last executing test programs: 1m41.890499075s ago: executing program 3 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) 1m41.845257548s ago: executing program 3 (id=972): setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000300)={0x0, "61bb6360640fd97f52ec9275ccf38b1f"}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x402000, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0xd) 1m41.799941372s ago: executing program 3 (id=973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2509000000050008000a0000000800010001000000050007"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x60) 1m41.750287326s ago: executing program 3 (id=975): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xffff, 0x4, 0x4}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20042800}, 0x24040800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1b4a, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0x4, 0x7}, {0x4}}}, 0x24}}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001100)=ANY=[@ANYBLOB="ea4e577e1e05000000000000a9968cc3bde74535c42d5a80d26600000000001bec32408e52a0d8c9627395d2591e6490766df703d62b1e2b5dcde4f95357d2cf2baebf17a674d69c665d1683be342454838d02acd6a4e9f0f758327df47ed9cce00604388c78c4a6d8b98b1445db69f5ac54435dc3fcb43240e6450bdb80a41c257e14ab8dfbf4dca10a4174833570ff2c9653142a67f8f43f8dbb8933cbfb53f6ee871a9ecbd2ad9eb5a6e7700d1fd6bfb79e5e69a2a53dcc7ebc96a551a48bc1bc9f7d805b06a4c0cd2ad08b535beb772c2dd90a2379c637dd000c0f0867a244345b30d45915058c5d201cdb90f7e092cb3237a3f84bce33765d90f2ae70f49b57ce5d5bf0f0997599d7c32421f4f056dd5b8e316c03109e7faf6f2cc63a6270c8a1521cc33f997507fa90aef556e9c6", @ANYRES16=r3, @ANYBLOB="010028bd7000002000000c000000180001801400020076657468305f746f5f626f6e6400000094000380040001008c00038088000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7917707fe9bce142b8971a5f2be0a4b037a87c58f573ded72407"], 0xc0}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000010c0)='coredump_filter\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000080), 0x2, 0x0) sendfile(r8, r8, 0x0, 0x200) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@sysvgroups}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r9, 0x2007ffc) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r10, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x10, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) sendfile(r9, r9, 0x0, 0x800000009) 1m41.233097668s ago: executing program 3 (id=985): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2509000000050008000a0000000800010001000000050007"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x60) 1m40.947618181s ago: executing program 3 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m40.925770032s ago: executing program 32 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m23.33450555s ago: executing program 5 (id=1346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000240)="94", 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0xb}}}, 0x24}}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0)=0x81, 0x4) openat(r2, &(0x7f0000000280)='./file0\x00', 0x4000, 0x50) tee(0xffffffffffffffff, r2, 0x8f5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r5, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r9}, 0xc) socket$rds(0x15, 0x5, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r10}, 0x18) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1m22.997780928s ago: executing program 5 (id=1352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000ef666dfea0630c0233583d9e0229d7a9a960c7d6b0ebe38345c26aaaf3cf09e7f76bc0fc6807f49a11a097c20b97", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x108000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0xd7487aa6f8c07d18, 0xf7fa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 1m22.85448016s ago: executing program 5 (id=1359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_gettime(0x0, 0x0) 1m22.84040083s ago: executing program 5 (id=1360): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@noquota}, {@mblk_io_submit}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}], [{@seclabel}]}, 0x2, 0x4f0, &(0x7f0000000d40)="$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") syz_clone(0x120000, 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79a8, 0x8, 0x8000, 0x400252}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r6}, 0x9) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 1m22.682177123s ago: executing program 5 (id=1362): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) 1m22.283991126s ago: executing program 5 (id=1366): syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3, 0x1}, @rr={0x7, 0x3, 0xfd}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010104}, {@private=0x4}, {@dev}, {@remote}, {@private}, {@broadcast}, {@private}]}]}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1m22.23683253s ago: executing program 33 (id=1366): syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3, 0x1}, @rr={0x7, 0x3, 0xfd}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010104}, {@private=0x4}, {@dev}, {@remote}, {@private}, {@broadcast}, {@private}]}]}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 6.032328151s ago: executing program 4 (id=3038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$eJzs3U9sFGUfB/DvbrslAd638OZVEf9VUCmi1LYmSIKJRDnJxWDiuaGFEAs1tCZCiNHEgzcvJp49KDePHDwZD3jUBC/e1JMxEkMkntSa2e7Qbdkt3dB2q/v5JLP7zM6wz2/m4ffM7MOTIUDPGipeKsn2JN8mGVxYXbrD0MLbzRuXTv5+49LJSubnT/xaqe/3241LJ8tdyz+3rXipJsPVpPpeJQ+0qHf2wsXXJ6anp8431kfmzr4xMnvh4tNnzk6cnjo9dW700OHnxkcPjY2Pr9mxvnz57RPbXnnh2AeT136ZufzD50W82xvbmo9jrQxlaOm5bPLEWlfWZfc0lSv9XQyEjvQlKZqrVs//wfRlsfEG89X3XQ0OWFfzhS1tN78zD/yLVdLtCIDuKC/0xe/fcll6C3BsXe8/6K7rRxd+ABbtfrOxLGzpT7WxT23Z7/u1NJTkyJVjnxVL1mkcBgAAAKCXfXE0yVOtxv+qubdpv6J8X5JdSe5Psjupz+t5MMlDSR5O8kg5n6gDy/dfPv5TaTeBhjVx/WhypDG3a+n4Xzn6lx19jbX/FCupVU6dmZ56Jsl/kwyntqVYH12hjqtf//VNu23N43/FUtRfjgU24vi5f9m/T09OzE3czTGz6Pq7ye7+Vu1fuTUTqEjBR5Ps6eSLa4vFH/fsP91utzu3P+tp/uNkX8v8b3S81w7X31aYnzlS7w9Gyl7hdu+Pjr3Urv4W7V9UrP03SJH/W1dq/2RHpXm+7mzndVzddeX5dts67/+/+6To/wcqr9YDHGh8+tbE3Nz50WSgcvz2z8c6j/mfrf1NU3k+yvNVtP/w3tbX//81fdveJI8lebwxd3lf/dqf7E/yZJIDK0Tz54uHXkvzHUUT/X93Fe0/2TL/b00NWJb/nReO7PzoeLv6V5f/z9b/Qg83PnH/d2erbaBuxwkAAAAAAADA2qjWn4FXqR68Va5WDx5ceIbf/7O1Oj0zO3fg1Myb5yYXnpW3I7VqOdNrsGk+6Gi9vLg+tmx9PMnOJB/2/dF48sDM9GS3Dx563LY2+V/4qa/b0QHrzvNaoXetIv9rGxEHsPFc/6F3yX/oXfIfepf8h94l/6F3yX/oXavP/4F1jQPYeK7/0JPu5rl+m63Qn00RRstCOX+qS2GU/yX/Jjkbm7Pw6ZfJBtTVl2SzHPIKhW72SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbx98BAAD//5IX2eo=") ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, 0x0, r4, 0x0, 0x46) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlinkat(0xffffffffffffffff, 0x0, 0x0) timer_getoverrun(r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000f9ffffffffffffff00000000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r9, 0x1, r8, 0x7, 0x80000}) 5.153685422s ago: executing program 4 (id=3062): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b'], 0x48) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x23, 0x80000, 0x2010001) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0x1a, r5, 0xc, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x14080094) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2da46d8347a6de4c4ef6d820c79ef4d95aec6f2c3cf29b24add008a8375f0c3d446d094ef791620e3013906350558495a4255af5695cc962310321a7004b802d6f79a44e7", 0x46}], 0x1) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 5.106443506s ago: executing program 4 (id=3063): socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f00000004c0)={[{@grpquota}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000340)='./file0/file0\x00', 0x0, 0x10}, 0x18) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000300)={[{@grpquota}, {@noauto_da_alloc}, {@quota}, {@stripe}, {@jqfmt_vfsold}]}, 0xfd, 0x4ff, &(0x7f0000000ac0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x7, 0x182581) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f00000003c0)=""/179) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f00000000c0)={0x18, 0x81, 0x4, 0xc, 0xd}) r6 = getpgid(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) cachestat(r7, &(0x7f00000001c0)={0xb0, 0xf5}, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r6, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 4.858409136s ago: executing program 4 (id=3069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.9726555s ago: executing program 0 (id=3103): ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r7}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000003c0)={0x0, @empty, @initdev}, &(0x7f0000000400)=0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x10, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x0, 0xb, 0x3, 0x9, 0xc, 0xfffffffffffffff0}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x8b}], &(0x7f0000000080)='GPL\x00', 0x9d, 0x1000, &(0x7f0000002480)=""/4096, 0x41000, 0x70, '\x00', r8, 0x0, r0, 0x8, &(0x7f00000004c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x3, 0x7, 0x8}, 0x10, 0x19a02, r4, 0x5, &(0x7f00000005c0)=[r5, r1, r1, r5, r1, r9, r1], &(0x7f00000006c0)=[{0x0, 0x2, 0xa, 0xc}, {0x1, 0x2, 0x1, 0x6}, {0x4, 0x3, 0x3, 0x1}, {0x2, 0x3, 0x1, 0xa}, {0x2, 0x2, 0xf, 0x2}], 0x10, 0xe56}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x18) r12 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3fa}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) fcntl$setpipe(r1, 0x407, 0x6) 1.906239865s ago: executing program 0 (id=3104): socket$kcm(0x10, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.905687225s ago: executing program 0 (id=3105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.692401183s ago: executing program 0 (id=3108): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x1a, 0x10, 0x0, 0x25dfdbff, {0x1}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc050}, 0x200088d0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a00)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@nodiscard}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}], [{@euid_lt={'euid<', r1}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'resuid'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 815.874834ms ago: executing program 4 (id=3081): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x214}) close(r1) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000401000004000000c5000000881480008eee8f16b218b275bee7edbdcdd44dee47fcdd5d27604968444d6596fc1e10fa3a9e0dac7edd733b1af45476b6d784c56b3a0a18338d1126996d1805199973210379be12", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}, {0x40, 0x6, 0x1, 0x1}, {0x2, 0x9, 0xa5}]}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_config_ext={0xacf8, 0xf3}, 0x1100, 0x5ddc, 0x3a68, 0x5, 0x0, 0x8, 0x8697, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05eb", @ANYRESOCT=r4, @ANYRES8=r4], 0x30}, 0x40880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) 804.273304ms ago: executing program 2 (id=3125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x7, 0x80000}) 776.540347ms ago: executing program 2 (id=3127): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x1800000000000000}, 0x102cc, 0x100, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x1040, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x12) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000000)={0x7fffffff, 0x400, 0x1, 0x3, 0xaf}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r5, 0x852ac000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_usbip_server_init(0x1) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000040)={0x0, 0x0, 0x9}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) 716.013181ms ago: executing program 0 (id=3128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) 670.354295ms ago: executing program 4 (id=3130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000240)="94", 0x1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000d491c82d88256cf481bf2ae341000400000000000000010000009500000000000000c0941a9ad0bfd8c22d1c78188a6ca1f1888ebfb678a17c774256b382761ed7064da858ed0d79f12bb163b4d0e52af18077568fa2d1c594c938d67b4622fd036f000284cb0400000000000000e4a97b2cbe5b5c7fdc561a79f1edac7d5c450029875b159c5e8ebb2796be36884f9c198a6e1708b86f5f832273d8c1ce3eb19537503fb574958c0b5f3ca82617ee6d54ac1274628966707c096f604219aa5c932a90b91e8a913af76d64e3a7dc35e2db2879593df9e1e471b14f72627ffddd9da94414b5de4ade0ed312060abc95fb354d2e6b2d06f3b5c47a38c5ebe8e4f1dee3400a90407037e705ba0b655613a6cc6f605bea5eec18c81eb48bddb25c250bcc429e2c16714b2ed5387cd0ea6b323b"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0xb}}}, 0x24}}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000001c0)=0x81, 0x4) openat(r4, &(0x7f0000000280)='./file0\x00', 0x4000, 0x50) tee(r2, r4, 0x8f5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r7, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r11}, 0xc) socket$rds(0x15, 0x5, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r12}, 0x18) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 594.182412ms ago: executing program 1 (id=3133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x400000, 0x20) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/64, 0x20}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(r2, &(0x7f0000000080)='./file1\x00', 0x1c9) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@commit={'commit', 0x3d, 0x6}}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50d, &(0x7f00000011c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 462.405053ms ago: executing program 1 (id=3134): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b'], 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x23, 0x80000, 0x2010001) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0x1a, r5, 0xc, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x14080094) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2da46d8347a6de4c4ef6d820c79ef4d95aec6f2c3cf29b24add008a8375f0c3d446d094ef791620e3013906350558495a4255af5695cc962310321a7004b802d6f79a44e7", 0x46}], 0x1) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 455.863203ms ago: executing program 1 (id=3135): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) (fail_nth: 3) 221.491402ms ago: executing program 1 (id=3136): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) 112.071341ms ago: executing program 1 (id=3137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x7, 0x80000}) 92.298652ms ago: executing program 2 (id=3138): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1002, 0x3a, 0x9, 0xf84, 0x3}, 0x1c) 91.661452ms ago: executing program 1 (id=3139): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x0, 0x5}, {0x10}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4008010) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x4, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb9fb, 0x0, 0x0, 0x0, 0x88d1}], &(0x7f0000000040)='GPL\x00', 0x10001, 0x81, &(0x7f0000000200)=""/129, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x5, 0x6d, 0xedd}, 0x10, 0xcf10, 0xffffffffffffffff, 0x3, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x1, 0x3, 0x9, 0x6}, {0x2, 0x3, 0x10, 0x1}, {0x4, 0x5, 0x3, 0x2}], 0x10, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup, 0xf, 0x0, 0x11b, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x25, 0x7, @val=@uprobe_multi={&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=[0x6], 0x0, 0x9, 0x1, 0x1}}, 0x40) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r6, @ANYRES64=r7, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@fallback=r0, r2, 0x2a, 0x1c300313a80cf1c7, r3, @value=r5, @void, @void, @void, r4}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES8=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe6fc477d13a2c0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 91.373932ms ago: executing program 2 (id=3140): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x214}) close(r1) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000401000004000000c5000000881480008eee8f16b218b275bee7edbdcdd44dee47fcdd5d27604968444d6596fc1e10fa3a9e0dac7edd733b1af45476b6d784c56b3a0a18338d1126996d1805199973210379be12", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}, {0x40, 0x6, 0x1, 0x1}, {0x2, 0x9, 0xa5}]}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_config_ext={0xacf8, 0xf3}, 0x1100, 0x5ddc, 0x3a68, 0x5, 0x0, 0x8, 0x8697, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05eb", @ANYRESOCT=r4, @ANYRES8=r4], 0x30}, 0x40880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) 39.420657ms ago: executing program 6 (id=3141): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_gettime(0x0, 0x0) 1.10998ms ago: executing program 2 (id=3142): get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000df5000/0x4000)=nil, 0x2) 679.95µs ago: executing program 2 (id=3143): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0xd7487aa6f8c07d18, 0xf7fa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) 0s ago: executing program 6 (id=3144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbc944807030f36dd0aaaa86dd60f4adf700082c00fe800000000000000000000000000000ff02000000000000000000000000000181009078000000039dda58ad146a"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x400) fcntl$notify(r1, 0x402, 0x80000031) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x7e}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x4, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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") r2 = socket(0x11, 0x3, 0x0) r3 = semget$private(0x0, 0x4000000009, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xeb, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}, {&(0x7f00000000c0)=ANY=[], 0x22f8}], 0x2}, 0x0) 0s ago: executing program 1 (id=3145): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r2 = socket(0x10, 0x80002, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0x80000001) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x4, 0x8, 0x0, 0x69b, 0xfb}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async, rerun: 64) getxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000001c0)=@random={'user.', '}:\\&\x00'}, 0x0, 0x0) (rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700083c0020010010000000000000000000000000ff020000000000000000000000000001810098"], 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002"], 0x24}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r7, @ANYBLOB="000302000000fcdbdf250f0000003c0002800800070006000000060002004e220000080007000700000008000500f8ffffff06000b000a000000080003000400000006000f000600000058000380080001000000000008000100020000000500080040000000050008000100000008000500ac1e0101060004003b0100000500080003000000088d948de228ee000300040000001400020074756e6c3000000000000000000000000800040006000000080004000900000008000600000000002800038014000600ff01000000000000000000000000000108000300000000000800"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4e040) kernel console output (not intermixed with test programs): 9][ T12] vhci_hcd: stop threads [ 114.499522][ T12] vhci_hcd: release socket [ 114.504013][ T12] vhci_hcd: disconnect device [ 114.525538][ T9268] netlink: 'syz.6.1843': attribute type 1 has an invalid length. [ 114.539467][ T9268] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.585576][ T9273] lo speed is unknown, defaulting to 1000 [ 114.594933][ T9273] lo speed is unknown, defaulting to 1000 [ 114.736231][ T9290] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 114.953270][ T9309] syzkaller0: entered promiscuous mode [ 114.958835][ T9309] syzkaller0: entered allmulticast mode [ 115.071468][ T9318] lo speed is unknown, defaulting to 1000 [ 115.081584][ T9321] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 115.096942][ T9318] lo speed is unknown, defaulting to 1000 [ 115.127713][ T9323] vhci_hcd: invalid port number 96 [ 115.133127][ T9323] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 115.134079][ T9327] 9pnet_fd: Insufficient options for proto=fd [ 115.355806][ T9356] tipc: Enabling of bearer rejected, already enabled [ 115.429242][ T9359] sch_tbf: burst 0 is lower than device lo mtu (16) ! [ 115.657247][ T9364] loop1: detected capacity change from 0 to 512 [ 115.741331][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 115.741344][ T29] audit: type=1326 audit(1754415546.836:5657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 115.783609][ T9364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.784151][ T29] audit: type=1326 audit(1754415546.876:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 115.819741][ T29] audit: type=1326 audit(1754415546.876:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 115.843376][ T29] audit: type=1326 audit(1754415546.876:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 115.867065][ T29] audit: type=1326 audit(1754415546.876:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 115.890927][ T29] audit: type=1326 audit(1754415546.876:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 115.922810][ T29] audit: type=1326 audit(1754415546.916:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 115.955701][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.958225][ T29] audit: type=1326 audit(1754415547.056:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b690eb69 code=0x7ffc0000 [ 115.988420][ T29] audit: type=1326 audit(1754415547.056:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b690eb69 code=0x7ffc0000 [ 116.017542][ T29] audit: type=1326 audit(1754415547.116:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.1.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 116.080353][ T9380] sch_tbf: burst 0 is lower than device lo mtu (16) ! [ 116.175536][ T9392] vhci_hcd: invalid port number 96 [ 116.180806][ T9392] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 116.182733][ T9386] lo speed is unknown, defaulting to 1000 [ 116.183057][ T9386] lo speed is unknown, defaulting to 1000 [ 116.231165][ T9399] __nla_validate_parse: 20 callbacks suppressed [ 116.231182][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'. [ 116.309873][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1895'. [ 116.373941][ T9420] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 116.381148][ T9420] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.388767][ T9420] vhci_hcd vhci_hcd.0: Device attached [ 116.520574][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 116.635134][ T10] usb 5-1: new low-speed USB device number 8 using vhci_hcd [ 116.748863][ T9438] lo speed is unknown, defaulting to 1000 [ 116.754975][ T9438] lo speed is unknown, defaulting to 1000 [ 116.943538][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 117.137441][ T9460] vhci_hcd: invalid port number 96 [ 117.142621][ T9460] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 117.149892][ T9421] vhci_hcd: connection reset by peer [ 117.156738][ T12] vhci_hcd: stop threads [ 117.160995][ T12] vhci_hcd: release socket [ 117.165473][ T12] vhci_hcd: disconnect device [ 117.182114][ T9464] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 117.188736][ T9464] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.196298][ T9464] vhci_hcd vhci_hcd.0: Device attached [ 117.204108][ T9465] vhci_hcd: connection closed [ 117.204384][ T12] vhci_hcd: stop threads [ 117.213549][ T12] vhci_hcd: release socket [ 117.217995][ T12] vhci_hcd: disconnect device [ 117.236839][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'. [ 117.324976][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1925'. [ 117.334011][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1925'. [ 117.343103][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1925'. [ 117.358650][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1925'. [ 117.367537][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1925'. [ 117.576521][ T9492] vhci_hcd: invalid port number 96 [ 117.581724][ T9492] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 118.213247][ T9532] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 118.220089][ T9532] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.227909][ T9532] vhci_hcd vhci_hcd.0: Device attached [ 118.251730][ T9536] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 118.258390][ T9536] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.266014][ T9536] vhci_hcd vhci_hcd.0: Device attached [ 118.272419][ T9537] vhci_hcd: connection closed [ 118.272610][ T12] vhci_hcd: stop threads [ 118.281689][ T12] vhci_hcd: release socket [ 118.286195][ T12] vhci_hcd: disconnect device [ 118.465146][ T36] usb 1-1: new low-speed USB device number 6 using vhci_hcd [ 118.628367][ T9553] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(15) [ 118.635017][ T9553] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.642599][ T9553] vhci_hcd vhci_hcd.0: Device attached [ 118.855516][ T9561] vhci_hcd: invalid port number 96 [ 118.860674][ T9561] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 118.885079][ T1036] usb 13-1: new low-speed USB device number 5 using vhci_hcd [ 118.993062][ T9533] vhci_hcd: connection reset by peer [ 118.999521][ T41] vhci_hcd: stop threads [ 119.003854][ T41] vhci_hcd: release socket [ 119.008300][ T41] vhci_hcd: disconnect device [ 119.094142][ T9580] loop1: detected capacity change from 0 to 512 [ 119.101533][ T9580] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.117730][ T9580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.130461][ T9580] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.142100][ T9580] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1960: corrupted xattr block 19: overlapping e_value [ 119.156523][ T9580] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 119.165637][ T9580] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1960: corrupted xattr block 19: overlapping e_value [ 119.179834][ T9580] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 119.188898][ T9580] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1960: corrupted xattr block 19: overlapping e_value [ 119.203089][ T9583] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1960: corrupted xattr block 19: overlapping e_value [ 119.217212][ T9583] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1960: corrupted xattr block 19: overlapping e_value [ 119.231459][ T9583] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 119.336006][ T9588] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 119.342623][ T9588] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.350231][ T9588] vhci_hcd vhci_hcd.0: Device attached [ 119.357986][ T9589] vhci_hcd: connection closed [ 119.358213][ T51] vhci_hcd: stop threads [ 119.367360][ T51] vhci_hcd: release socket [ 119.371764][ T51] vhci_hcd: disconnect device [ 119.406132][ T9554] vhci_hcd: connection reset by peer [ 119.411780][ T12] vhci_hcd: stop threads [ 119.416080][ T12] vhci_hcd: release socket [ 119.420497][ T12] vhci_hcd: disconnect device [ 119.555510][ T9594] vhci_hcd: invalid port number 96 [ 119.560687][ T9594] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 119.797024][ T9613] vhci_hcd: invalid port number 96 [ 119.802392][ T9613] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 119.887612][ T9623] vhci_hcd: invalid port number 96 [ 119.892780][ T9623] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 119.922670][ T9624] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 119.929592][ T9624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.937186][ T9624] vhci_hcd vhci_hcd.0: Device attached [ 119.955494][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.001959][ T9641] vhci_hcd: invalid port number 96 [ 120.007174][ T9641] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 120.026329][ T9643] sch_tbf: burst 0 is lower than device lo mtu (16) ! [ 120.042871][ T9647] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 120.213302][ T9671] lo speed is unknown, defaulting to 1000 [ 120.219486][ T9671] lo speed is unknown, defaulting to 1000 [ 120.501774][ T9702] lo speed is unknown, defaulting to 1000 [ 120.507712][ T9702] lo speed is unknown, defaulting to 1000 [ 120.577005][ T9711] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 120.692040][ T9626] vhci_hcd: connection closed [ 120.692329][ T1631] vhci_hcd: stop threads [ 120.701552][ T1631] vhci_hcd: release socket [ 120.706093][ T1631] vhci_hcd: disconnect device [ 120.745192][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 120.745205][ T29] audit: type=1326 audit(1754415551.846:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 120.818779][ T9738] lo speed is unknown, defaulting to 1000 [ 120.826562][ T29] audit: type=1326 audit(1754415551.876:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 120.836600][ T9738] lo speed is unknown, defaulting to 1000 [ 120.850875][ T29] audit: type=1326 audit(1754415551.876:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 120.880292][ T29] audit: type=1326 audit(1754415551.876:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 120.904448][ T29] audit: type=1326 audit(1754415551.876:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 120.927791][ T29] audit: type=1326 audit(1754415551.886:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 120.951709][ T29] audit: type=1326 audit(1754415551.886:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9739 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4f6801425 code=0x7ffc0000 [ 120.975291][ T29] audit: type=1326 audit(1754415551.886:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 120.998875][ T29] audit: type=1326 audit(1754415551.886:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 121.022614][ T29] audit: type=1326 audit(1754415551.886:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 121.248844][ T9755] __nla_validate_parse: 59 callbacks suppressed [ 121.248905][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2024'. [ 121.367750][ T9766] lo speed is unknown, defaulting to 1000 [ 121.380311][ T9770] netlink: 'syz.0.2032': attribute type 1 has an invalid length. [ 121.388893][ T9766] lo speed is unknown, defaulting to 1000 [ 121.490492][ T9770] 8021q: adding VLAN 0 to HW filter on device bond10 [ 121.774557][ T9779] syzkaller0: entered promiscuous mode [ 121.780140][ T9779] syzkaller0: entered allmulticast mode [ 121.883366][ T10] usb 5-1: enqueue for inactive port 0 [ 121.888996][ T10] usb 5-1: enqueue for inactive port 0 [ 121.932006][ T9793] vhci_hcd: invalid port number 96 [ 121.937225][ T9793] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 121.961355][ T9796] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 121.965201][ T10] vhci_hcd: vhci_device speed not set [ 121.968067][ T9796] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.981368][ T9796] vhci_hcd vhci_hcd.0: Device attached [ 122.057908][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2042'. [ 122.170933][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'. [ 122.205393][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2046'. [ 122.214424][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2046'. [ 122.228001][ T3401] usb 9-1: new low-speed USB device number 4 using vhci_hcd [ 122.250354][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2046'. [ 122.300348][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2046'. [ 122.309476][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2046'. [ 122.324834][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2046'. [ 122.340396][ T9826] syzkaller0: entered promiscuous mode [ 122.345977][ T9826] syzkaller0: entered allmulticast mode [ 122.381113][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2046'. [ 122.397923][ T9830] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 122.452725][ T9844] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 122.656873][ T9861] lo speed is unknown, defaulting to 1000 [ 122.663065][ T9861] lo speed is unknown, defaulting to 1000 [ 122.755331][ T9798] vhci_hcd: connection reset by peer [ 122.885223][ T3431] vhci_hcd: stop threads [ 122.889601][ T3431] vhci_hcd: release socket [ 122.894270][ T3431] vhci_hcd: disconnect device [ 123.028695][ T9873] sch_tbf: burst 0 is lower than device lo mtu (16) ! [ 123.084847][ T9881] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 123.098357][ T9883] netlink: 'syz.0.2067': attribute type 1 has an invalid length. [ 123.112843][ T9885] loop1: detected capacity change from 0 to 512 [ 123.127033][ T9883] 8021q: adding VLAN 0 to HW filter on device bond11 [ 123.133874][ T9888] netlink: 'syz.2.2069': attribute type 1 has an invalid length. [ 123.138873][ T9885] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.150311][ T9888] 8021q: adding VLAN 0 to HW filter on device bond6 [ 123.182118][ T9885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.196197][ T9885] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.210613][ T9885] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2068: corrupted xattr block 19: overlapping e_value [ 123.224656][ T9885] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 123.233969][ T9885] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2068: corrupted xattr block 19: overlapping e_value [ 123.248207][ T9885] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 123.257438][ T9885] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2068: corrupted xattr block 19: overlapping e_value [ 123.271808][ T9900] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2068: corrupted xattr block 19: overlapping e_value [ 123.286457][ T9900] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2068: corrupted xattr block 19: overlapping e_value [ 123.300882][ T9900] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 123.439924][ T9913] lo speed is unknown, defaulting to 1000 [ 123.446518][ T9913] lo speed is unknown, defaulting to 1000 [ 123.475120][ T36] usb 1-1: enqueue for inactive port 0 [ 123.487319][ T36] usb 1-1: enqueue for inactive port 0 [ 123.538787][ T9915] vhci_hcd: invalid port number 96 [ 123.544039][ T9915] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 123.567304][ T36] vhci_hcd: vhci_device speed not set [ 123.629432][ T9925] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 123.806002][ T9949] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 123.812657][ T9949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.820493][ T9949] vhci_hcd vhci_hcd.0: Device attached [ 124.030827][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.044668][ T9960] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 124.191046][ T1036] usb 13-1: enqueue for inactive port 0 [ 124.197051][ T1036] usb 13-1: enqueue for inactive port 0 [ 124.236495][ T9968] vhci_hcd: invalid port number 96 [ 124.241815][ T9968] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 124.265478][ T1036] vhci_hcd: vhci_device speed not set [ 124.407582][ T9982] netlink: 'syz.0.2102': attribute type 1 has an invalid length. [ 124.420464][ T9982] 8021q: adding VLAN 0 to HW filter on device bond12 [ 124.582926][ T9950] vhci_hcd: connection closed [ 124.583092][ T1631] vhci_hcd: stop threads [ 124.592057][ T1631] vhci_hcd: release socket [ 124.596686][ T1631] vhci_hcd: disconnect device [ 125.697725][T10043] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 125.750613][T10049] netlink: 'syz.6.2123': attribute type 1 has an invalid length. [ 125.765534][T10047] vhci_hcd: invalid port number 96 [ 125.770710][T10047] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 125.784512][T10049] 8021q: adding VLAN 0 to HW filter on device bond5 [ 125.860002][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 125.860018][ T29] audit: type=1326 audit(1754415556.946:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 125.890323][ T29] audit: type=1326 audit(1754415556.946:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 125.896019][T10062] loop1: detected capacity change from 0 to 512 [ 125.914450][ T29] audit: type=1326 audit(1754415556.946:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 125.945122][ T29] audit: type=1326 audit(1754415556.946:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 125.969024][ T29] audit: type=1326 audit(1754415556.946:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 125.978811][T10062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.993271][ T29] audit: type=1326 audit(1754415556.946:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.1.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 126.025852][ T29] audit: type=1326 audit(1754415556.946:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10032 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 126.038488][T10062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.049531][ T29] audit: type=1326 audit(1754415556.946:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10032 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 126.063684][T10062] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.125367][T10062] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2127: corrupted xattr block 19: overlapping e_value [ 126.140095][T10062] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 126.149447][T10062] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2127: corrupted xattr block 19: overlapping e_value [ 126.163977][T10062] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 126.173683][T10062] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2127: corrupted xattr block 19: overlapping e_value [ 126.189655][T10062] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2127: corrupted xattr block 19: overlapping e_value [ 126.207445][T10062] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2127: corrupted xattr block 19: overlapping e_value [ 126.223294][T10070] vhci_hcd: invalid port number 96 [ 126.228586][T10070] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 126.236899][T10062] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 126.249711][ T29] audit: type=1326 audit(1754415557.346:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10071 comm="syz.0.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 126.284650][T10076] __nla_validate_parse: 17 callbacks suppressed [ 126.284809][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2132'. [ 126.292977][ T29] audit: type=1326 audit(1754415557.346:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10071 comm="syz.0.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 126.326898][T10078] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 126.343934][T10080] vhci_hcd: invalid port number 96 [ 126.349189][T10080] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 126.351799][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'. [ 126.365298][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'. [ 126.374607][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'. [ 126.409657][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'. [ 126.418855][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'. [ 126.429280][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'. [ 126.459272][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'. [ 126.468521][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'. [ 126.478860][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'. [ 126.932715][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.988274][T10110] vhci_hcd: invalid port number 96 [ 126.993594][T10110] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 127.020255][T10118] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 127.315240][ T3401] usb 9-1: enqueue for inactive port 0 [ 127.329439][T10141] lo speed is unknown, defaulting to 1000 [ 127.347244][ T3401] usb 9-1: enqueue for inactive port 0 [ 127.365122][T10141] lo speed is unknown, defaulting to 1000 [ 127.387977][T10143] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 127.394717][T10143] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 127.402405][T10143] vhci_hcd vhci_hcd.0: Device attached [ 127.435101][ T3401] vhci_hcd: vhci_device speed not set [ 127.448161][T10145] vhci_hcd: connection closed [ 127.453904][ T51] vhci_hcd: stop threads [ 127.463167][ T51] vhci_hcd: release socket [ 127.467689][ T51] vhci_hcd: disconnect device [ 127.865408][T10180] syzkaller0: entered promiscuous mode [ 127.871000][T10180] syzkaller0: entered allmulticast mode [ 128.174777][T10196] lo speed is unknown, defaulting to 1000 [ 128.183054][T10196] lo speed is unknown, defaulting to 1000 [ 128.386303][T10214] syzkaller0: entered promiscuous mode [ 128.391783][T10214] syzkaller0: entered allmulticast mode [ 128.431060][T10218] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 128.438020][T10218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.445900][T10218] vhci_hcd vhci_hcd.0: Device attached [ 128.467905][T10219] vhci_hcd: connection closed [ 128.468940][ T1631] vhci_hcd: stop threads [ 128.478261][ T1631] vhci_hcd: release socket [ 128.482940][ T1631] vhci_hcd: disconnect device [ 128.515971][T10222] vhci_hcd: invalid port number 96 [ 128.521127][T10222] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 128.553744][T10228] lo speed is unknown, defaulting to 1000 [ 128.560387][T10228] lo speed is unknown, defaulting to 1000 [ 128.609690][T10232] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 128.616400][T10232] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.623995][T10232] vhci_hcd vhci_hcd.0: Device attached [ 128.637988][T10233] vhci_hcd: connection closed [ 128.638177][ T3431] vhci_hcd: stop threads [ 128.647179][ T3431] vhci_hcd: release socket [ 128.651611][ T3431] vhci_hcd: disconnect device [ 128.819120][T10248] vhci_hcd: invalid port number 96 [ 128.824281][T10248] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 128.846916][T10254] netlink: 'syz.6.2193': attribute type 1 has an invalid length. [ 128.860039][T10254] 8021q: adding VLAN 0 to HW filter on device bond6 [ 128.942017][T10271] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 128.951707][T10269] lo speed is unknown, defaulting to 1000 [ 128.958536][T10269] lo speed is unknown, defaulting to 1000 [ 129.187739][T10305] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 129.194363][T10305] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.202063][T10305] vhci_hcd vhci_hcd.0: Device attached [ 129.202641][T10312] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.214992][T10311] lo speed is unknown, defaulting to 1000 [ 129.216696][T10308] vhci_hcd: connection closed [ 129.221294][ T31] vhci_hcd: stop threads [ 129.221537][T10311] lo speed is unknown, defaulting to 1000 [ 129.226065][ T31] vhci_hcd: release socket [ 129.241655][ T31] vhci_hcd: disconnect device [ 129.405554][T10337] vhci_hcd: invalid port number 96 [ 129.410736][T10337] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 129.488759][T10348] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.555756][T10354] lo speed is unknown, defaulting to 1000 [ 129.562233][T10354] lo speed is unknown, defaulting to 1000 [ 129.704862][T10365] syzkaller0: entered promiscuous mode [ 129.710568][T10365] syzkaller0: entered allmulticast mode [ 129.781485][T10375] sch_tbf: burst 0 is lower than device lo mtu (16) ! [ 129.844585][T10385] lo speed is unknown, defaulting to 1000 [ 129.850681][T10385] lo speed is unknown, defaulting to 1000 [ 130.123377][T10410] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 130.260715][T10426] lo speed is unknown, defaulting to 1000 [ 130.266964][T10426] lo speed is unknown, defaulting to 1000 [ 130.452854][T10448] lo speed is unknown, defaulting to 1000 [ 130.459306][T10448] lo speed is unknown, defaulting to 1000 [ 130.520360][T10450] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 130.755547][T10475] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 130.862268][T10486] lo speed is unknown, defaulting to 1000 [ 130.876913][T10486] lo speed is unknown, defaulting to 1000 [ 130.901895][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 130.901910][ T29] audit: type=1326 audit(1754415561.996:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.6.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 130.932273][ T29] audit: type=1326 audit(1754415561.996:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.6.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 131.026684][ T29] audit: type=1326 audit(1754415562.126:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.0.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 131.052575][ T29] audit: type=1326 audit(1754415562.126:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.0.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 131.068204][T10499] netlink: 'syz.0.2287': attribute type 1 has an invalid length. [ 131.076560][ T29] audit: type=1326 audit(1754415562.126:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.0.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 131.108170][ T29] audit: type=1326 audit(1754415562.146:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.0.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 131.158460][T10499] 8021q: adding VLAN 0 to HW filter on device bond13 [ 131.535177][T10513] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 131.553078][ T29] audit: type=1326 audit(1754415562.646:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 131.576971][ T29] audit: type=1326 audit(1754415562.646:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 131.620800][ T29] audit: type=1326 audit(1754415562.696:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 131.622643][T10517] __nla_validate_parse: 53 callbacks suppressed [ 131.622658][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2293'. [ 131.645152][ T29] audit: type=1326 audit(1754415562.696:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 132.125362][T10544] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 132.265595][T10564] netlink: 'syz.6.2314': attribute type 1 has an invalid length. [ 132.298559][T10564] 8021q: adding VLAN 0 to HW filter on device bond7 [ 132.558100][T10572] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 132.605541][T10574] vhci_hcd: invalid port number 96 [ 132.610886][T10574] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 132.658053][T10581] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 132.664690][T10581] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.672251][T10581] vhci_hcd vhci_hcd.0: Device attached [ 132.721988][T10585] vhci_hcd: connection closed [ 132.722426][ T12] vhci_hcd: stop threads [ 132.731878][ T12] vhci_hcd: release socket [ 132.736337][ T12] vhci_hcd: disconnect device [ 133.092842][T10603] sch_tbf: burst 0 is lower than device lo mtu (16) ! [ 133.105386][T10599] lo speed is unknown, defaulting to 1000 [ 133.121849][T10599] lo speed is unknown, defaulting to 1000 [ 133.156492][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 134.214698][T10679] loop1: detected capacity change from 0 to 512 [ 134.222397][T10679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.240960][T10679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.260034][T10679] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.273314][T10679] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2357: corrupted xattr block 19: overlapping e_value [ 134.287715][T10679] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 134.297273][T10679] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2357: corrupted xattr block 19: overlapping e_value [ 134.311902][T10679] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 134.321334][T10679] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2357: corrupted xattr block 19: overlapping e_value [ 134.350697][T10690] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2357: corrupted xattr block 19: overlapping e_value [ 134.376429][T10690] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2357: corrupted xattr block 19: overlapping e_value [ 134.391134][T10690] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 134.431198][T10701] netlink: 'syz.4.2364': attribute type 1 has an invalid length. [ 134.455839][T10701] 8021q: adding VLAN 0 to HW filter on device bond6 [ 135.055857][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.134651][T10722] lo speed is unknown, defaulting to 1000 [ 135.141362][T10722] lo speed is unknown, defaulting to 1000 [ 135.685854][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2378'. [ 136.140104][T10768] netlink: 'syz.1.2385': attribute type 1 has an invalid length. [ 136.157550][T10768] 8021q: adding VLAN 0 to HW filter on device bond5 [ 136.256327][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 136.256349][ T29] audit: type=1326 audit(1754415567.356:7087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10778 comm="syz.6.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 136.289366][ T29] audit: type=1326 audit(1754415567.356:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10778 comm="syz.6.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 136.313253][ T29] audit: type=1326 audit(1754415567.356:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10778 comm="syz.6.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 136.337361][ T29] audit: type=1326 audit(1754415567.356:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10778 comm="syz.6.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 136.361979][ T29] audit: type=1326 audit(1754415567.356:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10778 comm="syz.6.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 136.386514][ T29] audit: type=1326 audit(1754415567.356:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10778 comm="syz.6.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 136.411715][ T29] audit: type=1326 audit(1754415567.386:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 136.435663][ T29] audit: type=1326 audit(1754415567.386:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 136.459342][ T29] audit: type=1326 audit(1754415567.386:7095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 136.483297][ T29] audit: type=1326 audit(1754415567.386:7096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 136.598585][T10805] lo speed is unknown, defaulting to 1000 [ 136.604800][T10805] lo speed is unknown, defaulting to 1000 [ 136.685815][T10810] vhci_hcd: invalid port number 96 [ 136.690975][T10810] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 136.811604][T10832] vhci_hcd: invalid port number 96 [ 136.816962][T10832] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 136.856660][T10835] lo speed is unknown, defaulting to 1000 [ 136.867476][T10835] lo speed is unknown, defaulting to 1000 [ 136.986926][T10846] vhci_hcd: invalid port number 96 [ 136.992176][T10846] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 137.028496][T10853] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 137.035311][T10853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.042981][T10853] vhci_hcd vhci_hcd.0: Device attached [ 137.059194][T10854] vhci_hcd: connection closed [ 137.059654][ T41] vhci_hcd: stop threads [ 137.068816][ T41] vhci_hcd: release socket [ 137.073302][ T41] vhci_hcd: disconnect device [ 137.405512][T10879] vhci_hcd: invalid port number 96 [ 137.410708][T10879] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 137.462118][T10884] loop1: detected capacity change from 0 to 512 [ 137.481326][T10884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.539525][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.770556][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 137.779603][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 137.811890][T10911] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 137.818640][T10911] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.821938][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 137.826782][T10911] vhci_hcd vhci_hcd.0: Device attached [ 137.981649][T10922] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 137.988398][T10922] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.996253][T10922] vhci_hcd vhci_hcd.0: Device attached [ 137.998075][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 138.011131][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 138.020318][T10923] vhci_hcd: connection closed [ 138.021798][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 138.026900][ T1631] vhci_hcd: stop threads [ 138.040142][ T1631] vhci_hcd: release socket [ 138.044561][ T1631] vhci_hcd: disconnect device [ 138.064641][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 138.073585][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 138.082519][ T1036] usb 13-1: new low-speed USB device number 6 using vhci_hcd [ 138.092889][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 138.140307][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2443'. [ 138.196085][T10937] vhci_hcd: invalid port number 96 [ 138.201324][T10937] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 138.487386][T10913] vhci_hcd: connection reset by peer [ 138.493932][ T1631] vhci_hcd: stop threads [ 138.498366][ T1631] vhci_hcd: release socket [ 138.502840][ T1631] vhci_hcd: disconnect device [ 138.623032][T10961] loop1: detected capacity change from 0 to 512 [ 138.634807][T10961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.710240][T10972] lo speed is unknown, defaulting to 1000 [ 138.736655][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.748952][T10972] lo speed is unknown, defaulting to 1000 [ 139.052408][T10988] loop1: detected capacity change from 0 to 512 [ 139.060676][T10988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.070593][T10990] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 139.076973][T10988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.077117][T10990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.090855][T10988] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.097504][T10990] vhci_hcd vhci_hcd.0: Device attached [ 139.115100][T10988] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2462: corrupted xattr block 19: overlapping e_value [ 139.145309][T10988] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 139.154623][T10988] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2462: corrupted xattr block 19: overlapping e_value [ 139.173530][T10988] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 139.183183][T10988] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2462: corrupted xattr block 19: overlapping e_value [ 139.197737][T10995] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2462: corrupted xattr block 19: overlapping e_value [ 139.212014][T10995] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2462: corrupted xattr block 19: overlapping e_value [ 139.229871][T10995] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 139.893414][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.902530][T10991] vhci_hcd: connection closed [ 139.902750][ T51] vhci_hcd: stop threads [ 139.911927][ T51] vhci_hcd: release socket [ 139.916393][ T51] vhci_hcd: disconnect device [ 140.041467][T11041] lo speed is unknown, defaulting to 1000 [ 140.088880][T11045] lo speed is unknown, defaulting to 1000 [ 140.095454][T11045] lo speed is unknown, defaulting to 1000 [ 140.109309][T11041] lo speed is unknown, defaulting to 1000 [ 140.322100][T11067] lo speed is unknown, defaulting to 1000 [ 140.335197][T11067] lo speed is unknown, defaulting to 1000 [ 140.341607][T11065] vhci_hcd: invalid port number 96 [ 140.347146][T11065] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 140.841636][T11093] lo speed is unknown, defaulting to 1000 [ 140.868598][T11093] lo speed is unknown, defaulting to 1000 [ 141.048198][T11102] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 141.054848][T11102] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.062584][T11102] vhci_hcd vhci_hcd.0: Device attached [ 141.148155][T11103] vhci_hcd: connection closed [ 141.148441][ T54] vhci_hcd: stop threads [ 141.157632][ T54] vhci_hcd: release socket [ 141.162062][ T54] vhci_hcd: disconnect device [ 141.229604][T11108] vhci_hcd: invalid port number 96 [ 141.234749][T11108] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 141.284776][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 141.284788][ T29] audit: type=1326 audit(1754415572.376:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b690eb69 code=0x7ffc0000 [ 141.328474][T11112] lo speed is unknown, defaulting to 1000 [ 141.334273][ T29] audit: type=1326 audit(1754415572.376:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b690eb69 code=0x7ffc0000 [ 141.334301][ T29] audit: type=1326 audit(1754415572.376:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f02b690eb69 code=0x7ffc0000 [ 141.399409][T11112] lo speed is unknown, defaulting to 1000 [ 141.447958][ T29] audit: type=1326 audit(1754415572.546:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b690eb69 code=0x7ffc0000 [ 141.478620][ T29] audit: type=1326 audit(1754415572.546:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b690eb69 code=0x7ffc0000 [ 141.522573][ T29] audit: type=1326 audit(1754415572.576:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3c57eb69 code=0x7ffc0000 [ 141.546730][ T29] audit: type=1326 audit(1754415572.576:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f3a3c57eb69 code=0x7ffc0000 [ 141.572132][ T29] audit: type=1326 audit(1754415572.576:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3c57eb69 code=0x7ffc0000 [ 141.663786][T11136] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 141.670510][T11136] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.678609][T11136] vhci_hcd vhci_hcd.0: Device attached [ 141.684506][ T29] audit: type=1326 audit(1754415572.776:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.1.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 141.708719][ T29] audit: type=1326 audit(1754415572.776:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.1.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 141.754357][T11137] vhci_hcd: connection closed [ 141.754543][ T41] vhci_hcd: stop threads [ 141.764205][ T41] vhci_hcd: release socket [ 141.768764][ T41] vhci_hcd: disconnect device [ 142.335033][T11160] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 142.341685][T11160] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 142.349767][T11160] vhci_hcd vhci_hcd.0: Device attached [ 142.409373][T11163] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 142.416145][T11163] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.423895][T11163] vhci_hcd vhci_hcd.0: Device attached [ 142.434970][T11161] vhci_hcd: connection closed [ 142.435929][ T41] vhci_hcd: stop threads [ 142.445159][ T41] vhci_hcd: release socket [ 142.449697][ T41] vhci_hcd: disconnect device [ 142.526926][T11169] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 142.533724][T11169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.541290][T11169] vhci_hcd vhci_hcd.0: Device attached [ 142.716943][T11164] vhci_hcd: connection closed [ 142.725397][ T54] vhci_hcd: stop threads [ 142.734554][ T54] vhci_hcd: release socket [ 142.739127][ T54] vhci_hcd: disconnect device [ 142.785061][ T3387] usb 5-1: new low-speed USB device number 9 using vhci_hcd [ 142.833976][T11170] vhci_hcd: connection reset by peer [ 142.839517][ T413] vhci_hcd: stop threads [ 142.843787][ T413] vhci_hcd: release socket [ 142.848243][ T413] vhci_hcd: disconnect device [ 142.932903][T11187] __nla_validate_parse: 28 callbacks suppressed [ 142.932920][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2530'. [ 143.155243][ T1036] usb 13-1: enqueue for inactive port 0 [ 143.161633][ T1036] usb 13-1: enqueue for inactive port 0 [ 143.235078][ T1036] vhci_hcd: vhci_device speed not set [ 143.304800][T11197] syzkaller0: entered promiscuous mode [ 143.310536][T11197] syzkaller0: entered allmulticast mode [ 143.378892][T11199] smc: net device bond0 applied user defined pnetid SYZ2 [ 143.566196][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2541'. [ 143.626091][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2544'. [ 143.650180][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2545'. [ 143.729455][T11224] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 143.736161][T11224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 143.743776][T11224] vhci_hcd vhci_hcd.0: Device attached [ 143.952380][T11236] loop1: detected capacity change from 0 to 512 [ 143.989061][T11236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.002553][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2553'. [ 144.014180][T11240] smc: net device bond0 applied user defined pnetid SYZ2 [ 144.055294][T11225] vhci_hcd: connection closed [ 144.060924][ T1631] vhci_hcd: stop threads [ 144.069914][ T1631] vhci_hcd: release socket [ 144.074632][ T1631] vhci_hcd: disconnect device [ 144.114919][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.121324][T11252] syzkaller0: entered promiscuous mode [ 144.129682][T11252] syzkaller0: entered allmulticast mode [ 144.145333][ T1036] vhci_hcd: vhci_device speed not set [ 144.183259][T11261] loop1: detected capacity change from 0 to 512 [ 144.202655][T11261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.219166][T11261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.231914][T11261] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.243735][T11261] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2561: corrupted xattr block 19: overlapping e_value [ 144.257916][T11261] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 144.267332][T11261] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2561: corrupted xattr block 19: overlapping e_value [ 144.281372][T11261] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 144.290385][T11261] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2561: corrupted xattr block 19: overlapping e_value [ 144.304576][T11266] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2561: corrupted xattr block 19: overlapping e_value [ 144.318794][T11266] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2561: corrupted xattr block 19: overlapping e_value [ 144.333150][T11266] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 144.359760][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.398393][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2564'. [ 144.610758][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2567'. [ 144.939830][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2575'. [ 145.212196][T11317] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 145.218737][T11317] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.226416][T11317] vhci_hcd vhci_hcd.0: Device attached [ 146.051643][T11321] vhci_hcd: connection closed [ 146.054816][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'. [ 146.070309][T11329] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 146.075670][ T413] vhci_hcd: stop threads [ 146.089416][ T413] vhci_hcd: release socket [ 146.093910][ T413] vhci_hcd: disconnect device [ 146.135203][ T1036] vhci_hcd: vhci_device speed not set [ 146.156978][T11337] netlink: 'syz.4.2588': attribute type 1 has an invalid length. [ 146.178608][T11337] 8021q: adding VLAN 0 to HW filter on device bond7 [ 146.195616][T11339] lo speed is unknown, defaulting to 1000 [ 146.201640][T11339] lo speed is unknown, defaulting to 1000 [ 146.251117][T11347] loop1: detected capacity change from 0 to 512 [ 146.251316][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2592'. [ 146.278809][T11347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.329777][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.363987][T11353] loop1: detected capacity change from 0 to 512 [ 146.381198][T11353] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.385694][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 146.385708][ T29] audit: type=1326 audit(1754415577.476:7610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.6.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 146.419817][ T29] audit: type=1326 audit(1754415577.476:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.6.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 146.445817][T11353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.458689][T11353] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.470527][T11353] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2593: corrupted xattr block 19: overlapping e_value [ 146.485737][T11353] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 146.495867][T11353] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2593: corrupted xattr block 19: overlapping e_value [ 146.511076][T11353] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 146.520914][T11353] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2593: corrupted xattr block 19: overlapping e_value [ 146.535925][T11361] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2593: corrupted xattr block 19: overlapping e_value [ 146.550296][T11361] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2593: corrupted xattr block 19: overlapping e_value [ 146.565167][T11361] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 146.617925][ T29] audit: type=1400 audit(1754415577.716:7612): avc: denied { create } for pid=11358 comm="syz.0.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.639774][ T29] audit: type=1400 audit(1754415577.736:7613): avc: denied { setopt } for pid=11358 comm="syz.0.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.660524][ T29] audit: type=1326 audit(1754415577.736:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.6.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 146.684560][ T29] audit: type=1326 audit(1754415577.736:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.6.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 146.708400][ T29] audit: type=1326 audit(1754415577.736:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.6.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 146.732026][ T29] audit: type=1326 audit(1754415577.736:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.6.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 146.755772][ T29] audit: type=1326 audit(1754415577.736:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.6.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 146.779345][ T29] audit: type=1400 audit(1754415577.756:7619): avc: denied { shutdown } for pid=11358 comm="syz.0.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.251559][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.317130][T11380] lo speed is unknown, defaulting to 1000 [ 147.330438][T11380] lo speed is unknown, defaulting to 1000 [ 147.571490][T11394] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 147.578111][T11394] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.585758][T11394] vhci_hcd vhci_hcd.0: Device attached [ 147.834302][ T3387] usb 5-1: enqueue for inactive port 0 [ 147.840008][ T3387] usb 5-1: enqueue for inactive port 0 [ 147.863705][ T3352] usb 9-1: new low-speed USB device number 5 using vhci_hcd [ 147.915062][ T3387] vhci_hcd: vhci_device speed not set [ 148.247342][T11427] __nla_validate_parse: 2 callbacks suppressed [ 148.247359][T11427] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2618'. [ 148.263167][T11395] vhci_hcd: connection reset by peer [ 148.269250][ T54] vhci_hcd: stop threads [ 148.273775][ T54] vhci_hcd: release socket [ 148.278318][ T54] vhci_hcd: disconnect device [ 148.522271][T11452] lo speed is unknown, defaulting to 1000 [ 148.538977][T11452] lo speed is unknown, defaulting to 1000 [ 148.871660][T11482] loop1: detected capacity change from 0 to 128 [ 148.883725][T11482] vfat: Unknown parameter '' [ 148.900448][T11479] lo speed is unknown, defaulting to 1000 [ 148.916922][T11479] lo speed is unknown, defaulting to 1000 [ 148.995614][T11488] vhci_hcd: invalid port number 96 [ 149.000755][T11488] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 149.068216][T11492] syzkaller0: entered promiscuous mode [ 149.073740][T11492] syzkaller0: entered allmulticast mode [ 149.163291][T11505] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 149.169976][T11505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.177511][T11505] vhci_hcd vhci_hcd.0: Device attached [ 149.217868][T11513] loop1: detected capacity change from 0 to 128 [ 149.239389][T11513] vfat: Unknown parameter '' [ 149.333093][T11507] vhci_hcd: connection closed [ 149.333269][ T54] vhci_hcd: stop threads [ 149.343254][ T54] vhci_hcd: release socket [ 149.347829][ T54] vhci_hcd: disconnect device [ 149.355091][ T3387] vhci_hcd: vhci_device speed not set [ 149.416846][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2653'. [ 149.518143][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'. [ 149.527349][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'. [ 149.551455][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'. [ 150.125848][T11541] lo speed is unknown, defaulting to 1000 [ 150.132152][T11541] lo speed is unknown, defaulting to 1000 [ 150.233088][T11545] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 150.239632][T11545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 150.247143][T11545] vhci_hcd vhci_hcd.0: Device attached [ 150.253970][T11546] vhci_hcd: connection closed [ 150.254152][ T54] vhci_hcd: stop threads [ 150.263291][ T54] vhci_hcd: release socket [ 150.267763][ T54] vhci_hcd: disconnect device [ 150.283999][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2665'. [ 150.310958][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'. [ 150.353919][T11560] loop1: detected capacity change from 0 to 128 [ 150.360873][T11560] vfat: Unknown parameter '' [ 150.457840][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2673'. [ 150.584179][T11574] syzkaller0: entered promiscuous mode [ 150.589921][T11574] syzkaller0: entered allmulticast mode [ 150.867074][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2681'. [ 151.285063][T11616] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 151.292365][T11616] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.299950][T11616] vhci_hcd vhci_hcd.0: Device attached [ 151.316989][T11617] vhci_hcd: connection closed [ 151.317189][ T54] vhci_hcd: stop threads [ 151.326349][ T54] vhci_hcd: release socket [ 151.330840][ T54] vhci_hcd: disconnect device [ 151.372848][T11614] lo speed is unknown, defaulting to 1000 [ 151.392194][T11614] lo speed is unknown, defaulting to 1000 [ 151.438335][T11626] loop1: detected capacity change from 0 to 512 [ 151.445656][T11626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.458293][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 151.458305][ T29] audit: type=1326 audit(1754415582.556:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3c57eb69 code=0x7ffc0000 [ 151.515102][ T29] audit: type=1326 audit(1754415582.586:7913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3c57eb69 code=0x7ffc0000 [ 151.520311][T11626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.585632][T11626] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.743953][T11626] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2696: corrupted xattr block 19: overlapping e_value [ 151.759314][T11626] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 151.768940][T11626] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2696: corrupted xattr block 19: overlapping e_value [ 151.798570][T11626] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 151.808049][T11626] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2696: corrupted xattr block 19: overlapping e_value [ 151.822510][T11626] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2696: corrupted xattr block 19: overlapping e_value [ 151.836641][T11626] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2696: corrupted xattr block 19: overlapping e_value [ 151.852245][T11626] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 151.871949][ T29] audit: type=1326 audit(1754415582.966:7914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b690eb69 code=0x7ffc0000 [ 151.896295][ T29] audit: type=1326 audit(1754415582.966:7915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b690eb69 code=0x7ffc0000 [ 151.920731][ T29] audit: type=1326 audit(1754415582.966:7916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f02b690eb69 code=0x7ffc0000 [ 151.945937][ T29] audit: type=1326 audit(1754415582.966:7917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b690eb69 code=0x7ffc0000 [ 151.969980][ T29] audit: type=1326 audit(1754415582.966:7918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b690eb69 code=0x7ffc0000 [ 151.994794][ T29] audit: type=1326 audit(1754415582.966:7919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3c57eb69 code=0x7ffc0000 [ 152.019101][ T29] audit: type=1326 audit(1754415582.966:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3c57eb69 code=0x7ffc0000 [ 152.044436][ T29] audit: type=1326 audit(1754415582.966:7921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f3a3c57eb69 code=0x7ffc0000 [ 152.293643][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.397045][T11664] vhci_hcd: invalid port number 96 [ 152.402384][T11664] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 152.865833][T11691] vhci_hcd: invalid port number 96 [ 152.871138][T11691] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 152.925519][ T3352] usb 9-1: enqueue for inactive port 0 [ 152.931131][ T3352] usb 9-1: enqueue for inactive port 0 [ 153.016229][ T3352] vhci_hcd: vhci_device speed not set [ 153.027989][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2725'. [ 153.353721][T11708] syzkaller0: entered promiscuous mode [ 153.359389][T11708] syzkaller0: entered allmulticast mode [ 153.418724][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2730'. [ 153.481666][T11717] lo speed is unknown, defaulting to 1000 [ 153.488670][T11717] lo speed is unknown, defaulting to 1000 [ 153.505572][T11719] vhci_hcd: invalid port number 96 [ 153.510716][T11719] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 153.590178][T11728] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 153.597146][T11728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.604701][T11728] vhci_hcd vhci_hcd.0: Device attached [ 153.744360][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2739'. [ 154.195693][ T3387] usb 3-1: new low-speed USB device number 7 using vhci_hcd [ 154.210680][T11729] vhci_hcd: connection reset by peer [ 154.219471][ T54] vhci_hcd: stop threads [ 154.223763][ T54] vhci_hcd: release socket [ 154.228450][ T54] vhci_hcd: disconnect device [ 154.286850][T11750] syzkaller0: entered promiscuous mode [ 154.292592][T11750] syzkaller0: entered allmulticast mode [ 154.375724][T11756] vhci_hcd: invalid port number 96 [ 154.381064][T11756] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 154.545876][T11772] netlink: 'syz.4.2752': attribute type 1 has an invalid length. [ 154.561262][T11772] 8021q: adding VLAN 0 to HW filter on device bond8 [ 154.679327][T11785] syzkaller0: entered promiscuous mode [ 154.684824][T11785] syzkaller0: entered allmulticast mode [ 154.692925][T11787] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.718103][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2758'. [ 154.759951][T11787] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.811836][T11791] lo speed is unknown, defaulting to 1000 [ 154.823801][T11791] lo speed is unknown, defaulting to 1000 [ 154.836675][T11787] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.886834][T11787] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.944367][ T413] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.968430][ T413] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.992767][ T413] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.008948][ T413] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.059664][T11807] netlink: 'syz.0.2766': attribute type 1 has an invalid length. [ 155.072621][T11807] 8021q: adding VLAN 0 to HW filter on device bond14 [ 155.156571][T11818] syzkaller0: entered promiscuous mode [ 155.162104][T11818] syzkaller0: entered allmulticast mode [ 155.168595][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 155.223571][T11829] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 155.230184][T11829] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.237816][T11829] vhci_hcd vhci_hcd.0: Device attached [ 155.334057][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2775'. [ 155.645774][T11854] vhci_hcd: invalid port number 96 [ 155.646025][T11830] vhci_hcd: connection closed [ 155.650967][T11854] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 155.667231][ T1631] vhci_hcd: stop threads [ 155.671610][ T1631] vhci_hcd: release socket [ 155.676123][ T1631] vhci_hcd: disconnect device [ 155.887629][T11864] syzkaller0: entered promiscuous mode [ 155.893310][T11864] syzkaller0: entered allmulticast mode [ 156.101331][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2787'. [ 156.430741][T11887] vhci_hcd: invalid port number 96 [ 156.436181][T11887] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 156.484433][T11893] netlink: 'syz.0.2798': attribute type 1 has an invalid length. [ 156.501891][T11893] 8021q: adding VLAN 0 to HW filter on device bond15 [ 156.619701][T11904] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 156.626361][T11904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.634242][T11904] vhci_hcd vhci_hcd.0: Device attached [ 156.645045][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 156.645060][ T29] audit: type=1326 audit(1754415587.736:8282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.6.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 156.674903][ T29] audit: type=1326 audit(1754415587.736:8283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.6.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 156.698741][ T29] audit: type=1326 audit(1754415587.736:8284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.6.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 156.793065][ T29] audit: type=1326 audit(1754415587.846:8285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 156.816829][ T29] audit: type=1326 audit(1754415587.846:8286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 156.836077][T11922] syzkaller0: entered promiscuous mode [ 156.840850][ T29] audit: type=1326 audit(1754415587.846:8287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 156.846063][T11922] syzkaller0: entered allmulticast mode [ 156.869782][ T29] audit: type=1326 audit(1754415587.846:8288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b8ceb69 code=0x7ffc0000 [ 156.899307][ T29] audit: type=1326 audit(1754415587.866:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.6.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 156.923342][ T29] audit: type=1326 audit(1754415587.876:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.6.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 156.947688][ T29] audit: type=1326 audit(1754415587.876:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.6.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8a5eb69 code=0x7ffc0000 [ 156.978906][T11910] vhci_hcd: connection closed [ 156.979092][ T54] vhci_hcd: stop threads [ 156.988154][ T54] vhci_hcd: release socket [ 156.988167][ T54] vhci_hcd: disconnect device [ 157.055560][ T3467] vhci_hcd: vhci_device speed not set [ 157.210590][T11936] lo speed is unknown, defaulting to 1000 [ 157.216813][T11936] lo speed is unknown, defaulting to 1000 [ 157.280675][T11936] chnl_net:caif_netlink_parms(): no params data found [ 157.304346][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.338128][T11936] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.345253][T11936] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.352709][T11936] bridge_slave_0: entered allmulticast mode [ 157.359999][T11936] bridge_slave_0: entered promiscuous mode [ 157.367618][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.378966][T11936] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.386077][T11936] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.393417][T11936] bridge_slave_1: entered allmulticast mode [ 157.400234][T11936] bridge_slave_1: entered promiscuous mode [ 157.417133][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.431112][T11936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.441826][T11936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.464646][T11936] team0: Port device team_slave_0 added [ 157.472035][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.484727][T11936] team0: Port device team_slave_1 added [ 157.502747][T11936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.510313][T11936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.537033][T11936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.682657][ T54] bridge_slave_1: left allmulticast mode [ 157.688434][ T54] bridge_slave_1: left promiscuous mode [ 157.694147][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.774809][ T54] bridge_slave_0: left allmulticast mode [ 157.780540][ T54] bridge_slave_0: left promiscuous mode [ 157.786209][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.887125][ T54] team0: Port device geneve1 removed [ 157.958719][ T54] smc: removing net device bond0 with user defined pnetid SYZ2 [ 157.990131][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.003184][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.012650][ T54] bond0 (unregistering): Released all slaves [ 158.025188][ T54] bond1 (unregistering): Released all slaves [ 158.044739][ T54] bond2 (unregistering): Released all slaves [ 158.057632][ T54] bond3 (unregistering): Released all slaves [ 158.108089][ T54] bond4 (unregistering): Released all slaves [ 158.117295][ T54] bond5 (unregistering): Released all slaves [ 158.136980][ T54] bond6 (unregistering): Released all slaves [ 158.168457][T11936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.175449][T11936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.202215][T11936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.248636][T11986] netlink: 'syz.4.2829': attribute type 1 has an invalid length. [ 158.257926][ T54] tipc: Disabling bearer [ 158.263254][ T54] tipc: Left network mode [ 158.273559][T11986] 8021q: adding VLAN 0 to HW filter on device bond9 [ 158.286028][T11936] hsr_slave_0: entered promiscuous mode [ 158.292351][T11936] hsr_slave_1: entered promiscuous mode [ 158.298830][T11936] debugfs: 'hsr0' already exists in 'hsr' [ 158.304605][T11936] Cannot create hsr debugfs directory [ 158.312679][ T54] hsr_slave_0: left promiscuous mode [ 158.338229][ T54] hsr_slave_1: left promiscuous mode [ 158.344145][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.363405][T11994] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 158.370085][T11994] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.377887][T11994] vhci_hcd vhci_hcd.0: Device attached [ 158.441973][ T54] team0 (unregistering): Port device team_slave_1 removed [ 158.456192][ T54] team0 (unregistering): Port device team_slave_0 removed [ 158.499352][ T3415] lo speed is unknown, defaulting to 1000 [ 158.505274][ T3415] infiniband syz0: ib_query_port failed (-19) [ 158.555775][T12016] vhci_hcd: invalid port number 96 [ 158.561024][T12016] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 158.576424][T12010] lo speed is unknown, defaulting to 1000 [ 158.615116][ T9] usb 1-1: new low-speed USB device number 8 using vhci_hcd [ 158.733267][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2843'. [ 158.984546][T12074] syzkaller0: entered promiscuous mode [ 158.990296][T12074] syzkaller0: entered allmulticast mode [ 159.010008][T11936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.019057][T11936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.028001][T11936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.037916][T11936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.092233][T12000] vhci_hcd: connection reset by peer [ 159.098562][ T1631] vhci_hcd: stop threads [ 159.103355][ T1631] vhci_hcd: release socket [ 159.108051][ T1631] vhci_hcd: disconnect device [ 159.111681][T11936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.130392][T11936] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.159377][ T1631] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.166613][ T1631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.180971][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2850'. [ 159.205166][T12101] loop1: detected capacity change from 0 to 512 [ 159.209434][T12092] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 159.228909][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.235244][ T3387] usb 3-1: enqueue for inactive port 0 [ 159.235998][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.242133][ T3387] usb 3-1: enqueue for inactive port 0 [ 159.255114][T12101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.294353][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.312712][T11936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.323154][T11936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.347975][ T3387] vhci_hcd: vhci_device speed not set [ 159.389503][T12112] 9pnet_fd: Insufficient options for proto=fd [ 159.544975][T11936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.569925][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2856'. [ 159.668424][T12144] lo speed is unknown, defaulting to 1000 [ 159.753123][T11936] veth0_vlan: entered promiscuous mode [ 159.785956][T11936] veth1_vlan: entered promiscuous mode [ 159.848563][T12158] syzkaller0: entered promiscuous mode [ 159.854268][T12158] syzkaller0: entered allmulticast mode [ 159.925855][T11936] veth0_macvtap: entered promiscuous mode [ 159.949450][T11936] veth1_macvtap: entered promiscuous mode [ 159.971098][T11936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.990770][T11936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.011798][ T413] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.029145][ T413] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.061074][ T413] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.087980][ T413] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.239239][T12196] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 160.246063][T12196] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.253781][T12196] vhci_hcd vhci_hcd.0: Device attached [ 160.309477][T12199] syzkaller0: entered promiscuous mode [ 160.315156][T12199] syzkaller0: entered allmulticast mode [ 160.394698][T12203] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 160.495707][ T3387] usb 13-1: new low-speed USB device number 8 using vhci_hcd [ 160.656291][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2870'. [ 160.829337][T12197] vhci_hcd: connection reset by peer [ 160.856132][ T1631] vhci_hcd: stop threads [ 160.860413][ T1631] vhci_hcd: release socket [ 160.864841][ T1631] vhci_hcd: disconnect device [ 161.345674][T12230] vhci_hcd: invalid port number 96 [ 161.350885][T12230] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 161.441884][T12238] netlink: 'syz.1.2880': attribute type 1 has an invalid length. [ 161.455431][T12238] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.750975][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 161.750988][ T29] audit: type=1326 audit(1754415592.846:8620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 161.960643][ T29] audit: type=1326 audit(1754415592.876:8621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 161.984501][ T29] audit: type=1326 audit(1754415592.876:8622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4f67cd4d0 code=0x7ffc0000 [ 162.009281][ T29] audit: type=1326 audit(1754415592.876:8623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 162.033565][ T29] audit: type=1326 audit(1754415592.876:8624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 162.057706][ T29] audit: type=1326 audit(1754415592.876:8625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 162.081484][ T29] audit: type=1326 audit(1754415592.876:8626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 162.105416][ T29] audit: type=1326 audit(1754415592.876:8627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 162.129631][ T29] audit: type=1326 audit(1754415592.876:8628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4f67cd4d0 code=0x7ffc0000 [ 162.154117][ T29] audit: type=1326 audit(1754415592.876:8629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 162.669703][T12271] syzkaller0: entered promiscuous mode [ 162.675284][T12271] syzkaller0: entered allmulticast mode [ 162.766225][T12285] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 162.772790][T12285] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.780387][T12285] vhci_hcd vhci_hcd.0: Device attached [ 162.801453][T12286] vhci_hcd: connection closed [ 162.802003][ T31] vhci_hcd: stop threads [ 162.811170][ T31] vhci_hcd: release socket [ 162.815657][ T31] vhci_hcd: disconnect device [ 162.854589][T12296] 9pnet_fd: Insufficient options for proto=fd [ 162.857613][T12291] vhci_hcd: invalid port number 96 [ 162.865846][T12291] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 163.271543][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2906'. [ 163.452342][T12320] vhci_hcd: invalid port number 96 [ 163.457652][T12320] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 163.485785][T12324] vhci_hcd: invalid port number 96 [ 163.491197][T12324] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 163.530039][T12326] 9pnet_fd: Insufficient options for proto=fd [ 163.531809][T12322] lo speed is unknown, defaulting to 1000 [ 163.648394][ T9] usb 1-1: enqueue for inactive port 0 [ 163.665219][ T9] usb 1-1: enqueue for inactive port 0 [ 163.776126][ T9] vhci_hcd: vhci_device speed not set [ 163.778303][T12340] 9pnet_fd: Insufficient options for proto=fd [ 163.830837][T12338] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 163.837457][T12338] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.844982][T12338] vhci_hcd vhci_hcd.0: Device attached [ 163.862029][T12343] vhci_hcd: connection closed [ 163.863208][ T12] vhci_hcd: stop threads [ 163.872513][ T12] vhci_hcd: release socket [ 163.877204][ T12] vhci_hcd: disconnect device [ 163.921612][T12350] loop1: detected capacity change from 0 to 2048 [ 164.065349][ T9] vhci_hcd: vhci_device speed not set [ 164.079991][T12350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.196852][T12350] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 164.228908][T12366] syzkaller0: entered promiscuous mode [ 164.234536][T12366] syzkaller0: entered allmulticast mode [ 164.278839][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.317410][T12370] netlink: 'syz.1.2923': attribute type 1 has an invalid length. [ 164.333092][T12370] 8021q: adding VLAN 0 to HW filter on device bond7 [ 165.120000][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2936'. [ 165.253986][T12413] netlink: 'syz.6.2937': attribute type 1 has an invalid length. [ 165.340772][T12413] 8021q: adding VLAN 0 to HW filter on device bond8 [ 165.630727][ T3387] usb 13-1: enqueue for inactive port 0 [ 165.637114][ T3387] usb 13-1: enqueue for inactive port 0 [ 165.671406][T12420] loop1: detected capacity change from 0 to 2048 [ 165.707486][ T3387] vhci_hcd: vhci_device speed not set [ 165.728208][T12420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.745541][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2939'. [ 165.810219][T12420] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 166.001410][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.083487][T12441] syzkaller0: entered promiscuous mode [ 166.089026][T12441] syzkaller0: entered allmulticast mode [ 166.183335][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'. [ 166.280524][T12450] syzkaller0: entered promiscuous mode [ 166.286125][T12450] syzkaller0: entered allmulticast mode [ 166.357526][T12455] 9pnet_fd: Insufficient options for proto=fd [ 166.485880][T12470] syzkaller0: entered promiscuous mode [ 166.491377][T12470] syzkaller0: entered allmulticast mode [ 166.517094][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2960'. [ 166.543279][T12481] 9pnet_fd: Insufficient options for proto=fd [ 166.754827][T12498] loop1: detected capacity change from 0 to 512 [ 166.762263][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 166.762274][ T29] audit: type=1326 audit(1754415597.866:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.2.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 166.812430][T12498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.827997][ T29] audit: type=1326 audit(1754415597.896:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.2.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 166.851851][ T29] audit: type=1326 audit(1754415597.896:8970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.2.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 166.875529][ T29] audit: type=1326 audit(1754415597.896:8971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.2.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 166.898748][T12511] 9pnet_fd: Insufficient options for proto=fd [ 166.899390][ T29] audit: type=1326 audit(1754415597.896:8972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.2.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 166.929717][ T29] audit: type=1326 audit(1754415597.976:8973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 166.953505][ T29] audit: type=1326 audit(1754415597.976:8974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 166.977722][ T29] audit: type=1326 audit(1754415597.976:8975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 166.991038][T12515] syzkaller0: entered promiscuous mode [ 167.002636][ T29] audit: type=1326 audit(1754415597.976:8976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 167.008126][T12515] syzkaller0: entered allmulticast mode [ 167.036246][T12517] FAULT_INJECTION: forcing a failure. [ 167.036246][T12517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.037984][ T29] audit: type=1326 audit(1754415597.976:8977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 167.051131][T12517] CPU: 1 UID: 0 PID: 12517 Comm: syz.2.2974 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 167.051159][T12517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.051171][T12517] Call Trace: [ 167.051178][T12517] [ 167.051187][T12517] __dump_stack+0x1d/0x30 [ 167.051206][T12517] dump_stack_lvl+0xe8/0x140 [ 167.051255][T12517] dump_stack+0x15/0x1b [ 167.051270][T12517] should_fail_ex+0x265/0x280 [ 167.051369][T12517] should_fail+0xb/0x20 [ 167.051437][T12517] should_fail_usercopy+0x1a/0x20 [ 167.051456][T12517] _copy_to_user+0x20/0xa0 [ 167.051513][T12517] simple_read_from_buffer+0xb5/0x130 [ 167.051540][T12517] proc_fail_nth_read+0x10e/0x150 [ 167.051640][T12517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.051682][T12517] vfs_read+0x1a0/0x6f0 [ 167.051708][T12517] ? __rcu_read_unlock+0x4f/0x70 [ 167.051816][T12517] ? __fget_files+0x184/0x1c0 [ 167.051839][T12517] ksys_read+0xda/0x1a0 [ 167.051860][T12517] __x64_sys_read+0x40/0x50 [ 167.051879][T12517] x64_sys_call+0x27bc/0x2ff0 [ 167.051898][T12517] do_syscall_64+0xd2/0x200 [ 167.051989][T12517] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.052135][T12517] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 167.052154][T12517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.052175][T12517] RIP: 0033:0x7fb075fdd57c [ 167.052203][T12517] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 167.052219][T12517] RSP: 002b:00007fb0745fd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.052292][T12517] RAX: ffffffffffffffda RBX: 00007fb076206160 RCX: 00007fb075fdd57c [ 167.052304][T12517] RDX: 000000000000000f RSI: 00007fb0745fd0a0 RDI: 0000000000000007 [ 167.052316][T12517] RBP: 00007fb0745fd090 R08: 0000000000000000 R09: 0000000000000000 [ 167.052327][T12517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.052338][T12517] R13: 0000000000000001 R14: 00007fb076206160 R15: 00007ffdb6cfa508 [ 167.052355][T12517] [ 167.315514][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.551701][T12531] lo speed is unknown, defaulting to 1000 [ 167.578802][T12549] vhci_hcd: invalid port number 96 [ 167.583953][T12549] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 167.711800][T12557] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 167.718559][T12557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.726370][T12557] vhci_hcd vhci_hcd.0: Device attached [ 167.761714][T12531] chnl_net:caif_netlink_parms(): no params data found [ 167.894654][ T31] bridge_slave_1: left allmulticast mode [ 167.900394][ T31] bridge_slave_1: left promiscuous mode [ 167.906208][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.929032][ T31] bridge_slave_0: left allmulticast mode [ 167.934713][ T31] bridge_slave_0: left promiscuous mode [ 167.940572][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.953902][T12558] vhci_hcd: connection closed [ 167.954125][ T1631] vhci_hcd: stop threads [ 167.963192][ T1631] vhci_hcd: release socket [ 167.967645][ T1631] vhci_hcd: disconnect device [ 167.972553][ T1036] usb 5-1: new low-speed USB device number 10 using vhci_hcd [ 167.994439][ T1036] usb 5-1: enqueue for inactive port 0 [ 168.008609][ T1036] usb 5-1: enqueue for inactive port 0 [ 168.023887][ T1036] usb 5-1: enqueue for inactive port 0 [ 168.049224][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.059578][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.085489][ T31] bond0 (unregistering): Released all slaves [ 168.096786][ T31] bond1 (unregistering): Released all slaves [ 168.105210][ T1036] vhci_hcd: vhci_device speed not set [ 168.105217][ T31] bond2 (unregistering): Released all slaves [ 168.120860][ T31] bond3 (unregistering): Released all slaves [ 168.132383][ T31] bond4 (unregistering): Released all slaves [ 168.142251][ T31] bond5 (unregistering): Released all slaves [ 168.150793][ T31] bond6 (unregistering): Released all slaves [ 168.160148][ T31] bond7 (unregistering): Released all slaves [ 168.175080][T12531] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.182179][T12531] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.207856][T12531] bridge_slave_0: entered allmulticast mode [ 168.219886][T12531] bridge_slave_0: entered promiscuous mode [ 168.227075][T12531] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.234229][T12531] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.276510][T12531] bridge_slave_1: entered allmulticast mode [ 168.293412][T12531] bridge_slave_1: entered promiscuous mode [ 168.365458][T12576] syzkaller0: entered promiscuous mode [ 168.371132][T12576] syzkaller0: entered allmulticast mode [ 168.395240][ T31] tipc: Disabling bearer [ 168.400916][ T31] tipc: Left network mode [ 168.419337][T12531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.446486][T12531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.464477][ T31] hsr_slave_0: left promiscuous mode [ 168.481756][ T31] hsr_slave_1: left promiscuous mode [ 168.487516][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.598678][ T31] team0 (unregistering): Port device team_slave_1 removed [ 168.646709][ T31] team0 (unregistering): Port device team_slave_0 removed [ 168.705834][T12531] team0: Port device team_slave_0 added [ 168.715499][T12531] team0: Port device team_slave_1 added [ 168.715749][T12622] vhci_hcd: invalid port number 96 [ 168.726306][T12622] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 168.776000][T12531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.783215][T12531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.809441][T12531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.847247][T12631] syzkaller0: entered promiscuous mode [ 168.852987][T12631] syzkaller0: entered allmulticast mode [ 168.862346][T12633] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 168.869210][T12633] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.876938][T12633] vhci_hcd vhci_hcd.0: Device attached [ 168.935965][T12531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.943216][T12531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.969345][T12531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.076131][T12634] vhci_hcd: connection closed [ 169.077452][ T51] vhci_hcd: stop threads [ 169.087382][ T51] vhci_hcd: release socket [ 169.092236][ T51] vhci_hcd: disconnect device [ 169.104862][T12531] hsr_slave_0: entered promiscuous mode [ 169.125733][T12531] hsr_slave_1: entered promiscuous mode [ 169.131948][T12531] debugfs: 'hsr0' already exists in 'hsr' [ 169.137961][T12531] Cannot create hsr debugfs directory [ 169.153374][T12649] netlink: 'syz.6.3012': attribute type 1 has an invalid length. [ 169.155234][ T1036] vhci_hcd: vhci_device speed not set [ 169.171776][T12649] 8021q: adding VLAN 0 to HW filter on device bond9 [ 169.268080][ T31] IPVS: stop unused estimator thread 0... [ 169.326799][T12671] vhci_hcd: invalid port number 96 [ 169.331939][T12671] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 169.414156][T12685] syzkaller0: entered promiscuous mode [ 169.419738][T12685] syzkaller0: entered allmulticast mode [ 169.486771][T12531] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.512877][T12702] netlink: 'syz.0.3020': attribute type 1 has an invalid length. [ 169.521403][T12531] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.531686][T12531] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.541228][T12531] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 169.569769][T12702] 8021q: adding VLAN 0 to HW filter on device bond16 [ 169.629578][T12531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.643642][T12531] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.664596][ T4962] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.671829][ T4962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.690092][ T4962] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.697567][ T4962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.818304][T12531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.841227][T12756] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 169.937765][T12758] syzkaller0: entered promiscuous mode [ 169.943322][T12758] syzkaller0: entered allmulticast mode [ 170.044613][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'. [ 170.073785][T12779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.117569][T12779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.273677][T12531] veth0_vlan: entered promiscuous mode [ 170.305803][T12531] veth1_vlan: entered promiscuous mode [ 170.354537][T12531] veth0_macvtap: entered promiscuous mode [ 170.382943][T12531] veth1_macvtap: entered promiscuous mode [ 170.416468][T12531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.446091][T12531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.475352][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.484599][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.523998][ T1631] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.549039][ T1631] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.581849][T12801] loop1: detected capacity change from 0 to 512 [ 170.650126][T12801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.702848][T12531] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.905926][T12830] syzkaller0: entered promiscuous mode [ 170.911602][T12830] syzkaller0: entered allmulticast mode [ 171.426197][T12862] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3058'. [ 171.664750][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3065'. [ 171.737345][T12879] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 171.744211][T12879] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.752070][T12879] vhci_hcd vhci_hcd.0: Device attached [ 171.762215][T12882] vhci_hcd: connection closed [ 171.765316][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 171.765331][ T29] audit: type=1326 audit(1754415602.856:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12876 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3c57eb69 code=0x7ffc0000 [ 171.800693][ T29] audit: type=1326 audit(1754415602.856:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12876 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3c57eb69 code=0x7ffc0000 [ 171.829382][ T51] vhci_hcd: stop threads [ 171.833892][ T51] vhci_hcd: release socket [ 171.838608][ T51] vhci_hcd: disconnect device [ 171.911519][ T29] audit: type=1326 audit(1754415603.006:9376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12880 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 171.935366][ T29] audit: type=1326 audit(1754415603.006:9377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12880 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 171.977155][ T29] audit: type=1400 audit(1754415603.076:9378): avc: denied { create } for pid=12894 comm="syz.6.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.998274][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3071'. [ 172.012602][ T29] audit: type=1400 audit(1754415603.096:9379): avc: denied { write } for pid=12894 comm="syz.6.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 172.054488][ T29] audit: type=1326 audit(1754415603.146:9380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12899 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 172.084070][ T29] audit: type=1326 audit(1754415603.146:9381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12899 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 172.108178][ T29] audit: type=1326 audit(1754415603.146:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12899 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb075fdeb69 code=0x7ffc0000 [ 172.185315][ T29] audit: type=1326 audit(1754415603.276:9383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f67ceb69 code=0x7ffc0000 [ 172.403578][T12931] 9pnet_fd: Insufficient options for proto=fd [ 172.432679][T12928] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 172.439312][T12928] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.447189][T12928] vhci_hcd vhci_hcd.0: Device attached [ 172.705233][ T1036] usb 1-1: new low-speed USB device number 9 using vhci_hcd [ 172.787459][ T4962] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.859369][ T4962] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.890346][T12903] chnl_net:caif_netlink_parms(): no params data found [ 172.906505][T12929] vhci_hcd: connection reset by peer [ 172.912196][ T1631] vhci_hcd: stop threads [ 172.916512][ T1631] vhci_hcd: release socket [ 172.920924][ T1631] vhci_hcd: disconnect device [ 172.942605][ T4962] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.127990][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.135465][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.143759][T12903] bridge_slave_0: entered allmulticast mode [ 173.153077][T12903] bridge_slave_0: entered promiscuous mode [ 173.161640][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.168731][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.177769][T12903] bridge_slave_1: entered allmulticast mode [ 173.184381][T12903] bridge_slave_1: entered promiscuous mode [ 173.199022][ T4962] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.218184][T12903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.228813][T12903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.271304][T12903] team0: Port device team_slave_0 added [ 173.279479][T12903] team0: Port device team_slave_1 added [ 173.311398][ T4962] bridge_slave_1: left allmulticast mode [ 173.317185][ T4962] bridge_slave_1: left promiscuous mode [ 173.322848][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.336347][ T4962] bridge_slave_0: left allmulticast mode [ 173.336908][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3084'. [ 173.342050][ T4962] bridge_slave_0: left promiscuous mode [ 173.342203][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.556235][ T4962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.594103][ T4962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.635539][ T4962] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 173.649476][ T4962] bond0 (unregistering): Released all slaves [ 173.668670][ T4962] bond1 (unregistering): Released all slaves [ 173.678094][ T4962] bond2 (unregistering): Released all slaves [ 173.687084][ T4962] bond3 (unregistering): Released all slaves [ 173.698772][ T4962] bond4 (unregistering): Released all slaves [ 173.708397][ T4962] bond5 (unregistering): Released all slaves [ 173.720223][ T4962] bond6 (unregistering): Released all slaves [ 173.728079][T12962] FAULT_INJECTION: forcing a failure. [ 173.728079][T12962] name failslab, interval 1, probability 0, space 0, times 0 [ 173.730421][ T4962] bond7 (unregistering): Released all slaves [ 173.740906][T12962] CPU: 1 UID: 0 PID: 12962 Comm: syz.1.3089 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 173.740933][T12962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.740944][T12962] Call Trace: [ 173.741015][T12962] [ 173.741023][T12962] __dump_stack+0x1d/0x30 [ 173.741058][T12962] dump_stack_lvl+0xe8/0x140 [ 173.741075][T12962] dump_stack+0x15/0x1b [ 173.741091][T12962] should_fail_ex+0x265/0x280 [ 173.741119][T12962] should_failslab+0x8c/0xb0 [ 173.741170][T12962] kmem_cache_alloc_noprof+0x50/0x310 [ 173.741194][T12962] ? alloc_empty_file+0x76/0x200 [ 173.741295][T12962] alloc_empty_file+0x76/0x200 [ 173.741392][T12962] alloc_file_pseudo+0xc6/0x160 [ 173.741444][T12962] anon_inode_getfd+0xc1/0x150 [ 173.741472][T12962] bpf_map_new_fd+0x52/0x70 [ 173.741490][T12962] map_create+0xc23/0xca0 [ 173.741521][T12962] ? security_bpf+0x2b/0x90 [ 173.741600][T12962] __sys_bpf+0x545/0x7b0 [ 173.741630][T12962] __x64_sys_bpf+0x41/0x50 [ 173.741651][T12962] x64_sys_call+0x2aea/0x2ff0 [ 173.741670][T12962] do_syscall_64+0xd2/0x200 [ 173.741691][T12962] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.741771][T12962] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 173.741870][T12962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.741890][T12962] RIP: 0033:0x7f83bedceb69 [ 173.741905][T12962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.741999][T12962] RSP: 002b:00007f83bd437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.742014][T12962] RAX: ffffffffffffffda RBX: 00007f83beff5fa0 RCX: 00007f83bedceb69 [ 173.742024][T12962] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 0000000000000000 [ 173.742033][T12962] RBP: 00007f83bd437090 R08: 0000000000000000 R09: 0000000000000000 [ 173.742044][T12962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.742055][T12962] R13: 0000000000000001 R14: 00007f83beff5fa0 R15: 00007ffc778b2eb8 [ 173.742117][T12962] [ 173.777891][T12962] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3089'. [ 173.787383][ T4962] bond8 (unregistering): Released all slaves [ 173.967646][ T4962] bond9 (unregistering): Released all slaves [ 173.976385][T12903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.983511][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.010151][T12903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.021727][T12903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.028765][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.055333][T12903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.066361][T12938] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 174.081276][T12962] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 174.091803][T12962] 0ªî{X¹¦: entered allmulticast mode [ 174.100371][T12962] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 174.129164][ T4962] tipc: Disabling bearer [ 174.134545][ T4962] tipc: Left network mode [ 174.150046][T12903] hsr_slave_0: entered promiscuous mode [ 174.159586][T12903] hsr_slave_1: entered promiscuous mode [ 174.173679][T12903] debugfs: 'hsr0' already exists in 'hsr' [ 174.179553][T12903] Cannot create hsr debugfs directory [ 174.189545][ T4962] hsr_slave_0: left promiscuous mode [ 174.196771][ T4962] hsr_slave_1: left promiscuous mode [ 174.202477][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.210164][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.220475][ T4962] veth1_macvtap: left promiscuous mode [ 174.226307][ T4962] veth0_macvtap: left promiscuous mode [ 174.232212][ T4962] veth1_vlan: left promiscuous mode [ 174.238374][ T4962] veth0_vlan: left promiscuous mode [ 174.293530][T12977] 9pnet_fd: Insufficient options for proto=fd [ 174.324527][ T4962] team0 (unregistering): Port device team_slave_1 removed [ 174.334192][ T4962] team0 (unregistering): Port device team_slave_0 removed [ 174.476675][T12995] vhci_hcd: invalid port number 96 [ 174.481939][T12995] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 174.534361][T13006] loop1: detected capacity change from 0 to 2048 [ 174.557731][T13006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.578849][T13006] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 174.647517][T12531] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.682435][ T4962] IPVS: stop unused estimator thread 0... [ 174.694726][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3101'. [ 174.708262][T13031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.719833][T13031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.749681][T12903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.758547][T12903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.768527][T12903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.780026][T12903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.840349][T12903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.854808][T12903] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.864855][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.872006][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.894308][T12903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.904740][T12903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.920711][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.927989][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.003582][T12903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.035593][T13062] vhci_hcd: invalid port number 96 [ 175.041036][T13062] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 175.271908][T12903] veth0_vlan: entered promiscuous mode [ 175.322036][T13109] FAULT_INJECTION: forcing a failure. [ 175.322036][T13109] name failslab, interval 1, probability 0, space 0, times 0 [ 175.335055][T13109] CPU: 0 UID: 0 PID: 13109 Comm: syz.6.3114 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 175.335082][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.335092][T13109] Call Trace: [ 175.335178][T13109] [ 175.335183][T13109] __dump_stack+0x1d/0x30 [ 175.335202][T13109] dump_stack_lvl+0xe8/0x140 [ 175.335217][T13109] dump_stack+0x15/0x1b [ 175.335244][T13109] should_fail_ex+0x265/0x280 [ 175.335269][T13109] should_failslab+0x8c/0xb0 [ 175.335289][T13109] kmem_cache_alloc_node_noprof+0x57/0x320 [ 175.335382][T13109] ? __alloc_skb+0x101/0x320 [ 175.335418][T13109] __alloc_skb+0x101/0x320 [ 175.335441][T13109] netlink_alloc_large_skb+0xba/0xf0 [ 175.335540][T13109] netlink_sendmsg+0x3cf/0x6b0 [ 175.335623][T13109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.335701][T13109] __sock_sendmsg+0x145/0x180 [ 175.335725][T13109] sock_write_iter+0x165/0x1b0 [ 175.335779][T13109] ? __pfx_sock_write_iter+0x10/0x10 [ 175.335798][T13109] vfs_write+0x4a0/0x8e0 [ 175.335823][T13109] ksys_write+0xda/0x1a0 [ 175.335842][T13109] __x64_sys_write+0x40/0x50 [ 175.335954][T13109] x64_sys_call+0x27fe/0x2ff0 [ 175.335974][T13109] do_syscall_64+0xd2/0x200 [ 175.335996][T13109] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 175.336076][T13109] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.336093][T13109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.336184][T13109] RIP: 0033:0x7f64e8a5eb69 [ 175.336199][T13109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.336214][T13109] RSP: 002b:00007f64e70bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.336229][T13109] RAX: ffffffffffffffda RBX: 00007f64e8c85fa0 RCX: 00007f64e8a5eb69 [ 175.336240][T13109] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 175.336306][T13109] RBP: 00007f64e70bf090 R08: 0000000000000000 R09: 0000000000000000 [ 175.336325][T13109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.336337][T13109] R13: 0000000000000000 R14: 00007f64e8c85fa0 R15: 00007ffe92ff5cf8 [ 175.336458][T13109] [ 175.341550][T12903] veth1_vlan: entered promiscuous mode [ 175.645432][T13116] syzkaller0: entered promiscuous mode [ 175.651106][T13116] syzkaller0: entered allmulticast mode [ 175.746708][T12903] veth0_macvtap: entered promiscuous mode [ 175.754853][T12903] veth1_macvtap: entered promiscuous mode [ 175.779946][T12903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.799347][T13131] vhci_hcd: invalid port number 96 [ 175.804544][T13131] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 175.818637][T12903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.832819][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.841960][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.936379][T13155] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 175.943003][T13155] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.950674][T13155] vhci_hcd vhci_hcd.0: Device attached [ 175.958955][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.959653][T13157] vhci_hcd: connection closed [ 175.968500][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.001502][ T51] vhci_hcd: stop threads [ 176.006024][ T51] vhci_hcd: release socket [ 176.010575][ T51] vhci_hcd: disconnect device [ 176.012873][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3130'. [ 176.024738][T13163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.040020][T13163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.095984][T13169] vhci_hcd: invalid port number 96 [ 176.101229][T13169] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 176.129757][T13172] loop1: detected capacity change from 0 to 1024 [ 176.142836][T13172] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 176.170338][T13172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.207547][T12531] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.264718][T13181] FAULT_INJECTION: forcing a failure. [ 176.264718][T13181] name failslab, interval 1, probability 0, space 0, times 0 [ 176.278185][T13181] CPU: 0 UID: 0 PID: 13181 Comm: syz.1.3135 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 176.278252][T13181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.278269][T13181] Call Trace: [ 176.278275][T13181] [ 176.278282][T13181] __dump_stack+0x1d/0x30 [ 176.278317][T13181] dump_stack_lvl+0xe8/0x140 [ 176.278338][T13181] dump_stack+0x15/0x1b [ 176.278351][T13181] should_fail_ex+0x265/0x280 [ 176.278399][T13181] ? p9_client_stat+0x5a/0x200 [ 176.278416][T13181] should_failslab+0x8c/0xb0 [ 176.278440][T13181] __kmalloc_cache_noprof+0x4c/0x320 [ 176.278509][T13181] p9_client_stat+0x5a/0x200 [ 176.278528][T13181] v9fs_vfs_getattr+0x143/0x260 [ 176.278557][T13181] vfs_getattr_nosec+0x146/0x1e0 [ 176.278602][T13181] vfs_statx+0x113/0x390 [ 176.278629][T13181] __se_sys_newstat+0x69/0x280 [ 176.278661][T13181] ? fput+0x8f/0xc0 [ 176.278694][T13181] ? ksys_write+0x192/0x1a0 [ 176.278714][T13181] __x64_sys_newstat+0x31/0x40 [ 176.278739][T13181] x64_sys_call+0x73e/0x2ff0 [ 176.278801][T13181] do_syscall_64+0xd2/0x200 [ 176.278856][T13181] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 176.278876][T13181] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 176.278893][T13181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.278912][T13181] RIP: 0033:0x7f83bedceb69 [ 176.278925][T13181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.278948][T13181] RSP: 002b:00007f83bd437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 176.278963][T13181] RAX: ffffffffffffffda RBX: 00007f83beff5fa0 RCX: 00007f83bedceb69 [ 176.278969][T13181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001c40 [ 176.278976][T13181] RBP: 00007f83bd437090 R08: 0000000000000000 R09: 0000000000000000 [ 176.279046][T13181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.279053][T13181] R13: 0000000000000000 R14: 00007f83beff5fa0 R15: 00007ffc778b2eb8 [ 176.279063][T13181] [ 176.632205][T13191] netlink: 'syz.1.3139': attribute type 16 has an invalid length. [ 176.640347][T13191] netlink: 'syz.1.3139': attribute type 17 has an invalid length. [ 176.732732][T13203] ================================================================== [ 176.735680][T13198] vhci_hcd: invalid port number 96 [ 176.741017][T13203] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 176.741045][T13203] [ 176.741054][T13203] write to 0xffff888103eb3a00 of 8 bytes by task 13201 on cpu 1: [ 176.746182][T13198] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 176.753499][T13203] mas_wmb_replace+0x20d/0x14a0 [ 176.775660][T13203] mas_wr_store_entry+0x1773/0x2b50 [ 176.780860][T13203] mas_store_prealloc+0x74d/0x9e0 [ 176.786154][T13203] vma_iter_store_new+0x1c5/0x200 [ 176.791256][T13203] vma_complete+0x125/0x580 [ 176.795835][T13203] __split_vma+0x591/0x650 [ 176.800405][T13203] vma_modify+0x21e/0xc80 [ 176.804840][T13203] vma_modify_flags+0x101/0x130 [ 176.809686][T13203] mprotect_fixup+0x2cc/0x570 [ 176.814439][T13203] do_mprotect_pkey+0x6d6/0x980 [ 176.819376][T13203] __x64_sys_mprotect+0x48/0x60 [ 176.824337][T13203] x64_sys_call+0x274e/0x2ff0 [ 176.829025][T13203] do_syscall_64+0xd2/0x200 [ 176.833609][T13203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.839574][T13203] [ 176.841881][T13203] read to 0xffff888103eb3a00 of 8 bytes by task 13203 on cpu 0: [ 176.849584][T13203] mas_state_walk+0x485/0x650 [ 176.854364][T13203] mas_walk+0x60/0x150 [ 176.858560][T13203] lock_vma_under_rcu+0xa2/0x2f0 [ 176.863493][T13203] do_user_addr_fault+0x233/0x1090 [ 176.869061][T13203] exc_page_fault+0x62/0xa0 [ 176.873735][T13203] asm_exc_page_fault+0x26/0x30 [ 176.878960][T13203] [ 176.881443][T13203] value changed: 0xffff888104771181 -> 0xffff888103eb3a00 [ 176.888731][T13203] [ 176.891133][T13203] Reported by Kernel Concurrency Sanitizer on: [ 176.897516][T13203] CPU: 0 UID: 0 PID: 13203 Comm: syz.1.3145 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 176.909868][T13203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.920100][T13203] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 176.930163][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 176.930199][ T29] audit: type=1400 audit(1754415608.026:9651): avc: denied { write } for pid=3286 comm="syz-executor" path="pipe:[1668]" dev="pipefs" ino=1668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 177.320316][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.387729][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.457307][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.507924][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.581363][ T31] bridge_slave_1: left allmulticast mode [ 177.587237][ T31] bridge_slave_1: left promiscuous mode [ 177.592967][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.602764][ T31] bridge_slave_0: left allmulticast mode [ 177.608551][ T31] bridge_slave_0: left promiscuous mode [ 177.614455][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.715814][ T1036] usb 1-1: enqueue for inactive port 0 [ 177.721504][ T1036] usb 1-1: enqueue for inactive port 0 [ 177.776490][ T31] smc: removing net device bond0 with user defined pnetid SYZ2 [ 177.785319][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.795255][ T1036] vhci_hcd: vhci_device speed not set [ 177.795943][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.810643][ T31] bond0 (unregistering): Released all slaves [ 177.819300][ T31] bond1 (unregistering): Released all slaves [ 177.827223][ T31] bond2 (unregistering): Released all slaves [ 177.835081][ T31] bond3 (unregistering): Released all slaves [ 177.843098][ T31] bond4 (unregistering): Released all slaves [ 177.851678][ T31] bond5 (unregistering): Released all slaves [ 177.859911][ T31] bond6 (unregistering): Released all slaves [ 177.868438][ T31] bond7 (unregistering): Released all slaves [ 177.877351][ T31] bond8 (unregistering): Released all slaves [ 177.885939][ T31] bond9 (unregistering): Released all slaves [ 177.893811][ T31] bond10 (unregistering): Released all slaves [ 177.902529][ T31] bond11 (unregistering): Released all slaves [ 177.910673][ T31] bond12 (unregistering): Released all slaves [ 177.919323][ T31] bond13 (unregistering): Released all slaves [ 177.928102][ T31] bond14 (unregistering): Released all slaves [ 177.936947][ T31] bond15 (unregistering): Released all slaves [ 177.945054][ T31] bond16 (unregistering): Released all slaves [ 178.000252][ T31] tipc: Disabling bearer [ 178.005659][ T31] tipc: Left network mode [ 178.013071][ T31] hsr_slave_0: left promiscuous mode [ 178.019807][ T31] hsr_slave_1: left promiscuous mode [ 178.027934][ T31] veth0_macvtap: left promiscuous mode [ 178.033784][ T31] veth1_vlan: left promiscuous mode [ 178.039590][ T31] veth0_vlan: left promiscuous mode [ 178.099075][ T31] team0 (unregistering): Port device team_slave_1 removed [ 178.108045][ T31] team0 (unregistering): Port device team_slave_0 removed [ 178.399087][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.499107][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.568987][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.618361][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.708007][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.759187][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.828670][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.867593][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.936656][ T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.987658][ T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.027967][ T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.077767][ T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.137224][ T31] bridge_slave_1: left allmulticast mode [ 179.143063][ T31] bridge_slave_1: left promiscuous mode [ 179.149173][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.157907][ T31] bridge_slave_0: left allmulticast mode [ 179.163661][ T31] bridge_slave_0: left promiscuous mode [ 179.169684][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.177855][ T31] bridge_slave_1: left allmulticast mode [ 179.183956][ T31] bridge_slave_1: left promiscuous mode [ 179.189661][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.197380][ T31] bridge_slave_0: left allmulticast mode [ 179.203050][ T31] bridge_slave_0: left promiscuous mode [ 179.208860][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.217032][ T31] bridge_slave_1: left allmulticast mode [ 179.222763][ T31] bridge_slave_1: left promiscuous mode [ 179.228468][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.236460][ T31] bridge_slave_0: left allmulticast mode [ 179.242176][ T31] bridge_slave_0: left promiscuous mode [ 179.247995][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.357067][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.366584][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.376462][ T31] bond0 (unregistering): Released all slaves [ 179.427026][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.436763][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.446357][ T31] bond0 (unregistering): Released all slaves [ 179.487561][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.497943][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.507199][ T31] bond0 (unregistering): Released all slaves [ 179.515914][ T31] bond1 (unregistering): Released all slaves [ 179.524023][ T31] bond2 (unregistering): Released all slaves [ 179.532230][ T31] bond3 (unregistering): Released all slaves [ 179.540831][ T31] bond4 (unregistering): Released all slaves [ 179.549376][ T31] bond5 (unregistering): Released all slaves [ 179.558220][ T31] bond6 (unregistering): Released all slaves [ 179.566725][ T31] bond7 (unregistering): Released all slaves [ 179.575274][ T31] bond8 (unregistering): Released all slaves [ 179.583413][ T31] bond9 (unregistering): Released all slaves [ 179.626131][ T31] tipc: Disabling bearer [ 179.631383][ T31] tipc: Left network mode [ 179.638913][ T31] hsr_slave_0: left promiscuous mode [ 179.644760][ T31] hsr_slave_1: left promiscuous mode [ 179.651195][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.658630][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.668496][ T31] hsr_slave_0: left promiscuous mode [ 179.674333][ T31] hsr_slave_1: left promiscuous mode [ 179.680345][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.688116][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.698832][ T31] hsr_slave_0: left promiscuous mode [ 179.704694][ T31] hsr_slave_1: left promiscuous mode [ 179.710347][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.717823][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.731853][ T31] veth1_macvtap: left promiscuous mode [ 179.737379][ T31] veth0_macvtap: left promiscuous mode [ 179.742985][ T31] veth1_vlan: left promiscuous mode [ 179.748382][ T31] veth0_vlan: left promiscuous mode [ 179.754131][ T31] veth1_macvtap: left promiscuous mode [ 179.759889][ T31] veth0_macvtap: left promiscuous mode [ 179.765563][ T31] veth1_vlan: left promiscuous mode [ 179.770981][ T31] veth0_vlan: left promiscuous mode [ 179.776813][ T31] veth1_macvtap: left promiscuous mode [ 179.782365][ T31] veth0_macvtap: left promiscuous mode [ 179.788082][ T31] veth1_vlan: left promiscuous mode [ 179.793330][ T31] veth0_vlan: left promiscuous mode [ 179.891051][ T31] team0 (unregistering): Port device team_slave_1 removed [ 179.900541][ T31] team0 (unregistering): Port device team_slave_0 removed [ 179.943600][ T31] team0 (unregistering): Port device team_slave_1 removed [ 179.952846][ T31] team0 (unregistering): Port device team_slave_0 removed [ 179.998735][ T31] team0 (unregistering): Port device team_slave_1 removed [ 180.008147][ T31] team0 (unregistering): Port device team_slave_0 removed [ 180.618391][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.678025][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.739613][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.787811][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.844435][ T31] bridge_slave_1: left allmulticast mode [ 180.850238][ T31] bridge_slave_1: left promiscuous mode [ 180.856018][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.864339][ T31] bridge_slave_0: left allmulticast mode [ 180.870187][ T31] bridge_slave_0: left promiscuous mode [ 180.876034][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.946828][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.957073][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.966578][ T31] bond0 (unregistering): Released all slaves [ 181.008404][ T31] hsr_slave_0: left promiscuous mode [ 181.014309][ T31] hsr_slave_1: left promiscuous mode [ 181.020317][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.027804][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.038825][ T31] veth1_macvtap: left promiscuous mode [ 181.044329][ T31] veth0_macvtap: left promiscuous mode [ 181.050488][ T31] veth1_vlan: left promiscuous mode [ 181.056440][ T31] veth0_vlan: left promiscuous mode [ 181.111969][ T31] team0 (unregistering): Port device team_slave_1 removed [ 181.122548][ T31] team0 (unregistering): Port device team_slave_0 removed