7ffc0000 [ 465.199092][ T29] audit: type=1326 audit(1753794625.186:83187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26456 comm="syz.5.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f9c2d6be9a9 code=0x7ffc0000 [ 465.240778][ T3514] team_slave_1 (unregistering): left promiscuous mode [ 465.267874][ T29] audit: type=1326 audit(1753794625.196:83188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26456 comm="syz.5.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2d6b5967 code=0x7ffc0000 [ 465.291626][ T29] audit: type=1326 audit(1753794625.196:83189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26456 comm="syz.5.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c2d65ab89 code=0x7ffc0000 [ 465.315208][ T29] audit: type=1326 audit(1753794625.196:83190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26456 comm="syz.5.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f9c2d6be9a9 code=0x7ffc0000 [ 465.338807][ T29] audit: type=1326 audit(1753794625.196:83191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26456 comm="syz.5.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2d6b5967 code=0x7ffc0000 [ 465.365093][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 465.375686][ T3514] team_slave_0 (unregistering): left promiscuous mode [ 465.384383][ T3514] team0 (unregistering): Port device team_slave_0 removed [ 465.486159][ T3486] smc: removing ib device sz1 [ 465.947446][T20818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.142215][T26486] loop7: detected capacity change from 0 to 512 [ 466.184474][T26489] loop5: detected capacity change from 0 to 1024 [ 466.199566][T26486] EXT4-fs (loop7): orphan cleanup on readonly fs [ 466.206654][T26486] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7884: bg 0: block 248: padding at end of block bitmap is not set [ 466.222666][T26486] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.7884: Failed to acquire dquot type 1 [ 466.234716][T26486] EXT4-fs (loop7): 1 truncate cleaned up [ 466.241732][T26486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 466.274604][T26489] EXT4-fs: Ignoring removed nobh option [ 466.280338][T26489] EXT4-fs: Ignoring removed bh option [ 466.331437][T26489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.382071][T26489] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.7888: inode #327696: comm syz.5.7888: iget: illegal inode # [ 466.426226][T26489] EXT4-fs (loop5): Remounting filesystem read-only [ 466.448996][T26489] EXT4-fs warning (device loop5): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.5.7888: cleanup dec ref error -30 [ 466.504561][T26489] EXT4-fs warning (device loop5): ext4_xattr_block_set:2190: inode #18: comm syz.5.7888: dec ref error=-30 [ 466.610505][T21000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.726414][T26513] tmpfs: Bad value for 'mpol' [ 466.828254][T24852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.005337][T26521] loop5: detected capacity change from 0 to 4096 [ 467.014135][T26521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.025625][T26521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.245212][T26528] netlink: 304 bytes leftover after parsing attributes in process `syz.5.7899'. [ 467.356782][T26528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7899'. [ 467.678929][T26539] loop1: detected capacity change from 0 to 1024 [ 467.748022][T26542] x_tables: duplicate underflow at hook 3 [ 467.795784][T26547] program syz.1.7906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.823330][T21000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.846374][T26551] C: renamed from team_slave_0 [ 467.852530][T26551] FAULT_INJECTION: forcing a failure. [ 467.852530][T26551] name failslab, interval 1, probability 0, space 0, times 0 [ 467.865368][T26551] CPU: 0 UID: 0 PID: 26551 Comm: syz.5.7907 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 467.865423][T26551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.865436][T26551] Call Trace: [ 467.865443][T26551] [ 467.865452][T26551] __dump_stack+0x1d/0x30 [ 467.865472][T26551] dump_stack_lvl+0xe8/0x140 [ 467.865489][T26551] dump_stack+0x15/0x1b [ 467.865535][T26551] should_fail_ex+0x265/0x280 [ 467.865560][T26551] should_failslab+0x8c/0xb0 [ 467.865583][T26551] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 467.865607][T26551] ? kstrdup_const+0x3e/0x50 [ 467.865681][T26551] ? __schedule+0x6a8/0xb30 [ 467.865711][T26551] kstrdup+0x3e/0xd0 [ 467.865806][T26551] kstrdup_const+0x3e/0x50 [ 467.865844][T26551] kernfs_rename_ns+0x22c/0x410 [ 467.865866][T26551] sysfs_rename_link_ns+0xfc/0x120 [ 467.865897][T26551] device_rename+0xd2/0x180 [ 467.865924][T26551] netif_change_name+0x1eb/0x6b0 [ 467.866033][T26551] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 467.866067][T26551] ? nla_strscpy+0xec/0x120 [ 467.866094][T26551] do_setlink+0x80b/0x2810 [ 467.866260][T26551] ? save_fpregs_to_fpstate+0x100/0x160 [ 467.866290][T26551] ? _raw_spin_unlock+0x26/0x50 [ 467.866313][T26551] ? finish_task_switch+0xad/0x2b0 [ 467.866331][T26551] ? __schedule+0x6a8/0xb30 [ 467.866363][T26551] rtnl_newlink+0xe75/0x12d0 [ 467.866455][T26551] ? xas_load+0x413/0x430 [ 467.866477][T26551] ? xas_load+0x413/0x430 [ 467.866499][T26551] ? __rcu_read_unlock+0x4f/0x70 [ 467.866593][T26551] ? xa_load+0xb1/0xe0 [ 467.866616][T26551] ? __rcu_read_unlock+0x4f/0x70 [ 467.866638][T26551] ? avc_has_perm_noaudit+0x1b1/0x200 [ 467.866715][T26551] ? cred_has_capability+0x210/0x280 [ 467.866742][T26551] ? selinux_capable+0x31/0x40 [ 467.866780][T26551] ? security_capable+0x83/0x90 [ 467.866882][T26551] ? ns_capable+0x7d/0xb0 [ 467.866907][T26551] ? __pfx_rtnl_newlink+0x10/0x10 [ 467.866964][T26551] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 467.866991][T26551] ? avc_has_perm_noaudit+0x1b1/0x200 [ 467.867094][T26551] netlink_rcv_skb+0x120/0x220 [ 467.867140][T26551] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.867174][T26551] rtnetlink_rcv+0x1c/0x30 [ 467.867249][T26551] netlink_unicast+0x5a5/0x680 [ 467.867273][T26551] netlink_sendmsg+0x58b/0x6b0 [ 467.867323][T26551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.867346][T26551] __sock_sendmsg+0x142/0x180 [ 467.867451][T26551] ____sys_sendmsg+0x31e/0x4e0 [ 467.867479][T26551] ___sys_sendmsg+0x17b/0x1d0 [ 467.867579][T26551] __x64_sys_sendmsg+0xd4/0x160 [ 467.867678][T26551] x64_sys_call+0x191e/0x2ff0 [ 467.867762][T26551] do_syscall_64+0xd2/0x200 [ 467.867802][T26551] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 467.867853][T26551] ? clear_bhb_loop+0x40/0x90 [ 467.867874][T26551] ? clear_bhb_loop+0x40/0x90 [ 467.867949][T26551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.867966][T26551] RIP: 0033:0x7f9c2d6be9a9 [ 467.868022][T26551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.868039][T26551] RSP: 002b:00007f9c2bd1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.868057][T26551] RAX: ffffffffffffffda RBX: 00007f9c2d8e5fa0 RCX: 00007f9c2d6be9a9 [ 467.868068][T26551] RDX: 0000000020000880 RSI: 0000200000000940 RDI: 0000000000000003 [ 467.868079][T26551] RBP: 00007f9c2bd1f090 R08: 0000000000000000 R09: 0000000000000000 [ 467.868093][T26551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.868184][T26551] R13: 0000000000000000 R14: 00007f9c2d8e5fa0 R15: 00007ffe7b984538 [ 467.868202][T26551] [ 468.393476][T26564] loop6: detected capacity change from 0 to 8192 [ 468.401203][T26564] vfat: Unknown parameter '0xffffffffffffffffÿÿ' [ 468.435802][T26564] loop6: detected capacity change from 0 to 128 [ 468.443788][T26564] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 468.453746][T26564] FAT-fs (loop6): Filesystem has been set read-only [ 468.464258][T26572] xt_hashlimit: size too large, truncated to 1048576 [ 468.823033][T26588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7922'. [ 468.857726][T26588] vlan2: entered allmulticast mode [ 468.862947][T26588] bridge_slave_0: entered allmulticast mode [ 469.053740][T26607] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7929'. [ 469.512509][T26630] wg2: entered promiscuous mode [ 469.517478][T26630] wg2: entered allmulticast mode [ 469.690982][T26645] syzkaller0: entered allmulticast mode [ 469.700497][T26645] syzkaller0 (unregistering): left allmulticast mode [ 469.719995][T26647] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7947'. [ 469.728978][T26647] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7947'. [ 469.805648][T26655] loop5: detected capacity change from 0 to 128 [ 469.812596][T26654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7951'. [ 469.822315][T26655] FAT-fs (loop5): bogus number of reserved sectors [ 469.828863][T26655] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 469.838286][T26655] FAT-fs (loop5): Can't find a valid FAT filesystem [ 469.903234][T26657] loop7: detected capacity change from 0 to 2048 [ 469.951071][T26657] loop7: p1 < > p4 [ 469.956190][T26657] loop7: p4 size 8388608 extends beyond EOD, truncated [ 470.011860][T26668] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 470.018512][T26668] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 470.026199][T26668] vhci_hcd vhci_hcd.0: Device attached [ 470.056591][T26674] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 470.063137][T26674] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 470.070939][T26674] vhci_hcd vhci_hcd.0: Device attached [ 470.094476][T26668] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 470.103517][T26668] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 470.106406][T26686] netlink: 'syz.6.7961': attribute type 2 has an invalid length. [ 470.110020][T26668] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 470.110098][T26668] vhci_hcd vhci_hcd.0: Device attached [ 470.117775][T26686] netlink: 'syz.6.7961': attribute type 1 has an invalid length. [ 470.138579][T26686] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.7961'. [ 470.139148][T26668] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 470.151589][T26688] netlink: 'syz.7.7962': attribute type 27 has an invalid length. [ 470.157555][T26668] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 470.170428][T26668] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 470.178186][T26668] vhci_hcd vhci_hcd.0: Device attached [ 470.185894][T26668] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 470.223552][T26668] FAULT_INJECTION: forcing a failure. [ 470.223552][T26668] name failslab, interval 1, probability 0, space 0, times 0 [ 470.236277][T26668] CPU: 0 UID: 0 PID: 26668 Comm: syz.2.7957 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 470.236322][T26668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.236334][T26668] Call Trace: [ 470.236342][T26668] [ 470.236351][T26668] __dump_stack+0x1d/0x30 [ 470.236379][T26668] dump_stack_lvl+0xe8/0x140 [ 470.236399][T26668] dump_stack+0x15/0x1b [ 470.236428][T26668] should_fail_ex+0x265/0x280 [ 470.236453][T26668] should_failslab+0x8c/0xb0 [ 470.236494][T26668] kmem_cache_alloc_noprof+0x50/0x310 [ 470.236559][T26668] ? security_inode_alloc+0x37/0x100 [ 470.236671][T26668] security_inode_alloc+0x37/0x100 [ 470.236703][T26668] inode_init_always_gfp+0x4b7/0x500 [ 470.236780][T26668] ? __pfx_sock_alloc_inode+0x10/0x10 [ 470.236810][T26668] alloc_inode+0x58/0x170 [ 470.236869][T26668] __sock_create+0x122/0x5b0 [ 470.236901][T26668] __sys_socketpair+0x170/0x430 [ 470.236937][T26668] ? ksys_write+0x192/0x1a0 [ 470.237044][T26668] __x64_sys_socketpair+0x52/0x60 [ 470.237093][T26668] x64_sys_call+0x2bf2/0x2ff0 [ 470.237115][T26668] do_syscall_64+0xd2/0x200 [ 470.237138][T26668] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 470.237235][T26668] ? clear_bhb_loop+0x40/0x90 [ 470.237257][T26668] ? clear_bhb_loop+0x40/0x90 [ 470.237279][T26668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.237301][T26668] RIP: 0033:0x7f44753908fa [ 470.237317][T26668] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.237380][T26668] RSP: 002b:00007f44739eef78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 470.237400][T26668] RAX: ffffffffffffffda RBX: 00007f44755b5f00 RCX: 00007f44753908fa [ 470.237413][T26668] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 470.237430][T26668] RBP: 00007f44739ef090 R08: 0000000000000000 R09: 0000000000000000 [ 470.237443][T26668] R10: 00007f44739eef98 R11: 0000000000000246 R12: 0000000000000003 [ 470.237456][T26668] R13: 0000000000000000 R14: 00007f44755b5fa0 R15: 00007ffd0dedaf08 [ 470.237477][T26668] [ 470.237539][T26668] socket: no more sockets [ 470.272789][T26695] loop6: detected capacity change from 0 to 128 [ 470.290691][T26695] FAT-fs (loop6): bogus number of reserved sectors [ 470.294533][ T7075] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 470.299926][T26695] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 470.299943][T26695] FAT-fs (loop6): Can't find a valid FAT filesystem [ 470.316411][T26692] loop1: detected capacity change from 0 to 8192 [ 470.342517][T26669] vhci_hcd: connection reset by peer [ 470.344481][T26684] vhci_hcd: connection closed [ 470.349433][ T3486] vhci_hcd: stop threads [ 470.365955][T26675] vhci_hcd: connection closed [ 470.370438][ T3486] vhci_hcd: release socket [ 470.375175][T26689] vhci_hcd: connection closed [ 470.394466][ T3486] vhci_hcd: disconnect device [ 470.396178][T26692] vfat: Unknown parameter '0xffffffffffffffffÿÿ' [ 470.422538][ T29] kauditd_printk_skb: 545 callbacks suppressed [ 470.422551][ T29] audit: type=1400 audit(1753794630.536:83735): avc: denied { write } for pid=26697 comm="syz.5.7965" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 470.427537][ T3486] vhci_hcd: stop threads [ 470.470892][ T3486] vhci_hcd: release socket [ 470.470968][ T3486] vhci_hcd: disconnect device [ 470.474238][ T3486] vhci_hcd: stop threads [ 470.486913][ T3486] vhci_hcd: release socket [ 470.493343][T26693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.498522][ T3486] vhci_hcd: disconnect device [ 470.532300][T26699] loop1: detected capacity change from 0 to 128 [ 470.611770][ T3486] vhci_hcd: stop threads [ 470.611780][ T3486] vhci_hcd: release socket [ 470.611791][ T3486] vhci_hcd: disconnect device [ 470.634388][T26699] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 470.644594][T26699] FAT-fs (loop1): Filesystem has been set read-only [ 470.705923][ T29] audit: type=1400 audit(1753794630.816:83736): avc: denied { ioctl } for pid=26697 comm="syz.5.7965" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 470.798813][T26688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.811139][T26688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.913311][ T29] audit: type=1326 audit(1753794631.026:83737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.2.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 470.937171][ T29] audit: type=1326 audit(1753794631.026:83738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.2.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 470.960754][ T29] audit: type=1326 audit(1753794631.026:83739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.2.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 470.984382][ T29] audit: type=1326 audit(1753794631.026:83740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.2.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 471.007966][ T29] audit: type=1326 audit(1753794631.026:83741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.2.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 471.031633][ T29] audit: type=1326 audit(1753794631.026:83742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.2.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 471.055269][ T29] audit: type=1326 audit(1753794631.026:83743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.2.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 471.085737][T26688] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.094708][T26688] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.103698][T26688] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.105531][ T29] audit: type=1326 audit(1753794631.026:83744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.2.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 471.112594][T26688] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.206267][T26716] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 471.234540][T26716] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7970'. [ 471.259344][T26716] netem: change failed [ 471.280759][T26722] loop7: detected capacity change from 0 to 1024 [ 471.308881][T26722] EXT4-fs: Ignoring removed nobh option [ 471.314658][T26722] EXT4-fs: Ignoring removed bh option [ 471.361517][T26722] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.364270][T26728] loop5: detected capacity change from 0 to 512 [ 471.409207][T26722] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.7973: inode #327696: comm syz.7.7973: iget: illegal inode # [ 471.432103][T26722] EXT4-fs (loop7): Remounting filesystem read-only [ 471.447218][T26722] EXT4-fs warning (device loop7): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.7.7973: cleanup dec ref error -30 [ 471.468911][T26728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.493032][T26722] EXT4-fs warning (device loop7): ext4_xattr_block_set:2190: inode #18: comm syz.7.7973: dec ref error=-30 [ 471.516469][T26741] IPv4: Oversized IP packet from 127.202.26.0 [ 471.659196][T24852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.804554][T26755] xt_CT: You must specify a L4 protocol and not use inversions on it [ 471.985347][T26759] xt_hashlimit: size too large, truncated to 1048576 [ 472.201080][T26765] netlink: 'syz.2.7984': attribute type 27 has an invalid length. [ 472.264287][T26765] dummy0: left promiscuous mode [ 472.324952][T21000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.394682][T26765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.441759][T26765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.526481][T26769] loop5: detected capacity change from 0 to 8192 [ 472.573568][T26769] vfat: Unknown parameter '0xffffffffffffffffÿÿ' [ 472.576514][T26765] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.588430][T26765] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.594063][T26773] xt_hashlimit: size too large, truncated to 1048576 [ 472.596801][T26765] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.611807][T26765] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.730669][T26766] 8021q: adding VLAN 0 to HW filter on device  [ 472.756339][T26766] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.768992][T26780] loop5: detected capacity change from 0 to 128 [ 472.775730][T26766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.792368][T26780] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 472.802454][T26780] FAT-fs (loop5): Filesystem has been set read-only [ 472.975686][T26790] program syz.2.7993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.088257][T26796] program syz.5.7996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.242716][T26805] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 473.355563][T26809] loop1: detected capacity change from 0 to 8192 [ 473.363163][T26809] vfat: Unknown parameter '0xffffffffffffffffÿÿ' [ 473.388598][T26809] loop1: detected capacity change from 0 to 128 [ 473.396635][T26809] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 473.406791][T26809] FAT-fs (loop1): Filesystem has been set read-only [ 473.498593][T26814] loop1: detected capacity change from 0 to 1024 [ 473.505809][T26814] EXT4-fs: Ignoring removed nobh option [ 473.511532][T26814] EXT4-fs: Ignoring removed bh option [ 473.521711][T26814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.543404][T26814] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.8004: inode #327696: comm syz.1.8004: iget: illegal inode # [ 473.571200][T26814] EXT4-fs (loop1): Remounting filesystem read-only [ 473.577913][T26814] EXT4-fs warning (device loop1): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.1.8004: cleanup dec ref error -30 [ 473.591958][T26814] EXT4-fs warning (device loop1): ext4_xattr_block_set:2190: inode #18: comm syz.1.8004: dec ref error=-30 [ 473.610733][T26821] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 473.629821][T20818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.658851][T26828] program syz.1.8008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.692462][T26833] netlink: 'syz.7.8012': attribute type 2 has an invalid length. [ 473.700272][T26833] netlink: 'syz.7.8012': attribute type 1 has an invalid length. [ 473.708023][T26833] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.8012'. [ 474.004299][T26842] loop6: detected capacity change from 0 to 8192 [ 474.032289][T26832] loop1: detected capacity change from 0 to 512 [ 474.039179][T26842] vfat: Unknown parameter '0xffffffffffffffffÿÿ' [ 474.091420][T26832] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 474.113905][T26842] loop6: detected capacity change from 0 to 128 [ 474.144251][T26832] EXT4-fs (loop1): mount failed [ 474.151408][T26842] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 474.161517][T26842] FAT-fs (loop6): Filesystem has been set read-only [ 474.389145][T26866] program syz.6.8022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.396168][T26868] netlink: 'syz.1.8023': attribute type 2 has an invalid length. [ 474.406249][T26868] netlink: 'syz.1.8023': attribute type 1 has an invalid length. [ 474.414202][T26868] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.8023'. [ 474.721963][T26879] loop1: detected capacity change from 0 to 512 [ 474.741823][T26879] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 474.767589][T26879] EXT4-fs (loop1): mount failed [ 474.994688][T26890] IPv4: Oversized IP packet from 127.202.26.0 [ 475.077517][T26892] loop7: detected capacity change from 0 to 4096 [ 475.093563][T26892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 475.127835][T26892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.296954][T26898] IPv4: Oversized IP packet from 127.202.26.0 [ 475.369270][ T7075] usb 5-1: enqueue for inactive port 0 [ 475.374945][ T7075] usb 5-1: enqueue for inactive port 0 [ 475.384220][T26900] program syz.6.8034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.449061][ T7075] vhci_hcd: vhci_device speed not set [ 475.478605][T26902] netlink: 'syz.6.8035': attribute type 27 has an invalid length. [ 475.570577][T26902] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.578274][T26902] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.752363][T26902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.765474][T26902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.857312][T26906] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 475.863861][T26906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 475.871483][T26906] vhci_hcd vhci_hcd.0: Device attached [ 475.885757][T26902] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.894685][T26902] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.904171][T26902] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.913259][T26902] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.943829][T26906] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 475.950374][T26906] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 475.958245][T26906] vhci_hcd vhci_hcd.0: Device attached [ 476.005531][T26911] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.024590][T26903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.041672][T26906] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(7) [ 476.048219][T26906] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 476.056042][T26906] vhci_hcd vhci_hcd.0: Device attached [ 476.070896][T26903] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.081412][T26906] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.114617][T26906] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 476.121319][T26906] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 476.129039][T26906] vhci_hcd vhci_hcd.0: Device attached [ 476.129109][T11106] usb 3-1: new low-speed USB device number 6 using vhci_hcd [ 476.136900][T26906] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.163906][T26906] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 476.170532][T26906] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 476.178243][T26906] vhci_hcd vhci_hcd.0: Device attached [ 476.185281][T26903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.202658][T26916] vhci_hcd: connection closed [ 476.202897][ T3494] vhci_hcd: stop threads [ 476.211964][ T3494] vhci_hcd: release socket [ 476.216387][ T3494] vhci_hcd: disconnect device [ 476.222627][T26914] vhci_hcd: connection closed [ 476.222946][ T3494] vhci_hcd: stop threads [ 476.231979][ T3494] vhci_hcd: release socket [ 476.236421][ T3494] vhci_hcd: disconnect device [ 476.243739][T26909] vhci_hcd: connection closed [ 476.243892][T26912] vhci_hcd: connection closed [ 476.259306][T26907] vhci_hcd: connection reset by peer [ 476.266310][ T3494] vhci_hcd: stop threads [ 476.273561][ T3494] vhci_hcd: release socket [ 476.278000][ T3494] vhci_hcd: disconnect device [ 476.284296][ T3494] vhci_hcd: stop threads [ 476.288543][ T3494] vhci_hcd: release socket [ 476.293001][ T3494] vhci_hcd: disconnect device [ 476.298394][ T3494] vhci_hcd: stop threads [ 476.302848][ T3494] vhci_hcd: release socket [ 476.307417][ T3494] vhci_hcd: disconnect device [ 476.404792][T24852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.414426][T26923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8039'. [ 476.476894][T26929] loop6: detected capacity change from 0 to 512 [ 476.512382][ T29] kauditd_printk_skb: 1028 callbacks suppressed [ 476.512396][ T29] audit: type=1326 audit(1753794636.626:84771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26932 comm="syz.2.8044" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f447538e9a9 code=0x0 [ 476.512905][T26936] program syz.5.8045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.519700][T26929] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.565520][T26938] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 476.576089][T26938] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8046'. [ 476.590705][T26938] netem: change failed [ 476.653665][ T29] audit: type=1326 audit(1753794636.766:84772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26944 comm="syz.7.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 476.677610][ T29] audit: type=1326 audit(1753794636.766:84773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26944 comm="syz.7.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 476.709549][ T29] audit: type=1326 audit(1753794636.816:84774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26944 comm="syz.7.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 476.733389][ T29] audit: type=1326 audit(1753794636.816:84775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26944 comm="syz.7.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 476.757298][ T29] audit: type=1326 audit(1753794636.816:84776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26944 comm="syz.7.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 476.781055][ T29] audit: type=1326 audit(1753794636.816:84777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26944 comm="syz.7.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 476.804734][ T29] audit: type=1326 audit(1753794636.816:84778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26944 comm="syz.7.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 476.828822][ T29] audit: type=1326 audit(1753794636.816:84779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26944 comm="syz.7.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 476.852452][ T29] audit: type=1326 audit(1753794636.816:84780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26944 comm="syz.7.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 476.924946][T26951] loop5: detected capacity change from 0 to 4096 [ 476.940256][T26951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.946109][T26955] loop1: detected capacity change from 0 to 1024 [ 476.955170][T26955] EXT4-fs: Ignoring removed nobh option [ 476.956222][T26951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.961199][T26955] EXT4-fs: Ignoring removed bh option [ 476.997385][T26955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.106632][T26955] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.8052: inode #327696: comm syz.1.8052: iget: illegal inode # [ 477.120457][T26955] EXT4-fs (loop1): Remounting filesystem read-only [ 477.126973][T26955] EXT4-fs warning (device loop1): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.1.8052: cleanup dec ref error -30 [ 477.141957][T26955] EXT4-fs warning (device loop1): ext4_xattr_block_set:2190: inode #18: comm syz.1.8052: dec ref error=-30 [ 477.191126][T20818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.305763][T21000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.496855][T26977] program syz.5.8057 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.519612][T26979] tmpfs: Bad value for 'mpol' [ 477.525806][T23890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.607659][T26982] xt_hashlimit: size too large, truncated to 1048576 [ 478.292796][T26998] loop6: detected capacity change from 0 to 1024 [ 478.300792][T26998] EXT4-fs: Ignoring removed nobh option [ 478.306820][T26998] EXT4-fs: Ignoring removed bh option [ 478.340907][T26998] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.399299][T26998] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.8064: inode #327696: comm syz.6.8064: iget: illegal inode # [ 478.468987][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8068'. [ 478.473898][T27011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8069'. [ 478.486891][T27011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8069'. [ 478.487258][T26998] EXT4-fs (loop6): Remounting filesystem read-only [ 478.512011][T26998] EXT4-fs warning (device loop6): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.6.8064: cleanup dec ref error -30 [ 478.525340][T26998] EXT4-fs warning (device loop6): ext4_xattr_block_set:2190: inode #18: comm syz.6.8064: dec ref error=-30 [ 478.663867][T23890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.715383][T27024] xt_hashlimit: size too large, truncated to 1048576 [ 478.996057][T27009] loop7: detected capacity change from 0 to 512 [ 479.266833][T27009] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 479.310186][T27009] EXT4-fs (loop7): mount failed [ 479.504056][T27043] loop7: detected capacity change from 0 to 764 [ 479.523649][T27043] Symlink component flag not implemented [ 479.554278][T27056] loop7: detected capacity change from 0 to 1024 [ 479.562083][T27056] EXT4-fs: Ignoring removed nobh option [ 479.567668][T27056] EXT4-fs: Ignoring removed bh option [ 479.591307][T27056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.608706][T27056] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.8084: inode #327696: comm syz.7.8084: iget: illegal inode # [ 479.623406][T27056] EXT4-fs (loop7): Remounting filesystem read-only [ 479.630054][T27056] EXT4-fs warning (device loop7): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.7.8084: cleanup dec ref error -30 [ 479.643790][T27056] EXT4-fs warning (device loop7): ext4_xattr_block_set:2190: inode #18: comm syz.7.8084: dec ref error=-30 [ 479.719425][T24852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.758015][T27065] netlink: 'syz.7.8086': attribute type 2 has an invalid length. [ 479.765837][T27065] netlink: 'syz.7.8086': attribute type 1 has an invalid length. [ 479.773703][T27065] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.8086'. [ 480.444051][T27084] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8094'. [ 480.519696][T27087] loop5: detected capacity change from 0 to 512 [ 480.564029][T27087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.691434][T27093] program syz.6.8097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.745250][T27099] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 481.221584][T11106] usb 3-1: enqueue for inactive port 0 [ 481.257010][T11106] usb 3-1: enqueue for inactive port 0 [ 481.340715][T11106] vhci_hcd: vhci_device speed not set [ 481.400791][T21000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.541232][T27136] netlink: 'syz.5.8114': attribute type 27 has an invalid length. [ 481.548797][T27139] IPv4: Oversized IP packet from 127.202.26.0 [ 481.574411][T27136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.583646][T27136] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.597842][T27138] netlink: 'syz.7.8115': attribute type 1 has an invalid length. [ 481.605873][T27138] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8115'. [ 481.621334][T27136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.738682][T27144] loop5: detected capacity change from 0 to 128 [ 481.745798][T27144] FAT-fs (loop5): bogus number of reserved sectors [ 481.752410][T27144] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 481.761747][T27144] FAT-fs (loop5): Can't find a valid FAT filesystem [ 481.821974][T27138] loop7: detected capacity change from 0 to 1024 [ 481.828773][T27138] EXT4-fs: Ignoring removed orlov option [ 481.884249][T27138] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.903628][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 481.903643][ T29] audit: type=1400 audit(1753794642.016:85004): avc: denied { append } for pid=27137 comm="syz.7.8115" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 481.959057][T24852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.986479][T27155] loop6: detected capacity change from 0 to 1024 [ 481.996405][T27155] EXT4-fs: Ignoring removed nobh option [ 482.002173][T27155] EXT4-fs: Ignoring removed bh option [ 482.042770][T27155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.056001][T27168] loop7: detected capacity change from 0 to 1024 [ 482.077891][T27168] EXT4-fs: Ignoring removed nobh option [ 482.083598][T27168] EXT4-fs: Ignoring removed bh option [ 482.098975][T27155] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.8118: inode #327696: comm syz.6.8118: iget: illegal inode # [ 482.122508][T27168] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.123967][ T29] audit: type=1326 audit(1753794642.236:85005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27172 comm="syz.1.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9c9be9a9 code=0x7ffc0000 [ 482.158606][ T29] audit: type=1326 audit(1753794642.236:85006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27172 comm="syz.1.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f3b9c9be9a9 code=0x7ffc0000 [ 482.182177][ T29] audit: type=1326 audit(1753794642.236:85007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27172 comm="syz.1.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9c9be9a9 code=0x7ffc0000 [ 482.185207][T27155] EXT4-fs (loop6): Remounting filesystem read-only [ 482.215477][T27168] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.8123: inode #327696: comm syz.7.8123: iget: illegal inode # [ 482.230532][T27168] EXT4-fs (loop7): Remounting filesystem read-only [ 482.237165][T27168] EXT4-fs warning (device loop7): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.7.8123: cleanup dec ref error -30 [ 482.242974][T27178] tipc: Enabling of bearer rejected, already enabled [ 482.251744][T27155] EXT4-fs warning (device loop6): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.6.8118: cleanup dec ref error -30 [ 482.271308][T27168] EXT4-fs warning (device loop7): ext4_xattr_block_set:2190: inode #18: comm syz.7.8123: dec ref error=-30 [ 482.282985][T27155] EXT4-fs warning (device loop6): ext4_xattr_block_set:2190: inode #18: comm syz.6.8118: dec ref error=-30 [ 482.311205][T24852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.348269][T23890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.380020][ T29] audit: type=1400 audit(1753794642.486:85008): avc: denied { setopt } for pid=27185 comm="syz.2.8130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 482.384841][T27186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.406973][T27190] netlink: 'syz.7.8129': attribute type 27 has an invalid length. [ 482.431055][T27196] loop1: detected capacity change from 0 to 512 [ 482.445822][ T29] audit: type=1326 audit(1753794642.556:85009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4554dde9a9 code=0x7ffc0000 [ 482.472555][T27190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.480608][ T29] audit: type=1326 audit(1753794642.556:85010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4554dde9a9 code=0x7ffc0000 [ 482.504556][ T29] audit: type=1326 audit(1753794642.586:85011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4554dde9a9 code=0x7ffc0000 [ 482.506614][T27196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.528516][ T29] audit: type=1326 audit(1753794642.586:85012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4554dde9a9 code=0x7ffc0000 [ 482.543323][T27190] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.563824][ T29] audit: type=1326 audit(1753794642.586:85013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4554dde9a9 code=0x7ffc0000 [ 482.620326][T27190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.706647][T27205] syzkaller0: entered allmulticast mode [ 482.721122][T27205] syzkaller0 (unregistering): left allmulticast mode [ 482.856913][T27210] loop7: detected capacity change from 0 to 8192 [ 482.891649][T27210] vfat: Unknown parameter '0xffffffffffffffffÿÿ' [ 483.007021][T27214] tipc: Enabling of bearer rejected, already enabled [ 483.592658][T20818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.603235][T27234] netlink: 'syz.5.8147': attribute type 27 has an invalid length. [ 483.640836][T27238] loop6: detected capacity change from 0 to 512 [ 483.674831][T27238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.687073][T27240] loop1: detected capacity change from 0 to 512 [ 483.725157][T27240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.740106][T27244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.757722][T27241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.781830][T27241] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.789858][T27244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.814932][T27241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.105938][T27254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 484.706861][T20818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.827875][T27258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.904794][T27258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.023204][T23890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.716190][T27281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8163'. [ 486.604456][T27310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8171'. [ 486.614359][T27310] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8171'. [ 486.845043][T27318] netlink: 'syz.7.8172': attribute type 6 has an invalid length. [ 486.882814][T27316] : (slave batadv0): Releasing backup interface [ 486.923495][T27316] : (slave bond_slave_0): Releasing backup interface [ 486.982644][T27316] : (slave bond_slave_1): Releasing backup interface [ 487.034546][T27316] team0: Port device team_slave_0 removed [ 487.182296][T27316] team0: Port device team_slave_1 removed [ 487.203803][T27316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.212588][T27316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.240585][T27321] team0: Mode changed to "loadbalance" [ 487.549299][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 487.549311][ T29] audit: type=1400 audit(1753794647.666:85042): avc: denied { setopt } for pid=27334 comm="syz.6.8180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 487.877145][T27341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.981391][T27341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.010433][ T29] audit: type=1400 audit(1753794647.906:85043): avc: denied { bind } for pid=27334 comm="syz.6.8180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 488.030105][ T29] audit: type=1400 audit(1753794647.966:85044): avc: denied { create } for pid=27338 comm="syz.2.8181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 488.050613][ T29] audit: type=1400 audit(1753794647.976:85045): avc: denied { read } for pid=27340 comm="syz.5.8182" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 488.073951][ T29] audit: type=1400 audit(1753794647.976:85046): avc: denied { write } for pid=27338 comm="syz.2.8181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 488.094212][ T29] audit: type=1400 audit(1753794647.986:85047): avc: denied { ioctl } for pid=27340 comm="syz.5.8182" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 488.120011][ T29] audit: type=1400 audit(1753794648.106:85048): avc: denied { read write } for pid=27338 comm="syz.2.8181" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 488.143515][ T29] audit: type=1400 audit(1753794648.106:85049): avc: denied { open } for pid=27338 comm="syz.2.8181" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 488.166980][ T29] audit: type=1400 audit(1753794648.116:85050): avc: denied { ioctl } for pid=27338 comm="syz.2.8181" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 488.367548][ T29] audit: type=1400 audit(1753794648.476:85051): avc: denied { create } for pid=27334 comm="syz.6.8180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 488.515658][T27360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.524258][T27360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.096228][T27369] netlink: 'syz.1.8190': attribute type 6 has an invalid length. [ 490.124985][T27394] bridge_slave_0: left allmulticast mode [ 490.130870][T27394] bridge_slave_0: left promiscuous mode [ 490.136546][T27394] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.182678][T27394] bridge_slave_1: left allmulticast mode [ 490.188412][T27394] bridge_slave_1: left promiscuous mode [ 490.194151][T27394] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.314189][T27394] bond0: (slave bond_slave_0): Releasing backup interface [ 490.355207][T27394] bond0: (slave bond_slave_1): Releasing backup interface [ 490.432038][T27394] team0: Port device team_slave_0 removed [ 490.486323][T27394] team0: Port device team_slave_1 removed [ 490.539485][T27394] batadv0: left allmulticast mode [ 490.544563][T27394] batadv0: left promiscuous mode [ 490.549752][T27394] bridge0: port 3(batadv0) entered disabled state [ 490.776729][T27405] loop7: detected capacity change from 0 to 512 [ 490.812202][T27405] ext4: Unknown parameter 'func' [ 491.101284][T27422] syzkaller1: entered promiscuous mode [ 491.106873][T27422] syzkaller1: entered allmulticast mode [ 491.175642][T27424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.185173][T27424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.222803][T27426] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8209'. [ 491.232374][T27426] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8209'. [ 491.456771][T27440] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8214'. [ 491.835702][T27464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8224'. [ 491.849966][T27464] hsr_slave_1 (unregistering): left promiscuous mode [ 491.929214][T11111] page_pool_release_retry() stalled pool shutdown: id 303, 1 inflight 60 sec [ 492.518586][T27469] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 492.625806][T27480] xt_hashlimit: size too large, truncated to 1048576 [ 492.685869][T27482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8231'. [ 492.774392][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 492.774407][ T29] audit: type=1400 audit(1753794652.886:85061): avc: denied { create } for pid=27490 comm="syz.1.8235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 492.802656][ T29] audit: type=1400 audit(1753794652.886:85062): avc: denied { setopt } for pid=27490 comm="syz.1.8235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 492.930969][ T29] audit: type=1400 audit(1753794653.046:85063): avc: denied { map } for pid=27500 comm="syz.2.8238" path="socket:[87995]" dev="sockfs" ino=87995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 492.954733][ T29] audit: type=1400 audit(1753794653.046:85064): avc: denied { read } for pid=27500 comm="syz.2.8238" path="socket:[87995]" dev="sockfs" ino=87995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 492.994033][ T29] audit: type=1400 audit(1753794653.106:85065): avc: denied { mounton } for pid=27502 comm="syz.2.8239" path="/551/file0" dev="tmpfs" ino=2843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 493.019130][ T29] audit: type=1400 audit(1753794653.126:85066): avc: denied { mount } for pid=27502 comm="syz.2.8239" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 493.041763][ T29] audit: type=1400 audit(1753794653.126:85067): avc: denied { watch watch_reads } for pid=27502 comm="syz.2.8239" path="/551/file0" dev="tmpfs" ino=2843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 493.591702][ T29] audit: type=1400 audit(1753794653.696:85068): avc: denied { read } for pid=27519 comm="syz.7.8248" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 493.698864][T27528] syzkaller0: entered allmulticast mode [ 493.708134][T27531] loop7: detected capacity change from 0 to 1024 [ 493.715073][T27531] EXT4-fs: Ignoring removed nobh option [ 493.720788][T27531] EXT4-fs: Ignoring removed bh option [ 493.728250][T27530] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8249'. [ 493.738819][T27528] syzkaller0 (unregistering): left allmulticast mode [ 493.753655][T27531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.774256][T27537] xt_hashlimit: size too large, truncated to 1048576 [ 493.784400][T27538] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8249'. [ 493.912888][T27531] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.8251: inode #327696: comm syz.7.8251: iget: illegal inode # [ 493.954651][T27531] EXT4-fs (loop7): Remounting filesystem read-only [ 493.955794][T27543] tipc: Enabling of bearer rejected, already enabled [ 493.961638][T27531] EXT4-fs warning (device loop7): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.7.8251: cleanup dec ref error -30 [ 493.961744][T27531] EXT4-fs warning (device loop7): ext4_xattr_block_set:2190: inode #18: comm syz.7.8251: dec ref error=-30 [ 494.415176][T24852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.701848][ T29] audit: type=1326 audit(1753794654.816:85069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27558 comm="syz.7.8258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x0 [ 494.952277][T27571] loop5: detected capacity change from 0 to 8192 [ 494.959216][T27571] vfat: Unknown parameter '0xffffffffffffffffÿÿ' [ 495.224823][T27581] ..@ÿ: renamed from bond_slave_0 [ 495.447730][T27586] xt_hashlimit: size too large, truncated to 1048576 [ 495.624808][T27592] loop7: detected capacity change from 0 to 128 [ 495.632742][T27592] FAT-fs (loop7): bogus number of reserved sectors [ 495.639274][T27592] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 495.648572][T27592] FAT-fs (loop7): Can't find a valid FAT filesystem [ 495.704182][ T29] audit: type=1326 audit(1753794655.816:85070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27595 comm="syz.7.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 496.490793][T27625] loop5: detected capacity change from 0 to 128 [ 496.497809][T27625] FAT-fs (loop5): bogus number of reserved sectors [ 496.504428][T27625] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 496.513770][T27625] FAT-fs (loop5): Can't find a valid FAT filesystem [ 496.944401][T27634] loop5: detected capacity change from 0 to 8192 [ 496.952669][T27634] vfat: Unknown parameter '0xffffffffffffffffÿÿ' [ 497.280558][T27645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8291'. [ 497.378706][T27660] loop1: detected capacity change from 0 to 512 [ 497.379549][T27661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8297'. [ 497.387821][T27660] EXT4-fs: Ignoring removed i_version option [ 497.399979][T27660] EXT4-fs: Ignoring removed mblk_io_submit option [ 497.415210][T27660] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 497.425531][T27663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8298'. [ 497.450336][T27660] EXT4-fs (loop1): 1 truncate cleaned up [ 497.459030][T27660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.521038][T20818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.603500][T27673] xt_hashlimit: size too large, truncated to 1048576 [ 497.631135][T27685] netlink: 'syz.1.8303': attribute type 2 has an invalid length. [ 497.638898][T27685] netlink: 'syz.1.8303': attribute type 1 has an invalid length. [ 497.646651][T27685] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.8303'. [ 497.671003][T27684] netlink: 'syz.2.8306': attribute type 27 has an invalid length. [ 497.815744][T27693] 8021q: adding VLAN 0 to HW filter on device  [ 497.827489][T27693] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.837888][T27693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.885922][T27698] tipc: Enabling of bearer rejected, already enabled [ 497.934968][T27705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8313'. [ 497.965828][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 497.965843][ T29] audit: type=1326 audit(1753794658.076:85081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27710 comm="syz.7.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 498.007240][ T29] audit: type=1326 audit(1753794658.076:85082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27710 comm="syz.7.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 498.030954][ T29] audit: type=1326 audit(1753794658.076:85083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27710 comm="syz.7.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 498.040127][T27715] loop5: detected capacity change from 0 to 512 [ 498.054592][ T29] audit: type=1326 audit(1753794658.076:85084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27710 comm="syz.7.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 498.063968][T27715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.084596][ T29] audit: type=1326 audit(1753794658.076:85085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27710 comm="syz.7.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 498.120407][ T29] audit: type=1326 audit(1753794658.076:85086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27710 comm="syz.7.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 498.144093][ T29] audit: type=1326 audit(1753794658.076:85087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27710 comm="syz.7.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 498.167812][ T29] audit: type=1326 audit(1753794658.076:85088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27710 comm="syz.7.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 498.191531][ T29] audit: type=1326 audit(1753794658.076:85089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27710 comm="syz.7.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 498.215053][ T29] audit: type=1326 audit(1753794658.076:85090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27710 comm="syz.7.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f23e9a9 code=0x7ffc0000 [ 498.257481][T21000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.370897][T27729] netlink: 'syz.5.8319': attribute type 2 has an invalid length. [ 498.378685][T27729] netlink: 'syz.5.8319': attribute type 1 has an invalid length. [ 498.386452][T27729] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.8319'. [ 498.459854][T27739] netlink: 'syz.2.8327': attribute type 27 has an invalid length. [ 498.507555][T27745] loop5: detected capacity change from 0 to 128 [ 498.526177][T27745] FAT-fs (loop5): bogus number of reserved sectors [ 498.532787][T27745] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 498.542121][T27745] FAT-fs (loop5): Can't find a valid FAT filesystem [ 498.605604][T27746] 8021q: adding VLAN 0 to HW filter on device  [ 498.647443][T27746] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.656966][T27753] loop5: detected capacity change from 0 to 512 [ 498.681121][T27753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.729988][T27746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 498.749234][T21000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.830916][T27759] syzkaller0: entered allmulticast mode [ 498.849389][T27759] syzkaller0 (unregistering): left allmulticast mode [ 498.968409][T27769] program syz.5.8337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.122723][T27788] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 499.205784][T27797] program syz.5.8349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.213463][T27794] syzkaller0: entered allmulticast mode [ 499.222371][T27794] syzkaller0 (unregistering): left allmulticast mode [ 499.474713][T27822] IPv4: Oversized IP packet from 127.202.26.0 [ 499.712832][T27836] loop5: detected capacity change from 0 to 4096 [ 499.719910][T27836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 499.728783][T27836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.816677][T27847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8365'. [ 499.842472][T27847] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8365'. [ 499.896812][T27851] loop7: detected capacity change from 0 to 128 [ 499.912680][T27851] FAT-fs (loop7): bogus number of reserved sectors [ 499.919347][T27851] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 499.928629][T27851] FAT-fs (loop7): Can't find a valid FAT filesystem [ 500.107245][T21000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.278951][T27875] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8376'. [ 500.289221][T27875] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8376'. [ 500.326704][T27878] loop7: detected capacity change from 0 to 128 [ 500.355890][T27878] FAT-fs (loop7): bogus number of reserved sectors [ 500.362666][T27878] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 500.372193][T27878] FAT-fs (loop7): Can't find a valid FAT filesystem [ 500.421013][T27888] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 500.467627][T27892] xt_hashlimit: size too large, truncated to 1048576 [ 501.058656][T27899] loop7: detected capacity change from 0 to 512 [ 501.098033][T27899] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 501.153687][T27899] EXT4-fs (loop7): mount failed [ 501.262974][T24028] vhci_hcd: connection reset by peer [ 501.268578][ T3535] vhci_hcd: stop threads [ 501.272933][ T3535] vhci_hcd: release socket [ 501.277396][ T3535] vhci_hcd: disconnect device [ 501.282272][T23981] usb 11-1: enqueue for inactive port 0 [ 501.287893][T23981] usb 11-1: enqueue for inactive port 0 [ 501.341620][ T3514] bond0 (unregistering): Released all slaves [ 501.360128][T27932] tipc: Enabling of bearer rejected, already enabled [ 501.379060][T23981] vhci_hcd: vhci_device speed not set [ 501.421420][ T3514] tipc: Disabling bearer [ 501.426419][ T3514] tipc: Left network mode [ 501.449549][ T3514] IPVS: stopping master sync thread 21179 ... [ 501.547927][ T3514] hsr_slave_0: left promiscuous mode [ 501.650089][ T3514] hsr_slave_1: left promiscuous mode [ 501.787462][T27910] chnl_net:caif_netlink_parms(): no params data found [ 501.891937][T27958] loop7: detected capacity change from 0 to 512 [ 501.921461][T27910] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.928566][T27910] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.936194][T27958] ext4: Unknown parameter 'appraise_type' [ 501.967054][T27910] bridge_slave_0: entered allmulticast mode [ 501.977218][T27910] bridge_slave_0: entered promiscuous mode [ 502.039649][T27910] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.046807][T27910] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.089182][T27910] bridge_slave_1: entered allmulticast mode [ 502.104102][T27910] bridge_slave_1: entered promiscuous mode [ 502.168898][T27910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.181729][T27938] chnl_net:caif_netlink_parms(): no params data found [ 502.216892][T27910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.299427][T27910] team0: Port device team_slave_0 added [ 502.314757][T27938] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.321921][T27938] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.338796][T27938] bridge_slave_0: entered allmulticast mode [ 502.345273][T27938] bridge_slave_0: entered promiscuous mode [ 502.353682][T27910] team0: Port device team_slave_1 added [ 502.364992][T27938] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.372127][T27938] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.396364][T27938] bridge_slave_1: entered allmulticast mode [ 502.402862][T27938] bridge_slave_1: entered promiscuous mode [ 502.414260][T27910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.421252][T27910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.447287][T27910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.469660][T27910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.476634][T27910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.502740][T27910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.514644][T27938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.545742][T27938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.571863][T27910] hsr_slave_0: entered promiscuous mode [ 502.577864][T27910] hsr_slave_1: entered promiscuous mode [ 502.597434][T27979] xt_hashlimit: size too large, truncated to 1048576 [ 502.599338][T27910] debugfs: 'hsr0' already exists in 'hsr' [ 502.609905][T27910] Cannot create hsr debugfs directory [ 502.740276][T27938] team0: Port device team_slave_0 added [ 502.762093][T27938] team0: Port device team_slave_1 added [ 502.824037][T27938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.831129][T27938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.857134][T27938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.875273][T27938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.882260][T27938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.908231][T27938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.991608][T27910] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 503.002697][T27968] chnl_net:caif_netlink_parms(): no params data found [ 503.025759][T27910] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 503.034787][T28001] __nla_validate_parse: 2 callbacks suppressed [ 503.034800][T28001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8415'. [ 503.037347][T27910] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 503.060301][T27938] hsr_slave_0: entered promiscuous mode [ 503.066470][T27938] hsr_slave_1: entered promiscuous mode [ 503.072454][T27938] debugfs: 'hsr0' already exists in 'hsr' [ 503.078210][T27938] Cannot create hsr debugfs directory [ 503.094298][T27910] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 503.153087][T28016] tipc: Enabling of bearer rejected, already enabled [ 503.160621][T27968] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.167740][T27968] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.175322][T27968] bridge_slave_0: entered allmulticast mode [ 503.182362][T27968] bridge_slave_0: entered promiscuous mode [ 503.189535][T27968] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.196604][T27968] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.203841][T27968] bridge_slave_1: entered allmulticast mode [ 503.210309][T27968] bridge_slave_1: entered promiscuous mode [ 503.234949][T27968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.249686][T27968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.279594][T27968] team0: Port device team_slave_0 added [ 503.286038][T27968] team0: Port device team_slave_1 added [ 503.311542][T28020] netlink: 'syz.2.8420': attribute type 2 has an invalid length. [ 503.319384][T28020] netlink: 'syz.2.8420': attribute type 1 has an invalid length. [ 503.327103][T28020] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.8420'. [ 503.348766][T27968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.355825][T27968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.381804][T27968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.400985][T27968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.408065][T27968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.434142][T27968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.460343][T28024] syzkaller0: entered allmulticast mode [ 503.521966][ T3514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.531654][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.540674][ T3514] bond0 (unregistering): Released all slaves [ 503.561174][ T3514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.570406][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.579672][ T3514] bond0 (unregistering): Released all slaves [ 503.595080][T28024] syzkaller0 (unregistering): left allmulticast mode [ 503.671729][T27968] hsr_slave_0: entered promiscuous mode [ 503.677768][T27968] hsr_slave_1: entered promiscuous mode [ 503.683705][T27968] debugfs: 'hsr0' already exists in 'hsr' [ 503.689488][T27968] Cannot create hsr debugfs directory [ 503.698911][ T3514] tipc: Disabling bearer [ 503.703967][ T3514] tipc: Left network mode [ 503.708042][T27910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.722202][ T3514] tipc: Disabling bearer [ 503.727266][ T3514] tipc: Left network mode [ 503.729551][T27938] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 503.755630][T27938] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 503.767781][T27910] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.776680][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.783754][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.792711][T27938] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 503.803727][T27938] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 503.828087][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 503.828101][ T29] audit: type=1326 audit(1753794663.936:85248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.2.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 503.876957][ T29] audit: type=1326 audit(1753794663.946:85249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.2.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 503.900622][ T29] audit: type=1326 audit(1753794663.946:85250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.2.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 503.924212][ T29] audit: type=1326 audit(1753794663.946:85251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.2.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 503.947846][ T29] audit: type=1326 audit(1753794663.956:85252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.2.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 503.971437][ T29] audit: type=1326 audit(1753794663.956:85253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.2.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 503.995017][ T29] audit: type=1326 audit(1753794663.956:85254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.2.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 504.018597][ T29] audit: type=1326 audit(1753794663.966:85255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.2.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 504.042234][ T29] audit: type=1326 audit(1753794663.976:85256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.2.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 504.065798][ T29] audit: type=1326 audit(1753794663.976:85257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.2.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f447538e9a9 code=0x7ffc0000 [ 504.090819][ T3514] hsr_slave_0: left promiscuous mode [ 504.096845][ T3514] hsr_slave_1: left promiscuous mode [ 504.102564][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.110527][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.120822][ T3514] hsr_slave_0: left promiscuous mode [ 504.126459][ T3514] hsr_slave_1: left promiscuous mode [ 504.132336][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.140634][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.184501][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 504.195427][ T3514] team0 (unregistering): Port device team_slave_0 removed [ 504.208431][ T3550] smc: removing ib device syz0 [ 504.264179][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 504.275712][ T3514] team0 (unregistering): Port device team_slave_0 removed [ 504.314988][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.322082][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.422088][T28051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8430'. [ 504.433528][T27938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.455469][T27938] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.476421][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.483639][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.516554][T27910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.526540][T27938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 504.537092][T27938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 504.555899][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.563008][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.662163][T27938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.716956][T27968] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 504.736071][T27910] veth0_vlan: entered promiscuous mode [ 504.742265][T27968] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 504.756874][T27968] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 504.767549][T27910] veth1_vlan: entered promiscuous mode [ 504.776936][T27968] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 504.779627][T28095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8438'. [ 504.827063][T27910] veth0_macvtap: entered promiscuous mode [ 504.851242][T27910] veth1_macvtap: entered promiscuous mode [ 504.871466][T27910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.910538][T27910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.930242][T27910] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.939158][T27910] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.947844][T27910] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.956655][T27910] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.005708][T27968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.031676][T27938] veth0_vlan: entered promiscuous mode [ 505.055177][T27938] veth1_vlan: entered promiscuous mode [ 505.065174][T27968] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.074972][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8390'. [ 505.091878][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.099128][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.121209][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.128316][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.154350][T27968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.164757][T27968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.182682][T28128] loop8: detected capacity change from 0 to 512 [ 505.201202][T28128] ext4: Unknown parameter 'appraise_type' [ 505.201273][T27938] veth0_macvtap: entered promiscuous mode [ 505.252046][T27938] veth1_macvtap: entered promiscuous mode [ 505.277496][T27938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.310415][T28139] syzkaller0: entered allmulticast mode [ 505.317458][T28139] syzkaller0 (unregistering): left allmulticast mode [ 505.356265][T27938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.365766][T27968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.375799][T27938] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.384637][T27938] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.393364][T27938] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.402104][T27938] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.695956][T27968] veth0_vlan: entered promiscuous mode [ 505.751249][ T3486]  (unregistering): Released all slaves [ 505.758604][ T3486] bond0 (unregistering): Released all slaves [ 505.778509][T27968] veth1_vlan: entered promiscuous mode [ 505.787345][T28141] chnl_net:caif_netlink_parms(): no params data found [ 505.808514][ T3486] tipc: Disabling bearer [ 505.813547][ T3486] tipc: Left network mode [ 505.818307][T27968] veth0_macvtap: entered promiscuous mode [ 505.830764][ T3486] hsr_slave_0: left promiscuous mode [ 505.881097][T27968] veth1_macvtap: entered promiscuous mode [ 505.900295][T28141] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.907445][T28141] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.914755][T28141] bridge_slave_0: entered allmulticast mode [ 505.922776][T28141] bridge_slave_0: entered promiscuous mode [ 505.930008][T28141] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.937124][T28141] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.944351][T28141] bridge_slave_1: entered allmulticast mode [ 505.951231][T28141] bridge_slave_1: entered promiscuous mode [ 505.967685][T28141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.979196][T28141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.994544][T27968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.009790][T28141] team0: Port device team_slave_0 added [ 506.017662][T27968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.025651][T28141] team0: Port device team_slave_1 added [ 506.038422][T27968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.047158][T27968] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.055915][T27968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.064638][T27968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.080558][T28141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.087512][T28141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.113595][T28141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.125946][T28141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.132972][T28141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.159049][T28141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.181224][T28188] syzkaller0: entered allmulticast mode [ 506.192863][T28188] syzkaller0 (unregistering): left allmulticast mode [ 506.248255][T28141] hsr_slave_0: entered promiscuous mode [ 506.254181][T28141] hsr_slave_1: entered promiscuous mode [ 506.260005][T28141] debugfs: 'hsr0' already exists in 'hsr' [ 506.265735][T28141] Cannot create hsr debugfs directory [ 506.320212][T28192] program syz.4.8408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.374308][T28195] netlink: 'syz.8.8462': attribute type 2 has an invalid length. [ 506.382150][T28195] netlink: 'syz.8.8462': attribute type 1 has an invalid length. [ 506.389890][T28195] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.8462'. [ 506.468506][T28208] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8468'. [ 506.554012][T28212] loop4: detected capacity change from 0 to 512 [ 506.563217][T28214] program syz.8.8471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.579974][T28212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.651103][T28141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 506.664956][T28141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 506.687336][T28141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 506.699043][T28141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 506.733047][T28229] netlink: 'syz.8.8476': attribute type 2 has an invalid length. [ 506.740937][T28229] netlink: 'syz.8.8476': attribute type 1 has an invalid length. [ 506.748671][T28229] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.8476'. [ 506.813993][T28141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.844907][T28141] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.854570][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.861748][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.873935][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.881044][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.961485][T28141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.023899][ T3514] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.089040][T28141] veth0_vlan: entered promiscuous mode [ 507.098163][T28141] veth1_vlan: entered promiscuous mode [ 507.118414][T28141] veth0_macvtap: entered promiscuous mode [ 507.127083][T28141] veth1_macvtap: entered promiscuous mode [ 507.139256][T28141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.150465][T28141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.158843][T28141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.167737][T28141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.176797][T28141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.186104][T28141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.413686][T27968] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.423844][T28263] chnl_net:caif_netlink_parms(): no params data found [ 507.433672][T28288] netlink: 'syz.8.8490': attribute type 2 has an invalid length. [ 507.441453][T28288] netlink: 'syz.8.8490': attribute type 1 has an invalid length. [ 507.449236][T28288] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.8490'. [ 507.521393][T28263] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.528564][T28263] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.549781][T28263] bridge_slave_0: entered allmulticast mode [ 507.564102][T28304] IPv4: Oversized IP packet from 127.202.26.0 [ 507.566911][T28263] bridge_slave_0: entered promiscuous mode [ 507.589718][T28263] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.590327][T28306] xt_hashlimit: size too large, truncated to 1048576 [ 507.596952][T28263] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.611077][T28263] bridge_slave_1: entered allmulticast mode [ 507.617611][T28263] bridge_slave_1: entered promiscuous mode [ 507.654703][T28263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.675168][T28263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.744354][T28263] team0: Port device team_slave_0 added [ 507.756412][T28313] netlink: 'syz.6.8499': attribute type 27 has an invalid length. [ 507.765792][T28263] team0: Port device team_slave_1 added [ 507.774889][T28315] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 507.781416][T28315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 507.788937][T28315] vhci_hcd vhci_hcd.0: Device attached [ 507.796301][T28315] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5) [ 507.802832][T28315] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 507.810557][T28315] vhci_hcd vhci_hcd.0: Device attached [ 507.816722][T28315] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 507.825442][T28315] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(9) [ 507.831950][T28315] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 507.839722][T28315] vhci_hcd vhci_hcd.0: Device attached [ 507.845775][T28315] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 507.859346][T28315] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(13) [ 507.865964][T28315] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 507.873586][T28315] vhci_hcd vhci_hcd.0: Device attached [ 507.892857][T28315] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 507.901972][T28323] vhci_hcd: connection closed [ 507.902098][ T3535] vhci_hcd: stop threads [ 507.908431][T28320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.911135][ T3535] vhci_hcd: release socket [ 507.919219][T28320] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.922131][ T3535] vhci_hcd: disconnect device [ 507.933811][T28316] vhci_hcd: connection closed [ 507.934088][T28321] vhci_hcd: connection closed [ 507.938849][T28318] vhci_hcd: connection closed [ 507.948950][ T3535] vhci_hcd: stop threads [ 507.950421][T28328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8502'. [ 507.953290][ T3535] vhci_hcd: release socket [ 507.966469][ T3535] vhci_hcd: disconnect device [ 507.968687][ T3535] vhci_hcd: stop threads [ 507.971224][T28320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.976380][T28263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.990975][ T3535] vhci_hcd: release socket [ 507.997856][T28263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.002284][ T3535] vhci_hcd: disconnect device [ 508.002356][ T3382] vhci_hcd: vhci_device speed not set [ 508.028247][T28263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.050262][T28329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8502'. [ 508.059301][ T3535] vhci_hcd: stop threads [ 508.059310][ T3535] vhci_hcd: release socket [ 508.059322][ T3535] vhci_hcd: disconnect device [ 508.060068][T28263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.079676][T28263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.105711][T28263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.142173][T28263] hsr_slave_0: entered promiscuous mode [ 508.148335][T28263] hsr_slave_1: entered promiscuous mode [ 508.161186][T28263] debugfs: 'hsr0' already exists in 'hsr' [ 508.166947][T28263] Cannot create hsr debugfs directory [ 508.171319][T28336] netlink: 'syz.6.8505': attribute type 2 has an invalid length. [ 508.180094][T28336] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.8505'. [ 508.246787][T28345] syzkaller0: entered allmulticast mode [ 508.280547][T28345] syzkaller0 (unregistering): left allmulticast mode [ 508.351952][T28357] xt_hashlimit: size too large, truncated to 1048576 [ 508.362318][T28359] validate_nla: 1 callbacks suppressed [ 508.362330][T28359] netlink: 'syz.4.8516': attribute type 27 has an invalid length. [ 508.400210][T28359] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.407438][T28359] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.495810][T28359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.511658][T28359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.513495][T28373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8521'. [ 508.553580][T28359] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.562582][T28359] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.571838][T28359] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.580840][T28359] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.581297][T28376] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8521'. [ 508.625285][T28360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.635260][T28360] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.645193][T28360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.670998][ T3514] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.722482][ T3514] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.796346][T28391] tipc: Enabling of bearer rejected, already enabled [ 508.806960][ T3514] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.829966][T28263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 508.837982][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 508.837995][ T29] audit: type=1326 audit(1753794668.946:85726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28374 comm="syz.0.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7eb855967 code=0x7ffc0000 [ 508.877185][T28263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 508.886198][ T29] audit: type=1326 audit(1753794668.946:85727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28374 comm="syz.0.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7eb7fab89 code=0x7ffc0000 [ 508.899237][T28399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8532'. [ 508.909977][ T29] audit: type=1326 audit(1753794668.946:85728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28374 comm="syz.0.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff7eb85e9a9 code=0x7ffc0000 [ 508.942348][ T29] audit: type=1326 audit(1753794668.986:85729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28374 comm="syz.0.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7eb855967 code=0x7ffc0000 [ 508.965856][ T29] audit: type=1326 audit(1753794668.986:85730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28374 comm="syz.0.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7eb7fab89 code=0x7ffc0000 [ 508.989414][ T29] audit: type=1326 audit(1753794668.986:85731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28374 comm="syz.0.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff7eb85e9a9 code=0x7ffc0000 [ 508.990257][T28402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8532'. [ 509.012973][ T29] audit: type=1326 audit(1753794668.986:85732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28374 comm="syz.0.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7eb855967 code=0x7ffc0000 [ 509.013002][ T29] audit: type=1326 audit(1753794668.986:85733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28374 comm="syz.0.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7eb7fab89 code=0x7ffc0000 [ 509.013026][ T29] audit: type=1326 audit(1753794668.986:85734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28374 comm="syz.0.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff7eb85e9a9 code=0x7ffc0000 [ 509.013507][ T29] audit: type=1326 audit(1753794669.006:85735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28374 comm="syz.0.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7eb855967 code=0x7ffc0000 [ 509.031441][T28401] ªªªªªª: renamed from vlan0 (while UP) [ 509.129564][T28263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 509.142561][T28263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 509.183156][ T3514] bridge_slave_1: left allmulticast mode [ 509.185944][T28412] netlink: 'syz.4.8534': attribute type 2 has an invalid length. [ 509.188833][ T3514] bridge_slave_1: left promiscuous mode [ 509.196708][T28412] netlink: 'syz.4.8534': attribute type 1 has an invalid length. [ 509.196723][T28412] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.8534'. [ 509.220154][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.228219][ T3514] bridge_slave_0: left allmulticast mode [ 509.233974][ T3514] bridge_slave_0: left promiscuous mode [ 509.239828][ T3514] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.311026][ T3514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.320946][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.330486][ T3514] bond0 (unregistering): Released all slaves [ 509.356959][T28263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.372150][ T3514] hsr_slave_0: left promiscuous mode [ 509.378175][ T3514] hsr_slave_1: left promiscuous mode [ 509.383992][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.391442][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.399598][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.407153][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.418239][ T3514] veth1_macvtap: left promiscuous mode [ 509.424672][ T3514] veth0_macvtap: left promiscuous mode [ 509.430508][ T3514] veth1_vlan: left promiscuous mode [ 509.435802][ T3514] veth0_vlan: left promiscuous mode [ 509.440142][T28421] netlink: 'syz.0.8538': attribute type 27 has an invalid length. [ 509.503383][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 509.513455][ T3514] team0 (unregistering): Port device team_slave_0 removed [ 509.568859][T28421] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.576187][T28421] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.621315][T28421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.631621][T28421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.661806][T28421] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.670863][T28421] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.679862][T28421] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.688751][T28421] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.711862][T28423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.719878][T28423] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.728880][T28423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 509.745182][T28263] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.764122][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.771214][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.785399][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.792485][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.818054][T28446] program syz.4.8548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.888344][T28263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.983938][T28263] veth0_vlan: entered promiscuous mode [ 510.000311][T28468] IPv4: Oversized IP packet from 127.202.26.0 [ 510.000506][T28263] veth1_vlan: entered promiscuous mode [ 510.040802][T28263] veth0_macvtap: entered promiscuous mode [ 510.054010][T28263] veth1_macvtap: entered promiscuous mode [ 510.065749][T28472] syzkaller0: entered allmulticast mode [ 510.081310][T28474] loop4: detected capacity change from 0 to 512 [ 510.087895][T28474] ext4: Unknown parameter 'appraise_type' [ 510.094241][T28472] syzkaller0 (unregistering): left allmulticast mode [ 510.161371][T28263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.178585][T28263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.198257][T28263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.207108][T28263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.215819][T28263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.224759][T28263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.260792][T28480] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 510.267386][T28480] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 510.275000][T28480] vhci_hcd vhci_hcd.0: Device attached [ 510.289397][T28480] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 510.295980][T28480] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 510.303695][T28480] vhci_hcd vhci_hcd.0: Device attached [ 510.310336][T28480] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 510.321047][T28480] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 510.327646][T28480] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 510.335618][T28480] vhci_hcd vhci_hcd.0: Device attached [ 510.345102][T28480] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 510.354296][T28480] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 510.360899][T28480] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 510.368518][T28480] vhci_hcd vhci_hcd.0: Device attached [ 510.374800][T28480] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 510.383715][T28490] vhci_hcd: connection closed [ 510.383871][ T3534] vhci_hcd: stop threads [ 510.383881][T28486] vhci_hcd: connection closed [ 510.384077][T28481] vhci_hcd: connection closed [ 510.388611][ T3534] vhci_hcd: release socket [ 510.388622][ T3534] vhci_hcd: disconnect device [ 510.388687][T28484] vhci_hcd: connection closed [ 510.395972][T28478] 9pnet_fd: Insufficient options for proto=fd [ 510.407049][T28493] syzkaller0: entered allmulticast mode [ 510.413405][ T3534] vhci_hcd: stop threads [ 510.432466][ T3534] vhci_hcd: release socket [ 510.436879][ T3534] vhci_hcd: disconnect device [ 510.442187][T28493] syzkaller0 (unregistering): left allmulticast mode [ 510.449555][ T3534] vhci_hcd: stop threads [ 510.453820][ T3534] vhci_hcd: release socket [ 510.458243][ T3534] vhci_hcd: disconnect device [ 510.466173][ T3534] vhci_hcd: stop threads [ 510.470492][ T3534] vhci_hcd: release socket [ 510.474960][ T3534] vhci_hcd: disconnect device [ 510.519111][ T3381] usb 1-1: new low-speed USB device number 4 using vhci_hcd [ 510.528441][ T3381] usb 1-1: enqueue for inactive port 0 [ 510.535782][ T3381] usb 1-1: enqueue for inactive port 0 [ 510.561535][ T3381] usb 1-1: enqueue for inactive port 0 [ 510.598853][T28499] tipc: Started in network mode [ 510.603929][T28499] tipc: Node identity ac14140f, cluster identity 4711 [ 510.613931][T28499] tipc: New replicast peer: 0.0.255.255 [ 510.619659][T28499] tipc: Enabled bearer , priority 10 [ 510.629093][ T3381] vhci_hcd: vhci_device speed not set [ 510.689818][T28505] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8565'. [ 510.710549][T28505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8565'. [ 510.745094][T28511] netlink: 'syz.3.8567': attribute type 2 has an invalid length. [ 510.753039][T28511] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8567'. [ 510.770963][T28513] netlink: 'syz.8.8569': attribute type 27 has an invalid length. [ 510.811653][T28517] loop3: detected capacity change from 0 to 512 [ 510.824098][T28513] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.831287][T28513] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.849553][T28517] ext4: Unknown parameter 'appraise_type' [ 510.856708][T28522] xt_hashlimit: size too large, truncated to 1048576 [ 510.978486][T28529] tmpfs: Bad value for 'mpol' [ 510.981377][T28513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.008993][T28513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.092843][T28513] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.101906][T28513] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.110781][T28513] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.119786][T28513] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.162965][T28520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.193490][T28520] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.219568][T28520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.301959][T28545] syzkaller0: entered allmulticast mode [ 511.309504][T28545] syzkaller0 (unregistering): left allmulticast mode [ 511.411637][T28551] netlink: 'syz.6.8582': attribute type 2 has an invalid length. [ 511.580752][T28566] ªªªªªª: renamed from vlan0 [ 511.629097][T26704] tipc: Node number set to 2886997007 [ 512.037733][T28589] loop3: detected capacity change from 0 to 128 [ 512.078279][T28589] FAT-fs (loop3): bogus number of reserved sectors [ 512.084921][T28589] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 512.094334][T28589] FAT-fs (loop3): Can't find a valid FAT filesystem [ 512.112406][T28594] IPv4: Oversized IP packet from 127.202.26.0 [ 512.760829][T28623] loop4: detected capacity change from 0 to 512 [ 512.767959][T28623] ext4: Unknown parameter 'appraise_type' [ 512.793393][T28625] loop4: detected capacity change from 0 to 128 [ 512.801592][T28625] FAT-fs (loop4): bogus number of reserved sectors [ 512.808129][T28625] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 512.817573][T28625] FAT-fs (loop4): Can't find a valid FAT filesystem [ 512.911488][T28632] syzkaller0: entered allmulticast mode [ 512.926686][T28632] syzkaller0 (unregistering): left allmulticast mode [ 513.194814][T28651] xt_hashlimit: size too large, truncated to 1048576 [ 513.345016][T28659] __nla_validate_parse: 2 callbacks suppressed [ 513.345028][T28659] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8626'. [ 513.462405][T28667] IPv4: Oversized IP packet from 127.202.26.0 [ 513.850109][ T29] kauditd_printk_skb: 769 callbacks suppressed [ 513.850124][ T29] audit: type=1326 audit(1753794673.956:86505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.0.8636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7eb855967 code=0x7ffc0000 [ 513.879883][ T29] audit: type=1326 audit(1753794673.956:86506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.0.8636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7eb7fab89 code=0x7ffc0000 [ 513.903395][ T29] audit: type=1326 audit(1753794673.956:86507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.0.8636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff7eb85e9a9 code=0x7ffc0000 [ 513.932902][ T29] audit: type=1326 audit(1753794673.966:86508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.0.8636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7eb855967 code=0x7ffc0000 [ 513.956492][ T29] audit: type=1326 audit(1753794673.966:86509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.0.8636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7eb7fab89 code=0x7ffc0000 [ 513.980118][ T29] audit: type=1326 audit(1753794673.966:86510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.0.8636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff7eb85e9a9 code=0x7ffc0000 [ 514.030722][ T29] audit: type=1326 audit(1753794674.146:86511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.0.8636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7eb855967 code=0x7ffc0000 [ 514.054439][ T29] audit: type=1326 audit(1753794674.146:86512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.0.8636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7eb7fab89 code=0x7ffc0000 [ 514.078000][ T29] audit: type=1326 audit(1753794674.146:86513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.0.8636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff7eb85e9a9 code=0x7ffc0000 [ 514.103960][ T29] audit: type=1326 audit(1753794674.216:86514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.0.8636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7eb855967 code=0x7ffc0000 [ 514.171240][T28686] xt_hashlimit: size too large, truncated to 1048576 [ 514.241211][T28688] netlink: 'syz.3.8639': attribute type 27 has an invalid length. [ 514.296148][T28688] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.303375][T28688] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.467488][T28688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.483053][T28708] netlink: 'syz.6.8646': attribute type 27 has an invalid length. [ 514.492570][T28688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.526737][T28688] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.535792][T28688] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.544765][T28688] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.553651][T28688] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.607023][T28691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.616749][T28691] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.643844][T28691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.708771][T28709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.725195][T28709] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.737527][T28709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.758112][T28712] syzkaller0: entered allmulticast mode [ 514.775922][T28712] syzkaller0 (unregistering): left allmulticast mode [ 514.896696][T28723] xt_hashlimit: size too large, truncated to 1048576 [ 515.018293][T28729] netlink: 'syz.6.8653': attribute type 2 has an invalid length. [ 515.026420][T28729] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.8653'. [ 515.112336][T28741] syzkaller0: entered allmulticast mode [ 515.119284][T28741] syzkaller0 (unregistering): left allmulticast mode [ 515.147339][T28743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8660'. [ 515.197878][T28756] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 515.260595][T28761] xt_hashlimit: size too large, truncated to 1048576 [ 515.308935][T28767] netlink: 'syz.3.8669': attribute type 2 has an invalid length. [ 515.316784][T28767] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8669'. [ 515.552063][T28787] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 515.688542][T28797] netlink: 'syz.3.8682': attribute type 2 has an invalid length. [ 515.696411][T28797] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8682'. [ 516.082959][T28825] netlink: 'syz.6.8692': attribute type 27 has an invalid length. [ 516.194359][T28827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.202272][T28827] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.217404][T28827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.259644][T28830] netlink: 'syz.4.8693': attribute type 2 has an invalid length. [ 516.267482][T28830] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8693'. [ 516.314531][T28840] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 516.321112][T28840] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 516.328695][T28840] vhci_hcd vhci_hcd.0: Device attached [ 516.337207][T28840] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 516.343744][T28840] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 516.351370][T28840] vhci_hcd vhci_hcd.0: Device attached [ 516.358591][T28840] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 516.390706][T28840] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 516.397301][T28840] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 516.404958][T28840] vhci_hcd vhci_hcd.0: Device attached [ 516.412861][T28840] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 516.422791][T28840] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 516.429401][T28840] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 516.437063][T28840] vhci_hcd vhci_hcd.0: Device attached [ 516.437258][T28838] loop8: detected capacity change from 0 to 512 [ 516.443850][T28840] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 516.458513][T28838] EXT4-fs (loop8): orphan cleanup on readonly fs [ 516.465644][T28838] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8697: bg 0: block 248: padding at end of block bitmap is not set [ 516.480302][T28850] vhci_hcd: connection closed [ 516.480459][ T3534] vhci_hcd: stop threads [ 516.481145][T28838] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.8697: Failed to acquire dquot type 1 [ 516.485148][ T3534] vhci_hcd: release socket [ 516.490208][T28838] EXT4-fs (loop8): 1 truncate cleaned up [ 516.500786][ T3534] vhci_hcd: disconnect device [ 516.505899][T28838] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 516.513307][T28843] vhci_hcd: connection closed [ 516.516031][T28847] vhci_hcd: connection closed [ 516.533320][T28841] vhci_hcd: connection closed [ 516.534227][ T3534] vhci_hcd: stop threads [ 516.547035][ T3534] vhci_hcd: release socket [ 516.551556][ T3534] vhci_hcd: disconnect device [ 516.558422][ T3534] vhci_hcd: stop threads [ 516.562715][ T3534] vhci_hcd: release socket [ 516.567144][ T3534] vhci_hcd: disconnect device [ 516.571957][T23972] usb 1-1: new low-speed USB device number 5 using vhci_hcd [ 516.577159][ T3534] vhci_hcd: stop threads [ 516.583809][ T3534] vhci_hcd: release socket [ 516.588484][ T3534] vhci_hcd: disconnect device [ 516.643097][T27910] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.663638][T28859] loop8: detected capacity change from 0 to 128 [ 516.670784][T28859] FAT-fs (loop8): bogus number of reserved sectors [ 516.677475][T28859] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 516.686874][T28859] FAT-fs (loop8): Can't find a valid FAT filesystem [ 516.714067][T28865] loop8: detected capacity change from 0 to 512 [ 516.722031][T28865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.753545][T28868] IPv4: Oversized IP packet from 127.202.26.0 [ 516.834574][T28871] tipc: Enabling of bearer rejected, already enabled [ 516.873712][T28865] ================================================================== [ 516.881842][T28865] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 516.889128][T28865] [ 516.891450][T28865] write to 0xffff88811aa7a9a4 of 4 bytes by task 28869 on cpu 1: [ 516.899161][T28865] xas_clear_mark+0x16b/0x180 [ 516.903824][T28865] __folio_start_writeback+0x2ce/0x440 [ 516.909267][T28865] ext4_bio_write_folio+0x5ad/0x9f0 [ 516.914455][T28865] mpage_submit_folio+0xe4/0x170 [ 516.919387][T28865] mpage_process_page_bufs+0x39b/0x4a0 [ 516.924829][T28865] mpage_prepare_extent_to_map+0x741/0xaa0 [ 516.930629][T28865] ext4_do_writepages+0xa1a/0x21c0 [ 516.935726][T28865] ext4_writepages+0x176/0x300 [ 516.940474][T28865] do_writepages+0x1c3/0x310 [ 516.945047][T28865] file_write_and_wait_range+0x156/0x2c0 [ 516.950673][T28865] generic_buffers_fsync_noflush+0x45/0x120 [ 516.956573][T28865] ext4_sync_file+0x1ab/0x690 [ 516.961235][T28865] vfs_fsync_range+0x10a/0x130 [ 516.965988][T28865] ext4_buffered_write_iter+0x34f/0x3c0 [ 516.971516][T28865] ext4_file_write_iter+0xdbf/0xf00 [ 516.976696][T28865] iter_file_splice_write+0x5ef/0x970 [ 516.982053][T28865] direct_splice_actor+0x153/0x2a0 [ 516.987150][T28865] splice_direct_to_actor+0x30f/0x680 [ 516.992514][T28865] do_splice_direct+0xda/0x150 [ 516.997269][T28865] do_sendfile+0x380/0x650 [ 517.001681][T28865] __x64_sys_sendfile64+0x105/0x150 [ 517.006863][T28865] x64_sys_call+0x2bb0/0x2ff0 [ 517.011522][T28865] do_syscall_64+0xd2/0x200 [ 517.016016][T28865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.021890][T28865] [ 517.024196][T28865] read to 0xffff88811aa7a9a4 of 4 bytes by task 28865 on cpu 0: [ 517.031807][T28865] xas_find_marked+0x5dc/0x620 [ 517.036556][T28865] find_get_entry+0x5d/0x380 [ 517.041154][T28865] filemap_get_folios_tag+0x92/0x210 [ 517.046432][T28865] mpage_prepare_extent_to_map+0x320/0xaa0 [ 517.052237][T28865] ext4_do_writepages+0xa1a/0x21c0 [ 517.057343][T28865] ext4_writepages+0x176/0x300 [ 517.062107][T28865] do_writepages+0x1c3/0x310 [ 517.066686][T28865] filemap_write_and_wait_range+0x144/0x340 [ 517.072575][T28865] filemap_invalidate_pages+0xa4/0x1a0 [ 517.078117][T28865] kiocb_invalidate_pages+0x6e/0x80 [ 517.083315][T28865] __iomap_dio_rw+0x5d4/0x1250 [ 517.088075][T28865] iomap_dio_rw+0x40/0x90 [ 517.092403][T28865] ext4_file_write_iter+0xad9/0xf00 [ 517.097594][T28865] iter_file_splice_write+0x5ef/0x970 [ 517.102960][T28865] direct_splice_actor+0x153/0x2a0 [ 517.108063][T28865] splice_direct_to_actor+0x30f/0x680 [ 517.113434][T28865] do_splice_direct+0xda/0x150 [ 517.118190][T28865] do_sendfile+0x380/0x650 [ 517.122595][T28865] __x64_sys_sendfile64+0x105/0x150 [ 517.127780][T28865] x64_sys_call+0x2bb0/0x2ff0 [ 517.132448][T28865] do_syscall_64+0xd2/0x200 [ 517.136942][T28865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.142825][T28865] [ 517.145137][T28865] value changed: 0x0e000021 -> 0x04000021 [ 517.150839][T28865] [ 517.153184][T28865] Reported by Kernel Concurrency Sanitizer on: [ 517.159319][T28865] CPU: 0 UID: 0 PID: 28865 Comm: syz.8.8704 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 517.171458][T28865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.181504][T28865] ================================================================== [ 517.347596][T28865] ================================================================== [ 517.355703][T28865] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 517.362842][T28865] [ 517.365167][T28865] write to 0xffff88811aa7a9a4 of 4 bytes by task 28869 on cpu 1: [ 517.372893][T28865] xas_set_mark+0x12b/0x140 [ 517.377403][T28865] __folio_start_writeback+0x1dd/0x440 [ 517.382879][T28865] ext4_bio_write_folio+0x5ad/0x9f0 [ 517.388086][T28865] mpage_submit_folio+0xe4/0x170 [ 517.393048][T28865] mpage_process_page_bufs+0x39b/0x4a0 [ 517.398524][T28865] mpage_prepare_extent_to_map+0x741/0xaa0 [ 517.404341][T28865] ext4_do_writepages+0xa1a/0x21c0 [ 517.409461][T28865] ext4_writepages+0x176/0x300 [ 517.414246][T28865] do_writepages+0x1c3/0x310 [ 517.418844][T28865] filemap_write_and_wait_range+0x144/0x340 [ 517.424754][T28865] filemap_invalidate_pages+0xa4/0x1a0 [ 517.430229][T28865] kiocb_invalidate_pages+0x6e/0x80 [ 517.435433][T28865] __iomap_dio_rw+0x5d4/0x1250 [ 517.440208][T28865] iomap_dio_rw+0x40/0x90 [ 517.444557][T28865] ext4_file_write_iter+0xad9/0xf00 [ 517.449765][T28865] iter_file_splice_write+0x5ef/0x970 [ 517.455414][T28865] direct_splice_actor+0x153/0x2a0 [ 517.460529][T28865] splice_direct_to_actor+0x30f/0x680 [ 517.465915][T28865] do_splice_direct+0xda/0x150 [ 517.470704][T28865] do_sendfile+0x380/0x650 [ 517.475132][T28865] __x64_sys_sendfile64+0x105/0x150 [ 517.480336][T28865] x64_sys_call+0x2bb0/0x2ff0 [ 517.485022][T28865] do_syscall_64+0xd2/0x200 [ 517.489533][T28865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.495439][T28865] [ 517.497762][T28865] read to 0xffff88811aa7a9a4 of 4 bytes by task 28865 on cpu 0: [ 517.505383][T28865] xas_find_marked+0x5dc/0x620 [ 517.510160][T28865] find_get_entry+0x5d/0x380 [ 517.514765][T28865] filemap_get_folios_tag+0x92/0x210 [ 517.520074][T28865] mpage_prepare_extent_to_map+0x320/0xaa0 [ 517.525886][T28865] ext4_do_writepages+0x6ea/0x21c0 [ 517.531010][T28865] ext4_writepages+0x176/0x300 [ 517.535792][T28865] do_writepages+0x1c3/0x310 [ 517.540500][T28865] file_write_and_wait_range+0x156/0x2c0 [ 517.546153][T28865] generic_buffers_fsync_noflush+0x45/0x120 [ 517.552069][T28865] ext4_sync_file+0x1ab/0x690 [ 517.556761][T28865] vfs_fsync_range+0x10a/0x130 [ 517.561555][T28865] ext4_buffered_write_iter+0x34f/0x3c0 [ 517.567115][T28865] ext4_file_write_iter+0xdbf/0xf00 [ 517.572327][T28865] iter_file_splice_write+0x5ef/0x970 [ 517.577720][T28865] direct_splice_actor+0x153/0x2a0 [ 517.582846][T28865] splice_direct_to_actor+0x30f/0x680 [ 517.588219][T28865] do_splice_direct+0xda/0x150 [ 517.592994][T28865] do_sendfile+0x380/0x650 [ 517.597422][T28865] __x64_sys_sendfile64+0x105/0x150 [ 517.602626][T28865] x64_sys_call+0x2bb0/0x2ff0 [ 517.607310][T28865] do_syscall_64+0xd2/0x200 [ 517.611822][T28865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.617726][T28865] [ 517.620046][T28865] value changed: 0x0a000021 -> 0x04000021 [ 517.625760][T28865] [ 517.628080][T28865] Reported by Kernel Concurrency Sanitizer on: [ 517.634231][T28865] CPU: 0 UID: 0 PID: 28865 Comm: syz.8.8704 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 517.646397][T28865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.656461][T28865] ================================================================== [ 517.687952][T28865] syz.8.8704 (28865) used greatest stack depth: 8632 bytes left [ 517.703773][T27910] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.609077][T23972] usb 1-1: enqueue for inactive port 0 [ 521.615447][T23972] usb 1-1: enqueue for inactive port 0 [ 521.689699][T23972] vhci_hcd: vhci_device speed not set